Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
File: NLQZ-koKFgUYgxjN9KIESZKFO5U.mft (raw, json)
Hash identifier: db1w0ZTT6VUd7vfjDflSXEYrzsEnnMsyb+5+Vjf5SuU=
Subject key identifier: 2C:92:3C:89:2B:DC:2D:02:B5:F4:6B:68:06:33:A9:40:92:8C:E4:90
Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
Certificate issuer: /CN=34b419fa4a0a1605188318cdf4a2044992853b95
Certificate serial: 01974DB2D00C6EA17FB0231237F99F9F71E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
Manifest number: 0E42
Signing time: Sun 08 Jun 2025 04:00:53 +0000
Manifest this update: Sun 08 Jun 2025 04:00:53 +0000
Manifest next update: Mon 09 Jun 2025 04:00:53 +0000
Files and hashes: 1: CNQCSVKEMGXZWYhuFwFlfeJh3Us.roa (hash: HUYQM19IzL3twBwaH+2KXeSqoub/kejTXefcV/fEL14=)
2: CNv0NdNZKIhaMEB-_zcwx5XHpgI.roa (hash: jSc4O0ONF5PwUEe8AoTXbFWewQ1vQ1toZjhU7yhjZAU=)
3: NLQZ-koKFgUYgxjN9KIESZKFO5U.crl (hash: 8YLyIi5rO2kzOgK0PEv/2DgnCdWdFwfdqmDRZw+FT0M=)
4: wig6KC4gSVw0HyIKRBc2xTnuVN4.roa (hash: EHt3EBj8Qls7cfEcrr19uaUc9VJjWJHcYHVlVYE7DsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:d0:0c:6e:a1:7f:b0:23:12:37:f9:9f:9f:71:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95
Validity
Not Before: Jun 8 04:00:53 2025 GMT
Not After : Jun 9 04:00:53 2025 GMT
Subject: CN=2c923c892bdc2d02b5f46b680633a940928ce490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:85:a2:24:6a:a2:84:66:f5:f9:2c:34:a3:
9e:44:37:5c:e9:13:86:8a:f1:72:6b:48:10:35:38:
0a:22:c8:2f:67:98:46:de:fe:f9:26:9f:81:c8:42:
36:6c:5b:2a:b1:ed:07:1b:8f:ef:e6:e8:39:65:f3:
d6:46:2e:fb:11:c7:8d:05:0a:1a:5c:d5:3a:79:2a:
b0:d0:e6:ba:96:d5:9f:a1:28:05:74:19:9b:3f:6e:
4a:31:1d:8e:e3:91:c6:fc:04:8a:43:0e:23:91:8b:
62:38:fd:68:ad:8b:ca:82:fe:1c:24:c6:91:86:ed:
51:ad:b1:83:ac:ed:7b:1c:e6:e4:f1:e5:b9:7d:c8:
f1:c7:fa:50:ea:8a:fb:6c:ff:90:2a:39:af:24:e8:
c0:98:4b:9c:c1:24:2c:56:46:f7:dc:08:b3:e7:00:
78:35:3b:6b:b6:de:2f:68:02:44:45:38:8b:4c:38:
dd:72:57:70:f4:16:37:e6:4a:e0:ee:eb:7a:c3:b9:
c7:b8:ba:cd:84:38:48:5f:89:30:94:b8:7f:4e:3f:
77:44:5e:a5:2c:2c:4d:9b:06:e2:ac:9d:08:d7:17:
d6:9d:a6:1b:96:84:a7:64:18:70:78:51:d5:d1:a9:
82:ca:d0:1a:b6:4e:ee:bb:90:0a:4a:df:aa:c6:e7:
47:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:92:3C:89:2B:DC:2D:02:B5:F4:6B:68:06:33:A9:40:92:8C:E4:90
X509v3 Authority Key Identifier:
keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:eb:98:22:e1:98:9d:7c:d3:43:42:df:4a:52:10:8e:d1:93:
58:b2:d5:83:03:79:fa:6f:54:98:76:c9:be:84:7f:3c:9b:87:
a9:a1:1a:ee:53:29:b0:7e:31:6d:c9:1e:2f:e9:cd:b5:3f:ba:
ea:b8:7d:bf:dc:a0:5f:eb:a0:f7:f8:c1:7f:6b:c7:67:37:b9:
18:ca:bf:78:da:53:15:28:59:1d:8a:7e:53:da:c2:50:da:dc:
8f:b9:71:c2:f9:97:68:e4:24:56:94:5c:e9:fa:c1:f4:7d:74:
c4:f5:14:97:a3:72:93:9d:28:9e:df:28:f7:55:e3:ca:19:a1:
96:d3:86:a9:18:7e:a7:69:f0:66:75:79:4c:26:0f:e2:ec:09:
98:8b:b9:36:f6:46:76:20:b9:ec:7f:fc:13:e6:49:6b:33:35:
d4:7e:31:3c:fd:09:6b:43:be:e7:c1:61:91:e7:8b:61:23:67:
ad:b7:b1:14:88:7d:33:0a:b7:01:37:7a:18:6c:e4:ed:92:69:
43:d6:ca:7e:7d:02:c5:b7:7f:96:71:ed:a0:5a:44:38:ad:39:
87:01:a5:ff:f5:46:f1:43:f3:f0:b8:3b:e1:7b:27:25:2a:b0:
12:11:a5:5c:57:73:04:70:17:5a:b4:57:4f:8d:6d:1f:4b:10:
2c:71:0e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:07:32 2025 by rpki-client