Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
File: NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft (raw, json)
Hash identifier: AhElQqLnlTNVv8KNI0wIZ94d7BMZ6Fc48WT+rmEGzqw=
Subject key identifier: E6:D7:E7:D5:8B:15:8F:FC:3C:1E:05:FF:A3:E8:29:61:B1:84:EF:26
Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
Certificate issuer: /CN=34e110b59362f673eae33b66ee7aea3c4028294e
Certificate serial: 01964EC777F6C80B7EFA3304EE4CCACCAC9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
Manifest number: 0C72
Signing time: Sat 19 Apr 2025 16:00:17 +0000
Manifest this update: Sat 19 Apr 2025 16:00:17 +0000
Manifest next update: Sun 20 Apr 2025 16:00:17 +0000
Files and hashes: 1: NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl (hash: 9oeKc0k54IsIlbUEckxssgIJxeTO0FOh14kr3oVvnWA=)
2: b7DEUQdG2oOvIJtycUpCy6AoF3M.roa (hash: k/+if+oSQ/fgX7WAcYydy6+lHJqvrrCdtod/PYV9DQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:77:f6:c8:0b:7e:fa:33:04:ee:4c:ca:cc:ac:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e
Validity
Not Before: Apr 19 16:00:17 2025 GMT
Not After : Apr 20 16:00:17 2025 GMT
Subject: CN=e6d7e7d58b158ffc3c1e05ffa3e82961b184ef26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e3:cc:9a:f1:02:21:a0:91:d4:ef:6f:9b:cc:
b6:73:b4:e1:c0:5b:c0:e9:ab:99:9a:e6:0c:3b:65:
4d:ec:e1:40:72:b6:0c:01:57:f3:ea:f8:c0:6f:b2:
3d:af:6e:31:f2:b6:2b:dd:08:2f:43:f5:32:56:c9:
bd:8a:c2:1c:f6:e2:2e:c0:5c:c2:86:13:19:d0:5c:
e3:ff:e9:08:5f:d1:ff:43:cb:28:c4:46:c7:0f:44:
ca:3c:33:d8:ef:c9:c3:cd:52:52:8a:88:90:42:69:
81:ed:fb:46:ee:37:a4:25:da:77:be:04:82:79:83:
f2:cb:24:c6:01:7c:33:8d:7c:73:30:f6:e7:7b:77:
10:d7:a2:24:19:8c:85:99:1f:df:df:22:da:48:0a:
be:2c:e6:92:16:6a:bd:71:2a:b7:02:67:55:b3:05:
7f:e6:00:a0:80:71:98:99:de:35:d6:87:b2:24:b1:
b4:f9:1f:c6:d0:a7:e2:75:4e:ce:f6:1c:6e:df:43:
73:de:b1:c0:63:c7:a6:09:7d:ec:22:6b:d7:a7:08:
9e:90:56:86:be:d4:f5:75:2a:7b:65:c5:21:64:2e:
55:d2:7d:86:ce:9d:4e:5c:ec:40:f7:25:8c:8e:92:
d3:ed:b4:95:e1:89:ce:a3:c9:62:e6:93:b3:ed:c3:
2a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D7:E7:D5:8B:15:8F:FC:3C:1E:05:FF:A3:E8:29:61:B1:84:EF:26
X509v3 Authority Key Identifier:
keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:50:5c:ce:75:28:e8:fe:2d:72:0f:28:a4:c8:dd:d8:3c:3c:
f8:20:eb:72:96:8e:91:e9:df:ee:83:79:05:3a:a8:ec:ec:cd:
f8:0d:f9:e2:ae:f1:c3:9a:a1:64:1d:33:01:7b:b1:5c:14:cb:
02:1b:91:b1:f9:1d:c3:7a:0a:16:3f:e9:41:61:70:9e:61:14:
2b:79:3d:81:4c:97:ec:04:9b:19:ba:ed:fe:14:13:90:01:df:
eb:5a:c2:bb:45:e4:0e:d6:9f:5b:c5:9d:63:41:3f:1e:e2:d3:
98:9c:66:22:88:8c:ad:32:b9:30:60:dd:ef:c7:a2:44:58:98:
7d:65:7a:80:04:73:d3:bf:a6:e2:ab:95:9a:fe:1c:1b:2d:94:
dc:02:7d:d9:37:4b:63:f7:01:b1:42:9d:b8:4a:79:84:39:9d:
2f:66:68:0b:5e:7c:28:80:da:ff:d5:58:fd:99:41:e0:e8:b0:
7d:68:fd:30:54:d4:fe:75:22:37:7a:52:f5:e8:be:6b:54:01:
cc:e6:21:63:1c:a7:7c:a1:a4:26:f4:e8:d4:da:a7:4e:c9:ae:
dc:86:05:f0:1d:3e:6e:16:24:a5:c6:ac:96:a6:ef:24:7f:61:
38:e9:fd:4e:75:d4:c8:3f:22:0b:48:a2:78:0f:e9:83:ac:a0:
ef:c4:8b:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOx3f2yAt++jME7kzKzKycMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZTExMGI1OTM2MmY2NzNlYWUzM2I2NmVlN2FlYTNjNDAy
ODI5NGUwHhcNMjUwNDE5MTYwMDE3WhcNMjUwNDIwMTYwMDE3WjAzMTEwLwYDVQQD
EyhlNmQ3ZTdkNThiMTU4ZmZjM2MxZTA1ZmZhM2U4Mjk2MWIxODRlZjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuPMmvECIaCR1O9vm8y2c7ThwFvA
6auZmuYMO2VN7OFAcrYMAVfz6vjAb7I9r24x8rYr3QgvQ/UyVsm9isIc9uIuwFzC
hhMZ0Fzj/+kIX9H/Q8soxEbHD0TKPDPY78nDzVJSioiQQmmB7ftG7jekJdp3vgSC
eYPyyyTGAXwzjXxzMPbne3cQ16IkGYyFmR/f3yLaSAq+LOaSFmq9cSq3AmdVswV/
5gCggHGYmd411oeyJLG0+R/G0KfidU7O9hxu30Nz3rHAY8emCX3sImvXpwiekFaG
vtT1dSp7ZcUhZC5V0n2Gzp1OXOxA9yWMjpLT7bSV4YnOo8li5pOz7cMqWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObX59WLFY/8PB4F/6PoKWGxhO8mMB8GA1UdIwQY
MBaAFDThELWTYvZz6uM7Zu566jxAKClOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wYmY4ZmItMTYwNC00Y2QxLTlkYTYt
MWJiMjdjNWQzOTdlLzEvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8wYmY4ZmItMTYwNC00Y2QxLTlkYTYtMWJiMjdjNWQzOTdl
LzEvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFBcznUo
6P4tcg8opMjd2Dw8+CDrcpaOkenf7oN5BTqo7OzN+A354q7xw5qhZB0zAXuxXBTL
AhuRsfkdw3oKFj/pQWFwnmEUK3k9gUyX7ASbGbrt/hQTkAHf61rCu0XkDtafW8Wd
Y0E/HuLTmJxmIoiMrTK5MGDd78eiRFiYfWV6gARz07+m4quVmv4cGy2U3AJ92TdL
Y/cBsUKduEp5hDmdL2ZoC158KIDa/9VY/ZlB4OiwfWj9MFTU/nUiN3pS9ei+a1QB
zOYhYxynfKGkJvTo1NqnTsmu3IYF8B0+bhYkpcaslqbvJH9hOOn9TnXUyD8iC0ii
eA/pg6yg78SLPA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:06:17 2025 by rpki-client