Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
File: nnagejNft6He1jqsxRM4rchHJnA.mft (raw, json)
Hash identifier: L9T3/MWw050POT3QR7Q5QXI6G18wvPq8tEFL+w/y17s=
Subject key identifier: E4:43:5A:15:C9:C0:0A:6B:F5:CB:2A:57:EA:AE:02:CF:0C:69:F3:30
Authority key identifier: 9E:76:A0:7A:33:5F:B7:A1:DE:D6:3A:AC:C5:13:38:AD:C8:47:26:70
Certificate issuer: /CN=9e76a07a335fb7a1ded63aacc51338adc8472670
Certificate serial: 0197C492F353EED88B78152C1EEAB04D1163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnagejNft6He1jqsxRM4rchHJnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
Manifest number: 0C8D
Signing time: Tue 01 Jul 2025 06:00:54 +0000
Manifest this update: Tue 01 Jul 2025 06:00:54 +0000
Manifest next update: Wed 02 Jul 2025 06:00:54 +0000
Files and hashes: 1: nnagejNft6He1jqsxRM4rchHJnA.crl (hash: Ivro+6QZcCKHDXpHz//XZSQzhmpGKVzezuNnlzdWGCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnagejNft6He1jqsxRM4rchHJnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:92:f3:53:ee:d8:8b:78:15:2c:1e:ea:b0:4d:11:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e76a07a335fb7a1ded63aacc51338adc8472670
Validity
Not Before: Jul 1 06:00:54 2025 GMT
Not After : Jul 2 06:00:54 2025 GMT
Subject: CN=e4435a15c9c00a6bf5cb2a57eaae02cf0c69f330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:34:b1:42:bc:83:60:4d:bb:03:4f:06:aa:
6b:09:33:da:8f:e4:e6:30:d7:a0:69:4d:c5:f1:1d:
19:53:a6:04:ab:1e:74:db:07:6b:72:cb:8d:c9:54:
68:0b:ba:9b:84:c8:a6:51:54:33:70:3f:cb:c2:0e:
df:fe:f5:93:a0:0f:8e:04:10:87:8a:ff:30:67:2a:
a2:3e:01:51:54:88:f3:e9:11:82:69:6f:b2:6b:dd:
3a:64:3d:40:b3:00:d7:11:45:d9:57:19:d1:1c:6a:
18:47:2c:4d:3c:ed:3d:64:a0:d9:d8:b8:46:80:e4:
5c:5d:b2:44:54:d8:3d:12:d9:d9:6d:2f:32:6e:cc:
5e:1d:5c:94:ae:d2:cc:2c:b3:7c:c9:19:6e:6b:82:
e5:6c:ef:48:db:5b:7d:cf:d2:91:61:c8:0a:c7:a6:
10:5d:2c:a6:2d:54:d7:b2:53:6e:0c:b0:b3:1f:ba:
43:88:13:62:6a:64:45:02:76:b0:30:12:d4:c9:35:
ba:e2:2f:05:e7:72:3f:8a:ed:a0:70:4c:88:6a:51:
48:12:ec:59:a8:0b:02:30:76:e7:68:6e:95:8c:6f:
71:86:02:0d:c2:f2:b2:8d:ec:0b:65:62:5a:7b:98:
29:1e:4b:11:51:a0:e5:3a:29:55:e6:0d:5e:df:9d:
1c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:43:5A:15:C9:C0:0A:6B:F5:CB:2A:57:EA:AE:02:CF:0C:69:F3:30
X509v3 Authority Key Identifier:
keyid:9E:76:A0:7A:33:5F:B7:A1:DE:D6:3A:AC:C5:13:38:AD:C8:47:26:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnagejNft6He1jqsxRM4rchHJnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1f:22:30:d0:04:99:71:4a:5f:21:93:3a:31:81:98:21:c0:
96:97:36:c7:86:d8:cf:c7:db:28:35:8a:47:f8:5e:2b:f1:64:
c9:36:cd:ab:a9:a7:9e:83:5b:a6:bb:4e:ca:83:bd:a4:d4:a0:
37:84:b6:4e:36:f0:6a:81:88:57:07:b1:e6:78:6e:1e:3f:dd:
d9:ea:a0:76:e8:bf:1c:0c:a6:c2:56:56:03:25:cc:c2:2e:d5:
84:fc:4e:64:12:0f:29:d1:5a:c0:a0:46:be:89:b9:9c:c3:4e:
29:39:63:80:53:2f:0b:96:88:dc:df:64:52:dd:68:ca:24:01:
d2:c2:4b:8b:36:28:09:13:b5:11:b8:d7:ed:c6:a3:10:74:08:
33:78:5d:8a:41:db:4f:bd:91:e9:c4:43:63:f5:7e:45:46:89:
85:23:d4:46:47:39:de:d7:5d:39:47:bc:cf:1d:7c:cf:3b:08:
2b:1b:aa:76:28:58:81:0c:72:47:aa:e8:43:9f:da:1b:d5:78:
b2:45:8a:26:68:f9:43:a8:50:66:04:6f:6d:ad:ec:72:0a:59:
96:3e:99:b1:3d:90:9b:3c:2f:fe:b2:63:79:1f:c4:ae:f1:b3:
b4:1f:76:74:98:ac:e2:16:e0:8c:c7:48:d3:3c:a6:93:43:5e:
81:17:b7:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEkvNT7tiLeBUsHuqwTRFjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNzZhMDdhMzM1ZmI3YTFkZWQ2M2FhY2M1MTMzOGFkYzg0
NzI2NzAwHhcNMjUwNzAxMDYwMDU0WhcNMjUwNzAyMDYwMDU0WjAzMTEwLwYDVQQD
EyhlNDQzNWExNWM5YzAwYTZiZjVjYjJhNTdlYWFlMDJjZjBjNjlmMzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKM0sUK8g2BNuwNPBqprCTPaj+Tm
MNegaU3F8R0ZU6YEqx502wdrcsuNyVRoC7qbhMimUVQzcD/Lwg7f/vWToA+OBBCH
iv8wZyqiPgFRVIjz6RGCaW+ya906ZD1AswDXEUXZVxnRHGoYRyxNPO09ZKDZ2LhG
gORcXbJEVNg9EtnZbS8ybsxeHVyUrtLMLLN8yRlua4LlbO9I21t9z9KRYcgKx6YQ
XSymLVTXslNuDLCzH7pDiBNiamRFAnawMBLUyTW64i8F53I/iu2gcEyIalFIEuxZ
qAsCMHbnaG6VjG9xhgINwvKyjewLZWJae5gpHksRUaDlOilV5g1e350c+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORDWhXJwApr9csqV+quAs8MafMwMB8GA1UdIwQY
MBaAFJ52oHozX7eh3tY6rMUTOK3IRyZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm5hZ2VqTmZ0NkhlMWpxc3hSTTRyY2hISm5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80YThiNjctY2M5MS00ZTk2LTgwNjAt
ODJiY2FiMTY2NTZmLzEvbm5hZ2VqTmZ0NkhlMWpxc3hSTTRyY2hISm5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC80YThiNjctY2M5MS00ZTk2LTgwNjAtODJiY2FiMTY2NTZm
LzEvbm5hZ2VqTmZ0NkhlMWpxc3hSTTRyY2hISm5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKR8iMNAE
mXFKXyGTOjGBmCHAlpc2x4bYz8fbKDWKR/heK/FkyTbNq6mnnoNbprtOyoO9pNSg
N4S2TjbwaoGIVwex5nhuHj/d2eqgdui/HAymwlZWAyXMwi7VhPxOZBIPKdFawKBG
vom5nMNOKTljgFMvC5aI3N9kUt1oyiQB0sJLizYoCRO1EbjX7cajEHQIM3hdikHb
T72R6cRDY/V+RUaJhSPURkc53tddOUe8zx18zzsIKxuqdihYgQxyR6roQ5/aG9V4
skWKJmj5Q6hQZgRvba3scgpZlj6ZsT2Qmzwv/rJjeR/ErvGztB92dJis4hbgjMdI
0zymk0NegRe3eA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 12:31:57 2025 by rpki-client