Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
File: NLQZ-koKFgUYgxjN9KIESZKFO5U.mft (raw, json)
Hash identifier: A8GwtR4/MIgYlxJAD9/T/AvlG6cV1gP0GtMqrzlcyz8=
Subject key identifier: 69:3E:30:0B:97:8A:AC:DE:0C:61:FC:30:CA:0E:55:8C:24:38:20:A9
Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
Certificate issuer: /CN=34b419fa4a0a1605188318cdf4a2044992853b95
Certificate serial: 019880C249AF0E5573898AD461D6BD8212A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
Manifest number: 0EE1
Signing time: Wed 06 Aug 2025 19:01:13 +0000
Manifest this update: Wed 06 Aug 2025 19:01:13 +0000
Manifest next update: Thu 07 Aug 2025 19:01:13 +0000
Files and hashes: 1: CNQCSVKEMGXZWYhuFwFlfeJh3Us.roa (hash: HUYQM19IzL3twBwaH+2KXeSqoub/kejTXefcV/fEL14=)
2: CNv0NdNZKIhaMEB-_zcwx5XHpgI.roa (hash: jSc4O0ONF5PwUEe8AoTXbFWewQ1vQ1toZjhU7yhjZAU=)
3: NLQZ-koKFgUYgxjN9KIESZKFO5U.crl (hash: eV1DKGfDs/yMlhhryzNvjj71mnRRPJlEqDJ/ffX48uY=)
4: wig6KC4gSVw0HyIKRBc2xTnuVN4.roa (hash: EHt3EBj8Qls7cfEcrr19uaUc9VJjWJHcYHVlVYE7DsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:49:af:0e:55:73:89:8a:d4:61:d6:bd:82:12:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95
Validity
Not Before: Aug 6 19:01:13 2025 GMT
Not After : Aug 7 19:01:13 2025 GMT
Subject: CN=693e300b978aacde0c61fc30ca0e558c243820a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a5:e9:38:33:f9:12:27:48:93:76:b0:17:45:
0d:e0:27:2d:bb:e8:be:82:24:9f:c7:87:ae:f7:cf:
6f:db:c7:3b:81:7a:d0:7e:0a:ce:ad:65:5a:44:b4:
e2:21:f5:cf:b5:af:3e:56:f4:f5:e8:41:88:6f:f6:
4b:cf:24:fc:44:5d:b7:e7:fc:e4:4b:f0:d7:dc:2e:
c2:43:39:ce:08:55:6e:c6:57:02:af:a0:13:af:7b:
d4:a5:67:de:5f:56:67:19:35:d7:41:44:bc:bb:48:
07:6d:a8:33:2c:45:8e:c1:12:9d:0b:68:f3:76:41:
56:21:75:56:b2:b5:28:bb:5f:a5:3a:45:c1:88:77:
fe:4f:22:a4:7b:43:88:87:90:fc:df:4e:56:cc:99:
2f:f6:2e:52:e3:58:98:82:3d:0b:ba:4a:c1:b0:d1:
43:c8:1e:8e:b4:93:da:6f:0d:1f:e4:bf:81:44:ad:
e0:11:75:ee:68:35:98:0b:36:f0:32:68:0a:bf:9e:
85:9c:d1:05:8c:7a:c6:bd:47:9e:d8:02:f1:b1:ad:
60:ed:29:15:f6:47:ed:51:05:89:01:22:24:7e:28:
47:cc:e6:83:1d:90:21:d9:b1:de:56:c2:0d:69:39:
73:b2:dd:98:44:63:92:5f:0a:ce:ff:99:da:b3:37:
f7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3E:30:0B:97:8A:AC:DE:0C:61:FC:30:CA:0E:55:8C:24:38:20:A9
X509v3 Authority Key Identifier:
keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:6e:c4:11:03:11:28:66:59:6a:c1:5a:f6:f3:bf:cc:9b:e2:
7a:e8:51:e6:9b:e1:58:0d:10:9d:58:27:4c:d2:be:6f:e6:12:
f2:f3:8d:bf:28:2c:10:c9:eb:a6:50:06:a6:3d:06:ff:fb:e6:
4a:31:46:0b:73:0d:e7:1d:81:0b:e8:13:42:94:c7:3b:b7:36:
52:41:82:1b:91:ce:a0:7f:9c:9d:12:ee:57:5a:65:54:00:ed:
48:04:98:fd:9b:9d:59:a5:a6:a7:c5:f8:f4:d5:a4:a4:fa:62:
f7:08:b0:94:91:39:1b:c7:cd:5c:2d:b2:bc:f8:da:6a:8c:75:
c1:35:73:97:b5:e7:84:72:6f:1a:ee:53:c2:af:6b:cf:ce:3f:
73:f6:a6:bd:72:c7:d7:aa:a2:ae:d3:c4:8c:c4:01:4f:61:c4:
3b:f5:d5:8c:e3:01:ca:63:25:00:86:38:1c:b2:bb:82:9e:2d:
66:2d:aa:8c:dc:03:da:de:42:7f:36:3e:a1:23:63:15:d6:f3:
cb:5e:68:ba:29:07:b3:a1:1f:39:ff:b3:1c:38:f1:e2:d3:c5:
53:cb:b2:2d:fd:a7:32:1b:4c:8f:a4:4b:de:86:73:01:bc:f0:
2d:4c:06:f3:44:da:30:20:15:c5:f5:fa:18:9c:8d:5b:39:08:
0e:97:54:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:58:50 2025 by rpki-client