Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
File: NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft (raw, json)
Hash identifier: NtmqWwKfw86LT6bbhZGxQ26HzwR681o69NXaQsf4Th0=
Subject key identifier: D2:27:51:B0:5F:67:45:C5:C9:94:0B:E9:AA:6E:C3:AB:34:18:99:1E
Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
Certificate issuer: /CN=34e40348463c60ce9fc694060a37f4683093f045
Certificate serial: 0197684E388C3DAFBD998C65CABE110119A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
Manifest number: 0976
Signing time: Fri 13 Jun 2025 08:00:46 +0000
Manifest this update: Fri 13 Jun 2025 08:00:46 +0000
Manifest next update: Sat 14 Jun 2025 08:00:46 +0000
Files and hashes: 1: NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl (hash: XQV0lTxewntHehEKFWejp9v0sugkcq7aGxstYbksfvc=)
2: t1BHctdeN3-hwrpqiOWRf8QN_Co.roa (hash: sJPUaFdOg0DhAMbLJjpATv5AEJJ9zxfLTR5pbOXKFNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:38:8c:3d:af:bd:99:8c:65:ca:be:11:01:19:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045
Validity
Not Before: Jun 13 08:00:46 2025 GMT
Not After : Jun 14 08:00:46 2025 GMT
Subject: CN=d22751b05f6745c5c9940be9aa6ec3ab3418991e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ee:b3:d1:08:f0:bb:6c:40:c2:dd:79:71:c2:
2a:c2:be:f7:e1:71:fa:68:e1:b4:9f:94:25:ed:04:
c5:b9:7b:64:85:aa:3d:94:49:e4:90:56:98:94:c5:
bd:c4:ef:8a:b7:fd:5e:5c:67:85:16:6a:51:ff:bc:
3e:3c:a0:71:26:ca:b3:2c:75:0b:3f:42:01:d0:6f:
de:6d:ee:d1:ec:12:a4:bf:a3:a7:73:b1:72:77:24:
66:a7:75:3c:25:fc:03:c2:19:a8:a0:d2:d7:26:49:
f8:d3:8d:dc:92:64:e6:39:2a:80:7f:a0:48:a4:16:
b9:28:53:da:d7:03:c1:a8:60:7f:2f:de:77:e1:2d:
ef:d0:42:a3:01:97:2b:7b:7e:51:f0:62:ae:7a:ac:
0c:a3:87:67:18:18:e5:35:cc:69:b0:69:d5:3f:24:
bf:af:aa:22:71:3b:91:fd:3e:fd:f4:11:68:26:06:
1d:7d:b2:32:9c:31:ad:3e:0e:5e:25:5c:00:2b:e3:
e0:cd:a6:06:10:ea:fb:a9:9e:bb:89:d0:96:a7:ae:
4e:3f:f7:f1:96:1d:27:1e:fa:09:4c:57:ae:be:3b:
fe:ab:b9:ed:cc:e8:35:f8:73:fb:c0:d5:9a:f9:24:
01:af:2a:61:04:54:7c:64:9f:99:e9:35:bf:4e:46:
c7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:27:51:B0:5F:67:45:C5:C9:94:0B:E9:AA:6E:C3:AB:34:18:99:1E
X509v3 Authority Key Identifier:
keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b3:f3:02:ab:1d:96:35:25:da:35:f4:18:73:89:93:bc:25:
78:43:f3:b8:b4:bd:1d:a4:e9:3c:94:6a:e6:c5:03:24:53:58:
e6:de:83:c2:30:98:43:60:49:64:ea:a9:c3:a6:c1:4f:9c:fc:
79:8d:b1:93:44:40:c8:34:fe:0e:5b:28:a1:b7:38:c6:8b:7e:
10:08:1c:a9:87:c0:8d:d8:7c:5c:f6:f7:b9:90:fc:da:a9:69:
58:01:b6:0f:fc:96:c2:89:86:c3:f7:ae:ec:af:c3:07:8d:1b:
af:8b:5d:da:b6:cd:1d:cc:af:77:a3:b4:8b:e8:5e:59:f5:99:
bf:21:8d:9a:79:4f:34:e5:58:be:8b:e7:30:f7:a4:70:36:a2:
95:37:df:6e:dd:1c:08:a6:f4:0b:da:f3:bc:f6:5e:9a:7f:73:
d4:70:54:a0:43:16:53:46:ee:7b:bd:4f:9e:57:b3:86:34:d3:
fe:42:d2:82:ef:ac:4d:f6:4e:46:3b:6e:a3:4e:18:54:d4:ad:
1f:f1:77:e2:d1:54:c0:14:48:38:16:f2:9b:8a:6a:e1:96:42:
47:78:ea:0f:66:3e:12:7e:cc:e1:8a:68:76:6f:14:c6:1f:a2:
62:3c:7c:c4:6c:7b:12:85:3c:10:83:c2:5e:21:a9:4a:1c:f5:
74:4d:08:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:59 2025 by rpki-client