Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
File: NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft (raw, json)
Hash identifier: 2kay069WznTJyhWwkHj6ikdptx8oXgYQjNSxYtbkvAM=
Subject key identifier: AC:99:7E:35:54:C8:BF:70:60:9E:35:84:7B:8C:D6:23:B7:F4:C9:8B
Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
Certificate issuer: /CN=34e40348463c60ce9fc694060a37f4683093f045
Certificate serial: 01967CB3190BAF340BE9A7C60CA5E0E9682A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
Manifest number: 08FC
Signing time: Mon 28 Apr 2025 14:00:34 +0000
Manifest this update: Mon 28 Apr 2025 14:00:34 +0000
Manifest next update: Tue 29 Apr 2025 14:00:34 +0000
Files and hashes: 1: NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl (hash: Rxa7ZEqxoSwripxOdixMwjhYaOhlL5lhCTtt6Cp2Aes=)
2: t1BHctdeN3-hwrpqiOWRf8QN_Co.roa (hash: sJPUaFdOg0DhAMbLJjpATv5AEJJ9zxfLTR5pbOXKFNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b3:19:0b:af:34:0b:e9:a7:c6:0c:a5:e0:e9:68:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045
Validity
Not Before: Apr 28 14:00:34 2025 GMT
Not After : Apr 29 14:00:34 2025 GMT
Subject: CN=ac997e3554c8bf70609e35847b8cd623b7f4c98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:38:ac:f7:37:a1:7f:5b:a5:13:52:ef:ba:91:
a3:90:4c:0a:d5:cd:c2:de:57:44:2c:85:a5:ee:05:
cb:11:3d:bd:91:b7:24:3b:07:d6:b4:fb:2c:3b:1a:
25:fe:9a:84:67:ac:a8:7f:4b:13:19:4b:ce:6b:2a:
e7:af:bf:fe:e1:d3:ce:bd:1f:91:0d:c1:c3:0a:a1:
f2:82:65:61:2e:b0:df:ff:4a:aa:5b:b1:f5:c7:a2:
e4:49:40:09:5f:79:d1:b0:aa:c3:4d:17:fe:52:2a:
ae:6b:90:19:62:7a:c8:f0:7b:9a:44:92:f3:e1:a8:
b9:16:d9:38:b5:b6:67:4c:e4:21:07:04:0e:c7:c8:
de:52:4a:6d:94:11:a4:00:a3:6a:15:d1:2b:ed:1e:
8a:74:48:5e:3c:fb:09:15:f9:19:fb:a3:37:9b:2a:
84:18:55:ac:c9:81:43:8a:cd:4c:8a:7d:2e:37:b1:
89:ce:ff:c7:52:98:b9:75:1d:19:bf:4b:eb:c9:7d:
09:46:2f:69:6b:cc:83:87:de:a1:c4:8e:57:65:f6:
25:46:76:59:9f:72:5a:c4:e9:ab:78:92:9f:e2:55:
7d:e4:53:86:77:5a:f6:16:a2:e2:e1:9b:1f:86:d2:
a8:f8:ba:fd:a4:b5:0f:af:9e:92:6f:86:f6:8e:0e:
cb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:99:7E:35:54:C8:BF:70:60:9E:35:84:7B:8C:D6:23:B7:F4:C9:8B
X509v3 Authority Key Identifier:
keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:82:97:da:09:18:5e:2c:89:b8:75:40:2f:90:51:a7:71:1b:
51:1b:30:23:d9:f7:c6:86:dd:f0:6d:09:01:55:1f:9c:7a:9f:
70:ae:7b:4a:65:5e:30:d7:f5:0b:9b:60:52:82:36:bb:14:4f:
a7:0b:95:e6:4f:c8:3a:d2:d6:fe:3d:bd:58:ad:82:d5:0c:19:
d0:28:10:ce:cc:8c:b3:86:15:27:97:cd:6a:83:f0:cd:2b:7d:
ce:8c:54:39:02:a8:32:3a:41:a3:e8:f8:71:bc:76:c8:6c:08:
bf:0c:4f:b1:23:b8:78:c2:38:e4:f4:76:64:a0:36:e3:a8:42:
d5:16:27:7a:f5:d7:f9:5a:47:4b:2e:ff:04:ff:a3:4b:4f:2f:
37:45:5e:60:03:e6:57:cc:e4:0d:86:ac:61:e4:0c:61:f3:46:
07:d2:e5:23:1d:65:d5:75:e6:23:c8:dd:0c:3a:30:92:20:78:
b7:97:0f:49:59:f6:df:ae:0a:88:23:9a:4a:68:99:69:c6:9e:
a8:88:2c:fc:6e:b2:17:5d:6a:95:82:b9:65:8a:56:6d:a6:8e:
3a:44:cb:50:01:69:37:a9:d1:af:74:87:f2:28:ff:d8:b4:e6:
2d:69:ef:d0:22:6e:47:b4:14:18:07:d0:83:03:c2:f1:01:01:
42:5b:87:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:56:56 2025 by rpki-client