Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
File: nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json)
Hash identifier: 2mbj5qkNdjSqi00eiZkRNvvTyop6On1noiI/5owHHao=
Subject key identifier: 58:17:B7:B9:6B:F7:AA:DF:7F:8D:11:EA:C1:3D:C5:0B:CA:D7:10:D0
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial: 0197B6A0AE6EF372E60CDF6036C74E154A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
Manifest number: 08E5
Signing time: Sat 28 Jun 2025 13:01:13 +0000
Manifest this update: Sat 28 Jun 2025 13:01:13 +0000
Manifest next update: Sun 29 Jun 2025 13:01:13 +0000
Files and hashes: 1: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: 3HZfT1N/Y4JuO8fqDpBbQ997nUPEsYqoRVX6DncUtyY=)
2: udQIyLLEg9QQXb-UkTqLHg_TlmY.roa (hash: tqfLE5OeUFZI9sRR907kQS3AlAfPN5yiahDFaxm0yMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ae:6e:f3:72:e6:0c:df:60:36:c7:4e:15:4a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
Validity
Not Before: Jun 28 13:01:13 2025 GMT
Not After : Jun 29 13:01:13 2025 GMT
Subject: CN=5817b7b96bf7aadf7f8d11eac13dc50bcad710d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c3:73:3c:99:0e:31:22:cb:27:23:1f:1d:4e:
57:75:15:c0:7c:3f:f8:02:55:c0:56:f6:ae:d8:b6:
d2:38:81:fc:c8:9d:7f:0d:d3:74:5d:0c:05:e8:ef:
b6:3e:9d:d9:5f:46:6f:f3:43:c3:fc:c8:cc:4e:5d:
2a:08:89:3c:b5:6b:7c:a6:4e:40:7c:0e:2d:f9:d1:
c5:39:c2:d3:c6:32:3b:88:68:70:96:22:21:77:68:
bd:a3:68:93:bd:3e:b5:86:6c:1e:c0:cb:0d:fc:57:
de:87:10:cb:89:7c:78:5a:f3:6b:d9:62:be:34:5c:
77:67:18:64:25:aa:9a:62:53:bf:4b:e0:bf:04:40:
f7:5f:25:15:b3:8b:da:bb:50:78:ac:44:6d:1d:f7:
6e:9b:f1:57:79:5c:60:25:a6:dd:a5:fe:b1:43:2d:
ab:c0:b9:7b:b1:bb:47:ac:1b:b5:dc:79:e1:71:4d:
21:f3:44:87:3d:34:3a:d1:54:41:55:6e:ab:1b:bb:
3a:e7:84:19:a0:8f:ee:2f:ae:79:d2:ea:28:28:23:
81:0c:3a:cc:27:4c:c2:d3:5b:8d:c0:e4:41:7a:80:
6e:9a:43:ad:bb:b1:5f:ef:53:d0:cd:89:9c:81:52:
99:05:ee:04:fe:6a:38:de:2d:45:df:a5:d9:bc:97:
bf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:17:B7:B9:6B:F7:AA:DF:7F:8D:11:EA:C1:3D:C5:0B:CA:D7:10:D0
X509v3 Authority Key Identifier:
keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:12:6c:0d:e2:c2:8d:75:9c:57:3e:40:80:31:dd:eb:d3:1f:
14:b6:ae:87:06:69:75:7a:ae:42:b5:06:3a:ff:59:0d:23:b3:
83:9d:b2:45:eb:b7:f8:6a:01:93:79:5b:e7:9d:28:1c:f9:b0:
3e:3b:83:53:3a:3e:4b:88:c1:06:ed:03:1a:17:5f:85:02:c9:
cd:ae:42:64:c4:32:6f:c2:fd:d3:bd:15:40:05:c4:3c:59:87:
db:2b:4d:c9:51:a2:72:e8:a9:11:0e:0b:dc:a9:0c:e6:aa:e2:
10:2c:ef:80:67:c3:47:ad:36:1f:83:75:ce:80:b7:85:7f:fb:
ce:69:55:62:dd:5e:e5:a7:a6:7a:f9:a6:9c:71:73:e5:3b:37:
aa:52:10:e6:a1:1d:51:c1:a7:74:56:76:15:6d:8f:ee:a1:c2:
b3:2d:e7:59:58:43:f6:10:86:cf:7a:f2:7a:82:56:e3:f5:26:
29:9a:ca:41:9e:eb:85:8a:b6:84:33:fd:fb:92:b1:39:cc:74:
9c:03:b7:08:63:68:51:19:49:f8:2a:bc:dd:8e:71:62:f2:ef:
db:13:72:40:7d:5b:25:d5:4d:32:29:fb:59:4e:2d:dc:0e:71:
b5:72:29:7d:75:f4:f4:e6:33:69:9a:ce:c5:06:8e:4d:50:08:
5d:3c:a6:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oK5u83LmDN9gNsdOFUo4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNjgzNGFlMzU2MzBhMDRjNzhmMjc3NjA1MjUyNjc4ZmI2
NDVjNDUwHhcNMjUwNjI4MTMwMTEzWhcNMjUwNjI5MTMwMTEzWjAzMTEwLwYDVQQD
Eyg1ODE3YjdiOTZiZjdhYWRmN2Y4ZDExZWFjMTNkYzUwYmNhZDcxMGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMNzPJkOMSLLJyMfHU5XdRXAfD/4
AlXAVvau2LbSOIH8yJ1/DdN0XQwF6O+2Pp3ZX0Zv80PD/MjMTl0qCIk8tWt8pk5A
fA4t+dHFOcLTxjI7iGhwliIhd2i9o2iTvT61hmwewMsN/FfehxDLiXx4WvNr2WK+
NFx3ZxhkJaqaYlO/S+C/BED3XyUVs4vau1B4rERtHfdum/FXeVxgJabdpf6xQy2r
wLl7sbtHrBu13HnhcU0h80SHPTQ60VRBVW6rG7s654QZoI/uL6550uooKCOBDDrM
J0zC01uNwORBeoBumkOtu7Ff71PQzYmcgVKZBe4E/mo43i1F36XZvJe/7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgXt7lr96rff40R6sE9xQvK1xDQMB8GA1UdIwQY
MBaAFJ5oNK41YwoEx48ndgUlJnj7ZFxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYjk3YzgtOTU3Ni00MjQ3LTk2ZTYt
NTI3OTg0ZmMxMTgxLzEvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zYjk3YzgtOTU3Ni00MjQ3LTk2ZTYtNTI3OTg0ZmMxMTgx
LzEvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYhJsDeLC
jXWcVz5AgDHd69MfFLauhwZpdXquQrUGOv9ZDSOzg52yReu3+GoBk3lb550oHPmw
PjuDUzo+S4jBBu0DGhdfhQLJza5CZMQyb8L9070VQAXEPFmH2ytNyVGicuipEQ4L
3KkM5qriECzvgGfDR602H4N1zoC3hX/7zmlVYt1e5aemevmmnHFz5Ts3qlIQ5qEd
UcGndFZ2FW2P7qHCsy3nWVhD9hCGz3ryeoJW4/UmKZrKQZ7rhYq2hDP9+5KxOcx0
nAO3CGNoURlJ+Cq83Y5xYvLv2xNyQH1bJdVNMin7WU4t3A5xtXIpfXX09OYzaZrO
xQaOTVAIXTym5w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:04 2025 by rpki-client