Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
File: NgqdJtuz6l36roO2GQit2Pxt028.mft (raw, json)
Hash identifier: ljIQuqwOoRSeJE4ytFJj3vB1WDT0z2Md1H4jx7FvtzM=
Subject key identifier: 05:BE:C1:F8:0C:A5:EA:B7:37:17:0D:5E:84:F4:CE:04:69:D9:75:95
Authority key identifier: 36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
Certificate issuer: /CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Certificate serial: 01974D4491D05593A0A8DD110FA89FE6FBB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 02:00:28 +0000
Manifest this update: Sun 08 Jun 2025 02:00:28 +0000
Manifest next update: Mon 09 Jun 2025 02:00:28 +0000
Files and hashes: 1: 8O6-gKb80MguFWMDjHISxDIUjOY.roa (hash: 3o+8tVrWRw5md2p0yBC1m89E5Wym1EPSdJ/KhkZ5Zfw=)
2: NgqdJtuz6l36roO2GQit2Pxt028.crl (hash: zcHfJlD0UFZ+3vgmSefLichitdhBvVgRn1M7w4iSgpc=)
3: Zi0j7h9kKDeUNaeEMFA--W7qxgc.roa (hash: X3ti0Mbq81jS2GwcXcG3SUj5PuFqGydxb+zfC6HvRS8=)
4: ng125dUOqVaBw3danc1rOaXrcqk.roa (hash: E63qId+nBBFGXNOzGBHEt5a6wlCWGVhiMwoeA9BRjGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:91:d0:55:93:a0:a8:dd:11:0f:a8:9f:e6:fb:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Validity
Not Before: Jun 8 02:00:28 2025 GMT
Not After : Jun 9 02:00:28 2025 GMT
Subject: CN=05bec1f80ca5eab737170d5e84f4ce0469d97595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:23:23:ea:7a:02:65:2c:ec:77:5f:81:8f:26:
b6:b4:61:d1:59:74:cc:5b:ce:17:ed:b9:37:bd:38:
86:8f:5e:a9:c1:40:27:fe:a3:5e:da:bc:dd:e7:a8:
fe:7c:0a:8a:2e:12:a0:a4:23:23:61:05:10:f8:cc:
42:97:04:ab:a4:bc:d5:e9:d4:57:2d:10:2e:b7:f6:
f5:3c:f8:d9:f9:4e:bf:b8:da:a8:94:fb:4d:5c:73:
5d:13:7e:2d:f2:74:b5:ac:1c:21:f7:04:5d:12:ec:
cb:38:ab:2f:2c:b7:c7:cf:31:4f:df:b6:8a:43:f5:
71:85:9a:b3:13:ab:ff:5f:91:1a:96:58:f2:50:87:
ad:b8:ec:ac:67:a8:cc:a4:67:4e:9a:98:26:07:48:
56:fd:c4:54:54:70:92:bc:f3:eb:8c:a9:a1:a4:54:
ef:cb:19:46:45:59:74:01:0c:59:be:b2:33:43:08:
0a:3c:a5:66:96:17:cc:ac:7e:f5:46:ca:82:50:9d:
4e:21:34:30:1c:11:5a:1d:16:cc:30:23:78:88:28:
bf:fb:86:16:15:1f:6d:02:88:83:ad:77:11:bf:af:
37:59:52:a5:e7:26:22:60:a0:ea:37:56:44:20:b9:
2b:a2:17:75:95:8e:f6:c8:1a:f5:eb:2d:38:23:1c:
28:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BE:C1:F8:0C:A5:EA:B7:37:17:0D:5E:84:F4:CE:04:69:D9:75:95
X509v3 Authority Key Identifier:
keyid:36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:df:94:f0:b5:8a:cd:b9:38:38:3c:0c:22:02:19:6e:3c:7b:
96:81:7b:66:28:fb:bf:34:50:4e:83:18:3f:97:03:c5:1a:b7:
a6:df:30:03:11:03:6b:02:a3:d4:7d:f9:1c:98:2e:c4:50:24:
84:27:21:6f:cc:c6:02:db:68:55:88:83:c0:53:b0:ed:ab:d2:
5a:44:30:13:53:93:fe:fc:9e:2c:84:04:de:de:95:5f:0b:ea:
38:06:61:47:2d:f3:e2:d6:75:75:19:72:57:e6:c4:dd:3f:6e:
3d:ed:ab:e3:0b:13:3b:47:af:7e:37:86:9a:ff:38:ed:04:ec:
ca:f0:11:be:bb:bb:10:52:46:d4:6a:03:83:ce:15:7b:ea:fa:
33:a4:d0:24:86:8d:7e:98:24:60:29:68:ea:a6:9e:d0:97:e3:
11:74:87:52:e1:03:c6:9a:a7:95:46:c3:b3:67:6c:cc:70:77:
b0:1d:51:34:17:af:5e:ee:93:ab:aa:09:dd:a8:99:75:a6:03:
2b:23:ce:63:c6:15:97:24:03:da:45:0f:88:c9:b6:83:6d:c9:
f0:f1:e3:97:58:c3:a2:78:db:3a:fe:7e:51:c7:af:0c:09:ce:
2f:89:9d:38:c1:1b:b7:7a:e0:fc:ca:57:24:0a:68:c0:3e:ea:
ce:ed:a9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:12:07 2025 by rpki-client