Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
File: NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json)
Hash identifier: JhSxIcKiuO0Ih7r7PKuMXy7eoFUFBP3RtypWbylyBO0=
Subject key identifier: 22:47:6C:9E:A0:75:5C:56:1F:E4:13:F4:FE:34:81:65:1F:4A:C7:7A
Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
Certificate issuer: /CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Certificate serial: 01974A43B636DFF705E06CA165F5B8FCA5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
Manifest number: 1445
Signing time: Sat 07 Jun 2025 12:00:40 +0000
Manifest this update: Sat 07 Jun 2025 12:00:40 +0000
Manifest next update: Sun 08 Jun 2025 12:00:40 +0000
Files and hashes: 1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: 8U4+HuhyYvy0KIszs6vXQslGejEnteo7i6M7vbUkrbw=)
2: i3NuLV9-SVOSQ4rLf1Rnzi76R8s.roa (hash: F0HuxkG9RZJHtx6EFFj7jJPD9PIqUuIoXshg3545UXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:b6:36:df:f7:05:e0:6c:a1:65:f5:b8:fc:a5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Validity
Not Before: Jun 7 12:00:40 2025 GMT
Not After : Jun 8 12:00:40 2025 GMT
Subject: CN=22476c9ea0755c561fe413f4fe3481651f4ac77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0b:ed:02:4b:0e:aa:bb:fa:5e:15:3e:75:e1:
22:ed:c7:ca:ee:54:e6:67:f1:88:42:68:6b:d2:a9:
e8:75:17:5c:a2:a9:e5:c7:62:c9:5a:ba:8a:aa:27:
5c:c2:d2:ed:53:92:ef:e6:d9:83:2c:2d:3c:c6:fa:
ba:79:49:68:9e:30:9f:ed:1e:3e:8c:73:5a:1d:37:
b3:00:ce:f6:ee:e1:61:f1:73:75:e7:d7:a4:94:8c:
9d:e1:33:cf:da:8b:79:4d:3f:8f:79:f1:aa:88:91:
b1:db:fb:15:5d:25:fb:56:7b:9a:5e:1d:96:ea:3c:
cb:b3:15:b1:7d:9b:96:71:86:dd:90:e1:13:57:2a:
44:a4:06:2e:0b:aa:15:18:31:e8:21:9d:00:c1:4e:
97:7d:e2:17:c9:0d:d1:b9:2b:ce:7b:fa:08:74:bf:
45:0f:85:5c:ac:7b:50:21:02:85:c2:d4:a1:3d:b1:
31:b3:a8:29:35:6e:b3:12:9b:a3:6a:dd:67:fc:64:
52:86:80:7e:41:90:5b:e5:f5:56:26:d7:66:fe:82:
0a:2f:98:11:3d:97:2e:6b:80:0a:0b:7c:b3:3f:74:
0d:6e:01:40:20:82:3e:4a:4d:ea:d2:d2:60:8d:70:
5f:45:ed:14:93:96:4b:6b:5b:2c:78:f0:16:17:15:
dd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:47:6C:9E:A0:75:5C:56:1F:E4:13:F4:FE:34:81:65:1F:4A:C7:7A
X509v3 Authority Key Identifier:
keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c1:3e:ca:66:70:db:54:f0:5b:af:01:82:5f:37:8c:58:dd:
7f:fe:35:ac:e9:10:8c:15:65:94:f5:49:e6:bd:c7:35:ae:20:
ca:c3:dc:78:fe:09:0f:9c:da:ac:9d:c9:d6:a5:e0:7d:8b:90:
23:73:ff:80:23:53:b7:65:d4:30:c2:a9:e2:bc:14:b0:02:60:
5a:95:51:f9:e4:04:a5:fe:1f:cb:21:6e:c8:1d:38:14:15:03:
10:57:a9:12:1c:96:69:3d:fa:5a:c8:6d:af:79:57:d2:fc:d5:
5d:9a:f9:97:a2:03:4c:41:e8:17:12:4b:f5:4c:52:1e:96:b3:
a1:53:0d:e9:a7:1c:67:63:77:74:70:2a:f8:9d:93:7a:94:35:
f3:07:38:60:63:ab:a8:57:ae:65:b1:03:16:9b:4f:b6:c0:2b:
da:7e:ba:33:bf:f6:b1:71:7e:ae:c1:f6:c7:c8:a9:0a:00:4c:
b3:fd:a0:b4:8c:b7:47:5e:1d:db:44:50:e4:c2:6a:30:19:e4:
88:fc:82:77:cd:c8:c8:56:bb:6a:38:58:28:15:22:52:12:7f:
fc:53:f9:2d:5e:91:f7:d0:83:6a:18:79:60:9c:7d:da:f0:ec:
14:f5:98:f8:85:11:b6:de:29:a1:f1:b7:10:03:95:ec:75:80:
19:41:84:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:52:37 2025 by rpki-client