
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File: noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier: cHK4nx1mhdOPTA2uOvMJWKu6ZXNQ2cSbxS6UnrgiWSY=
Subject key identifier: DA:64:B7:74:2A:47:24:43:5B:BE:53:0E:85:5D:40:B2:CA:B0:20:77
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer: /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial: 019750B37F6D1E23103902D533CDE3719635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number: 0C2A
Signing time: Sun 08 Jun 2025 18:00:30 +0000
Manifest this update: Sun 08 Jun 2025 18:00:30 +0000
Manifest next update: Mon 09 Jun 2025 18:00:30 +0000
Files and hashes: 1: FEZEft80jliOlkGyEwySyBAkmWo.roa (hash: WK/TRHiffo4AU+bk5eHbjtuUsofDcjiz4uFJQmb9AMI=)
2: ish4NG6w0suFxadmLrSJLkxjTIQ.roa (hash: SxPMOYIhwaAgOQuSwCZyhiBxyzhniVTSwZchO8Jy+js=)
3: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: qSsb3YQQIby9tgsdg8HrQN+V7KyIRoNFNuLUqWpk+po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:7f:6d:1e:23:10:39:02:d5:33:cd:e3:71:96:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Validity
Not Before: Jun 8 18:00:30 2025 GMT
Not After : Jun 9 18:00:30 2025 GMT
Subject: CN=da64b7742a4724435bbe530e855d40b2cab02077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:97:e7:21:8e:04:10:ed:ed:2d:24:83:81:38:
b7:d0:c8:66:01:47:42:ef:f3:f8:38:e6:e5:b2:01:
9c:59:67:ef:3f:cf:80:ae:b4:b3:18:08:a3:67:9c:
2f:91:0b:98:72:fc:42:23:0a:b5:ed:98:ea:71:22:
41:54:2a:39:37:43:92:6f:15:ed:05:5e:30:a4:32:
4a:40:35:e9:77:1a:59:57:96:2f:6a:c0:40:10:13:
66:0a:d7:56:05:3f:ef:82:00:2d:fb:01:13:39:9d:
2e:52:85:f5:16:98:fa:56:58:35:b1:ab:4a:92:79:
fe:76:26:cb:c6:06:d1:6d:7b:fd:ae:22:c5:1b:fb:
9f:f5:c0:e0:72:89:e7:32:97:c5:a7:cb:73:5f:d9:
a8:e9:36:ec:6d:b0:ab:6e:fb:25:0f:9b:37:e3:db:
b8:7e:ed:0b:a1:f8:29:94:30:09:68:d9:5a:f9:a6:
90:80:be:6e:21:ce:9a:69:c4:28:84:af:d0:54:cc:
4f:9b:95:cb:d4:e6:99:0d:a0:74:b9:3c:ef:b6:0b:
20:39:77:db:55:61:45:1d:07:4e:76:b0:9a:45:89:
1a:ef:a3:c7:fa:cd:9e:2a:cc:3b:d1:5d:99:1a:8d:
8f:d3:7a:9c:40:7d:ea:52:4a:ce:d6:03:34:1e:b2:
05:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:64:B7:74:2A:47:24:43:5B:BE:53:0E:85:5D:40:B2:CA:B0:20:77
X509v3 Authority Key Identifier:
keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:c8:a2:88:3a:c3:91:33:cf:0d:4f:2e:0a:9b:74:3c:8c:a0:
9e:36:f1:c2:dc:b4:dc:4a:07:68:ea:3c:da:e2:31:e4:2d:f5:
75:d9:8e:49:1b:e6:fc:e4:4b:ba:93:b0:17:99:ab:3e:ec:63:
21:9a:d4:e8:b2:7b:69:d1:e6:30:96:5b:76:fb:66:e4:42:19:
d6:23:f7:88:75:f4:3b:65:c7:c9:16:d6:2d:ec:90:7e:c4:e0:
15:a9:17:ce:1b:f0:c9:c5:21:d7:98:96:44:87:74:d0:06:89:
1e:d6:a7:1f:2e:57:5e:59:4a:6c:06:be:54:78:dd:d9:ce:33:
64:b1:8b:19:e7:53:7b:e9:c4:40:49:5a:79:36:e5:02:25:9e:
a4:b5:cc:02:f4:32:77:db:2e:27:cc:ad:1a:bb:15:bf:b6:92:
62:8f:86:15:c8:5d:26:f4:b4:01:a3:b6:3d:a3:3a:68:93:19:
9c:8a:ab:7c:7d:d0:16:2e:90:19:af:15:b3:48:60:1f:52:ac:
d8:df:ee:49:b2:8d:ce:4e:97:50:37:b3:7e:e1:71:a6:45:b0:
64:6e:0f:05:0c:33:26:bf:e4:fb:5e:64:89:45:22:6f:c4:ce:
04:1a:0f:25:b0:dd:e7:cb:21:f9:44:df:78:d3:db:be:30:f8:
a0:c9:9d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:04:23 2025 by rpki-client