Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
File: NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft (raw, json)
Hash identifier: Ims694FMEsVjSAr9h/a39jCxnIlu34iLBLEYsda0b1g=
Subject key identifier: BB:F5:50:D6:4C:3B:09:68:B8:A8:DF:56:E4:B8:7E:9A:C8:FE:6B:50
Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
Certificate issuer: /CN=34e40348463c60ce9fc694060a37f4683093f045
Certificate serial: 019872CFE657FA65E547ED03CE7A2CB6FE9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
Manifest number: 0A00
Signing time: Mon 04 Aug 2025 02:01:24 +0000
Manifest this update: Mon 04 Aug 2025 02:01:24 +0000
Manifest next update: Tue 05 Aug 2025 02:01:24 +0000
Files and hashes: 1: NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl (hash: 9erIROaUrJMnwzQWLbcgPlUMhE4I0cS3TO5DVx0PnDs=)
2: t1BHctdeN3-hwrpqiOWRf8QN_Co.roa (hash: sJPUaFdOg0DhAMbLJjpATv5AEJJ9zxfLTR5pbOXKFNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:e6:57:fa:65:e5:47:ed:03:ce:7a:2c:b6:fe:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045
Validity
Not Before: Aug 4 02:01:24 2025 GMT
Not After : Aug 5 02:01:24 2025 GMT
Subject: CN=bbf550d64c3b0968b8a8df56e4b87e9ac8fe6b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:68:76:6a:f7:68:d7:91:21:99:9e:d9:2e:a4:
e4:a5:c7:61:09:01:4b:4a:8f:3f:d4:95:59:93:9f:
ec:be:9c:10:f6:57:2f:3c:d3:1a:3b:7c:f0:88:c0:
f1:6c:85:37:4d:62:c5:5b:f8:2c:56:04:bd:ef:37:
41:27:07:bd:0d:e8:07:7b:e9:7d:9b:af:c9:cf:e7:
7e:07:39:8e:b6:2f:3f:c2:e5:b5:c9:64:b3:a3:7f:
09:3f:ba:64:50:28:2f:1a:48:34:5f:da:82:15:09:
20:7b:bc:24:49:83:57:97:17:b7:47:44:f1:9d:99:
f3:f1:70:7a:06:10:7c:61:d7:2e:0e:d0:f7:de:5c:
84:97:5c:8f:4b:b9:94:11:74:49:1f:d5:d9:a2:5c:
08:37:67:91:af:fa:44:a2:4c:a7:82:9c:32:53:09:
9f:53:e1:f6:35:88:cf:ae:2d:11:20:e9:0c:c3:93:
48:78:0e:8d:81:8d:a5:b4:37:f0:07:2b:47:cf:e6:
f3:bc:fe:cf:e6:e9:7c:4f:83:0d:2b:f0:53:cb:84:
1c:2b:82:a8:4e:90:27:fb:fe:a6:1b:df:76:80:04:
c7:de:6b:d5:d1:c3:24:86:3d:3f:98:a3:90:8e:7d:
af:1e:3b:ab:8c:8e:97:c7:c8:65:2f:8c:0d:a4:00:
33:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F5:50:D6:4C:3B:09:68:B8:A8:DF:56:E4:B8:7E:9A:C8:FE:6B:50
X509v3 Authority Key Identifier:
keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9a:c9:9a:57:4d:54:c2:72:39:02:4e:ec:7a:52:98:68:4d:
86:78:f4:98:31:e5:aa:d6:e4:b8:7a:02:96:d9:c2:58:8a:2f:
6d:17:7b:31:bb:6a:d3:09:30:c2:f4:1e:cb:3d:e0:18:b2:6d:
f6:e5:aa:b4:e2:ff:48:36:2c:a3:83:aa:47:4e:91:0d:16:86:
6d:a6:1d:1a:1c:40:c8:09:4f:1f:16:24:3a:ae:3c:d2:f2:b4:
5a:98:19:19:5f:cd:39:64:56:bb:b8:f3:2f:56:db:b5:c1:11:
2c:ce:0c:42:c0:43:bc:7f:c2:b5:32:02:1a:aa:88:11:83:87:
59:62:a6:ac:b1:27:7e:02:bc:e6:19:38:c6:61:18:45:f8:e7:
50:67:93:07:e7:70:bd:62:81:f4:1f:6f:9f:ba:7d:bd:f3:66:
31:09:3a:c0:ee:91:07:ce:a5:ad:94:da:58:00:02:62:6a:8a:
29:99:6c:02:1a:c0:69:a6:f7:09:d0:15:81:0d:54:d3:af:ff:
b5:75:28:b6:5d:24:fa:ee:cf:d7:ec:d2:f9:03:e5:8d:a0:5c:
ca:98:9a:c5:cf:8d:58:65:90:ce:1f:c1:d5:6b:7b:ad:a8:47:
15:0c:9e:7b:ab:1e:db:af:1b:66:16:3d:88:47:4b:13:93:44:
76:3e:8b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:22 2025 by rpki-client