Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
File: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json)
Hash identifier: 3J/ONVOVQneZpR15ff7sGLJkArDB4gqcOfxxsnUvYNU=
Subject key identifier: D1:34:65:3F:3F:5B:79:E5:55:01:39:A4:3E:FB:BD:B9:CD:54:2E:24
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial: 0197808D4C7C16D8A0BDCFB66B46327FA03C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
Manifest number: 159B
Signing time: Wed 18 Jun 2025 01:00:33 +0000
Manifest this update: Wed 18 Jun 2025 01:00:33 +0000
Manifest next update: Thu 19 Jun 2025 01:00:33 +0000
Files and hashes: 1: Bha5fqCb4Fccw9Hz-g5tESnNC_M.roa (hash: 46eG+dZ14ZYRFYw5iRf0nTqMM6SE1SjEdU7Pao7e1x0=)
2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: wDTX/sN9ZjxOz3+4RPGoJBi1okcopEHTqCrlCNAI5+0=)
3: k7ZKxdVx9_HpLEEXMgJ7VK0ot74.roa (hash: Jn0c0Y7u45CliHNs1mV0LEaHAyb9OLN6GTScJnODixs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:8d:4c:7c:16:d8:a0:bd:cf:b6:6b:46:32:7f:a0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Validity
Not Before: Jun 18 01:00:33 2025 GMT
Not After : Jun 19 01:00:33 2025 GMT
Subject: CN=d134653f3f5b79e5550139a43efbbdb9cd542e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:01:19:c9:04:56:e9:53:45:a8:9d:72:18:
eb:bf:c6:f2:c7:3b:6b:64:7f:df:b7:a3:c7:3c:9b:
30:9a:c1:50:3c:5a:3d:40:98:5b:7b:ed:f4:bb:d0:
1d:8e:ad:7b:53:2d:27:30:06:11:6a:72:e0:12:cb:
8f:8c:b2:53:9b:fa:24:6e:b5:00:2c:e2:2c:aa:51:
81:3e:e9:14:cf:e7:46:75:e5:95:43:40:c0:96:d1:
c0:5a:9c:be:68:5f:c4:78:7e:18:23:48:c4:ba:06:
fb:55:77:5f:ec:7f:45:a9:b7:89:e2:e0:ec:f1:8c:
64:ce:2b:32:f6:ac:e5:ef:ed:b1:6d:3f:25:9f:96:
56:aa:31:c1:8f:0c:73:a5:04:c3:da:34:28:64:ca:
d7:40:c6:95:51:5f:94:ff:69:3b:3d:8b:9c:44:72:
b8:f4:83:93:8f:fc:b7:2b:b0:af:7e:c1:09:ba:e3:
08:cf:92:26:3a:23:24:86:d6:b0:b3:04:c9:e8:54:
f0:80:f6:b0:32:bc:26:86:d0:d0:3b:8a:ce:9a:a6:
a6:88:f4:e1:5a:93:3f:42:c9:9a:3c:0f:33:fc:ec:
37:80:36:75:ff:17:9d:86:52:00:81:a4:54:0a:08:
d7:05:5b:79:51:81:36:cf:a2:b1:66:9c:95:fb:81:
23:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:34:65:3F:3F:5B:79:E5:55:01:39:A4:3E:FB:BD:B9:CD:54:2E:24
X509v3 Authority Key Identifier:
keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:93:9e:f2:22:d5:da:7f:05:f6:66:dc:55:92:b1:0b:7c:79:
dd:87:7b:8e:a5:f0:43:d0:73:6d:2d:85:62:bb:9a:af:b1:af:
58:e9:de:d4:b3:af:71:19:6f:96:76:7a:30:9c:df:db:8c:d2:
78:8a:2a:e2:5d:4b:8a:e6:66:db:f2:81:02:b4:9b:eb:18:62:
e4:cb:c0:c5:0a:52:cd:7e:5e:93:b5:88:dd:da:15:20:4d:91:
db:eb:8d:2b:b2:a2:60:6b:b0:1a:11:e8:ec:21:8d:05:df:75:
97:35:ea:7a:ca:15:cc:b5:3b:5f:42:d3:1b:5e:a3:5a:bb:51:
f7:4e:01:56:8c:33:06:0b:57:1b:48:9a:55:3a:fd:14:97:10:
3e:1e:ea:61:cd:65:75:a1:be:d0:8a:ee:a0:c2:2c:6e:da:b9:
3f:f3:b5:24:3e:45:ed:61:03:10:a0:58:84:69:d6:49:49:25:
69:61:6a:2d:01:9d:b0:b8:0e:b1:df:db:6b:c5:ca:ac:a1:f9:
7d:78:8f:51:6d:79:20:d4:81:86:ce:99:03:39:df:64:c5:36:
81:83:23:43:43:2a:a8:a1:d0:71:70:19:97:4b:be:3f:44:eb:
7b:2e:3c:10:c9:69:3a:40:f3:1e:6e:6c:fc:65:5a:01:c6:45:
b9:02:71:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:10:02 2025 by rpki-client