Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json)
Hash identifier: FzEoYAI3wN83JYGSoC8vL7qlotkFiUmJ4yqU6yJHOoc=
Subject key identifier: 5E:40:CA:C1:05:A1:54:A3:68:FF:4C:A6:29:93:AF:B8:B5:A0:E4:BA
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 01972FE05B03A80A5D7EEDD0E2CDDD77807F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
Manifest number: 1572
Signing time: Mon 02 Jun 2025 09:02:01 +0000
Manifest this update: Mon 02 Jun 2025 09:02:01 +0000
Manifest next update: Tue 03 Jun 2025 09:02:01 +0000
Files and hashes: 1: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: E80j3eCRt0XRrUzZMGPk9gHUDdaO502i5SYjmg97omg=)
2: _g5I57Jrtat3c0sUXQvZ3nqFfuc.roa (hash: grBe56vRIljL0qbICiVpYCBgfKjQkIm+ss1oa9xOZxk=)
3: nyb0R-h__Mic6GDdyNWGNxBzot4.roa (hash: fgTFT13/lPyU/NB1je1ug0Uwy5bGAtYnZFu7LeFmdpg=)
4: pi0m8ItGQU_1KUziIzWipbWTZ1U.roa (hash: dNmRlkGp5JHgq9te/3UnftdEhJnuqvrIk2cLoA0C8Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 09:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2f:e0:5b:03:a8:0a:5d:7e:ed:d0:e2:cd:dd:77:80:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: Jun 2 09:02:01 2025 GMT
Not After : Jun 3 09:02:01 2025 GMT
Subject: CN=5e40cac105a154a368ff4ca62993afb8b5a0e4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d3:b8:98:6e:c5:29:be:85:65:e9:2e:4f:01:
9c:b9:11:ad:0e:2b:79:2b:e8:85:9b:c2:9c:8c:35:
77:67:20:06:7d:e2:a3:cb:60:6c:ce:66:50:3d:03:
08:3d:ed:87:49:f5:55:5a:f1:0d:6e:04:d2:bd:64:
0a:f7:42:3c:c0:b3:12:d6:3c:81:07:75:d9:20:38:
fa:67:1d:c0:94:2d:62:b4:5d:7c:c1:10:01:77:0d:
68:34:81:7c:67:51:e6:80:21:32:2e:9d:2a:33:f1:
59:b7:d5:b8:59:b4:f8:aa:48:b3:8e:b6:ea:2d:a8:
32:3e:a4:b8:df:00:2f:a1:0d:ed:57:37:e9:81:dd:
3d:9c:6e:be:0a:c2:02:07:79:01:98:8a:52:cd:75:
4c:67:79:15:d8:15:05:4d:39:79:58:c5:e9:3a:2c:
c3:64:e5:0c:bd:28:9b:d8:70:f3:7e:81:6c:c3:2e:
89:7a:50:1e:1e:89:45:53:26:46:ed:9c:ff:f9:0c:
13:28:0f:25:5a:2b:a0:03:89:cb:50:9e:dd:17:3a:
07:3f:85:e9:e9:5a:dd:d0:8c:43:36:cc:4a:be:43:
f5:09:01:29:d8:d3:f9:ae:1a:4f:6e:6e:1c:59:39:
18:99:3e:c0:5c:c5:e7:5a:64:d3:f8:a2:9e:06:97:
ff:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:40:CA:C1:05:A1:54:A3:68:FF:4C:A6:29:93:AF:B8:B5:A0:E4:BA
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:72:5f:ed:28:c1:8e:64:eb:dd:06:08:9f:fc:d2:6c:17:b0:
a3:b0:87:fe:c7:77:91:f0:d5:e8:08:9f:34:f7:2f:96:fb:a6:
81:39:84:02:60:53:a7:ac:30:7c:57:9f:bf:d1:6f:8e:24:3f:
25:b0:4a:58:30:60:f7:0e:18:69:88:9a:d1:a8:3f:74:43:6b:
74:09:c3:72:5f:fd:12:5b:85:ba:94:9d:84:19:ad:43:4d:0e:
1b:06:a1:f3:cb:95:f0:0f:a3:ad:55:cb:73:6b:92:65:ec:5e:
a6:38:af:5a:90:63:b8:21:0f:e8:4d:ad:a8:09:b0:31:5d:25:
57:21:91:49:3b:98:ae:d0:02:ab:9e:a6:a6:64:c5:56:9d:c7:
a9:b0:c4:26:4f:50:4a:a2:3c:d8:26:6e:c0:a9:7c:fd:63:0f:
bb:40:31:cd:90:33:f3:f7:6e:3c:64:15:aa:67:58:b8:23:1b:
73:ce:5b:70:c5:22:7e:6c:93:a2:27:10:ca:a2:27:6b:70:a6:
52:96:56:2b:46:da:6e:8a:4f:e6:dd:4d:28:df:5f:80:50:e3:
04:17:75:a1:cf:bd:f9:41:7d:23:a4:65:b4:c6:25:f4:95:cb:
e2:03:81:1b:db:6c:f7:ef:1d:14:42:57:71:e8:55:94:1e:7a:
d0:74:54:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 17:13:01 2025 by rpki-client