Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
File: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft (raw, json)
Hash identifier: GdTxvEFclbYb5PVUQoGmauWGOOComNVNSDmRjtqHCyw=
Subject key identifier: 92:82:FF:93:C8:2A:DA:5D:9D:0A:4F:B8:8F:37:4F:F9:D8:30:BA:A6
Authority key identifier: 9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
Certificate issuer: /CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Certificate serial: 0197B7EAE830ECB6208BB3C5C17573DE2012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 19:01:54 +0000
Manifest this update: Sat 28 Jun 2025 19:01:54 +0000
Manifest next update: Sun 29 Jun 2025 19:01:54 +0000
Files and hashes: 1: k80BCKNHzgDvKK_3k-MEya8lNoM.roa (hash: XRBQsFrhhLJ6RMDFPAKpPWk13Lc3Ws+YcSUdoLvIOo8=)
2: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl (hash: 3y1622Oik0hmUJCMScXn7fgqUaJmpeRX0MQwDeDJohM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:e8:30:ec:b6:20:8b:b3:c5:c1:75:73:de:20:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Validity
Not Before: Jun 28 19:01:54 2025 GMT
Not After : Jun 29 19:01:54 2025 GMT
Subject: CN=9282ff93c82ada5d9d0a4fb88f374ff9d830baa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:79:a9:98:0b:e7:27:fb:92:16:1f:38:05:
12:e6:ee:81:18:68:96:51:dc:cd:2c:29:49:a0:19:
3f:21:07:27:56:e8:d6:e0:a1:20:0a:79:a8:8a:3c:
03:c7:8b:28:45:e6:f2:55:46:a5:27:7b:ac:39:0d:
f7:75:1f:e0:28:dc:ea:40:2d:1f:1c:6b:b4:a3:29:
0e:5a:80:8a:b2:04:cf:6b:56:86:7e:44:74:cd:10:
1a:6e:e5:e2:c5:73:31:c2:de:51:01:6f:29:eb:bb:
cb:33:a8:28:c3:8d:da:5b:7e:4b:34:7f:44:36:8a:
b9:df:ca:8f:78:d4:91:c1:f5:ec:f0:21:0f:87:9e:
20:b4:ee:1b:43:27:7a:57:9c:ce:4e:6a:86:26:2c:
1a:28:6a:45:26:32:7a:45:2a:0d:77:80:34:09:06:
ba:7c:ea:c2:dc:a6:07:94:69:21:25:83:fe:dc:da:
f1:cb:16:32:6f:db:b7:2e:5d:a2:cb:0f:23:42:8d:
c1:6d:94:e2:d1:72:df:ca:4b:62:e5:45:4b:97:b3:
85:cb:73:d3:4b:71:3f:c9:9b:db:df:63:17:99:9a:
be:7b:3b:ec:7f:e4:b5:13:6e:ce:d8:6d:a3:8e:eb:
b6:da:5e:e5:c0:b3:49:91:2b:d8:33:f7:86:22:8d:
46:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:82:FF:93:C8:2A:DA:5D:9D:0A:4F:B8:8F:37:4F:F9:D8:30:BA:A6
X509v3 Authority Key Identifier:
keyid:9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a5:bf:78:58:31:1c:a5:b9:d3:d0:5c:dc:2c:ce:5b:de:f4:
ef:38:42:66:88:49:88:9f:d3:15:11:3b:1e:67:2e:0b:bc:1c:
7c:8e:df:61:4d:0f:74:7a:a8:95:d4:8a:2a:61:97:e4:7d:13:
d5:43:11:84:8b:c6:f4:87:bd:df:ec:0f:b0:2a:74:39:5e:d4:
3a:76:e0:71:53:b7:ff:5e:dc:cc:b8:f7:91:20:b5:7d:4d:8b:
5e:5a:3a:c8:f0:9e:cf:a8:89:9e:15:dd:02:20:e6:ed:07:77:
d1:01:78:58:d7:9b:f6:7a:6d:03:d8:c6:c5:44:a8:70:1e:aa:
7d:d8:29:06:4c:f1:ad:96:9b:71:b8:8d:9c:23:cc:98:4e:1e:
e7:fa:56:b3:be:c5:63:44:0f:e7:9a:ea:b4:ac:73:19:a5:b8:
fa:41:e8:49:60:83:7c:58:c9:24:27:45:a1:0a:d5:7e:46:7b:
09:97:db:cb:b0:d2:17:0c:45:8d:d7:4e:49:bd:17:fd:56:17:
2c:96:48:ff:27:82:52:70:2f:57:ea:5a:e3:23:3f:6a:3b:4e:
7e:3c:a3:b0:15:7f:75:25:c5:c8:23:5e:0f:5b:ff:12:d2:12:
8f:b4:1d:08:62:ee:d0:02:2d:ee:a9:6d:79:cc:84:66:be:5c:
6f:05:66:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36ugw7LYgi7PFwXVz3iASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNjE0MDNhYzY5ZTI4NzRmNTYyMmQ3ZWU1NjhlOGU0OWYw
NjRjMmUwHhcNMjUwNjI4MTkwMTU0WhcNMjUwNjI5MTkwMTU0WjAzMTEwLwYDVQQD
Eyg5MjgyZmY5M2M4MmFkYTVkOWQwYTRmYjg4ZjM3NGZmOWQ4MzBiYWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQR5qZgL5yf7khYfOAUS5u6BGGiW
UdzNLClJoBk/IQcnVujW4KEgCnmoijwDx4soRebyVUalJ3usOQ33dR/gKNzqQC0f
HGu0oykOWoCKsgTPa1aGfkR0zRAabuXixXMxwt5RAW8p67vLM6gow43aW35LNH9E
Noq538qPeNSRwfXs8CEPh54gtO4bQyd6V5zOTmqGJiwaKGpFJjJ6RSoNd4A0CQa6
fOrC3KYHlGkhJYP+3NrxyxYyb9u3Ll2iyw8jQo3BbZTi0XLfykti5UVLl7OFy3PT
S3E/yZvb32MXmZq+ezvsf+S1E27O2G2jjuu22l7lwLNJkSvYM/eGIo1GZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKC/5PIKtpdnQpPuI83T/nYMLqmMB8GA1UdIwQY
MBaAFJ5hQDrGnih09WItfuVo6OSfBkwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm1GQU9zYWVLSFQxWWkxLTVXam81SjhHVEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lY2EzMjctZDU4Zi00OTFjLTk0Yzgt
ZTNkMDQ1NDgzNDEyLzEvbm1GQU9zYWVLSFQxWWkxLTVXam81SjhHVEM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lY2EzMjctZDU4Zi00OTFjLTk0YzgtZTNkMDQ1NDgzNDEy
LzEvbm1GQU9zYWVLSFQxWWkxLTVXam81SjhHVEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPaW/eFgx
HKW509Bc3CzOW9707zhCZohJiJ/TFRE7HmcuC7wcfI7fYU0PdHqoldSKKmGX5H0T
1UMRhIvG9Ie93+wPsCp0OV7UOnbgcVO3/17czLj3kSC1fU2LXlo6yPCez6iJnhXd
AiDm7Qd30QF4WNeb9nptA9jGxUSocB6qfdgpBkzxrZabcbiNnCPMmE4e5/pWs77F
Y0QP55rqtKxzGaW4+kHoSWCDfFjJJCdFoQrVfkZ7CZfby7DSFwxFjddOSb0X/VYX
LJZI/yeCUnAvV+pa4yM/ajtOfjyjsBV/dSXFyCNeD1v/EtISj7QdCGLu0AIt7qlt
ecyEZr5cbwVmxg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:40 2025 by rpki-client