Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
File: NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft (raw, json)
Hash identifier: GyqvQTEJ8YwDaizWfAUkYc5N3eoOvaK4o1bL5wSD4JQ=
Subject key identifier: B8:AD:09:4D:7F:12:32:7D:92:A6:D7:F7:8D:F0:C4:C8:8F:F6:BE:EC
Authority key identifier: 36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
Certificate issuer: /CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Certificate serial: 0197B70F1EFEFE895FE6BEC29EBD57054782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:50 +0000
Manifest this update: Sat 28 Jun 2025 15:01:50 +0000
Manifest next update: Sun 29 Jun 2025 15:01:50 +0000
Files and hashes: 1: NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl (hash: pFTEw0Mg5gg2xMKUzUnmXuL1avi6zoBt4ob+2R6xcvg=)
2: jyQjff39PkjIcb2c4y6sicxo6PU.roa (hash: NTGQ8Vsi7SBxb0wiOjPR2Eb0JAGTh/a1kL30gt2n6ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:1e:fe:fe:89:5f:e6:be:c2:9e:bd:57:05:47:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Validity
Not Before: Jun 28 15:01:50 2025 GMT
Not After : Jun 29 15:01:50 2025 GMT
Subject: CN=b8ad094d7f12327d92a6d7f78df0c4c88ff6beec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:b8:82:50:ca:91:e7:1b:7a:e1:71:25:68:
80:c8:47:c0:0d:9a:4d:59:13:12:00:70:7d:9c:2b:
06:54:d3:bb:ee:f5:38:ba:47:2c:31:19:d2:ee:5e:
9e:7c:30:05:f1:17:4f:f1:34:ba:c1:3a:1e:34:60:
9f:42:db:86:36:4b:72:ad:f0:6f:b8:26:f9:c2:c7:
85:f9:1a:bc:cd:64:e0:4c:9a:e1:cc:ff:78:6e:17:
15:64:7e:88:ad:2c:98:98:75:8d:87:74:92:6a:1b:
b1:05:c5:a0:43:e6:14:fe:4e:f8:0c:77:5a:65:cc:
54:ab:39:91:8a:c5:49:82:32:23:89:7c:4d:67:eb:
ec:22:cb:44:7f:4d:6e:76:0c:ed:ff:86:89:f6:ba:
a2:37:78:86:5b:4b:02:67:e8:32:67:d0:d2:fe:6c:
de:22:5a:e1:0e:f2:99:a8:f9:db:71:26:48:34:3e:
93:6f:65:92:9a:eb:c0:6e:e6:82:62:49:9d:6c:27:
e8:69:78:27:64:02:4f:f4:82:f6:5b:28:02:9b:10:
e7:84:06:12:ae:53:fc:f1:91:2a:d2:5f:65:99:20:
64:3f:92:55:d5:1f:70:ab:fd:94:c7:0b:37:a4:c7:
a7:20:64:d6:d3:e2:da:1c:bc:d3:ad:d0:e8:ac:fd:
91:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AD:09:4D:7F:12:32:7D:92:A6:D7:F7:8D:F0:C4:C8:8F:F6:BE:EC
X509v3 Authority Key Identifier:
keyid:36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:49:ef:b2:5f:cf:ea:ed:80:a3:01:0d:09:5f:9b:41:76:eb:
06:49:79:b5:5d:0d:73:65:81:48:41:9f:d3:bd:27:0c:c8:41:
4a:d0:2a:94:85:da:82:47:bd:de:1e:51:89:2f:69:09:eb:fa:
90:a8:cb:45:6d:5f:b7:44:8e:22:2b:1d:9b:8b:33:ab:eb:3e:
95:3b:91:b3:eb:66:d0:38:25:0b:46:8c:b2:2f:d7:fd:cb:67:
c1:a5:b9:23:ea:d6:09:fc:e4:7b:78:ad:57:3c:ee:90:e6:20:
11:58:6a:70:48:2f:bb:63:bd:92:96:92:ba:7d:d1:e4:37:77:
8a:64:c9:3a:21:0d:43:66:08:0a:37:a3:7e:74:5b:a3:97:c2:
3e:44:d4:e7:2c:56:42:6a:a2:e6:e5:1b:d0:e8:0b:87:a6:d3:
fd:9d:ba:c0:c0:81:80:51:f0:03:40:87:fa:32:18:80:3b:57:
17:3a:1d:bc:1b:24:4d:ef:2e:cd:20:3a:73:58:71:00:aa:3a:
2c:bb:8a:c4:da:da:bf:b7:cc:41:91:26:a6:e4:7a:31:ba:87:
72:5d:54:20:ac:64:72:9a:38:fa:ac:8e:2d:e6:24:21:ca:b8:
a1:a5:01:53:83:69:1e:81:72:16:90:54:f7:37:e0:fe:a3:e7:
17:18:a0:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dx7+/olf5r7Cnr1XBUeCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZWEyYWJlZDg5MDhmMzI3Zjg2ZTJiMGFmMTVkNDgzMTA0
OWNlYWEwHhcNMjUwNjI4MTUwMTUwWhcNMjUwNjI5MTUwMTUwWjAzMTEwLwYDVQQD
EyhiOGFkMDk0ZDdmMTIzMjdkOTJhNmQ3Zjc4ZGYwYzRjODhmZjZiZWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNm4glDKkecbeuFxJWiAyEfADZpN
WRMSAHB9nCsGVNO77vU4ukcsMRnS7l6efDAF8RdP8TS6wToeNGCfQtuGNktyrfBv
uCb5wseF+Rq8zWTgTJrhzP94bhcVZH6IrSyYmHWNh3SSahuxBcWgQ+YU/k74DHda
ZcxUqzmRisVJgjIjiXxNZ+vsIstEf01udgzt/4aJ9rqiN3iGW0sCZ+gyZ9DS/mze
IlrhDvKZqPnbcSZIND6Tb2WSmuvAbuaCYkmdbCfoaXgnZAJP9IL2WygCmxDnhAYS
rlP88ZEq0l9lmSBkP5JV1R9wq/2Uxws3pMenIGTW0+LaHLzTrdDorP2R0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLitCU1/EjJ9kqbX943wxMiP9r7sMB8GA1UdIwQY
MBaAFDbqKr7YkI8yf4bisK8V1IMQSc6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnVvcXZ0aVFqekpfaHVLd3J4WFVneEJKenFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8xMTQ2ZWMtMDNlZC00MDI1LThhYTYt
N2E2MzU5MGEwNmJkLzEvTnVvcXZ0aVFqekpfaHVLd3J4WFVneEJKenFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8xMTQ2ZWMtMDNlZC00MDI1LThhYTYtN2E2MzU5MGEwNmJk
LzEvTnVvcXZ0aVFqekpfaHVLd3J4WFVneEJKenFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUnvsl/P
6u2AowENCV+bQXbrBkl5tV0Nc2WBSEGf070nDMhBStAqlIXagke93h5RiS9pCev6
kKjLRW1ft0SOIisdm4szq+s+lTuRs+tm0DglC0aMsi/X/ctnwaW5I+rWCfzke3it
VzzukOYgEVhqcEgvu2O9kpaSun3R5Dd3imTJOiENQ2YICjejfnRbo5fCPkTU5yxW
Qmqi5uUb0OgLh6bT/Z26wMCBgFHwA0CH+jIYgDtXFzodvBskTe8uzSA6c1hxAKo6
LLuKxNrav7fMQZEmpuR6MbqHcl1UIKxkcpo4+qyOLeYkIcq4oaUBU4NpHoFyFpBU
9zfg/qPnFxigKA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:11 2025 by rpki-client