Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
File: NLqcIjJB64DivHGFO7fS5YKGvdM.mft (raw, json)
Hash identifier: R67oaTxilxTt+XBP31dRoKfWhzt32ogf3+BRqR5RU0c=
Subject key identifier: 68:A6:48:1E:4F:88:B9:60:25:D4:35:DD:7E:B7:13:37:AB:70:9C:2A
Authority key identifier: 34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3
Certificate issuer: /CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3
Certificate serial: 0197B70EA4CF91A031FEF255740AAAEA544F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
Manifest number: 15BD
Signing time: Sat 28 Jun 2025 15:01:19 +0000
Manifest this update: Sat 28 Jun 2025 15:01:19 +0000
Manifest next update: Sun 29 Jun 2025 15:01:19 +0000
Files and hashes: 1: NLqcIjJB64DivHGFO7fS5YKGvdM.crl (hash: Tx8nDI2iGoLvI8DJqrFCYd5BwAoUUV+5kBQRTzTLyeo=)
2: fLquejxATIKeZ_Omgco482qTWPw.roa (hash: kp7xeLg7/f6lZ1aJQqZqJ9ZG54b9dQgMXma+xU2orkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a4:cf:91:a0:31:fe:f2:55:74:0a:aa:ea:54:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3
Validity
Not Before: Jun 28 15:01:19 2025 GMT
Not After : Jun 29 15:01:19 2025 GMT
Subject: CN=68a6481e4f88b96025d435dd7eb71337ab709c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:03:79:62:80:56:d1:f9:96:fa:7d:ae:88:5c:
39:78:82:1f:ef:b8:ae:dc:b2:9f:95:37:31:b2:11:
0a:95:38:97:da:1f:58:f4:ce:b9:b9:c6:35:44:cf:
92:a4:e9:62:b8:9f:28:5e:b1:69:6b:4f:24:78:e9:
06:c9:d3:34:ed:8a:70:30:b9:01:cc:f5:38:44:4b:
c7:97:be:7e:d8:fd:4e:bf:be:de:4d:57:56:a0:4f:
c8:dc:86:dd:ad:00:0d:0a:98:3f:f5:00:06:98:3f:
ed:c1:bd:83:be:e5:62:1b:b3:f2:6d:b3:53:36:e3:
6f:d0:91:91:f1:4c:19:a3:e8:5e:82:e6:37:72:a2:
dc:09:50:88:ce:18:ab:98:3f:8d:fa:2f:d7:ac:df:
04:19:cb:e6:5f:7f:4b:06:0f:93:c5:9d:cc:d5:5b:
cb:15:3b:ea:46:49:55:fa:28:95:b6:27:9d:6e:bd:
b4:f9:89:f8:72:21:92:86:3a:34:1a:97:62:ad:04:
a0:2c:88:13:e7:f8:c1:56:e4:7a:b9:5d:0b:cf:dc:
5c:f0:1b:6b:d8:29:16:40:16:5e:f5:a4:f8:bc:21:
d2:57:b4:11:18:c2:f6:6d:56:e6:a7:33:6d:a2:bb:
98:86:2b:a6:23:b1:d0:e4:ab:c4:7e:64:f4:ce:d1:
da:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A6:48:1E:4F:88:B9:60:25:D4:35:DD:7E:B7:13:37:AB:70:9C:2A
X509v3 Authority Key Identifier:
keyid:34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d3:6b:ab:e4:73:46:d0:85:dc:d7:37:f8:bd:df:b4:53:0d:
ea:93:42:c2:78:89:69:b5:75:71:c3:17:56:a7:c8:95:86:a0:
fd:11:66:d9:cf:bc:8a:ba:a3:75:54:2f:8e:65:12:02:a5:4c:
45:7e:a6:79:06:b9:01:6b:95:91:35:9b:82:d8:20:ab:4c:70:
ff:b7:ae:64:89:da:ad:1c:80:3b:14:50:65:ff:95:5b:be:f1:
84:7d:d1:c8:cf:e9:3a:a3:1a:ba:d2:5e:a0:27:8e:44:38:6c:
21:ab:67:11:40:d0:b6:89:85:09:03:ff:b5:6e:cc:53:75:93:
29:63:f2:03:d0:c8:97:d7:ee:cf:ad:bb:93:bc:5b:b2:d5:55:
3f:05:cc:10:73:2f:e0:62:ad:12:91:16:c3:b5:72:ad:b4:c0:
6b:b6:26:3e:dc:47:ac:59:be:7a:48:a2:f1:15:0b:63:ed:17:
a1:9a:63:a2:cc:c4:16:9e:35:46:cd:a6:8b:bd:dd:47:08:40:
0b:08:6b:a9:8a:a7:77:c5:ce:9e:9e:be:cd:e4:2d:10:35:53:
05:34:b2:46:a0:69:11:e1:1d:a1:73:c4:3e:f4:d2:0c:b2:37:
a3:87:02:56:64:54:fd:80:e4:5a:86:c4:8f:60:70:d5:b6:a6:
43:78:59:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DqTPkaAx/vJVdAqq6lRPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YmE5YzIyMzI0MWViODBlMmJjNzE4NTNiYjdkMmU1ODI4
NmJkZDMwHhcNMjUwNjI4MTUwMTE5WhcNMjUwNjI5MTUwMTE5WjAzMTEwLwYDVQQD
Eyg2OGE2NDgxZTRmODhiOTYwMjVkNDM1ZGQ3ZWI3MTMzN2FiNzA5YzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwN5YoBW0fmW+n2uiFw5eIIf77iu
3LKflTcxshEKlTiX2h9Y9M65ucY1RM+SpOliuJ8oXrFpa08keOkGydM07YpwMLkB
zPU4REvHl75+2P1Ov77eTVdWoE/I3IbdrQANCpg/9QAGmD/twb2DvuViG7PybbNT
NuNv0JGR8UwZo+heguY3cqLcCVCIzhirmD+N+i/XrN8EGcvmX39LBg+TxZ3M1VvL
FTvqRklV+iiVtiedbr20+Yn4ciGShjo0GpdirQSgLIgT5/jBVuR6uV0Lz9xc8Btr
2CkWQBZe9aT4vCHSV7QRGML2bVbmpzNtoruYhiumI7HQ5KvEfmT0ztHaZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGimSB5PiLlgJdQ13X63EzercJwqMB8GA1UdIwQY
MBaAFDS6nCIyQeuA4rxxhTu30uWChr3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkxxY0lqSkI2NERpdkhHRk83ZlM1WUtHdmRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jMmVjNjEtMzdhYi00MDViLWE2YzIt
MTNlZTRjOGQzMDgyLzEvTkxxY0lqSkI2NERpdkhHRk83ZlM1WUtHdmRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9jMmVjNjEtMzdhYi00MDViLWE2YzItMTNlZTRjOGQzMDgy
LzEvTkxxY0lqSkI2NERpdkhHRk83ZlM1WUtHdmRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdNrq+Rz
RtCF3Nc3+L3ftFMN6pNCwniJabV1ccMXVqfIlYag/RFm2c+8irqjdVQvjmUSAqVM
RX6meQa5AWuVkTWbgtggq0xw/7euZInarRyAOxRQZf+VW77xhH3RyM/pOqMautJe
oCeORDhsIatnEUDQtomFCQP/tW7MU3WTKWPyA9DIl9fuz627k7xbstVVPwXMEHMv
4GKtEpEWw7VyrbTAa7YmPtxHrFm+ekii8RULY+0XoZpjoszEFp41Rs2mi73dRwhA
CwhrqYqnd8XOnp6+zeQtEDVTBTSyRqBpEeEdoXPEPvTSDLI3o4cCVmRU/YDkWobE
j2Bw1bamQ3hZDQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:36:03 2025 by rpki-client