
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
File: NLqcIjJB64DivHGFO7fS5YKGvdM.mft (raw, json)
Hash identifier: J9OIIHrlck4tvAJElWeogqLts/T7XJP+un22i2tN0gI=
Subject key identifier: 9F:DC:D5:CE:B7:05:AF:D5:EE:77:74:D7:EF:1F:D8:D6:9E:58:37:5D
Authority key identifier: 34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3
Certificate issuer: /CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3
Certificate serial: 019847E4E4D6FE6EE9BCE53C0AD673A8F0AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
Manifest number: 1608
Signing time: Sat 26 Jul 2025 18:00:39 +0000
Manifest this update: Sat 26 Jul 2025 18:00:39 +0000
Manifest next update: Sun 27 Jul 2025 18:00:39 +0000
Files and hashes: 1: NLqcIjJB64DivHGFO7fS5YKGvdM.crl (hash: bsTLSaGIsYnykYzmCbT004GlQrn4z3ucq8KLn3tVoFQ=)
2: fLquejxATIKeZ_Omgco482qTWPw.roa (hash: kp7xeLg7/f6lZ1aJQqZqJ9ZG54b9dQgMXma+xU2orkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:e4:d6:fe:6e:e9:bc:e5:3c:0a:d6:73:a8:f0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3
Validity
Not Before: Jul 26 18:00:39 2025 GMT
Not After : Jul 27 18:00:39 2025 GMT
Subject: CN=9fdcd5ceb705afd5ee7774d7ef1fd8d69e58375d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6c:0f:cb:02:1b:c8:18:8e:ef:ff:21:f0:05:
94:1a:86:9a:91:36:f2:c9:39:15:d9:c0:23:f1:ae:
24:f4:d2:9f:ac:81:56:b3:80:1d:a0:b8:99:c1:1d:
ca:c6:5c:a8:95:07:37:cb:2f:a3:e5:52:04:c2:37:
ca:eb:b5:af:20:47:07:b9:f3:dc:47:33:cc:d8:b6:
a3:15:df:69:7c:40:22:bb:82:c5:9d:5f:9e:8c:18:
ed:d6:fd:2b:54:60:61:9c:c0:41:64:00:54:a7:78:
39:72:a0:d4:46:18:b6:ed:36:8f:28:13:99:41:5c:
59:83:c0:e6:74:53:e0:9c:72:05:5b:17:a0:d0:c1:
65:46:54:97:55:22:7f:b5:5e:44:9c:39:61:c6:5b:
42:0d:75:e1:ae:57:35:58:e9:d1:03:2f:5c:d9:32:
40:80:1a:9b:2d:6e:72:8f:ef:b2:f2:ff:3b:7b:c3:
6f:ec:bb:de:c8:ec:0f:b0:6a:b0:62:6f:69:fc:16:
0f:75:76:b6:eb:1c:db:94:5b:47:34:c0:57:ff:33:
69:1b:c2:66:d9:a2:f0:02:e3:aa:a7:8e:b1:fc:fa:
ee:bb:68:d1:9d:c7:9f:aa:a2:a4:4e:d7:a0:1f:0e:
9a:47:0f:22:48:9f:f6:95:8c:ca:b4:aa:60:a5:f3:
69:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DC:D5:CE:B7:05:AF:D5:EE:77:74:D7:EF:1F:D8:D6:9E:58:37:5D
X509v3 Authority Key Identifier:
keyid:34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:91:6c:4d:ba:b8:77:d9:c8:bc:bf:68:5f:9f:01:29:f0:a4:
3e:3c:d9:e2:a3:c7:06:49:dd:91:a3:4e:23:2e:dc:4c:6d:78:
d5:10:22:21:3a:20:72:61:06:3f:b0:d3:0d:26:74:67:ac:9c:
cf:c1:3e:3b:b4:b6:50:ac:17:a8:c8:b3:b6:a8:8c:50:62:33:
aa:a1:8c:ff:a1:90:58:4a:73:3c:b8:77:35:05:b3:37:12:20:
ce:f1:40:0f:4c:ac:10:79:30:26:ad:60:02:86:a2:54:dc:f6:
58:9f:1f:82:01:8a:8b:58:ca:cb:f0:3c:0e:a4:81:48:99:b8:
a4:2f:75:3a:b2:89:b3:ec:a2:7f:de:09:f8:fd:c2:6b:24:f1:
e7:20:34:1e:a6:f6:85:56:c1:ad:0e:6e:0d:5e:ca:ff:44:5d:
c3:a0:e0:d6:e0:8d:f3:63:bb:d5:cd:92:cc:04:80:1e:40:b6:
e3:63:23:36:a9:1d:5c:f2:a8:8c:68:f8:fd:21:6c:64:c2:7a:
33:49:c7:75:29:8a:8b:e2:3e:28:51:f4:a6:b2:9d:c9:fd:28:
13:2c:57:b3:e6:d0:3e:a7:81:8e:52:f5:34:f4:61:4c:56:5e:
44:58:bc:56:ec:f4:05:08:39:05:eb:52:e9:fb:a4:1d:fa:8f:
25:50:45:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:51:41 2025 by rpki-client