Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
File: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft (raw, json)
Hash identifier: tG2P8rjLVYNb9fAv/VmqqOFwMBpxgfJTzud0z9UqVL8=
Subject key identifier: 55:24:BF:C2:BE:CE:81:74:40:A3:C3:91:77:06:6E:ED:68:37:A4:96
Authority key identifier: 36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
Certificate issuer: /CN=36a1daece1c6e878546dbd1333da09feb8bff018
Certificate serial: 01976EBE1A8059203BF3EE12BF8166BB6198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
Manifest number: 02A9
Signing time: Sat 14 Jun 2025 14:00:41 +0000
Manifest this update: Sat 14 Jun 2025 14:00:41 +0000
Manifest next update: Sun 15 Jun 2025 14:00:41 +0000
Files and hashes: 1: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl (hash: HKQcsHz06YzExFSGDTjTcfQ+Da1I1rWC9IzKNxICJSs=)
2: v9WYkBz15RpwA0n7rXgCIDyTPvU.roa (hash: vUv7k6coWvAmWrqVuPUy83SA1mmkmDGBast/PkGxxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:1a:80:59:20:3b:f3:ee:12:bf:81:66:bb:61:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a1daece1c6e878546dbd1333da09feb8bff018
Validity
Not Before: Jun 14 14:00:41 2025 GMT
Not After : Jun 15 14:00:41 2025 GMT
Subject: CN=5524bfc2bece817440a3c39177066eed6837a496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:22:2d:f9:fd:09:37:2e:52:72:80:e2:4e:bd:
7f:46:ca:a8:21:6e:ec:f3:d3:4d:2f:cc:ae:14:d9:
1d:a8:2e:bb:4a:37:17:fd:18:f1:e7:25:bb:90:fe:
b6:11:77:15:35:05:0d:f2:86:34:42:90:67:55:7f:
fa:5a:0d:88:1b:26:c9:96:6a:34:ae:fe:d9:fb:33:
63:cc:c5:fe:6b:4d:1e:ba:0f:ba:b4:a4:1f:81:cb:
d7:c0:b6:6c:f0:c9:cf:30:37:f8:fb:12:64:41:ed:
c1:59:31:cd:26:ae:21:ed:80:0b:ea:ec:9e:8f:fa:
5b:16:b6:b7:36:ea:7a:61:cb:64:72:d9:3d:8e:d4:
70:18:c7:59:71:7d:a1:74:1a:2b:3c:4c:b9:69:ac:
c9:c4:4c:30:03:35:0e:f4:03:f4:6f:67:1a:aa:67:
b3:f9:6e:e3:3a:91:4d:87:2c:33:d7:dc:a9:a0:63:
af:d4:e1:c2:5f:36:bc:86:46:e8:55:9e:c6:a4:cd:
d1:16:d0:8c:38:ac:c0:97:e2:8c:f4:a3:25:69:e6:
c3:5f:37:03:47:35:cb:f1:66:06:e9:31:70:6a:5d:
35:cd:2e:e4:5b:40:3a:d9:de:27:6d:fb:54:d8:f3:
9f:2f:83:bd:6c:2e:c1:78:86:41:56:7d:4a:7d:cf:
f5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:24:BF:C2:BE:CE:81:74:40:A3:C3:91:77:06:6E:ED:68:37:A4:96
X509v3 Authority Key Identifier:
keyid:36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:8a:a0:e6:4a:3e:87:f6:71:25:c8:c8:7a:c9:7c:f2:8d:e4:
a8:cc:3f:b5:92:dc:70:89:fa:5c:1b:de:05:e8:47:d5:61:d2:
86:2e:01:ad:90:e4:d7:4b:2b:72:17:bc:6c:b6:af:cf:94:27:
16:a2:99:5c:cd:b7:36:be:39:c2:b4:54:05:cb:2e:79:06:c4:
62:16:7b:22:af:68:b5:ed:f1:87:53:b3:ae:6c:13:ad:fa:01:
fc:ed:3a:76:20:39:28:38:a7:31:7d:d4:2c:26:28:80:31:d0:
50:83:cd:66:79:53:63:52:08:5e:40:b3:1d:b1:cd:d1:7e:27:
ff:e9:71:39:66:bf:dc:23:42:66:7c:35:f4:a4:95:0f:b2:7a:
7a:64:39:85:0c:d1:e7:65:c5:e1:0e:b0:6d:f0:4f:73:49:61:
c9:5b:e3:76:04:ba:fc:db:6d:7f:3f:e7:13:af:ac:db:71:4c:
6b:86:cf:15:b9:25:55:10:89:74:69:98:67:36:af:8d:9d:f0:
75:69:2d:da:02:54:96:ed:0d:08:b9:9e:56:3a:b3:d0:95:fe:
a8:f4:51:9e:af:6d:2d:73:60:f0:71:29:2f:95:cb:ee:52:88:
88:09:47:70:11:d0:a6:fa:3e:7f:b5:b4:5d:7a:a8:09:1a:53:
83:e7:c6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:36:15 2025 by rpki-client