
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
File: NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft (raw, json)
Hash identifier: ksCjXpx9ugIRoUsLn7CTY6zFDrMt/zJ/CffdAc5vJm4=
Subject key identifier: 51:6B:E8:FF:28:06:25:08:F6:B7:D5:56:F4:99:5F:93:31:95:0F:AE
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Certificate issuer: /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial: 01968D0198B4B6520AB07883B00EBA5765E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
Manifest number: 121F
Signing time: Thu 01 May 2025 18:00:14 +0000
Manifest this update: Thu 01 May 2025 18:00:14 +0000
Manifest next update: Fri 02 May 2025 18:00:14 +0000
Files and hashes: 1: GHI5fKOLnVPTORGJ-8HvgMn5I8g.roa (hash: tTyvweQSG7PSV/1T7+CqEyju3wttfhrfn44tpkM7ENI=)
2: NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl (hash: k/Y/0NCKT2BFPHZpkkCRbFjpwGvDGbCghX9ETi5yXh4=)
3: xHwvN6-vM3aYD0WFb7ooENGYbZk.roa (hash: iMOiUeIxNdKNrUiqdP5pHSRFVDIEoaVwDT8Frv9xIdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 18:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:01:98:b4:b6:52:0a:b0:78:83:b0:0e:ba:57:65:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Validity
Not Before: May 1 18:00:14 2025 GMT
Not After : May 2 18:00:14 2025 GMT
Subject: CN=516be8ff28062508f6b7d556f4995f9331950fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:5a:d3:d7:9f:84:7d:ee:f2:6e:de:89:9b:
68:25:1f:75:fd:33:9b:ab:e5:af:39:61:64:e9:9e:
30:b6:ca:15:84:ae:9f:ce:15:48:17:c6:42:b6:6a:
e4:36:44:a5:54:02:61:6f:96:bd:a3:01:2b:69:38:
08:d6:dc:cd:c8:ee:aa:24:82:7c:f9:ce:78:23:7b:
8b:a7:06:31:b0:0a:2d:48:59:35:f9:e9:ca:a3:d9:
d2:27:b8:bc:b5:1f:90:0d:63:5c:8d:05:e4:c3:31:
53:28:5c:53:9b:f5:29:43:71:55:6b:fb:e7:d3:3a:
aa:5d:f6:2b:a3:0a:e7:63:5d:d3:67:e0:9f:f2:d0:
00:46:bc:c1:0c:f2:61:08:10:f3:00:1c:4d:f1:48:
49:dd:8f:f2:26:a8:cb:30:8b:b7:aa:fc:f7:02:61:
4b:8e:52:8a:ca:01:6c:50:12:a5:13:47:b2:b9:19:
8e:8c:11:d6:f8:31:d2:99:7d:e3:9f:26:c9:de:9d:
21:f4:3a:cd:fa:ec:c8:9e:fa:e9:ec:46:36:32:15:
bf:eb:83:df:51:db:08:bd:8a:1d:e9:a6:27:33:08:
b9:fd:7d:4c:a4:d7:20:7d:bd:f1:db:53:dd:62:a9:
1a:8d:8a:57:9e:e4:73:b1:3a:b0:6d:05:2e:dc:1f:
4d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6B:E8:FF:28:06:25:08:F6:B7:D5:56:F4:99:5F:93:31:95:0F:AE
X509v3 Authority Key Identifier:
keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3b:ed:ec:cf:ff:9a:ad:7d:bf:01:fe:2e:8f:09:17:bc:26:
ae:d7:1f:48:ff:9a:fd:31:0a:69:e0:36:a5:f2:a8:34:af:a7:
84:f9:60:b6:d6:1f:c3:70:a8:50:08:24:4d:ec:65:3e:de:5e:
48:ae:1b:39:7f:fe:c8:51:89:64:3b:e3:50:34:2f:2b:20:bc:
81:e8:b6:81:d1:11:4b:2b:cd:45:48:fa:25:b6:04:84:72:5b:
f2:f3:5e:60:73:73:34:bf:69:b4:c2:e4:08:94:9f:75:b6:f6:
f4:32:ac:cb:14:44:e3:f3:04:46:06:c0:03:f1:ed:1c:cd:6f:
1e:5c:18:03:43:ef:5d:43:36:f8:ad:b3:9e:7e:a1:0f:ef:7e:
97:07:64:20:79:c5:ea:8e:c0:d1:24:7a:0b:96:aa:7a:c1:6a:
10:f3:52:5d:0e:91:f9:4e:97:fe:05:f5:00:26:c0:2e:44:a6:
85:9e:f1:d6:6f:23:41:e3:46:e5:46:a9:1a:6a:e4:77:12:d7:
0d:3f:24:da:1f:73:43:86:ef:94:22:7b:2b:66:4d:e2:a1:41:
e4:4c:5e:31:31:9b:4e:f9:a0:68:6c:db:66:f8:b2:9e:5f:7b:
a4:1d:df:f1:f1:10:f7:d9:f9:42:1d:bd:a2:bc:6b:fc:5d:68:
7e:76:5c:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaNAZi0tlIKsHiDsA66V2XpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NGZkYWQxMGVlNTViMzI4MmE2NDI0NmE0MWRjNjFhODky
MmQyNWQwHhcNMjUwNTAxMTgwMDE0WhcNMjUwNTAyMTgwMDE0WjAzMTEwLwYDVQQD
Eyg1MTZiZThmZjI4MDYyNTA4ZjZiN2Q1NTZmNDk5NWY5MzMxOTUwZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn9a09efhH3u8m7eiZtoJR91/TOb
q+WvOWFk6Z4wtsoVhK6fzhVIF8ZCtmrkNkSlVAJhb5a9owEraTgI1tzNyO6qJIJ8
+c54I3uLpwYxsAotSFk1+enKo9nSJ7i8tR+QDWNcjQXkwzFTKFxTm/UpQ3FVa/vn
0zqqXfYrowrnY13TZ+Cf8tAARrzBDPJhCBDzABxN8UhJ3Y/yJqjLMIu3qvz3AmFL
jlKKygFsUBKlE0eyuRmOjBHW+DHSmX3jnybJ3p0h9DrN+uzInvrp7EY2MhW/64Pf
UdsIvYod6aYnMwi5/X1MpNcgfb3x21PdYqkajYpXnuRzsTqwbQUu3B9NgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFr6P8oBiUI9rfVVvSZX5MxlQ+uMB8GA1UdIwQY
MBaAFDRP2tEO5VsygqZCRqQdxhqJItJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wNjc2MzAtMzA2ZS00YzM3LThiY2Mt
NGYwMjFjNzNlZjc0LzEvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wNjc2MzAtMzA2ZS00YzM3LThiY2MtNGYwMjFjNzNlZjc0
LzEvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjvt7M//
mq19vwH+Lo8JF7wmrtcfSP+a/TEKaeA2pfKoNK+nhPlgttYfw3CoUAgkTexlPt5e
SK4bOX/+yFGJZDvjUDQvKyC8gei2gdERSyvNRUj6JbYEhHJb8vNeYHNzNL9ptMLk
CJSfdbb29DKsyxRE4/MERgbAA/HtHM1vHlwYA0PvXUM2+K2znn6hD+9+lwdkIHnF
6o7A0SR6C5aqesFqEPNSXQ6R+U6X/gX1ACbALkSmhZ7x1m8jQeNG5UapGmrkdxLX
DT8k2h9zQ4bvlCJ7K2ZN4qFB5ExeMTGbTvmgaGzbZviynl97pB3f8fEQ99n5Qh29
orxr/F1ofnZcsA==
-----END CERTIFICATE-----
Generated at Fri May 2 04:24:00 2025 by rpki-client