
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
File: NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft (raw, json)
Hash identifier: 53VGj47PrmQ7EiQ7IlH/SPPqkOQLr1ITV+wqtxKSOjE=
Subject key identifier: 23:4B:EE:89:B7:E2:CB:01:14:AD:E1:60:66:95:99:6A:F8:53:C8:B5
Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
Certificate issuer: /CN=34e110b59362f673eae33b66ee7aea3c4028294e
Certificate serial: 01974B8DCA7EE4194C48A2960169F5808408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
Manifest number: 0CF5
Signing time: Sat 07 Jun 2025 18:01:12 +0000
Manifest this update: Sat 07 Jun 2025 18:01:12 +0000
Manifest next update: Sun 08 Jun 2025 18:01:12 +0000
Files and hashes: 1: NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl (hash: PZgl6YRKvMQBqDSxB92en18o7wmiCqT0DwX/w175//w=)
2: XtfUxUGkjCJuklebiN54Yxg8R5M.roa (hash: 6ylTl3fnc+Bg9Pz92d7wJrvdCwc0XcQ4KZdtR4bRI4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:ca:7e:e4:19:4c:48:a2:96:01:69:f5:80:84:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e
Validity
Not Before: Jun 7 18:01:12 2025 GMT
Not After : Jun 8 18:01:12 2025 GMT
Subject: CN=234bee89b7e2cb0114ade1606695996af853c8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:10:b3:ba:f6:6e:85:64:14:97:0e:e0:85:f5:
60:d7:50:b5:ba:82:25:56:93:95:8c:6b:2a:c3:93:
89:4b:02:b0:ad:be:18:20:dc:bb:e3:75:f2:2f:05:
5d:1a:dd:83:a0:9a:7f:cd:8c:8e:d6:94:84:3e:35:
dc:01:66:9f:0a:2c:f1:28:a7:b5:66:94:12:b4:f7:
b9:82:c5:8b:50:15:6e:96:94:32:60:2a:de:4e:87:
30:3a:4c:41:b7:e5:55:fd:ff:de:f9:8e:1d:50:82:
96:20:f5:83:11:e0:39:1d:b5:7d:b1:ca:a8:9b:94:
c4:90:ca:c1:36:77:50:0c:a5:cf:b8:8c:e3:7e:e1:
c4:7d:f2:ab:08:b4:14:17:7c:83:bd:44:3b:d1:8b:
57:d3:20:ff:68:5a:61:01:b2:35:9d:1b:77:92:b6:
98:8f:6d:d3:92:e7:12:26:09:ea:f3:e0:26:76:3d:
40:49:0e:05:08:2c:53:5b:c9:ac:5e:b7:b7:c7:91:
c2:6d:d7:35:e8:dc:68:ff:66:13:2e:de:f5:45:d2:
50:ff:4b:a1:63:35:0d:aa:91:8f:3e:e8:1f:52:c3:
54:a6:67:01:37:b2:e6:4b:25:93:34:d0:00:11:1c:
57:40:9e:8f:cf:c8:0a:1a:21:dc:03:bd:d2:30:fa:
6c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4B:EE:89:B7:E2:CB:01:14:AD:E1:60:66:95:99:6A:F8:53:C8:B5
X509v3 Authority Key Identifier:
keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:35:fd:2c:b5:97:7e:9b:c0:75:8d:9e:3d:c3:e5:c4:16:48:
13:3b:b7:ea:e0:90:54:e0:ca:18:d9:ec:88:0b:c5:f9:0c:b1:
da:f8:ab:97:92:e5:fb:e7:df:6f:7a:e9:cb:8b:41:2a:9f:4f:
e2:f9:f9:3e:b6:af:ac:6e:2f:6e:66:9a:95:05:b8:71:73:dc:
cb:f9:81:c7:d6:e6:87:8e:1c:c6:70:a3:83:75:5c:3b:23:3f:
ae:b6:25:73:34:6b:1a:4f:3c:6d:7b:c1:05:7a:4d:15:95:ee:
48:06:5b:5c:bc:ee:1a:dc:e8:05:2d:0b:be:ee:53:fc:63:4a:
90:0e:82:53:1c:9f:6a:29:df:38:5a:bc:39:8d:5d:b0:ea:a6:
e9:3e:e7:9e:bd:09:c2:35:d4:0f:21:cd:48:2c:81:05:8f:e8:
af:2d:44:63:82:61:04:20:01:28:ac:0c:64:b4:f3:1f:f9:d4:
1a:66:1b:87:11:8d:54:3b:cf:be:40:bf:dd:4b:e4:be:ab:4e:
24:55:73:8c:96:08:56:21:a2:b3:46:e8:c4:11:10:66:79:74:
e1:bd:5e:5b:86:ac:4a:9a:54:a8:f0:d0:71:70:f2:ed:77:8f:
4e:df:e6:80:fc:1f:69:55:b5:fc:29:86:05:68:fe:4f:5f:2f:
56:34:4e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:03:43 2025 by rpki-client