Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
File: NmqdVCKXV3s3qgxCMZWv4qmOE10.mft (raw, json)
Hash identifier: 7zYkHTH+aW1QoyOZc54h3XlYnqcFE3e3tNaNIndbQd4=
Subject key identifier: AA:88:43:94:1E:5C:1A:B4:F1:67:04:85:8E:AF:E4:67:9F:C5:8B:5C
Authority key identifier: 36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
Certificate issuer: /CN=366a9d542297577b37aa0c423195afe2a98e135d
Certificate serial: 0197463006A99C53AC52E8DA7B632A63CCAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
Manifest number: 157E
Signing time: Fri 06 Jun 2025 17:00:41 +0000
Manifest this update: Fri 06 Jun 2025 17:00:41 +0000
Manifest next update: Sat 07 Jun 2025 17:00:41 +0000
Files and hashes: 1: NmqdVCKXV3s3qgxCMZWv4qmOE10.crl (hash: ZfPVVsE3hJ/T4qR74R1hZK/Kcw62EwjC/GU2/xZibpM=)
2: bEKsBvD9r6Xyt_P3Ap1ApX4DjcU.roa (hash: 24Br4dwLUP9p+zXB4KMnlxiNc2TbHeks2Jsk87QFi10=)
3: kSQ_R5Z-vsBcuOXx6WhdFdmllY0.roa (hash: OhKVJv+g1lqmaayTLliiukgCHTE/MZNzjIGSTC2Zdcw=)
4: naFGULOSYvt_ys0vvTSfwr2rqtk.roa (hash: b43Uckjczt2PCUz41jkHhIKmF+uwsILXTS5gZeF8UNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:06:a9:9c:53:ac:52:e8:da:7b:63:2a:63:cc:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366a9d542297577b37aa0c423195afe2a98e135d
Validity
Not Before: Jun 6 17:00:41 2025 GMT
Not After : Jun 7 17:00:41 2025 GMT
Subject: CN=aa8843941e5c1ab4f16704858eafe4679fc58b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:f0:fb:30:7c:31:da:fb:02:5b:99:18:46:
0f:44:7e:7a:bf:77:a0:3b:f5:c5:6b:d6:48:5f:3c:
cd:f0:c2:3c:5a:9b:f7:61:0d:57:1e:84:9e:a8:9f:
15:f4:62:2c:a4:3c:b9:81:90:a5:4c:9e:7a:58:1d:
c7:a8:b0:f0:5a:f6:9a:6b:d9:f1:e6:bd:4c:8c:06:
d1:b7:e0:3b:12:a9:16:3e:fe:f4:2d:a3:e4:76:0b:
79:4b:5c:f5:14:2f:a1:a6:17:f5:80:95:5a:71:88:
c5:8f:9a:79:48:8b:f7:80:df:97:80:43:95:74:a8:
4e:79:9e:fe:65:35:8e:ea:04:47:af:f3:27:1d:c5:
a1:e1:b9:17:2a:37:e9:c7:14:92:5d:af:53:95:d8:
77:e5:a2:a2:34:d8:21:3d:7a:b2:84:f5:41:10:de:
33:ff:84:ca:b5:d5:e4:50:eb:8a:21:f9:1f:39:23:
d8:24:e6:78:34:96:5b:ea:ba:00:33:8e:86:d6:29:
72:7d:a6:07:33:76:5b:0a:15:62:08:0b:92:a3:33:
3b:4e:10:2d:29:a6:6c:cd:ca:6c:3a:b9:33:ce:2a:
8f:7d:2d:85:2c:d8:bf:85:dd:78:87:23:cd:40:34:
6c:aa:a8:d9:5d:a6:fe:36:28:5c:94:39:79:08:e2:
63:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:88:43:94:1E:5C:1A:B4:F1:67:04:85:8E:AF:E4:67:9F:C5:8B:5C
X509v3 Authority Key Identifier:
keyid:36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:93:ca:b8:ad:ba:56:21:a6:9f:c8:7a:bc:c0:53:83:ca:29:
5b:49:03:a2:b5:91:cb:85:21:06:98:fd:35:3a:22:ee:64:97:
86:25:fc:f1:d2:3d:00:e7:4e:69:81:86:55:91:62:7d:75:4c:
bf:df:cd:6b:c9:18:c9:d6:c7:22:99:35:16:0b:9a:55:1b:b9:
ba:c2:26:f9:da:3d:f5:1b:35:2c:96:f3:69:52:f1:f2:fe:a8:
57:36:19:55:45:e3:9d:3a:3e:8b:ca:8b:5d:25:a8:a6:95:52:
de:cb:4d:30:f8:60:95:65:4e:04:88:18:dd:2f:26:9f:75:9e:
8f:3f:2b:1d:40:ee:f1:73:a5:71:bb:44:47:ae:dc:c2:fe:db:
d1:84:43:b5:f3:3a:3c:42:f1:74:e5:e2:52:4e:28:87:fa:79:
87:57:ab:cb:0d:70:dd:16:f6:87:01:84:38:72:90:cc:29:5c:
1a:f5:7d:43:fa:be:a0:c0:a9:a5:b5:5f:4d:5e:18:3c:12:e2:
5c:a8:af:7a:f2:a2:ce:2f:6b:0b:95:c5:86:8c:0b:fc:5d:d1:
14:f6:56:94:47:8e:ca:5e:64:3c:be:c6:4c:47:17:86:53:bb:
2b:85:6c:9f:bc:20:97:44:e0:8b:65:3e:f6:38:a7:f8:b5:c1:
fc:b6:e7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:29:40 2025 by rpki-client