Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
File: NLqcIjJB64DivHGFO7fS5YKGvdM.mft (raw, json)
Hash identifier: ej1vVkllqR9ikB5dOqZcoBXO+SXJ695ydVk6SFQIs2Q=
Subject key identifier: 11:43:5D:6C:10:26:79:36:9B:56:03:89:76:9F:73:F6:DB:35:72:1F
Authority key identifier: 34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3
Certificate issuer: /CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3
Certificate serial: 019769CEB4D5C2CA38E65D5166EB83195BF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
Manifest number: 1595
Signing time: Fri 13 Jun 2025 15:00:43 +0000
Manifest this update: Fri 13 Jun 2025 15:00:43 +0000
Manifest next update: Sat 14 Jun 2025 15:00:43 +0000
Files and hashes: 1: NLqcIjJB64DivHGFO7fS5YKGvdM.crl (hash: WczzaV0wGpcIIFWkM0Qlnf2IRF2ZN5DWrIRnhVbgUss=)
2: fLquejxATIKeZ_Omgco482qTWPw.roa (hash: kp7xeLg7/f6lZ1aJQqZqJ9ZG54b9dQgMXma+xU2orkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:b4:d5:c2:ca:38:e6:5d:51:66:eb:83:19:5b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3
Validity
Not Before: Jun 13 15:00:43 2025 GMT
Not After : Jun 14 15:00:43 2025 GMT
Subject: CN=11435d6c102679369b560389769f73f6db35721f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:eb:67:cb:fd:d3:16:49:c8:a8:c4:5c:80:
68:f2:57:72:de:75:af:57:6d:e1:b1:11:dd:11:80:
2b:6a:00:a2:4b:19:ce:43:b8:82:52:3b:7a:98:b8:
d6:88:94:9d:b8:a3:85:d5:e0:05:84:0d:be:2a:78:
8c:39:a4:22:1c:4d:14:dd:fd:91:35:28:20:7b:9d:
2a:7d:e1:e4:e9:7d:49:12:dc:e4:12:29:67:22:6b:
48:97:2d:b3:92:c3:b1:49:85:11:2e:e2:f7:28:9e:
d3:bb:c6:63:a1:ca:d2:34:82:6b:6d:ec:a8:f7:a7:
1c:ef:94:5d:e5:ce:cc:f3:1a:aa:69:8d:40:c9:e7:
9e:92:fc:d4:f7:b9:cf:90:be:46:9b:a0:14:c3:b6:
24:71:22:1e:02:02:9f:21:e6:09:a2:01:93:a0:12:
41:ba:90:3b:ca:ca:0e:21:b3:9a:9a:a1:b7:34:c5:
fd:ac:5a:2c:e4:36:af:74:2a:53:9e:87:47:1e:8e:
a0:bb:54:f8:da:df:6b:5a:65:21:4a:80:f9:f1:e9:
90:0c:12:7b:7e:39:61:b1:b2:b5:8e:10:e2:97:eb:
0f:19:d2:da:c7:05:dd:a8:4a:2e:49:0a:f0:d3:88:
90:9d:16:cb:b9:99:7c:27:68:8f:27:97:a9:47:cc:
d2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:43:5D:6C:10:26:79:36:9B:56:03:89:76:9F:73:F6:DB:35:72:1F
X509v3 Authority Key Identifier:
keyid:34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:85:a2:8e:f0:02:9e:f5:c9:b8:02:d0:b7:35:ce:60:e0:cd:
86:a8:42:03:c1:ca:d7:34:3e:4e:65:21:6a:23:d5:8a:51:67:
ee:44:7d:5d:62:1b:7a:57:69:c7:03:6f:2a:e1:98:fd:24:28:
b8:c4:1d:8c:0c:39:d5:c8:19:e0:8e:fc:60:c8:6f:fa:a0:29:
e3:58:5e:44:8f:4b:26:fe:b2:68:82:52:a9:f2:c9:97:cc:46:
68:0a:d5:46:0e:f5:3f:ad:96:9b:04:5d:b0:5a:17:07:d6:eb:
1d:99:30:22:64:ef:67:2d:7f:6c:81:6c:dc:32:1b:f0:e2:71:
01:ea:91:cf:09:97:dc:1d:a9:a6:cc:f9:23:d1:d5:33:cf:e8:
26:b4:09:57:05:7e:e2:a4:cd:2e:60:b6:18:74:db:ab:3c:c4:
df:5b:9a:0f:f3:4f:20:f1:55:d1:b8:ee:25:4a:af:4d:7d:99:
b9:83:fa:08:7f:f0:f4:47:f5:60:a7:0b:f4:60:7b:b4:ac:eb:
87:15:59:25:f7:6e:e6:a1:59:f1:9c:2d:d3:17:d0:23:a6:16:
bb:47:e0:11:3b:13:8b:68:99:f9:76:9b:62:c8:6f:12:f7:62:
e0:ca:dd:ee:46:14:79:31:12:84:17:6d:2e:3e:94:24:a6:b7:
96:6f:af:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:32:48 2025 by rpki-client