Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.mft
File: NB--B1HiEYiTdNFdYxLCJPaV-qI.mft (raw, json)
Hash identifier: dvXaDzxpsHgyJZgl9e/FTxFem7QTnPmwMUmdpCkHDvA=
Subject key identifier: 46:02:5F:2C:03:22:2D:DB:B6:8C:8F:DE:7F:23:8B:9C:06:84:0E:B8
Authority key identifier: 34:1F:BE:07:51:E2:11:88:93:74:D1:5D:63:12:C2:24:F6:95:FA:A2
Certificate issuer: /CN=341fbe0751e211889374d15d6312c224f695faa2
Certificate serial: 0198D54E560B480A7099ACF54A225F7F0F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NB--B1HiEYiTdNFdYxLCJPaV-qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.mft
Manifest number: 0F70
Signing time: Sat 23 Aug 2025 05:02:17 +0000
Manifest this update: Sat 23 Aug 2025 05:02:17 +0000
Manifest next update: Sun 24 Aug 2025 05:02:17 +0000
Files and hashes: 1: Giw6c3ykUw3nYPNE5UpuuM_ybFY.roa (hash: 4QE8zLtdTCj1Z8B1PqQUFcIb6Is1jjshW97EzIqWBB0=)
2: NB--B1HiEYiTdNFdYxLCJPaV-qI.crl (hash: enF9k0o0USCRgg+drikEsxnt16d6lvkGjXMAdOTBUOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NB--B1HiEYiTdNFdYxLCJPaV-qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:56:0b:48:0a:70:99:ac:f5:4a:22:5f:7f:0f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=341fbe0751e211889374d15d6312c224f695faa2
Validity
Not Before: Aug 23 05:02:17 2025 GMT
Not After : Aug 24 05:02:17 2025 GMT
Subject: CN=46025f2c03222ddbb68c8fde7f238b9c06840eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:7a:dc:ef:b4:dd:b5:e6:9e:91:15:99:1b:
21:46:af:80:7e:56:65:ea:05:67:e8:f0:68:4b:e1:
00:47:00:3a:96:a9:93:c6:bc:97:f7:28:9e:1b:65:
73:08:76:40:cb:aa:65:e8:be:a7:25:a3:08:ed:c0:
dc:62:94:b1:2e:3b:ef:42:7d:93:0f:80:94:6d:fb:
3a:95:e0:22:8e:ef:98:7a:a5:dc:15:99:9a:ae:b8:
47:4b:f0:41:d8:27:d1:64:2c:d4:2d:47:8e:4a:0a:
0e:e9:98:a4:e9:f8:26:c1:c0:6c:fc:17:9d:66:40:
2f:8d:f6:b3:50:01:41:67:bf:d7:50:2a:6c:16:2f:
17:f0:fb:6f:9d:ef:24:27:93:a8:74:15:05:77:cf:
35:03:7a:2d:d6:a5:db:59:e0:5e:f8:38:5c:f3:7c:
75:d7:5f:5e:30:65:e7:dd:fe:bf:d5:b8:0a:38:1a:
b8:b0:3f:9b:41:2b:de:3a:37:be:71:2d:39:41:ca:
b7:b4:f8:44:7d:15:18:5d:f0:5c:ea:de:2f:8c:28:
19:be:68:e7:86:1d:ba:cb:a8:a4:b1:00:b0:13:1f:
23:8f:89:b0:8c:f1:6b:51:4e:e0:52:85:e6:26:1b:
da:73:df:bd:3f:97:e7:21:02:f6:c9:33:c5:56:a6:
34:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:02:5F:2C:03:22:2D:DB:B6:8C:8F:DE:7F:23:8B:9C:06:84:0E:B8
X509v3 Authority Key Identifier:
keyid:34:1F:BE:07:51:E2:11:88:93:74:D1:5D:63:12:C2:24:F6:95:FA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NB--B1HiEYiTdNFdYxLCJPaV-qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4d:f6:5c:2c:51:0f:fa:1e:88:7e:70:62:d7:b9:30:94:d4:
32:47:86:a7:8f:ad:6d:23:41:50:91:7c:43:e2:a7:80:b7:a6:
25:c5:82:a7:1f:b0:5e:a5:1f:ce:ff:52:1c:61:b5:8e:ec:65:
2b:06:f4:42:00:80:20:5c:b5:de:5c:77:28:5c:32:9d:f7:a8:
24:52:84:bc:c6:0f:ca:b7:06:77:56:54:f4:4d:2c:21:1a:e6:
e2:4a:cc:7c:6b:f0:da:41:3c:1c:08:3e:cc:e4:6d:78:df:44:
b8:96:fc:45:8d:55:eb:80:28:98:6a:a4:38:a2:95:4b:1e:95:
28:bb:3e:69:dc:03:67:35:59:ab:2e:02:3b:d2:58:e8:22:78:
7c:83:21:29:10:56:02:2e:b5:24:3f:ab:26:ad:c1:09:91:ed:
33:20:08:47:0f:7e:2a:e8:fc:cf:b5:52:6c:08:1b:97:de:5b:
39:fa:4a:b6:3e:95:b6:5b:ea:92:0d:e8:20:21:ec:53:e1:62:
05:99:d2:a5:b9:fa:11:14:ae:3d:a3:d7:e4:03:27:4c:d1:f4:
93:70:f2:9d:fa:b9:c7:48:71:41:de:31:13:6a:5d:38:09:66:
74:57:e6:d4:52:3b:f3:bb:85:7e:6c:68:a0:8b:ea:b9:a5:d2:
8d:30:4d:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTlYLSApwmaz1SiJffw9MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MWZiZTA3NTFlMjExODg5Mzc0ZDE1ZDYzMTJjMjI0ZjY5
NWZhYTIwHhcNMjUwODIzMDUwMjE3WhcNMjUwODI0MDUwMjE3WjAzMTEwLwYDVQQD
Eyg0NjAyNWYyYzAzMjIyZGRiYjY4YzhmZGU3ZjIzOGI5YzA2ODQwZWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK963O+03bXmnpEVmRshRq+AflZl
6gVn6PBoS+EARwA6lqmTxryX9yieG2VzCHZAy6pl6L6nJaMI7cDcYpSxLjvvQn2T
D4CUbfs6leAiju+YeqXcFZmarrhHS/BB2CfRZCzULUeOSgoO6Zik6fgmwcBs/Bed
ZkAvjfazUAFBZ7/XUCpsFi8X8Ptvne8kJ5OodBUFd881A3ot1qXbWeBe+Dhc83x1
119eMGXn3f6/1bgKOBq4sD+bQSveOje+cS05Qcq3tPhEfRUYXfBc6t4vjCgZvmjn
hh26y6iksQCwEx8jj4mwjPFrUU7gUoXmJhvac9+9P5fnIQL2yTPFVqY0zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYCXywDIi3btoyP3n8ji5wGhA64MB8GA1UdIwQY
MBaAFDQfvgdR4hGIk3TRXWMSwiT2lfqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkItLUIxSGlFWWlUZE5GZFl4TENKUGFWLXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8wMTRhNjMtY2ExOC00MWRmLTkxZTkt
YzI4ZWU4NjlmYWEwLzEvTkItLUIxSGlFWWlUZE5GZFl4TENKUGFWLXFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8wMTRhNjMtY2ExOC00MWRmLTkxZTktYzI4ZWU4NjlmYWEw
LzEvTkItLUIxSGlFWWlUZE5GZFl4TENKUGFWLXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkE32XCxR
D/oeiH5wYte5MJTUMkeGp4+tbSNBUJF8Q+KngLemJcWCpx+wXqUfzv9SHGG1juxl
Kwb0QgCAIFy13lx3KFwynfeoJFKEvMYPyrcGd1ZU9E0sIRrm4krMfGvw2kE8HAg+
zORteN9EuJb8RY1V64AomGqkOKKVSx6VKLs+adwDZzVZqy4CO9JY6CJ4fIMhKRBW
Ai61JD+rJq3BCZHtMyAIRw9+Kuj8z7VSbAgbl95bOfpKtj6Vtlvqkg3oICHsU+Fi
BZnSpbn6ERSuPaPX5AMnTNH0k3Dynfq5x0hxQd4xE2pdOAlmdFfm1FI787uFfmxo
oIvquaXSjTBN7A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:21 2025 by rpki-client