Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
File: NLqcIjJB64DivHGFO7fS5YKGvdM.mft (raw, json)
Hash identifier: z1cjptvjDPx8sxbTrlNcCKE1skvdoF7Mz0grKatOlIg=
Subject key identifier: 33:D7:83:3C:88:FE:BD:D8:66:4C:3B:85:23:6D:F6:D4:B6:A4:EE:0E
Authority key identifier: 34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3
Certificate issuer: /CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3
Certificate serial: 019748FA27A853B96A513F3D8140C5A91B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
Manifest number: 1584
Signing time: Sat 07 Jun 2025 06:00:43 +0000
Manifest this update: Sat 07 Jun 2025 06:00:43 +0000
Manifest next update: Sun 08 Jun 2025 06:00:43 +0000
Files and hashes: 1: NLqcIjJB64DivHGFO7fS5YKGvdM.crl (hash: uBeKBFVMYD+tknKOayba6jda1Z0dzBMZzdg9x133KUc=)
2: fLquejxATIKeZ_Omgco482qTWPw.roa (hash: kp7xeLg7/f6lZ1aJQqZqJ9ZG54b9dQgMXma+xU2orkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:27:a8:53:b9:6a:51:3f:3d:81:40:c5:a9:1b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3
Validity
Not Before: Jun 7 06:00:43 2025 GMT
Not After : Jun 8 06:00:43 2025 GMT
Subject: CN=33d7833c88febdd8664c3b85236df6d4b6a4ee0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:e5:af:38:41:ea:53:2c:1e:9b:ce:f4:5b:
97:d4:84:0d:d6:fe:6f:4e:15:de:7e:31:22:a1:69:
68:83:91:28:30:a0:34:6d:ac:30:2b:86:3a:97:6e:
49:93:c9:ca:35:cf:3a:d4:4d:bb:b9:96:55:08:78:
6a:12:ae:c1:a5:af:56:ea:fd:3e:61:cf:2f:9c:0d:
26:af:3a:98:06:88:fe:6b:eb:62:35:89:33:77:04:
5f:1a:cf:d8:96:15:5b:13:e1:14:fc:c9:5f:10:9b:
77:8b:37:31:72:52:27:5b:5a:e8:07:08:7a:0f:fc:
b5:8c:d9:c5:b4:4c:f6:38:a3:a2:e3:e3:6f:74:30:
fe:5e:66:f5:dd:27:56:d3:de:ba:e0:2b:07:30:25:
6f:d2:4b:48:1b:d3:be:21:47:84:63:09:cd:9c:6c:
c0:9f:bd:95:c3:dc:f7:9e:93:2f:dc:b3:d3:6e:dd:
3f:d8:b2:7f:00:00:c5:db:59:d4:ef:ad:c6:9e:9c:
3f:18:5c:0b:c0:09:c7:84:e4:52:55:b7:64:f8:5d:
92:ff:5f:56:a6:66:e6:06:0c:34:b7:25:28:07:bc:
fe:0f:bb:7d:60:d6:f9:77:b2:f3:1f:3d:41:e5:eb:
40:50:e9:a5:87:76:53:6c:17:33:7a:3e:72:5e:49:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D7:83:3C:88:FE:BD:D8:66:4C:3B:85:23:6D:F6:D4:B6:A4:EE:0E
X509v3 Authority Key Identifier:
keyid:34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:2c:07:fb:f8:94:88:37:91:27:3c:cd:b4:14:a6:d5:81:cf:
cd:5d:b9:a2:c5:7a:3c:bf:58:c4:cd:e0:b7:4d:dc:7c:f1:3a:
19:08:22:1e:0f:74:07:d0:7e:89:26:f5:99:3a:10:31:df:b1:
36:78:14:7e:eb:77:cf:b7:e5:4d:54:28:98:cd:f0:a6:cd:eb:
ba:3c:31:9b:52:c6:82:e8:4a:df:d7:e1:12:6c:21:7f:2e:4f:
5a:66:80:08:63:c7:82:e5:7a:6e:c5:74:03:bb:0c:24:35:8a:
d5:c1:6c:43:7a:15:ca:73:ef:0e:94:c6:ee:4d:78:91:81:40:
20:9b:b8:69:4f:86:74:bb:a2:03:93:bd:bc:7e:8d:5d:22:e9:
0c:44:a8:05:1b:88:c7:10:8e:ef:46:20:09:c7:21:4c:e5:de:
6d:20:87:d6:1d:3f:6d:5b:74:ea:1d:be:c4:5a:b8:21:58:f2:
3c:16:96:08:c0:a6:2b:36:e5:f1:c1:28:71:8c:72:1a:93:5f:
5d:1a:48:c6:8d:d1:79:df:54:07:89:9b:2d:bf:65:4a:b1:23:
36:83:ba:6d:25:cf:b6:2f:93:ea:1e:40:f2:3c:42:cd:96:a9:
80:89:ed:fd:ef:e4:81:65:ae:91:e1:00:a9:55:3d:4e:cf:73:
c6:91:ba:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+ieoU7lqUT89gUDFqRuPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YmE5YzIyMzI0MWViODBlMmJjNzE4NTNiYjdkMmU1ODI4
NmJkZDMwHhcNMjUwNjA3MDYwMDQzWhcNMjUwNjA4MDYwMDQzWjAzMTEwLwYDVQQD
EygzM2Q3ODMzYzg4ZmViZGQ4NjY0YzNiODUyMzZkZjZkNGI2YTRlZTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8flrzhB6lMsHpvO9FuX1IQN1v5v
ThXefjEioWlog5EoMKA0bawwK4Y6l25Jk8nKNc861E27uZZVCHhqEq7Bpa9W6v0+
Yc8vnA0mrzqYBoj+a+tiNYkzdwRfGs/YlhVbE+EU/MlfEJt3izcxclInW1roBwh6
D/y1jNnFtEz2OKOi4+NvdDD+Xmb13SdW09664CsHMCVv0ktIG9O+IUeEYwnNnGzA
n72Vw9z3npMv3LPTbt0/2LJ/AADF21nU763Gnpw/GFwLwAnHhORSVbdk+F2S/19W
pmbmBgw0tyUoB7z+D7t9YNb5d7LzHz1B5etAUOmlh3ZTbBczej5yXkmLewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPXgzyI/r3YZkw7hSNt9tS2pO4OMB8GA1UdIwQY
MBaAFDS6nCIyQeuA4rxxhTu30uWChr3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkxxY0lqSkI2NERpdkhHRk83ZlM1WUtHdmRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jMmVjNjEtMzdhYi00MDViLWE2YzIt
MTNlZTRjOGQzMDgyLzEvTkxxY0lqSkI2NERpdkhHRk83ZlM1WUtHdmRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9jMmVjNjEtMzdhYi00MDViLWE2YzItMTNlZTRjOGQzMDgy
LzEvTkxxY0lqSkI2NERpdkhHRk83ZlM1WUtHdmRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoiwH+/iU
iDeRJzzNtBSm1YHPzV25osV6PL9YxM3gt03cfPE6GQgiHg90B9B+iSb1mToQMd+x
NngUfut3z7flTVQomM3wps3rujwxm1LGguhK39fhEmwhfy5PWmaACGPHguV6bsV0
A7sMJDWK1cFsQ3oVynPvDpTG7k14kYFAIJu4aU+GdLuiA5O9vH6NXSLpDESoBRuI
xxCO70YgCcchTOXebSCH1h0/bVt06h2+xFq4IVjyPBaWCMCmKzbl8cEocYxyGpNf
XRpIxo3Red9UB4mbLb9lSrEjNoO6bSXPti+T6h5A8jxCzZapgInt/e/kgWWukeEA
qVU9Ts9zxpG6RA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 08:10:15 2025 by rpki-client