Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
File: NOg_QeXSQlTJCobjsrt6gK8DlyE.mft (raw, json)
Hash identifier: k4t9V3MSO4Fn3wyKUJggyGb2DSWM5yqLoHur2kL8abo=
Subject key identifier: 1F:4C:DF:6C:57:7F:E2:3A:1E:8B:65:65:B0:58:F2:FA:B8:04:78:C8
Authority key identifier: 34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
Certificate issuer: /CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Certificate serial: 0197B7B324907DFC639169BD6202740D65A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
Manifest number: 1449
Signing time: Sat 28 Jun 2025 18:01:00 +0000
Manifest this update: Sat 28 Jun 2025 18:01:00 +0000
Manifest next update: Sun 29 Jun 2025 18:01:00 +0000
Files and hashes: 1: NOg_QeXSQlTJCobjsrt6gK8DlyE.crl (hash: fNE0dIeZpKA07MJoMAXrgPLbGidB2CTLWPVdq3ndySY=)
2: UO1KioDak-iT8kDHcohpIq9FtOw.roa (hash: c3Q9cGyrR1r4x1r6NclTtEj7o03+DJv3Ywm72vFkEgk=)
3: kh50C_NbBjs1xffmc65N3htJRDA.roa (hash: zegMkFf00MvL1ZefKCFbf5kmHagYnvltoauO7HXIkok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:24:90:7d:fc:63:91:69:bd:62:02:74:0d:65:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Validity
Not Before: Jun 28 18:01:00 2025 GMT
Not After : Jun 29 18:01:00 2025 GMT
Subject: CN=1f4cdf6c577fe23a1e8b6565b058f2fab80478c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:29:8c:0c:74:c0:fa:57:e5:61:7c:08:ab:
85:49:19:99:8c:c5:90:ce:d2:e8:85:46:a5:0e:49:
02:94:a8:fe:9d:9a:76:2f:5a:e0:5a:60:dd:f5:46:
3d:44:a5:c4:e1:29:9f:72:2a:34:31:80:95:e8:a5:
25:5e:48:00:c9:fe:f0:51:2b:01:3d:1c:01:17:47:
26:f2:c0:b5:ba:40:e1:fb:90:45:66:f7:00:bb:c5:
c6:90:9e:6b:48:7c:a4:82:17:db:b9:e7:20:44:63:
43:3b:70:c2:0e:55:c3:fc:c2:29:b5:be:35:62:b3:
cb:2b:a6:bb:42:fa:97:4b:fb:5b:0b:a4:5a:d3:f0:
55:8a:cf:02:d5:46:cf:03:cb:43:ab:af:a5:ad:16:
9a:c1:9a:2f:7c:69:aa:4f:49:45:e3:fc:17:85:6b:
21:cf:0f:48:ab:4d:0e:96:3d:b2:b1:82:ec:29:f2:
23:0f:36:a2:ec:2e:22:6e:ea:c4:7b:b2:08:76:72:
59:ff:46:cc:b3:12:68:75:d6:8e:d7:60:40:8f:97:
e1:72:e9:dc:7f:fa:91:f8:d9:70:6e:9c:be:e3:3b:
23:c8:26:5a:85:be:9f:d6:b3:25:9d:ce:6a:ce:b9:
f8:42:f3:91:33:61:2b:5b:23:aa:8d:e7:6d:0d:9c:
df:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4C:DF:6C:57:7F:E2:3A:1E:8B:65:65:B0:58:F2:FA:B8:04:78:C8
X509v3 Authority Key Identifier:
keyid:34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:75:f8:1e:5d:17:02:66:6d:a3:0c:de:6a:4a:a7:57:96:85:
4b:b3:23:d5:de:8f:31:8d:80:51:c9:4d:3e:c6:bf:a2:f3:23:
3d:38:bc:9e:58:4a:30:b8:6a:9c:4b:96:7a:e6:96:db:65:f3:
de:84:1d:e0:75:b9:eb:17:fb:93:6e:21:26:aa:72:85:05:82:
5e:8f:86:a7:bd:f1:37:bf:3b:b2:13:30:e1:66:f5:12:79:59:
3a:15:d8:d2:75:7a:7c:30:62:a9:83:b5:a2:9e:8a:c3:ea:87:
27:02:7c:dc:78:9d:71:94:a8:e9:1d:ef:4e:66:75:07:5c:fd:
93:7c:2c:73:23:1a:fe:f6:5c:44:a9:e0:4f:57:ac:5f:b9:87:
3a:37:ec:05:73:c5:5f:76:8f:44:d4:16:04:ba:33:e0:e8:5b:
b6:90:0a:96:f1:93:6b:26:14:3c:d8:15:ba:a9:c4:c5:df:5f:
04:b2:d6:e2:a4:df:9d:db:ac:e9:91:b9:ee:fc:9b:04:c7:ce:
df:9e:16:b4:ee:a9:e8:b9:4c:ad:5a:5f:5d:e7:f0:af:61:42:
31:09:57:a5:cb:15:ee:ca:37:37:f0:24:00:09:63:7a:bd:00:
9f:f1:e2:84:54:ff:fc:3d:3b:b6:4d:24:1b:ee:9c:66:7d:3d:
7c:de:50:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:57 2025 by rpki-client