Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
File: NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft (raw, json)
Hash identifier: U3Rj+iy3lsnRxtWEZUPw6DwxqE0HID5jvGVOfVgjhjc=
Subject key identifier: 13:CC:38:4A:1B:D5:52:F3:E5:4D:F1:0A:57:92:78:B4:A1:96:32:C6
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Certificate issuer: /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial: 019753EB997A2825EFCC564D084566DF2DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
Manifest number: 1286
Signing time: Mon 09 Jun 2025 09:00:38 +0000
Manifest this update: Mon 09 Jun 2025 09:00:38 +0000
Manifest next update: Tue 10 Jun 2025 09:00:38 +0000
Files and hashes: 1: GHI5fKOLnVPTORGJ-8HvgMn5I8g.roa (hash: tTyvweQSG7PSV/1T7+CqEyju3wttfhrfn44tpkM7ENI=)
2: NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl (hash: mmzEwYursKN3BFNvaMxaWUTL3yRvS8WQ2fSaErNQAgE=)
3: xHwvN6-vM3aYD0WFb7ooENGYbZk.roa (hash: iMOiUeIxNdKNrUiqdP5pHSRFVDIEoaVwDT8Frv9xIdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:eb:99:7a:28:25:ef:cc:56:4d:08:45:66:df:2d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Validity
Not Before: Jun 9 09:00:38 2025 GMT
Not After : Jun 10 09:00:38 2025 GMT
Subject: CN=13cc384a1bd552f3e54df10a579278b4a19632c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:f6:e4:3f:32:fd:e6:c7:d2:f7:2d:59:2a:
4f:18:02:a4:7f:d6:ad:60:ab:e7:26:25:fa:93:09:
e3:f0:81:d0:80:27:93:22:bb:01:5e:52:b2:5a:f0:
1f:e6:a8:c2:77:bc:51:82:4a:49:08:c5:d1:7e:3d:
98:80:c2:7c:f0:2c:df:8e:e3:e5:49:4e:cd:6c:01:
48:e3:43:61:f8:5f:1a:d0:26:2f:fc:93:7a:20:42:
cf:b0:da:a5:be:33:ee:14:21:e0:af:12:b5:91:b0:
ed:24:25:ab:46:e6:99:1a:6d:f4:be:3f:7d:6a:85:
ba:01:bb:f9:f6:2f:41:0a:5a:0d:3a:35:24:4a:4f:
62:81:e2:72:50:d5:53:1d:52:22:93:ec:4a:60:bb:
03:52:82:32:33:00:cb:12:4e:66:87:66:53:36:b7:
18:65:16:da:5a:34:0f:08:24:76:07:4f:58:65:9c:
05:36:10:4d:b6:cf:78:85:02:cf:ab:f7:07:dd:58:
3d:00:8c:1e:6c:ce:a3:19:14:a4:21:1f:c5:d1:58:
04:86:88:cb:94:d5:9c:65:17:f4:2d:60:aa:51:c7:
4f:b2:a9:66:bf:f8:4a:77:8a:b5:5d:99:f0:4e:da:
33:73:a0:32:50:c1:9a:c1:fe:71:05:a2:b0:50:fb:
6e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CC:38:4A:1B:D5:52:F3:E5:4D:F1:0A:57:92:78:B4:A1:96:32:C6
X509v3 Authority Key Identifier:
keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:46:63:f2:0a:93:a9:4a:90:0d:20:0f:ce:67:ea:44:d4:b1:
4c:6d:ed:49:de:f5:a4:71:df:6a:b0:0b:57:17:f6:e6:2c:e2:
a3:0a:69:96:ec:1b:61:34:bd:70:79:c3:4f:68:75:4a:79:a5:
39:9a:d3:d5:df:31:01:01:c4:0c:c7:c2:3e:c7:be:63:ec:07:
be:2e:a9:31:4f:04:e7:f5:a0:1c:7d:f4:1a:af:a2:23:06:56:
ac:ff:c4:8e:74:28:84:fb:6c:09:67:03:1e:14:de:5a:70:d9:
04:97:2d:62:1d:92:6b:1f:93:51:9a:e9:2b:54:c8:46:0e:dc:
1a:2f:87:85:60:f7:37:46:85:32:43:f2:a9:76:b9:5f:5c:5c:
a3:f1:e8:6a:9f:46:77:c4:52:e7:36:fb:04:91:c5:41:be:13:
db:17:10:c3:c6:ae:62:39:42:66:9b:45:80:c4:70:17:40:0f:
c7:93:26:49:c4:e5:77:0f:03:9d:72:6c:b6:58:bb:65:55:17:
b7:97:f8:27:ad:cb:0e:70:c3:d7:78:46:b8:d9:0a:bb:a1:77:
c6:38:39:e8:f7:85:ad:18:d9:a8:e6:b6:43:b4:a3:fc:a8:f2:
b4:21:5f:6b:0d:bd:60:16:92:cf:22:1c:28:57:ff:43:e8:6f:
69:d5:2f:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdT65l6KCXvzFZNCEVm3y2qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NGZkYWQxMGVlNTViMzI4MmE2NDI0NmE0MWRjNjFhODky
MmQyNWQwHhcNMjUwNjA5MDkwMDM4WhcNMjUwNjEwMDkwMDM4WjAzMTEwLwYDVQQD
EygxM2NjMzg0YTFiZDU1MmYzZTU0ZGYxMGE1NzkyNzhiNGExOTYzMmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0H25D8y/ebH0vctWSpPGAKkf9at
YKvnJiX6kwnj8IHQgCeTIrsBXlKyWvAf5qjCd7xRgkpJCMXRfj2YgMJ88CzfjuPl
SU7NbAFI40Nh+F8a0CYv/JN6IELPsNqlvjPuFCHgrxK1kbDtJCWrRuaZGm30vj99
aoW6Abv59i9BCloNOjUkSk9igeJyUNVTHVIik+xKYLsDUoIyMwDLEk5mh2ZTNrcY
ZRbaWjQPCCR2B09YZZwFNhBNts94hQLPq/cH3Vg9AIwebM6jGRSkIR/F0VgEhojL
lNWcZRf0LWCqUcdPsqlmv/hKd4q1XZnwTtozc6AyUMGawf5xBaKwUPtu/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPMOEob1VLz5U3xCleSeLShljLGMB8GA1UdIwQY
MBaAFDRP2tEO5VsygqZCRqQdxhqJItJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wNjc2MzAtMzA2ZS00YzM3LThiY2Mt
NGYwMjFjNzNlZjc0LzEvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wNjc2MzAtMzA2ZS00YzM3LThiY2MtNGYwMjFjNzNlZjc0
LzEvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkZj8gqT
qUqQDSAPzmfqRNSxTG3tSd71pHHfarALVxf25iziowppluwbYTS9cHnDT2h1Snml
OZrT1d8xAQHEDMfCPse+Y+wHvi6pMU8E5/WgHH30Gq+iIwZWrP/EjnQohPtsCWcD
HhTeWnDZBJctYh2Sax+TUZrpK1TIRg7cGi+HhWD3N0aFMkPyqXa5X1xco/Hoap9G
d8RS5zb7BJHFQb4T2xcQw8auYjlCZptFgMRwF0APx5MmScTldw8DnXJstli7ZVUX
t5f4J63LDnDD13hGuNkKu6F3xjg56PeFrRjZqOa2Q7Sj/KjytCFfaw29YBaSzyIc
KFf/Q+hvadUv6A==
-----END CERTIFICATE-----
Generated at Mon Jun 9 13:54:54 2025 by rpki-client