Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
File: NLQZ-koKFgUYgxjN9KIESZKFO5U.mft (raw, json)
Hash identifier: C/IhaCZKQ6tlArg2hB9i/iDIu0TX9Z9LNwFio6sFKxM=
Subject key identifier: 91:85:8F:42:D8:98:89:9C:FB:50:C1:FF:C7:5C:83:61:6F:8B:07:FE
Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
Certificate issuer: /CN=34b419fa4a0a1605188318cdf4a2044992853b95
Certificate serial: 019643319A3AC711D0061F17D3BB14513397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
Manifest number: 0DB8
Signing time: Thu 17 Apr 2025 10:00:46 +0000
Manifest this update: Thu 17 Apr 2025 10:00:46 +0000
Manifest next update: Fri 18 Apr 2025 10:00:46 +0000
Files and hashes: 1: CNQCSVKEMGXZWYhuFwFlfeJh3Us.roa (hash: HUYQM19IzL3twBwaH+2KXeSqoub/kejTXefcV/fEL14=)
2: CNv0NdNZKIhaMEB-_zcwx5XHpgI.roa (hash: jSc4O0ONF5PwUEe8AoTXbFWewQ1vQ1toZjhU7yhjZAU=)
3: NLQZ-koKFgUYgxjN9KIESZKFO5U.crl (hash: AsKLwdV4LL0IVSuLHdB+/XmKu8bFkFNrHngaUcjlNWA=)
4: wig6KC4gSVw0HyIKRBc2xTnuVN4.roa (hash: EHt3EBj8Qls7cfEcrr19uaUc9VJjWJHcYHVlVYE7DsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:31:9a:3a:c7:11:d0:06:1f:17:d3:bb:14:51:33:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95
Validity
Not Before: Apr 17 10:00:46 2025 GMT
Not After : Apr 18 10:00:46 2025 GMT
Subject: CN=91858f42d898899cfb50c1ffc75c83616f8b07fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:20:94:f4:f1:a3:21:4d:c2:e4:0b:3c:e1:
ef:ab:03:4f:6f:53:9f:bb:01:09:5e:86:f9:57:67:
fc:9e:2b:7f:a2:3a:bc:c4:29:f2:f3:d8:1c:73:6d:
8f:61:27:82:22:c2:e5:ee:69:21:91:d3:73:5a:71:
75:14:54:58:11:f0:1b:ae:d3:fd:a8:1e:cd:c0:77:
88:ef:cc:8d:10:c4:06:a3:2f:cb:27:ab:b1:bd:50:
9f:ff:ae:58:ed:62:02:c0:9f:2d:68:1c:6d:b9:e5:
ad:b5:e1:01:1d:be:9a:0a:33:7a:dc:50:b8:ba:19:
33:ff:c4:a7:89:1f:47:a9:32:9a:2d:8d:c5:c5:be:
d7:40:4a:d9:47:13:13:55:32:74:40:40:34:5e:75:
e1:79:de:77:ff:d1:5c:c3:f3:f8:c8:f0:8c:64:df:
a2:a6:69:bb:19:74:66:73:5d:14:23:05:90:d5:a4:
5c:5d:f5:7e:e8:07:95:04:e1:7f:10:22:46:4f:65:
66:16:ea:10:92:14:71:d2:e7:ee:1d:db:d9:d0:5f:
20:db:f3:6e:ce:69:16:01:0b:2e:69:9d:63:db:80:
3f:fc:c7:e6:e2:b3:d2:9f:cc:5b:22:03:c8:e0:71:
0d:81:5d:a9:85:46:e0:2f:26:59:35:bb:b5:eb:6c:
c4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:85:8F:42:D8:98:89:9C:FB:50:C1:FF:C7:5C:83:61:6F:8B:07:FE
X509v3 Authority Key Identifier:
keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a7:6e:e0:43:26:88:79:e4:27:eb:69:67:9c:8a:4a:d4:ba:
56:c3:dd:96:ff:84:08:4e:6d:ad:73:70:9d:0a:f4:a9:aa:d7:
4d:87:14:ca:29:3c:86:4c:3c:f6:00:1f:15:38:ef:5e:ea:cd:
70:df:0c:9d:7a:b5:bb:0c:fc:9b:58:c4:cf:f2:95:83:ac:c4:
a6:4a:38:0b:79:41:48:f7:36:09:d2:a0:6c:c1:21:59:19:be:
56:f1:35:aa:4c:7a:2d:5e:e2:d0:c0:a5:b9:07:72:9f:cc:c1:
c0:70:3c:cf:d0:78:d8:0b:79:70:7c:e8:2d:01:d5:5f:17:e9:
7c:11:c7:e4:0c:5f:17:c5:82:27:7d:b1:f6:59:2b:75:95:b5:
28:bb:07:2d:cb:5b:af:d8:64:63:68:38:3a:82:69:39:9c:71:
f2:02:24:46:dd:52:cd:3a:86:7d:61:0a:28:7a:be:e4:da:ca:
f8:2f:30:78:0f:0e:68:8e:ce:e3:72:62:f4:4c:36:24:6d:5f:
f3:50:e6:60:9d:ae:22:f6:06:2b:e0:3d:81:7b:52:bd:fc:83:
b4:fd:d3:1e:51:17:00:31:1c:36:68:7c:19:ae:74:5c:f3:1c:
97:47:fa:fd:10:86:28:91:cb:4b:ca:55:36:87:d5:26:36:6f:
1b:87:68:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZDMZo6xxHQBh8X07sUUTOXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YjQxOWZhNGEwYTE2MDUxODgzMThjZGY0YTIwNDQ5OTI4
NTNiOTUwHhcNMjUwNDE3MTAwMDQ2WhcNMjUwNDE4MTAwMDQ2WjAzMTEwLwYDVQQD
Eyg5MTg1OGY0MmQ4OTg4OTljZmI1MGMxZmZjNzVjODM2MTZmOGIwN2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufkglPTxoyFNwuQLPOHvqwNPb1Of
uwEJXob5V2f8nit/ojq8xCny89gcc22PYSeCIsLl7mkhkdNzWnF1FFRYEfAbrtP9
qB7NwHeI78yNEMQGoy/LJ6uxvVCf/65Y7WICwJ8taBxtueWtteEBHb6aCjN63FC4
uhkz/8SniR9HqTKaLY3Fxb7XQErZRxMTVTJ0QEA0XnXhed53/9Fcw/P4yPCMZN+i
pmm7GXRmc10UIwWQ1aRcXfV+6AeVBOF/ECJGT2VmFuoQkhRx0ufuHdvZ0F8g2/Nu
zmkWAQsuaZ1j24A//Mfm4rPSn8xbIgPI4HENgV2phUbgLyZZNbu162zExQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGFj0LYmImc+1DB/8dcg2Fviwf+MB8GA1UdIwQY
MBaAFDS0GfpKChYFGIMYzfSiBEmShTuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84Yzc5ZmItN2E1Ny00MjlkLTljMzMt
ODc3NzU0NGM5Mjc1LzEvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84Yzc5ZmItN2E1Ny00MjlkLTljMzMtODc3NzU0NGM5Mjc1
LzEvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKdu4EMm
iHnkJ+tpZ5yKStS6VsPdlv+ECE5trXNwnQr0qarXTYcUyik8hkw89gAfFTjvXurN
cN8MnXq1uwz8m1jEz/KVg6zEpko4C3lBSPc2CdKgbMEhWRm+VvE1qkx6LV7i0MCl
uQdyn8zBwHA8z9B42At5cHzoLQHVXxfpfBHH5AxfF8WCJ32x9lkrdZW1KLsHLctb
r9hkY2g4OoJpOZxx8gIkRt1SzTqGfWEKKHq+5NrK+C8weA8OaI7O43Ji9Ew2JG1f
81DmYJ2uIvYGK+A9gXtSvfyDtP3THlEXADEcNmh8Ga50XPMcl0f6/RCGKJHLS8pV
NofVJjZvG4dobw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 15:48:39 2025 by rpki-client