Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
File: NQzOG50G3M6IVmWVNkmcFgM5E3A.mft (raw, json)
Hash identifier: Pcwc5qlNggxwuFHOTd+T/+ccJ/oC++Iqd96L1teaYhM=
Subject key identifier: E1:7C:92:8D:3A:64:58:EE:A9:B0:22:6C:53:AC:8E:A5:BC:F5:3E:D2
Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
Certificate issuer: /CN=350cce1b9d06dcce8856659536499c1603391370
Certificate serial: 01976F9A512FAFC4B5D615C7DB16F7A71D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 18:01:13 +0000
Manifest this update: Sat 14 Jun 2025 18:01:13 +0000
Manifest next update: Sun 15 Jun 2025 18:01:13 +0000
Files and hashes: 1: DFk17XzVK0-2LT-y57eUHLqsGoE.roa (hash: dXqY+iE+GyZrGAN3VZSoDHBgCd8KrkAD+zhIs/sw6B0=)
2: InA1Og6sR4YUgU6o-aAa42NlxCE.roa (hash: +mBUSakr5JllZ5ayoZAKPyK7MyouaEc8pwLjmxou6hg=)
3: NQzOG50G3M6IVmWVNkmcFgM5E3A.crl (hash: 3XVddtfKL53b1ayi/M4S7AJz5vEAY+qplvdUuRvq+oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:51:2f:af:c4:b5:d6:15:c7:db:16:f7:a7:1d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350cce1b9d06dcce8856659536499c1603391370
Validity
Not Before: Jun 14 18:01:13 2025 GMT
Not After : Jun 15 18:01:13 2025 GMT
Subject: CN=e17c928d3a6458eea9b0226c53ac8ea5bcf53ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:93:10:ac:36:d3:c4:86:81:12:72:36:dc:
97:17:25:66:b5:30:36:ae:56:59:32:c8:db:35:ac:
89:a5:00:b0:9e:d6:ec:bd:47:89:ac:d6:05:ee:fc:
00:e6:0d:a3:cc:65:c4:3b:fc:99:9c:05:05:ad:cf:
16:30:49:bf:bb:e2:de:f5:41:c7:bb:07:36:28:34:
c9:98:43:b7:48:91:98:3a:57:40:07:31:98:f7:95:
e7:95:03:94:89:20:54:43:da:ee:c4:e2:5f:a2:ad:
48:72:a4:ab:5b:8d:de:a4:3b:45:dc:a9:79:b5:31:
04:52:47:ef:ba:e1:45:32:59:dc:3e:c7:35:c9:92:
c5:5d:e7:72:a2:3a:f1:48:0d:ae:46:74:00:1e:59:
b6:20:60:1d:15:9d:33:cb:23:1f:7d:9c:8f:ec:d6:
67:a3:4b:51:bb:0d:ab:e0:7f:7e:95:76:59:e7:5f:
e2:46:ec:34:a1:a6:21:b9:a3:1b:44:15:85:0f:46:
bb:ad:ac:d3:f2:6b:e7:93:59:c9:4e:9f:ad:de:3e:
7a:21:4e:43:50:91:e9:f2:bf:0a:09:bc:76:d2:1d:
bd:35:9d:39:ed:52:36:bf:f9:a6:4a:59:76:95:b9:
80:8d:5a:81:aa:92:59:41:c4:fd:a1:0e:c5:76:b9:
25:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7C:92:8D:3A:64:58:EE:A9:B0:22:6C:53:AC:8E:A5:BC:F5:3E:D2
X509v3 Authority Key Identifier:
keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0a:06:7e:b6:b9:79:34:22:a5:82:50:9a:00:20:30:46:0d:
3c:f3:3a:fb:13:c8:27:ad:68:c1:18:1d:b3:a5:ae:b5:09:a9:
eb:50:a2:ff:68:25:de:7b:fc:05:22:50:55:56:11:d5:6a:c1:
c3:e1:e4:66:0c:f7:04:0e:3a:65:f9:65:87:e8:34:ce:1c:38:
07:1e:b3:87:51:4c:29:60:31:d8:dc:a5:75:4a:46:bc:59:58:
49:af:c8:3c:26:23:79:4c:8c:4a:39:35:80:65:3b:0c:1f:32:
e3:3e:78:f8:df:e9:6b:3b:01:67:29:d3:7e:2a:e7:82:97:34:
2d:43:3c:3c:fe:58:30:82:83:a4:98:5c:cb:71:5c:f2:18:dc:
84:5c:e5:44:8c:7e:79:23:66:83:05:a3:ec:1a:ad:e9:3a:d4:
8f:cf:49:74:c2:9d:1a:10:8c:6f:6b:27:6a:49:7c:d0:9e:f4:
b0:f4:87:3f:38:35:a4:17:6e:2f:d2:f7:64:a4:7f:ea:bf:f4:
1a:ad:01:57:23:cc:ac:5d:29:59:4a:3b:34:3c:dc:e4:b8:a2:
b8:74:93:39:52:c8:82:9a:eb:ea:60:19:aa:6a:ee:f2:7f:0c:
24:cb:f0:59:2a:7f:d1:63:13:6e:bd:83:dc:aa:47:12:d8:97:
0a:ce:97:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:21:07 2025 by rpki-client