Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
File: NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json)
Hash identifier: 5+UKBqRGgikvVXvxEwm4ejuxrhjMZRMeSY35aSw7vgU=
Subject key identifier: 0F:0D:90:A4:CB:EC:C2:EB:74:2D:30:61:38:25:8B:4D:9A:6B:CA:4D
Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Certificate issuer: /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Certificate serial: 01976A3C5A501C238524720A61DBD199343D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
Manifest number: E8
Signing time: Fri 13 Jun 2025 17:00:29 +0000
Manifest this update: Fri 13 Jun 2025 17:00:29 +0000
Manifest next update: Sat 14 Jun 2025 17:00:29 +0000
Files and hashes: 1: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: hHmZtfCoEugH0t9wJ6kz/GS4rsOIsTXYEXypTVeGIKY=)
2: zIR-Nz3H2D4s_KM8Bm98PoR8Mws.roa (hash: vxeo0iUuDX5Ze9Stf4uTh6KeWV+Vu5qvbWwTZuqVEFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:5a:50:1c:23:85:24:72:0a:61:db:d1:99:34:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Validity
Not Before: Jun 13 17:00:29 2025 GMT
Not After : Jun 14 17:00:29 2025 GMT
Subject: CN=0f0d90a4cbecc2eb742d306138258b4d9a6bca4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:76:bd:be:c5:27:f2:9c:3f:41:29:a0:c7:
21:e3:6d:bc:37:4e:db:da:16:86:a6:76:fc:94:b1:
dc:52:c3:67:37:6f:3d:ac:21:ef:4f:c8:94:95:a6:
13:d8:54:3a:88:70:10:26:7b:f8:6c:a6:1d:93:cb:
b0:0a:d3:75:d6:f9:14:c8:3f:ad:e1:1c:f4:b2:f4:
96:8b:22:50:bf:c3:81:7e:78:e8:d8:1b:fb:61:50:
78:53:4d:20:e1:d2:a4:5a:fc:81:65:84:f9:81:31:
02:5a:4a:b6:cc:c2:de:1a:8f:c2:e6:64:64:06:65:
95:5a:7d:74:34:45:2c:d6:14:a8:a8:be:75:e1:58:
d9:14:81:23:c7:a8:d2:a7:24:2a:49:0e:a4:1b:2d:
65:cd:4a:ef:de:ee:20:2d:14:41:68:e1:ec:7d:a7:
d8:aa:00:39:c9:b3:1e:15:db:e5:c9:eb:35:92:80:
ba:aa:47:62:63:b0:fc:00:94:82:71:76:fa:50:69:
a0:29:67:bd:c7:76:58:8a:3e:c7:1e:40:8b:12:bc:
e4:39:bb:59:90:99:0b:4c:d5:64:bd:78:f7:c2:70:
23:18:f0:8d:84:49:43:a8:64:a8:ee:63:f7:08:3b:
5f:82:de:9f:60:5c:17:36:c5:73:2d:d5:7c:fb:4d:
a8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0D:90:A4:CB:EC:C2:EB:74:2D:30:61:38:25:8B:4D:9A:6B:CA:4D
X509v3 Authority Key Identifier:
keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:74:2c:9e:34:2d:55:cb:bf:54:75:b3:1e:79:fb:51:fa:9c:
3f:53:63:65:f3:40:09:d9:80:70:f2:55:c3:4a:cf:2f:c1:6d:
12:9d:15:89:14:a2:57:8d:5e:6e:96:90:d5:87:76:07:87:df:
c7:64:03:13:ef:61:b7:47:87:85:49:93:53:35:8d:a1:5d:00:
9c:b2:e3:6e:e7:5e:2d:5b:04:8c:6d:84:c7:44:e7:dd:ed:e6:
d1:3e:5c:63:c7:44:9e:6b:8e:1f:e9:11:68:ea:3f:41:21:2a:
b2:02:73:fe:3d:91:a7:88:37:f0:ef:85:2d:c3:f9:fc:e3:b4:
9c:8f:17:be:c5:6a:9e:d1:60:67:42:d7:99:0d:4e:c9:a6:52:
e4:55:ca:ff:46:db:3e:2e:dc:d2:86:c2:eb:fb:46:b4:22:8c:
df:dd:9b:ba:fe:54:ee:1e:22:87:56:9a:ed:f7:42:3b:09:22:
ca:f9:d1:cb:aa:5a:16:d5:29:f0:21:17:c6:37:bd:de:f3:eb:
3e:36:62:04:01:be:51:d9:9d:c5:d9:f1:2b:ac:1a:3b:59:8b:
03:eb:c0:90:96:6c:19:29:01:d4:af:ab:9c:ad:2b:d6:3c:d3:
b2:b5:c4:ef:c9:73:44:40:36:d9:5f:ca:1f:54:40:5a:37:71:
fd:e7:68:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:35:32 2025 by rpki-client