Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File: NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier: j2UyZCeR/KeOMTV3JMlcXJ4a1GlHk0liH0A/v174+jM=
Subject key identifier: 54:D0:F9:6C:34:C5:4E:F8:CC:EF:31:0C:59:65:17:9A:3A:17:42:C9
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial: 019754FE5159346DF3FC20703DD2B459FBD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number: 05A3
Signing time: Mon 09 Jun 2025 14:00:42 +0000
Manifest this update: Mon 09 Jun 2025 14:00:42 +0000
Manifest next update: Tue 10 Jun 2025 14:00:42 +0000
Files and hashes: 1: 4WEE6M8dthgW-fAXTbXKabGLlL0.roa (hash: Vz/LsTTjIy8GCO6P/Fc6vDeS0OdzaRulpb9xjUaoVO0=)
2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: Tks98tqJWqGp468dNEoR29rp0djlIFDlM4cIxHVx68s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:fe:51:59:34:6d:f3:fc:20:70:3d:d2:b4:59:fb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
Validity
Not Before: Jun 9 14:00:42 2025 GMT
Not After : Jun 10 14:00:42 2025 GMT
Subject: CN=54d0f96c34c54ef8ccef310c5965179a3a1742c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:4a:c7:a5:4c:02:d7:37:d2:4e:9e:50:be:
d2:89:e9:7f:dd:42:8b:17:ea:fe:f8:41:5a:c3:ca:
97:be:9b:c7:d2:b4:81:8d:08:c6:0c:fa:17:81:4c:
58:e7:86:ec:49:8d:c2:c7:46:1c:8c:15:c9:d5:42:
50:cb:be:39:ee:65:c9:89:db:78:bd:ad:dc:f6:b3:
b4:49:4c:a3:e4:ef:03:4f:45:7e:34:c5:4d:ad:27:
b7:ca:c6:ce:41:aa:58:ae:cd:34:b3:eb:7b:57:9e:
01:31:19:df:6c:b1:ef:10:63:3c:42:38:d8:8f:48:
15:61:11:06:31:16:38:d1:6c:f0:cd:70:58:56:6a:
f5:12:bd:07:09:8c:94:b8:16:bc:f6:84:7b:4a:ad:
a1:20:e7:71:e9:bb:0c:75:40:aa:8e:8c:32:ac:37:
8a:02:6f:51:72:59:35:f1:96:dc:5e:f0:76:16:ed:
11:82:72:af:1e:7d:d4:b7:83:05:7f:b7:47:a2:6b:
0d:69:65:92:6b:8a:d7:e6:c1:ea:2c:cc:5b:ba:51:
0a:d9:97:a0:e4:26:8b:9e:43:13:d3:aa:34:c4:2c:
f9:54:6d:e6:04:7f:19:f8:f5:d1:90:81:e3:aa:b0:
97:14:b3:74:8e:6f:7b:39:2f:15:52:25:0b:99:6c:
39:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D0:F9:6C:34:C5:4E:F8:CC:EF:31:0C:59:65:17:9A:3A:17:42:C9
X509v3 Authority Key Identifier:
keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d6:93:54:24:24:f5:dc:e5:4b:17:b5:fe:25:3b:8a:f8:be:
be:ac:d4:71:f7:56:1a:11:38:ca:54:f4:2d:66:e9:f0:71:97:
cc:bd:64:04:b5:08:6d:43:3c:f7:c2:0d:f8:5a:c2:2b:4f:1a:
94:8a:f4:10:2c:69:bc:1b:61:54:59:1b:23:d5:9b:6b:55:f8:
6a:20:63:65:08:b4:55:7b:19:74:60:27:98:b4:37:0b:7b:d8:
f6:40:48:04:a3:ff:62:a5:4a:a2:03:55:fd:31:bc:85:20:01:
f7:20:16:3c:c2:09:60:37:34:c6:9d:32:41:91:e1:03:94:76:
f3:2b:fb:c3:e8:0a:a7:b2:d7:c6:0d:b1:24:b8:c6:06:d4:c8:
c7:fe:e8:7a:35:99:bc:1b:ba:d8:96:ce:1b:57:3f:04:09:b5:
5c:0a:3f:4a:59:8a:75:8a:02:a1:79:e1:e3:19:ca:cc:1e:f1:
99:ec:d9:bf:a3:4e:09:e6:e6:af:e0:21:75:b8:00:c6:47:96:
38:5d:f4:58:a8:4d:1e:f2:e8:d0:73:60:6d:38:a7:bf:68:89:
ef:df:43:c6:00:67:d9:a9:39:b7:60:38:22:0f:5d:91:4d:9a:
b2:12:6f:e8:82:63:cb:af:38:47:67:52:35:e5:49:82:80:5b:
2e:26:03:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdU/lFZNG3z/CBwPdK0WfvVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ODA2NTFhYmEwNjZiNDA4NGE3ZWQyMGQ3ZjUyMDFiMjI5
NmMxOTcwHhcNMjUwNjA5MTQwMDQyWhcNMjUwNjEwMTQwMDQyWjAzMTEwLwYDVQQD
Eyg1NGQwZjk2YzM0YzU0ZWY4Y2NlZjMxMGM1OTY1MTc5YTNhMTc0MmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQdKx6VMAtc30k6eUL7Siel/3UKL
F+r++EFaw8qXvpvH0rSBjQjGDPoXgUxY54bsSY3Cx0YcjBXJ1UJQy7457mXJidt4
va3c9rO0SUyj5O8DT0V+NMVNrSe3ysbOQapYrs00s+t7V54BMRnfbLHvEGM8QjjY
j0gVYREGMRY40WzwzXBYVmr1Er0HCYyUuBa89oR7Sq2hIOdx6bsMdUCqjowyrDeK
Am9Rclk18ZbcXvB2Fu0RgnKvHn3Ut4MFf7dHomsNaWWSa4rX5sHqLMxbulEK2Zeg
5CaLnkMT06o0xCz5VG3mBH8Z+PXRkIHjqrCXFLN0jm97OS8VUiULmWw5BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTQ+Ww0xU74zO8xDFllF5o6F0LJMB8GA1UdIwQY
MBaAFDaAZRq6BmtAhKftINf1IBsilsGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm9CbEdyb0dhMENFcC0wZzFfVWdHeUtXd1pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kMTBiOTQtNDEwNS00NWUyLWE3MDct
NTIyNGNmMTNmNTg2LzEvTm9CbEdyb0dhMENFcC0wZzFfVWdHeUtXd1pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9kMTBiOTQtNDEwNS00NWUyLWE3MDctNTIyNGNmMTNmNTg2
LzEvTm9CbEdyb0dhMENFcC0wZzFfVWdHeUtXd1pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddaTVCQk
9dzlSxe1/iU7ivi+vqzUcfdWGhE4ylT0LWbp8HGXzL1kBLUIbUM898IN+FrCK08a
lIr0ECxpvBthVFkbI9Wba1X4aiBjZQi0VXsZdGAnmLQ3C3vY9kBIBKP/YqVKogNV
/TG8hSAB9yAWPMIJYDc0xp0yQZHhA5R28yv7w+gKp7LXxg2xJLjGBtTIx/7oejWZ
vBu62JbOG1c/BAm1XAo/SlmKdYoCoXnh4xnKzB7xmezZv6NOCebmr+AhdbgAxkeW
OF30WKhNHvLo0HNgbTinv2iJ799DxgBn2ak5t2A4Ig9dkU2ashJv6IJjy684R2dS
NeVJgoBbLiYDRA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 23:00:01 2025 by rpki-client