Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
File: NOg_QeXSQlTJCobjsrt6gK8DlyE.mft (raw, json)
Hash identifier: w39rXk9xCp8opYtIVZxS1QvySUAIbMEMsTsPFvCblhE=
Subject key identifier: 00:03:FB:D3:F7:81:6E:64:7D:E5:7A:06:7E:A2:1E:CB:29:A1:F7:9A
Authority key identifier: 34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
Certificate issuer: /CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Certificate serial: 019922C354DB8E6EC1F8840FEEE7416947EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
Manifest number: 1505
Signing time: Sun 07 Sep 2025 06:00:50 +0000
Manifest this update: Sun 07 Sep 2025 06:00:50 +0000
Manifest next update: Mon 08 Sep 2025 06:00:50 +0000
Files and hashes: 1: NOg_QeXSQlTJCobjsrt6gK8DlyE.crl (hash: wt2RsqKeWfO4lnluTLs01qgIBNto9ckAzewkvTlmQ7g=)
2: UO1KioDak-iT8kDHcohpIq9FtOw.roa (hash: c3Q9cGyrR1r4x1r6NclTtEj7o03+DJv3Ywm72vFkEgk=)
3: kh50C_NbBjs1xffmc65N3htJRDA.roa (hash: zegMkFf00MvL1ZefKCFbf5kmHagYnvltoauO7HXIkok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:54:db:8e:6e:c1:f8:84:0f:ee:e7:41:69:47:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Validity
Not Before: Sep 7 06:00:50 2025 GMT
Not After : Sep 8 06:00:50 2025 GMT
Subject: CN=0003fbd3f7816e647de57a067ea21ecb29a1f79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:05:55:cc:32:ca:9c:d6:80:5f:73:ae:7e:
5f:ce:7f:b5:45:74:ea:a6:6c:7c:95:44:13:45:d7:
76:34:4d:a1:98:0d:9a:46:40:07:28:ad:a3:c5:0a:
0c:89:31:06:0d:49:cb:de:ee:9c:cc:55:20:61:bd:
8e:41:4c:6d:83:9b:84:40:a1:c9:3e:7d:f8:7b:ce:
ef:f6:1e:41:70:60:98:78:f0:23:99:a3:30:3b:1d:
48:95:0b:cb:f6:e4:c3:f5:ee:5f:39:81:42:99:49:
ba:91:2c:50:59:c6:57:d6:35:78:84:8a:dc:41:7d:
df:aa:2b:34:e1:99:5f:80:dd:d0:94:36:81:e0:c1:
e7:af:87:5f:34:c1:f0:b9:41:17:aa:29:e2:43:fb:
c6:24:ec:c9:1e:94:72:59:12:b3:ed:b8:c6:08:59:
84:e1:8c:68:a0:dc:23:3f:d3:25:8a:17:22:96:9c:
4f:6b:82:27:3f:2e:9b:d0:69:df:cd:3d:d0:1a:37:
36:de:33:98:0a:dd:b6:3e:5a:84:d7:27:03:bc:0b:
53:ba:e2:75:26:4e:eb:dd:2a:ed:f2:82:b8:6b:01:
b2:bc:29:1a:f4:ef:48:f6:12:47:f0:42:0c:7f:69:
f7:e3:bc:64:61:bb:da:a1:35:49:3c:47:5c:e0:04:
83:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:03:FB:D3:F7:81:6E:64:7D:E5:7A:06:7E:A2:1E:CB:29:A1:F7:9A
X509v3 Authority Key Identifier:
keyid:34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:03:fe:d1:22:0f:ae:22:22:79:71:cf:bb:8f:4b:83:dc:c8:
ed:0f:06:55:d6:38:d3:f3:51:49:90:50:d1:07:41:3d:45:78:
7a:e6:85:68:75:2d:46:8f:d2:a9:c8:f3:67:2a:7a:73:86:b0:
35:c2:1a:91:bc:80:69:6c:25:78:f3:c9:e8:7a:91:1c:75:31:
f5:e4:2d:d4:d7:38:f4:c4:f5:19:a5:c9:51:9b:7e:f2:dd:33:
6b:f5:ed:04:45:2a:c7:30:fc:4e:3f:d5:93:ab:66:1a:e8:f3:
44:3a:43:8a:3c:2c:41:40:24:12:fa:46:4b:ed:a2:55:16:a8:
99:22:f0:bd:dd:d5:fb:aa:26:51:5f:ab:08:1c:84:a4:e9:ef:
78:39:73:ec:ae:67:4f:f1:b8:9e:8e:e0:13:0b:3b:e6:5e:ac:
f9:db:43:31:79:47:cd:58:e3:82:2b:44:d6:24:c0:f8:e9:2a:
19:b9:26:da:e3:a6:18:ab:e1:72:a2:42:cd:f9:25:a5:18:5f:
3f:50:b9:17:1e:f2:89:6b:65:9e:c3:11:5b:2f:7a:33:e9:a7:
44:3e:37:65:66:ea:b5:22:64:5b:3d:91:fc:81:b6:56:77:fd:
6a:e1:39:ac:57:a8:e3:7f:5d:83:ae:f2:ad:86:33:dd:21:19:
3f:f3:58:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:26 2025 by rpki-client