Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File: NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier: K1tCFPaui0GVdp/8syDissbRk1YqVKg4VaYkw+p7dp0=
Subject key identifier: 8E:10:EB:8E:29:85:1A:CC:43:39:8E:9E:E6:7F:F8:BA:EE:C9:90:14
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial: 019760944FED71D83B99F57FC96A98242457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number: 05A9
Signing time: Wed 11 Jun 2025 20:00:21 +0000
Manifest this update: Wed 11 Jun 2025 20:00:21 +0000
Manifest next update: Thu 12 Jun 2025 20:00:21 +0000
Files and hashes: 1: 4WEE6M8dthgW-fAXTbXKabGLlL0.roa (hash: Vz/LsTTjIy8GCO6P/Fc6vDeS0OdzaRulpb9xjUaoVO0=)
2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: e4Jz0ZuWBJrmS74MGYuuJLksnvSgDZoEiYHU/fzUzYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:94:4f:ed:71:d8:3b:99:f5:7f:c9:6a:98:24:24:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
Validity
Not Before: Jun 11 20:00:21 2025 GMT
Not After : Jun 12 20:00:21 2025 GMT
Subject: CN=8e10eb8e29851acc43398e9ee67ff8baeec99014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:10:09:a9:78:88:a8:83:65:23:2f:c5:1a:fb:
0d:36:7c:cd:7f:e1:05:9f:4c:74:aa:11:4f:be:e2:
0e:ed:5b:38:42:fe:9d:ba:f7:df:8d:44:c8:21:b7:
19:82:15:02:b8:28:83:09:fd:9b:3c:6f:a8:38:91:
dd:2b:c9:cb:ca:c4:06:b3:79:2f:53:ec:b9:d7:43:
b9:fd:c8:82:df:f7:da:89:41:0b:e7:80:55:2f:72:
ee:17:b3:b7:2e:b4:b0:e9:40:7a:06:c5:b8:d3:9c:
89:cc:1b:6e:4c:63:ae:74:2a:d6:1e:24:30:73:e0:
3e:10:08:8e:34:a0:8d:4c:04:af:07:83:f1:61:37:
f6:c9:df:4c:b9:a4:26:4e:87:30:40:c3:56:21:ca:
de:ab:43:f3:22:5e:74:47:a6:ea:36:78:3e:01:31:
75:32:62:8a:32:79:17:7a:f1:cb:a5:8a:54:8c:dc:
3d:fb:21:05:6a:bf:70:e8:b1:1b:1b:b6:58:7d:94:
5d:c3:f7:b2:a1:ee:af:fb:71:6a:0f:61:19:a4:1c:
9e:42:7f:31:e4:01:14:aa:a2:86:00:61:b3:cd:05:
15:8b:57:98:62:c5:88:94:35:30:2b:c6:ab:2a:3a:
e5:3c:f7:e2:b5:a7:e1:6b:46:7b:26:71:a0:32:ab:
bb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:10:EB:8E:29:85:1A:CC:43:39:8E:9E:E6:7F:F8:BA:EE:C9:90:14
X509v3 Authority Key Identifier:
keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3b:ac:05:66:b2:4b:c1:04:47:af:dc:c8:6e:4b:31:bd:98:
30:ba:f0:90:f6:d6:f4:92:4d:2e:81:57:a8:cf:d2:45:1a:35:
92:bf:d8:b5:ff:42:88:32:d9:2f:5f:ec:63:cf:32:c5:77:37:
67:a9:d6:14:46:68:0e:f4:28:5e:34:9a:98:1d:70:f5:46:59:
1b:2b:8b:2d:cd:76:27:d6:1d:0d:04:2f:be:ef:d0:c9:59:fc:
de:e5:3d:81:cf:34:3d:95:f0:1d:b5:c2:3e:11:7b:26:8d:96:
af:24:84:93:88:5a:89:48:f7:da:2d:79:f4:be:77:ef:fe:5a:
7b:83:8c:b5:a7:b9:c1:db:81:46:ce:78:0a:80:57:25:af:07:
26:32:41:02:69:54:ed:71:10:cc:be:da:1e:b4:17:94:9b:c8:
56:30:01:83:f4:71:44:e3:76:8b:aa:2f:27:12:d3:36:0a:e4:
0a:bb:b5:1a:c5:37:10:75:b2:2a:e4:cc:de:55:a5:56:81:26:
5b:b8:83:82:6c:4b:1a:da:7b:ae:43:35:24:f4:a3:3e:a4:53:
ba:7d:58:e5:db:8d:d2:b5:f8:0a:cd:02:22:8f:3f:e7:a5:05:
98:2c:a6:e6:2f:a5:9e:e6:bd:e0:f1:9a:59:7e:14:0b:6c:71:
05:fc:22:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 01:44:14 2025 by rpki-client