Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.mft
File: NB--B1HiEYiTdNFdYxLCJPaV-qI.mft (raw, json)
Hash identifier: 578GDZB3S16A2ClZwXyiGB1Lj8KBfXMNnHSNpLfZJCI=
Subject key identifier: C6:12:2E:F2:13:D1:81:9F:BB:E6:AE:A5:DC:62:9D:D3:93:8C:EE:97
Authority key identifier: 34:1F:BE:07:51:E2:11:88:93:74:D1:5D:63:12:C2:24:F6:95:FA:A2
Certificate issuer: /CN=341fbe0751e211889374d15d6312c224f695faa2
Certificate serial: 0197B77CA15A922C3D0554ED10636CA44316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NB--B1HiEYiTdNFdYxLCJPaV-qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.mft
Manifest number: 0EDC
Signing time: Sat 28 Jun 2025 17:01:27 +0000
Manifest this update: Sat 28 Jun 2025 17:01:27 +0000
Manifest next update: Sun 29 Jun 2025 17:01:27 +0000
Files and hashes: 1: Giw6c3ykUw3nYPNE5UpuuM_ybFY.roa (hash: 4QE8zLtdTCj1Z8B1PqQUFcIb6Is1jjshW97EzIqWBB0=)
2: NB--B1HiEYiTdNFdYxLCJPaV-qI.crl (hash: 9eUD3qL5MmeFm+kl9Ly4nFglxvqyL5e0gx/WpynfWBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NB--B1HiEYiTdNFdYxLCJPaV-qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a1:5a:92:2c:3d:05:54:ed:10:63:6c:a4:43:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=341fbe0751e211889374d15d6312c224f695faa2
Validity
Not Before: Jun 28 17:01:27 2025 GMT
Not After : Jun 29 17:01:27 2025 GMT
Subject: CN=c6122ef213d1819fbbe6aea5dc629dd3938cee97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:46:d3:e4:2f:ce:a9:a1:40:ee:f7:03:cb:6b:
d5:ef:ab:28:de:92:29:20:64:5a:0d:26:70:f8:f7:
22:32:e6:cb:92:8b:c9:4d:7b:31:6e:14:50:10:72:
6c:24:7d:ab:6a:40:9b:0b:8f:9c:3b:92:19:cf:c7:
3e:1b:dc:98:9d:19:ca:56:77:34:72:e6:d1:c6:76:
c3:bb:8c:88:f7:e6:52:da:0e:d7:63:66:78:c9:5c:
bd:6e:2b:39:01:9f:76:45:cb:f5:35:d8:27:42:43:
58:8f:44:ed:43:24:4e:f0:bc:16:d6:d1:8b:a4:c8:
e7:93:58:15:2e:04:41:a9:2f:f6:fd:f6:62:5c:1c:
92:58:c5:f8:c6:db:0e:96:be:3d:c2:76:06:5d:fc:
66:d7:7e:c2:27:18:7b:c3:4c:38:64:2e:8d:86:06:
a9:b7:54:a2:55:97:9f:1e:24:7c:a7:17:4f:b4:f5:
73:a5:cf:83:1d:55:84:c7:7b:c9:8b:39:0f:f7:14:
d5:80:50:0f:78:bb:ca:42:2b:f9:60:65:ea:4e:c5:
7e:4c:5c:f4:36:31:c6:16:7c:71:8b:68:b2:9d:1f:
f3:41:5c:70:c4:63:02:b9:87:db:65:e8:26:42:77:
16:a2:0d:3e:a1:ae:56:0d:5c:ff:e9:c5:2d:20:ec:
52:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:12:2E:F2:13:D1:81:9F:BB:E6:AE:A5:DC:62:9D:D3:93:8C:EE:97
X509v3 Authority Key Identifier:
keyid:34:1F:BE:07:51:E2:11:88:93:74:D1:5D:63:12:C2:24:F6:95:FA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NB--B1HiEYiTdNFdYxLCJPaV-qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:be:66:63:15:f2:ee:48:3f:11:7c:60:7f:66:9d:aa:c4:22:
9f:61:54:2b:43:6b:54:03:46:98:1a:cd:58:27:0c:ca:b4:0e:
78:10:d0:01:37:16:f6:73:25:ab:d6:eb:52:7d:f5:9c:a2:c5:
63:fa:f2:8d:72:73:c8:90:03:30:11:98:d4:70:26:b9:dc:34:
7f:00:95:df:0c:b1:f5:40:38:15:d4:19:9f:15:94:3f:27:25:
84:09:a1:fb:d4:34:b2:f7:89:b0:23:9c:71:09:ad:f5:3b:aa:
0e:c2:63:a9:b4:88:e0:48:81:eb:65:6d:3d:0e:82:26:4b:57:
16:68:1b:29:86:98:7e:d3:51:ec:90:66:98:ce:e4:85:79:d8:
9d:c8:bd:44:3e:07:2b:25:94:8f:cd:25:e7:ea:b8:bc:1b:3e:
4f:1a:a0:30:b7:93:ae:f0:87:91:15:fd:d2:0e:d5:74:df:4e:
eb:52:48:f9:ae:28:0a:d8:6b:56:5a:b3:b3:81:db:4f:e2:94:
ff:91:d1:e6:e8:f1:64:1e:da:37:d5:b6:47:36:36:94:25:24:
a7:cf:2b:26:b7:af:18:37:a6:22:64:74:6b:39:9a:bb:ff:7b:
a4:10:1f:ef:6c:ce:76:ba:70:34:30:51:9c:ba:e2:d3:b9:2b:
3c:6c:1a:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fKFakiw9BVTtEGNspEMWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MWZiZTA3NTFlMjExODg5Mzc0ZDE1ZDYzMTJjMjI0ZjY5
NWZhYTIwHhcNMjUwNjI4MTcwMTI3WhcNMjUwNjI5MTcwMTI3WjAzMTEwLwYDVQQD
EyhjNjEyMmVmMjEzZDE4MTlmYmJlNmFlYTVkYzYyOWRkMzkzOGNlZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0bT5C/OqaFA7vcDy2vV76so3pIp
IGRaDSZw+PciMubLkovJTXsxbhRQEHJsJH2rakCbC4+cO5IZz8c+G9yYnRnKVnc0
cubRxnbDu4yI9+ZS2g7XY2Z4yVy9bis5AZ92Rcv1NdgnQkNYj0TtQyRO8LwW1tGL
pMjnk1gVLgRBqS/2/fZiXBySWMX4xtsOlr49wnYGXfxm137CJxh7w0w4ZC6Nhgap
t1SiVZefHiR8pxdPtPVzpc+DHVWEx3vJizkP9xTVgFAPeLvKQiv5YGXqTsV+TFz0
NjHGFnxxi2iynR/zQVxwxGMCuYfbZegmQncWog0+oa5WDVz/6cUtIOxS5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYSLvIT0YGfu+aupdxindOTjO6XMB8GA1UdIwQY
MBaAFDQfvgdR4hGIk3TRXWMSwiT2lfqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkItLUIxSGlFWWlUZE5GZFl4TENKUGFWLXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8wMTRhNjMtY2ExOC00MWRmLTkxZTkt
YzI4ZWU4NjlmYWEwLzEvTkItLUIxSGlFWWlUZE5GZFl4TENKUGFWLXFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8wMTRhNjMtY2ExOC00MWRmLTkxZTktYzI4ZWU4NjlmYWEw
LzEvTkItLUIxSGlFWWlUZE5GZFl4TENKUGFWLXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALb5mYxXy
7kg/EXxgf2adqsQin2FUK0NrVANGmBrNWCcMyrQOeBDQATcW9nMlq9brUn31nKLF
Y/ryjXJzyJADMBGY1HAmudw0fwCV3wyx9UA4FdQZnxWUPyclhAmh+9Q0sveJsCOc
cQmt9TuqDsJjqbSI4EiB62VtPQ6CJktXFmgbKYaYftNR7JBmmM7khXnYnci9RD4H
KyWUj80l5+q4vBs+TxqgMLeTrvCHkRX90g7VdN9O61JI+a4oCthrVlqzs4HbT+KU
/5HR5ujxZB7aN9W2RzY2lCUkp88rJrevGDemImR0azmau/97pBAf72zOdrpwNDBR
nLri07krPGwaRQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:52 2025 by rpki-client