Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
File: NLQZ-koKFgUYgxjN9KIESZKFO5U.mft (raw, json)
Hash identifier: qFtoSEp6RH0iOGY9ZDAv3l1O6RSZukTRBuOc+RcDzG0=
Subject key identifier: 4E:3D:99:80:45:26:1A:B0:B0:D5:A1:F9:BB:AB:2E:CD:0D:63:89:7D
Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
Certificate issuer: /CN=34b419fa4a0a1605188318cdf4a2044992853b95
Certificate serial: 019686C8C356BCC0A4107B802D14BA1D55EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
Manifest number: 0DDB
Signing time: Wed 30 Apr 2025 13:00:26 +0000
Manifest this update: Wed 30 Apr 2025 13:00:26 +0000
Manifest next update: Thu 01 May 2025 13:00:26 +0000
Files and hashes: 1: CNQCSVKEMGXZWYhuFwFlfeJh3Us.roa (hash: HUYQM19IzL3twBwaH+2KXeSqoub/kejTXefcV/fEL14=)
2: CNv0NdNZKIhaMEB-_zcwx5XHpgI.roa (hash: jSc4O0ONF5PwUEe8AoTXbFWewQ1vQ1toZjhU7yhjZAU=)
3: NLQZ-koKFgUYgxjN9KIESZKFO5U.crl (hash: 5bZdcknHN5L9OC/ob9kDt6MdRLGhFKxEjM/IGrhGEbQ=)
4: wig6KC4gSVw0HyIKRBc2xTnuVN4.roa (hash: EHt3EBj8Qls7cfEcrr19uaUc9VJjWJHcYHVlVYE7DsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c8:c3:56:bc:c0:a4:10:7b:80:2d:14:ba:1d:55:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95
Validity
Not Before: Apr 30 13:00:26 2025 GMT
Not After : May 1 13:00:26 2025 GMT
Subject: CN=4e3d998045261ab0b0d5a1f9bbab2ecd0d63897d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c8:39:da:a7:df:36:cf:dd:67:84:34:4b:b6:
40:88:8b:9b:10:fc:ea:7c:6e:42:1b:96:67:39:d5:
d2:0e:a3:be:de:f4:50:63:b5:47:bb:1f:4c:82:fa:
bc:4d:e9:b6:0b:e8:d9:29:16:0f:02:e7:e7:55:5d:
0f:99:da:96:6d:26:91:e1:d5:36:c6:99:18:f9:80:
61:bc:75:04:94:97:b8:51:ec:2c:4a:7b:a7:33:78:
76:02:c7:8b:66:47:56:2e:79:fa:1b:df:10:03:24:
85:44:fe:16:f1:ef:f5:de:96:6d:80:89:f4:25:ef:
78:b3:46:41:81:96:91:ff:cf:fb:75:b3:c3:64:0e:
76:23:ca:e4:49:08:4d:ab:fe:12:81:56:b5:cc:3c:
34:e6:4f:e0:f9:49:ff:e9:bc:a7:fc:59:4d:c6:78:
43:a9:44:61:75:03:76:65:1d:77:6e:85:87:03:45:
d8:4d:9f:5a:7e:12:b5:b4:86:73:7c:b4:ba:38:f8:
f1:55:48:65:8d:11:96:94:90:07:9e:36:08:9a:a2:
3b:39:80:84:2f:d4:63:f0:70:86:a9:c5:8f:ff:a5:
0e:2d:22:f2:8b:1d:44:7c:c9:38:e6:fa:55:da:34:
a2:27:d1:6a:ac:ec:43:cf:36:18:b7:18:e1:a8:f1:
18:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3D:99:80:45:26:1A:B0:B0:D5:A1:F9:BB:AB:2E:CD:0D:63:89:7D
X509v3 Authority Key Identifier:
keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:02:3f:0b:b9:73:de:74:85:05:1d:33:7d:dc:29:50:e9:77:
bc:37:05:64:2e:91:0e:8a:08:fb:fa:60:6f:dc:d9:d7:5f:17:
e5:3c:16:e2:51:96:8a:39:c0:6d:72:25:ee:71:77:5a:35:3c:
a4:01:92:b7:6b:e3:c0:b8:b4:7a:d4:03:b4:ed:7d:aa:06:20:
01:bb:e5:52:4a:7a:1a:c2:43:5c:53:99:95:bc:65:07:93:c3:
14:f6:40:20:70:12:d2:5b:53:45:cc:4f:66:ee:45:07:e1:0b:
b3:a8:60:09:fa:e1:e8:32:0f:ad:82:05:ac:71:9c:b5:50:3a:
f4:85:13:57:20:46:d0:40:ce:a1:da:b8:b1:0d:4e:ae:78:74:
42:d0:ad:de:40:8a:f0:9f:27:62:a9:0d:75:0b:35:f1:1e:8e:
e7:08:31:23:88:fa:e5:20:44:d2:18:f3:8f:a1:7f:40:39:0c:
d2:a1:35:cf:25:2b:01:ff:a9:43:cc:54:d8:69:29:db:6c:bb:
6d:ed:ee:0a:20:6a:19:c9:de:b8:71:95:89:cd:71:62:3e:8c:
36:17:a7:82:76:93:62:d0:17:db:5b:46:48:17:5a:34:4f:0e:
a6:b5:db:8d:0f:86:c0:2e:e7:31:63:25:60:7f:76:b2:be:34:
4d:12:1d:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaGyMNWvMCkEHuALRS6HVXqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YjQxOWZhNGEwYTE2MDUxODgzMThjZGY0YTIwNDQ5OTI4
NTNiOTUwHhcNMjUwNDMwMTMwMDI2WhcNMjUwNTAxMTMwMDI2WjAzMTEwLwYDVQQD
Eyg0ZTNkOTk4MDQ1MjYxYWIwYjBkNWExZjliYmFiMmVjZDBkNjM4OTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMg52qffNs/dZ4Q0S7ZAiIubEPzq
fG5CG5ZnOdXSDqO+3vRQY7VHux9Mgvq8Tem2C+jZKRYPAufnVV0PmdqWbSaR4dU2
xpkY+YBhvHUElJe4UewsSnunM3h2AseLZkdWLnn6G98QAySFRP4W8e/13pZtgIn0
Je94s0ZBgZaR/8/7dbPDZA52I8rkSQhNq/4SgVa1zDw05k/g+Un/6byn/FlNxnhD
qURhdQN2ZR13boWHA0XYTZ9afhK1tIZzfLS6OPjxVUhljRGWlJAHnjYImqI7OYCE
L9Rj8HCGqcWP/6UOLSLyix1EfMk45vpV2jSiJ9FqrOxDzzYYtxjhqPEY3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE49mYBFJhqwsNWh+burLs0NY4l9MB8GA1UdIwQY
MBaAFDS0GfpKChYFGIMYzfSiBEmShTuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84Yzc5ZmItN2E1Ny00MjlkLTljMzMt
ODc3NzU0NGM5Mjc1LzEvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84Yzc5ZmItN2E1Ny00MjlkLTljMzMtODc3NzU0NGM5Mjc1
LzEvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegI/C7lz
3nSFBR0zfdwpUOl3vDcFZC6RDooI+/pgb9zZ118X5TwW4lGWijnAbXIl7nF3WjU8
pAGSt2vjwLi0etQDtO19qgYgAbvlUkp6GsJDXFOZlbxlB5PDFPZAIHAS0ltTRcxP
Zu5FB+ELs6hgCfrh6DIPrYIFrHGctVA69IUTVyBG0EDOodq4sQ1Ornh0QtCt3kCK
8J8nYqkNdQs18R6O5wgxI4j65SBE0hjzj6F/QDkM0qE1zyUrAf+pQ8xU2Gkp22y7
be3uCiBqGcneuHGVic1xYj6MNhengnaTYtAX21tGSBdaNE8OprXbjQ+GwC7nMWMl
YH92sr40TRId3g==
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:44 2025 by rpki-client