Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
File: NLqcIjJB64DivHGFO7fS5YKGvdM.mft (raw, json)
Hash identifier: LihgthBoI5SEEJUjyG6WptMI/x9r3KoUym9JA8r0c6Y=
Subject key identifier: F4:75:72:ED:BF:BC:3E:A8:F7:0B:03:72:0A:01:66:5A:16:C7:64:01
Authority key identifier: 34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3
Certificate issuer: /CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3
Certificate serial: 01987DF7D38ADF25906B16739E4078B8DB18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
Manifest number: 1624
Signing time: Wed 06 Aug 2025 06:00:50 +0000
Manifest this update: Wed 06 Aug 2025 06:00:50 +0000
Manifest next update: Thu 07 Aug 2025 06:00:50 +0000
Files and hashes: 1: NLqcIjJB64DivHGFO7fS5YKGvdM.crl (hash: nFl6cKZCt//uTHyeQ53qw7Q+ySgjtsX9/tWkqqNtWUQ=)
2: fLquejxATIKeZ_Omgco482qTWPw.roa (hash: kp7xeLg7/f6lZ1aJQqZqJ9ZG54b9dQgMXma+xU2orkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:d3:8a:df:25:90:6b:16:73:9e:40:78:b8:db:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3
Validity
Not Before: Aug 6 06:00:50 2025 GMT
Not After : Aug 7 06:00:50 2025 GMT
Subject: CN=f47572edbfbc3ea8f70b03720a01665a16c76401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5d:48:40:da:b1:48:96:30:3f:38:49:90:d6:
5d:41:6a:90:23:a7:13:d8:79:83:8a:cd:cc:e0:d7:
c7:f4:d2:3a:99:6e:b5:dc:cc:cf:61:a8:dd:93:aa:
2e:ec:e4:d3:59:38:29:6f:df:56:c4:0e:7f:13:77:
dd:88:74:03:f6:04:ad:5f:68:a8:09:78:55:b4:e1:
98:9f:9b:eb:52:88:b4:1e:8e:d4:9a:50:2d:d8:d9:
7b:94:a2:c4:b8:cb:cc:16:e5:ad:be:f3:3d:97:28:
c9:71:e9:95:86:5f:8f:30:75:46:20:e6:ba:86:98:
53:e5:dc:b9:47:f7:10:8c:36:d4:8a:6f:e9:47:a8:
24:7f:7e:84:27:e2:c1:a6:e4:14:ab:e7:a3:56:11:
aa:e6:db:4f:e7:fe:c0:a2:75:16:a1:48:0c:07:c2:
69:21:42:0f:a6:06:07:e4:89:1d:ed:dd:93:11:32:
12:71:5a:c3:3c:1b:39:fb:85:ed:da:7d:60:c7:50:
e2:c0:a9:3e:2f:13:1d:b7:e8:de:77:7e:ae:29:63:
6b:da:c5:f0:0c:32:b1:df:5a:d6:11:51:e6:4c:5a:
75:1f:e0:1b:52:02:4f:7d:ef:f8:23:eb:90:8f:bb:
4b:59:1d:ca:49:82:09:a2:75:c6:f2:62:4d:ca:13:
f7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:75:72:ED:BF:BC:3E:A8:F7:0B:03:72:0A:01:66:5A:16:C7:64:01
X509v3 Authority Key Identifier:
keyid:34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f0:62:90:83:80:ab:03:44:7f:b0:86:b6:8c:d7:5b:4b:81:
12:88:f6:dd:73:96:27:31:c4:77:7c:4a:10:f0:ef:99:79:88:
28:69:7d:d3:61:19:57:db:98:50:0f:4c:d7:24:50:e0:a9:27:
d6:2d:c9:28:e0:63:20:ba:d0:c1:a8:b9:3e:b9:b9:2f:ce:41:
65:5d:31:05:48:20:cb:ff:79:90:3c:62:82:97:d7:3f:35:0b:
50:d5:0b:ba:7c:db:7e:ae:35:04:b6:af:80:0a:07:44:41:d4:
c6:4a:f8:eb:51:96:01:f6:5b:f0:71:22:f7:ff:64:b5:4b:a4:
07:be:48:80:fd:0d:9d:30:5a:5a:7c:75:52:0f:0b:df:56:73:
aa:27:57:89:eb:04:17:35:d9:67:08:36:21:fb:ab:95:1e:24:
79:d2:f9:65:af:c5:dd:2f:f8:c7:99:be:50:25:bd:24:4c:fa:
bf:73:18:d1:6a:7c:31:33:dd:3b:2a:43:15:5e:2c:2d:e3:90:
ae:8c:bb:2d:b2:43:15:1c:91:25:a4:72:c9:13:c9:91:ea:52:
58:59:4d:f7:6e:e4:e9:6f:72:61:f1:83:be:34:b4:15:ec:d2:
ef:56:f6:69:6f:48:dc:07:e4:5c:ca:fe:d6:aa:f6:d7:9e:33:
c0:fb:b6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:38:27 2025 by rpki-client