
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
File: NLQZ-koKFgUYgxjN9KIESZKFO5U.mft (raw, json)
Hash identifier: QQR5RBkp3Z67Oue4lfaVp368q8BTRsKUH9jC4Ejab+4=
Subject key identifier: 27:25:9C:73:75:FC:0D:E9:E8:54:21:E8:D1:BB:C6:DE:63:71:31:90
Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
Certificate issuer: /CN=34b419fa4a0a1605188318cdf4a2044992853b95
Certificate serial: 01977075F1488C46D1E5C5723494D50C7A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
Manifest number: 0E54
Signing time: Sat 14 Jun 2025 22:01:07 +0000
Manifest this update: Sat 14 Jun 2025 22:01:07 +0000
Manifest next update: Sun 15 Jun 2025 22:01:07 +0000
Files and hashes: 1: CNQCSVKEMGXZWYhuFwFlfeJh3Us.roa (hash: HUYQM19IzL3twBwaH+2KXeSqoub/kejTXefcV/fEL14=)
2: CNv0NdNZKIhaMEB-_zcwx5XHpgI.roa (hash: jSc4O0ONF5PwUEe8AoTXbFWewQ1vQ1toZjhU7yhjZAU=)
3: NLQZ-koKFgUYgxjN9KIESZKFO5U.crl (hash: Z8aZzOmP7wGOjaQlELUh4p1Aqlcf7bHIpPLXhTSCPgg=)
4: wig6KC4gSVw0HyIKRBc2xTnuVN4.roa (hash: EHt3EBj8Qls7cfEcrr19uaUc9VJjWJHcYHVlVYE7DsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:f1:48:8c:46:d1:e5:c5:72:34:94:d5:0c:7a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95
Validity
Not Before: Jun 14 22:01:07 2025 GMT
Not After : Jun 15 22:01:07 2025 GMT
Subject: CN=27259c7375fc0de9e85421e8d1bbc6de63713190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:b9:52:67:79:e7:92:3c:c8:d5:07:22:62:
46:18:56:3d:2b:d8:e5:9f:ea:05:5a:ea:c3:9c:9f:
fb:58:9b:5c:52:de:15:44:18:54:59:4d:99:25:0c:
0f:83:9d:ba:9c:19:b0:ae:de:8a:a3:31:0a:a9:0f:
3e:9c:e4:65:41:ce:61:dc:d9:90:8f:34:79:89:4e:
b7:fa:f2:4b:11:91:77:2d:f2:d4:2e:ca:e0:6e:86:
63:5c:7c:7e:de:e6:e2:59:f6:89:8e:bd:70:67:a2:
16:4d:87:05:5e:e7:30:07:b9:c6:15:b6:0b:36:4c:
ed:f0:87:51:fa:ce:36:cd:4a:a9:33:65:84:20:6e:
03:e7:73:ad:1a:67:c0:22:67:99:0e:4d:94:e9:75:
73:32:93:00:4f:9d:7c:28:3f:ce:29:b7:31:3d:dd:
9d:af:e2:3c:6d:7e:73:04:a3:5d:67:c6:66:61:f9:
8f:ac:c4:46:a8:e0:d3:86:40:13:84:82:ae:12:fc:
ea:27:b4:1c:f2:7f:5b:58:13:b2:8c:8a:77:85:c2:
ed:26:29:ec:7a:78:b4:7a:f9:b4:d4:55:67:0b:11:
c5:85:51:4b:f0:9e:1f:e8:e0:41:fd:44:65:d7:d5:
2f:dc:87:34:69:fd:56:7c:25:6c:9c:d2:b0:10:14:
ac:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:25:9C:73:75:FC:0D:E9:E8:54:21:E8:D1:BB:C6:DE:63:71:31:90
X509v3 Authority Key Identifier:
keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f6:10:13:cf:fc:ca:ef:2c:07:ce:91:3f:d8:cf:da:6e:8f:
85:9b:ea:a4:f3:19:c0:48:af:5a:20:09:3a:d4:c0:a7:1b:44:
e4:ec:b2:33:fc:ce:09:79:6a:7b:6c:b0:5b:47:f5:f6:6f:2e:
e4:40:c9:6d:ad:1c:46:1b:35:90:d2:dc:b4:0c:5b:bd:6c:d9:
94:ef:c3:53:58:32:d7:e3:ea:19:b3:d2:e1:4a:7e:fd:b1:4d:
2d:c9:11:d5:f8:d8:3a:79:d2:58:8f:16:2c:72:44:89:89:54:
a3:0f:bb:75:e4:09:b8:83:ff:38:50:ec:82:cf:e5:60:1c:99:
f4:d6:16:bf:f4:03:09:71:16:8a:c4:87:03:e4:96:bf:82:c0:
5c:cf:b9:17:56:c6:3a:b0:65:bc:95:16:4e:d9:24:42:2a:99:
95:cb:64:6e:69:6d:d8:92:f0:ad:ed:e1:8e:d3:89:2e:8c:4b:
65:c6:1e:1c:99:fe:37:8c:5f:49:df:b7:35:0b:3d:12:de:83:
07:0a:58:94:8a:15:ed:2f:7a:cd:26:87:86:33:ee:e5:d7:48:
c4:b9:c1:84:87:1c:3d:9f:a5:9c:e7:9f:ca:52:01:c1:d2:fa:
4a:a9:b4:e7:17:57:fc:76:03:0e:11:8b:cb:44:71:a9:ed:32:
48:a0:75:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:23:55 2025 by rpki-client