Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
File: NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft (raw, json)
Hash identifier: PW5/keHAJZsd+J4otCd3RmI9kpr+9tV9tykuFYuIRGc=
Subject key identifier: 51:81:F8:DD:E4:04:D0:5E:6F:65:F4:F8:30:CE:12:6C:99:AB:97:37
Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
Certificate issuer: /CN=34e40348463c60ce9fc694060a37f4683093f045
Certificate serial: 01958B4D4A1247306B5D8E33CB5668790CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
Manifest number: 087F
Signing time: Wed 12 Mar 2025 17:00:52 +0000
Manifest this update: Wed 12 Mar 2025 17:00:52 +0000
Manifest next update: Thu 13 Mar 2025 17:00:52 +0000
Files and hashes: 1: NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl (hash: Esl4aZtEn5dLvXvOtP0wdIRUHaP7DuFJZRSV2g2cyKY=)
2: t1BHctdeN3-hwrpqiOWRf8QN_Co.roa (hash: sJPUaFdOg0DhAMbLJjpATv5AEJJ9zxfLTR5pbOXKFNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:4a:12:47:30:6b:5d:8e:33:cb:56:68:79:0c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045
Validity
Not Before: Mar 12 17:00:52 2025 GMT
Not After : Mar 13 17:00:52 2025 GMT
Subject: CN=5181f8dde404d05e6f65f4f830ce126c99ab9737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:b1:ec:c2:31:86:db:f7:06:10:58:c9:f2:
c1:be:90:ec:af:18:a9:a7:51:51:04:b9:71:b6:be:
ca:66:e7:2d:c2:27:c8:78:6b:aa:49:f9:1b:41:0f:
f1:1d:3e:9f:c7:eb:8d:51:9e:8f:89:78:bf:2a:ab:
0a:95:4a:30:5b:e4:f0:81:f3:24:a2:9e:bb:a4:b2:
b0:db:7c:1f:e5:a2:75:bb:2a:77:8d:d3:32:d0:a0:
f4:a3:35:40:7a:9c:7e:e6:9f:cc:14:ae:da:ba:46:
02:81:10:3f:f8:c2:fa:04:7e:90:b3:06:97:cd:20:
a8:eb:eb:c4:49:f8:b3:65:0f:4f:20:81:ed:91:f4:
a9:be:bd:5f:90:28:8c:d3:c9:24:15:6e:e1:be:26:
4c:68:3b:af:33:a2:b6:24:19:2d:89:c5:a1:b2:c9:
b4:e7:62:27:40:31:91:2e:ff:0c:1e:88:6b:74:b8:
5b:a4:2e:e9:99:1d:05:1b:dd:ec:26:ae:9f:6f:9b:
bc:38:52:30:e8:9a:c0:e4:94:7b:b1:c8:8c:28:c6:
22:9c:82:0b:cc:67:c0:7e:79:a9:87:8b:54:d9:cd:
82:79:79:97:9d:58:0b:1e:49:13:14:82:e8:95:eb:
d6:d9:3a:11:01:d5:ac:55:5c:2e:35:98:3d:8a:59:
c3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:81:F8:DD:E4:04:D0:5E:6F:65:F4:F8:30:CE:12:6C:99:AB:97:37
X509v3 Authority Key Identifier:
keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:7f:d4:7e:85:d2:e2:06:f9:cb:fa:62:21:ef:1c:63:fb:9d:
f2:0f:12:03:ea:ea:c7:10:d5:c1:d6:39:08:6e:89:34:e4:91:
4c:96:ce:be:5a:e6:d8:f7:eb:3f:0c:e6:24:35:0f:fd:34:a1:
53:2e:66:d8:77:5f:0c:fc:b3:32:a2:62:14:89:53:e5:99:16:
5d:a6:64:3b:71:90:64:0f:ff:a8:08:51:ad:de:58:ff:2b:03:
45:dc:45:99:ce:98:82:83:d2:c4:59:2d:66:65:f8:8b:bc:9e:
6a:16:16:e9:a3:cc:3d:f7:7b:03:a3:b5:2b:be:cc:8a:f2:58:
f5:84:c9:7a:b9:86:51:9e:fe:56:5b:91:e3:d4:e5:b0:36:ae:
f7:58:7c:e5:d7:08:27:41:7f:6d:28:58:57:22:10:1a:c5:24:
67:c0:ea:a9:cb:db:ca:b2:74:ae:28:6c:d5:69:1b:5c:b9:4c:
0c:d7:94:2a:61:f4:84:a8:dd:ba:0f:b6:ca:5d:e0:78:99:87:
ad:38:05:73:13:d2:62:55:59:46:00:e4:5a:0b:b2:01:cf:bf:
55:73:95:c4:7e:32:54:3f:4e:9f:b8:74:d1:04:7f:e2:bd:1b:
8a:19:c8:07:d2:61:ab:f5:5f:e3:0d:d2:21:d2:4c:82:b7:32:
27:1d:a5:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLTUoSRzBrXY4zy1ZoeQzSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZTQwMzQ4NDYzYzYwY2U5ZmM2OTQwNjBhMzdmNDY4MzA5
M2YwNDUwHhcNMjUwMzEyMTcwMDUyWhcNMjUwMzEzMTcwMDUyWjAzMTEwLwYDVQQD
Eyg1MTgxZjhkZGU0MDRkMDVlNmY2NWY0ZjgzMGNlMTI2Yzk5YWI5NzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXyx7MIxhtv3BhBYyfLBvpDsrxip
p1FRBLlxtr7KZuctwifIeGuqSfkbQQ/xHT6fx+uNUZ6PiXi/KqsKlUowW+TwgfMk
op67pLKw23wf5aJ1uyp3jdMy0KD0ozVAepx+5p/MFK7aukYCgRA/+ML6BH6QswaX
zSCo6+vESfizZQ9PIIHtkfSpvr1fkCiM08kkFW7hviZMaDuvM6K2JBkticWhssm0
52InQDGRLv8MHohrdLhbpC7pmR0FG93sJq6fb5u8OFIw6JrA5JR7sciMKMYinIIL
zGfAfnmph4tU2c2CeXmXnVgLHkkTFILolevW2ToRAdWsVVwuNZg9ilnDCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGB+N3kBNBeb2X0+DDOEmyZq5c3MB8GA1UdIwQY
MBaAFDTkA0hGPGDOn8aUBgo39Ggwk/BFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk9RRFNFWThZTTZmeHBRR0NqZjBhRENUOEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yYTNjY2MtMjkzYy00MWRhLWFkMTYt
MWI5OWZkMDk3NjNlLzEvTk9RRFNFWThZTTZmeHBRR0NqZjBhRENUOEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8yYTNjY2MtMjkzYy00MWRhLWFkMTYtMWI5OWZkMDk3NjNl
LzEvTk9RRFNFWThZTTZmeHBRR0NqZjBhRENUOEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuH/UfoXS
4gb5y/piIe8cY/ud8g8SA+rqxxDVwdY5CG6JNOSRTJbOvlrm2PfrPwzmJDUP/TSh
Uy5m2HdfDPyzMqJiFIlT5ZkWXaZkO3GQZA//qAhRrd5Y/ysDRdxFmc6YgoPSxFkt
ZmX4i7yeahYW6aPMPfd7A6O1K77MivJY9YTJermGUZ7+VluR49TlsDau91h85dcI
J0F/bShYVyIQGsUkZ8DqqcvbyrJ0rihs1WkbXLlMDNeUKmH0hKjdug+2yl3geJmH
rTgFcxPSYlVZRgDkWguyAc+/VXOVxH4yVD9On7h00QR/4r0bihnIB9Jhq/Vf4w3S
IdJMgrcyJx2lLw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:06 2025 by rpki-client