Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
File: NOg_QeXSQlTJCobjsrt6gK8DlyE.mft (raw, json)
Hash identifier: 8+1mQRg/1d56dmWbCpoRwQzccdn5W4uz/Je/fL9mTyc=
Subject key identifier: DF:18:F5:6D:26:C3:69:7D:1B:FA:4B:41:D0:C3:2C:5C:3B:D8:24:9B
Authority key identifier: 34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
Certificate issuer: /CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Certificate serial: 01987E9CEE01446467CD669C23D1B233C024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
Manifest number: 14B0
Signing time: Wed 06 Aug 2025 09:01:10 +0000
Manifest this update: Wed 06 Aug 2025 09:01:10 +0000
Manifest next update: Thu 07 Aug 2025 09:01:10 +0000
Files and hashes: 1: NOg_QeXSQlTJCobjsrt6gK8DlyE.crl (hash: EsXvyI7SISiirfn5HTeVP3gwRYMcKYUZemZKPMPKhco=)
2: UO1KioDak-iT8kDHcohpIq9FtOw.roa (hash: c3Q9cGyrR1r4x1r6NclTtEj7o03+DJv3Ywm72vFkEgk=)
3: kh50C_NbBjs1xffmc65N3htJRDA.roa (hash: zegMkFf00MvL1ZefKCFbf5kmHagYnvltoauO7HXIkok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:ee:01:44:64:67:cd:66:9c:23:d1:b2:33:c0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Validity
Not Before: Aug 6 09:01:10 2025 GMT
Not After : Aug 7 09:01:10 2025 GMT
Subject: CN=df18f56d26c3697d1bfa4b41d0c32c5c3bd8249b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:e3:f4:8a:3b:44:ee:19:99:50:41:ac:a6:
40:5f:9e:75:6c:9c:fd:50:23:52:e3:ef:4a:b4:17:
44:35:76:90:16:25:0b:df:bf:c2:fd:09:cf:44:f2:
cc:ab:92:96:28:39:28:35:f3:a7:98:57:5c:b0:dc:
c9:e9:5a:75:8a:f8:57:90:f8:63:99:e3:3c:4a:82:
c8:66:f4:03:b2:1f:7f:05:0f:f8:f1:ba:1c:7a:a2:
c9:e0:1a:a0:25:ed:af:54:77:26:88:2a:0f:e1:42:
10:ad:be:87:34:21:aa:72:40:d3:92:cc:cf:51:7d:
2c:7d:55:e3:e2:06:f4:bf:c2:19:ae:32:1e:f5:55:
aa:16:4c:fe:02:13:76:87:a2:7c:45:b4:c9:7a:5f:
1a:0e:ba:9d:c2:e0:01:ae:09:1f:ff:35:73:85:73:
92:97:e6:0a:91:7a:fb:f7:7c:10:31:30:7f:bc:38:
9d:28:27:ca:e9:8a:22:29:ae:ec:3b:50:de:ec:1d:
5f:7d:7d:f3:ba:b9:c6:b6:0f:93:78:e3:5f:47:5f:
8d:13:8b:e1:73:ac:58:c1:dc:fc:d6:8f:de:e8:3e:
76:7a:c3:e8:1b:93:fa:8f:73:c4:c1:13:04:dd:c8:
d1:26:28:21:e7:a0:6d:5b:85:c3:a1:c4:17:07:fc:
94:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:18:F5:6D:26:C3:69:7D:1B:FA:4B:41:D0:C3:2C:5C:3B:D8:24:9B
X509v3 Authority Key Identifier:
keyid:34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:68:4f:b7:5d:80:6e:3d:91:62:08:fe:98:ec:45:8e:03:af:
41:90:73:e4:63:69:fe:04:33:14:22:63:cc:ac:d5:b5:13:02:
59:ae:9b:39:00:25:a2:ad:87:2d:2f:58:1a:62:af:ab:62:be:
b0:98:75:fb:70:77:c3:bb:09:42:12:6d:4b:02:7a:9f:21:b4:
f0:cd:bd:32:65:02:98:1f:1b:76:e4:b8:23:27:62:e8:b1:72:
bd:22:7c:bc:ab:46:fe:98:42:bb:5f:f2:4a:2f:b1:72:a3:5b:
67:6f:12:f8:88:fa:8b:7f:c5:9b:21:f9:02:9c:06:10:2a:8c:
63:5a:ba:b5:55:f8:14:bb:6c:b7:85:a0:d2:93:2b:85:8b:a9:
6c:13:f8:48:e1:20:e8:41:ae:a2:7d:66:78:7a:09:46:d9:e3:
37:bc:fc:4a:27:75:57:bb:a3:1b:22:c7:65:bb:75:88:e3:02:
1c:67:c5:c9:bb:3c:8e:0f:2d:f4:8d:8d:58:09:15:bc:51:10:
57:c2:d5:35:b6:40:53:69:45:12:61:bb:ed:eb:46:ee:74:38:
2b:5d:2d:b9:35:c9:23:a5:8a:ad:cc:d4:55:30:b1:b9:ff:ad:
16:4f:40:7a:60:88:a5:55:05:51:38:40:1e:0c:6e:3b:18:40:
c7:5c:03:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:23:57 2025 by rpki-client