Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File: NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier: xb4RWr4EWQUjZwspQbdJ6WrUL3lQq+5ajelw+HDAfRI=
Subject key identifier: CE:62:FF:9C:06:0E:A3:73:DD:53:73:BF:D8:AF:63:EB:12:85:A7:56
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial: 01975AC96A0F25F7A06947975248D7E5B7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number: 05A6
Signing time: Tue 10 Jun 2025 17:00:38 +0000
Manifest this update: Tue 10 Jun 2025 17:00:38 +0000
Manifest next update: Wed 11 Jun 2025 17:00:38 +0000
Files and hashes: 1: 4WEE6M8dthgW-fAXTbXKabGLlL0.roa (hash: Vz/LsTTjIy8GCO6P/Fc6vDeS0OdzaRulpb9xjUaoVO0=)
2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: WxBMB3bZTyEdRUWwhTQ37MNCqLf7OCnQ6RkEhbQ+isU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:c9:6a:0f:25:f7:a0:69:47:97:52:48:d7:e5:b7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
Validity
Not Before: Jun 10 17:00:38 2025 GMT
Not After : Jun 11 17:00:38 2025 GMT
Subject: CN=ce62ff9c060ea373dd5373bfd8af63eb1285a756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b0:65:5d:8a:d9:71:c2:49:d9:8f:7e:01:b9:
fa:cf:4d:ec:78:00:23:78:6d:84:aa:03:2f:8a:20:
a6:01:65:78:0c:fa:f5:ec:21:c3:6b:96:5b:cb:37:
79:2d:1a:dc:e9:c5:c2:53:ab:e0:eb:82:7a:71:1a:
8d:7b:5e:98:26:85:58:f5:8c:7f:71:09:fe:e7:0b:
c2:8c:a3:80:39:b1:94:72:8b:79:7a:a6:fb:8a:ae:
d0:b0:7e:4d:f7:c4:0e:b3:d3:95:01:cd:90:1c:83:
b3:b0:17:3d:e3:9e:9a:fa:cd:0a:d6:01:70:d0:35:
e0:7e:99:aa:a7:1c:d6:e6:20:c1:39:be:4d:25:3a:
e6:00:41:5a:35:48:d0:8a:2f:b9:57:9f:63:9e:c2:
96:d3:22:e2:1e:2e:e9:1d:2e:00:d4:ba:b6:f0:dc:
d1:01:ef:9f:09:b4:c3:97:01:d5:4f:a2:64:12:42:
9e:90:ca:2d:c0:be:91:1d:c9:8b:13:da:b3:bc:ac:
fd:e3:66:bb:8f:1b:c6:e7:54:28:98:bc:79:9c:73:
db:8a:a7:aa:ce:7e:94:ea:48:e3:d1:2e:67:33:49:
60:8b:29:9c:84:ab:88:ea:6c:b7:ef:7d:9d:a3:65:
54:28:b9:80:b1:27:b3:93:d3:5d:6a:8b:7e:af:c3:
a0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:62:FF:9C:06:0E:A3:73:DD:53:73:BF:D8:AF:63:EB:12:85:A7:56
X509v3 Authority Key Identifier:
keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:40:12:b2:04:30:4f:0c:b6:de:00:ce:36:b8:a8:a9:2f:ff:
26:8e:76:9f:a7:f5:41:33:a5:9c:09:70:88:d9:7b:a2:05:b4:
45:1d:31:36:62:1b:bf:ff:e2:d4:df:a9:39:b0:4a:04:9e:66:
74:00:85:2e:46:dd:05:85:97:3a:b5:f2:72:be:c2:56:12:7f:
58:2c:fc:13:e0:60:72:08:c7:e2:80:f0:09:fb:07:b1:71:eb:
9d:c7:e6:52:23:5c:0b:b1:83:7d:92:72:c1:5c:d1:bb:99:41:
f0:b7:1a:8e:f2:64:d2:60:88:68:0d:7e:cb:cd:50:9b:88:ae:
92:b7:ff:b1:9d:f7:a7:ae:ba:94:d0:a4:32:76:23:68:3b:2c:
ed:2d:9e:91:c3:da:ca:a4:64:4e:8a:bf:94:5c:0e:0a:1f:32:
42:2c:ce:83:ce:6d:e4:eb:2d:54:96:61:32:76:ea:9d:ff:28:
9e:09:09:c2:ce:68:4a:7f:1a:b1:a8:39:8c:25:b1:fe:59:a4:
85:f9:fb:56:39:21:70:42:fa:e1:8d:ea:a8:92:6c:26:61:9e:
b4:b3:b6:7e:60:70:16:fd:21:54:cd:d9:05:0f:6d:b6:a3:d7:
69:9a:5d:8b:bd:9c:3d:f3:3f:a9:ad:f2:23:bc:92:cc:f9:4c:
bf:5d:e4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:48:09 2025 by rpki-client