Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File: NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier: cQIr3rmRycnd55LTbpJ3MwYUcro+2V7lCB6UleMUH6g=
Subject key identifier: E3:5F:1B:E8:A8:77:8C:0F:4F:2D:27:D5:8B:AC:3C:50:6C:B0:C1:D9
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial: 019764710C7436BFCE8AC055E748C597B52A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number: 05AB
Signing time: Thu 12 Jun 2025 14:00:19 +0000
Manifest this update: Thu 12 Jun 2025 14:00:19 +0000
Manifest next update: Fri 13 Jun 2025 14:00:19 +0000
Files and hashes: 1: 4WEE6M8dthgW-fAXTbXKabGLlL0.roa (hash: Vz/LsTTjIy8GCO6P/Fc6vDeS0OdzaRulpb9xjUaoVO0=)
2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: ZVlA4BrYmKQjQqXQRFnrln3AAvGNEEjkiOKBy66C87E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:71:0c:74:36:bf:ce:8a:c0:55:e7:48:c5:97:b5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
Validity
Not Before: Jun 12 14:00:19 2025 GMT
Not After : Jun 13 14:00:19 2025 GMT
Subject: CN=e35f1be8a8778c0f4f2d27d58bac3c506cb0c1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:b6:f6:e2:b0:ce:6f:5a:b7:68:e5:3f:62:
8c:fd:de:b7:11:a5:11:4b:08:88:c0:f8:08:4d:69:
28:01:41:c9:64:29:c7:98:76:87:2c:fc:d4:e7:79:
81:78:9b:7e:ea:36:1e:a4:bb:2b:f7:bf:fb:64:72:
d1:07:c4:d7:96:13:f7:fd:51:8b:da:75:33:fa:6b:
71:14:ce:65:ee:82:29:89:4c:a9:5b:5f:fc:fa:fa:
18:fd:7c:4b:5e:17:fa:59:cc:aa:d1:c1:90:53:fb:
b7:92:6b:e8:63:46:79:41:29:25:00:f4:19:55:f9:
85:20:a5:85:45:4e:64:20:78:fe:69:62:40:0d:69:
96:c7:19:7e:71:3c:47:91:1c:68:9b:62:34:33:99:
4a:fa:7e:5b:9f:a2:99:95:57:8f:96:b1:b3:d8:d7:
c4:82:6c:6d:0f:b0:49:08:42:6c:33:81:1a:09:18:
90:5c:90:f1:72:8b:2f:5b:27:48:f5:1f:f0:68:1d:
1d:d6:1b:33:d8:2b:9a:92:74:36:94:59:6e:d4:4f:
96:5d:42:c8:b6:83:1a:bb:56:a0:ad:8f:b5:73:88:
e5:2f:b7:40:61:ae:5d:5a:c3:b4:8c:2f:4d:4d:ca:
35:0f:53:53:9e:c6:3b:c7:49:52:06:c5:90:3f:2c:
f0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5F:1B:E8:A8:77:8C:0F:4F:2D:27:D5:8B:AC:3C:50:6C:B0:C1:D9
X509v3 Authority Key Identifier:
keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:76:5b:71:59:7d:f3:29:cb:be:2f:b1:07:6f:87:85:93:77:
46:eb:30:79:32:00:8f:bd:69:88:4b:b2:ee:9b:6c:9b:0c:43:
51:81:30:71:22:1b:a9:38:ff:55:67:f8:98:df:67:a2:be:da:
2f:4b:4d:e8:94:2e:66:71:49:d4:88:3f:03:0b:f9:35:8b:35:
04:b9:4b:d3:f6:2a:35:58:4d:0e:e0:46:bf:56:e3:39:47:af:
d2:5a:a3:da:36:c1:12:5b:46:f4:f1:11:be:2e:47:e6:f0:f0:
9e:69:0e:c7:a7:87:19:6e:a8:f4:88:1b:e1:9d:95:a0:fb:3a:
c8:e6:b7:65:d4:40:ac:76:13:d2:a9:d4:20:e6:bc:22:96:1b:
3c:e2:78:67:81:75:85:c0:84:6c:f9:d8:41:a3:dd:7f:fa:40:
12:89:39:23:7f:35:17:95:ce:72:ef:a4:5b:4b:c3:06:bc:c8:
28:68:f0:d1:fb:b9:06:fa:c6:1e:c0:0d:00:ba:89:7e:d5:1c:
01:27:24:ce:64:28:fd:78:0c:9e:28:f3:9e:d8:09:9b:1b:44:
91:37:4c:94:20:d7:88:ea:5c:bb:2b:ff:76:2a:43:ab:f7:65:
c7:a3:9d:4d:3a:9f:6b:d0:73:8c:c3:7b:e9:a2:82:26:89:de:
e7:16:46:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 23:18:57 2025 by rpki-client