Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
File: nurBz77ElK6UV8hm5jYYZcTzAEg.mft (raw, json)
Hash identifier: hxEtim5zaK0mo2hoF0Iz93gefPq+7PPF725380C0aRA=
Subject key identifier: A3:3B:C6:D3:A3:F2:C2:65:1E:3C:C2:7E:FF:11:CC:9E:10:2B:93:99
Authority key identifier: 9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48
Certificate issuer: /CN=9eeac1cfbec494ae9457c866e6361865c4f30048
Certificate serial: 0197BA0FC1004E61C442CCEFB53906EF4702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
Manifest number: 0BB2
Signing time: Sun 29 Jun 2025 05:01:23 +0000
Manifest this update: Sun 29 Jun 2025 05:01:23 +0000
Manifest next update: Mon 30 Jun 2025 05:01:23 +0000
Files and hashes: 1: mmnZOOh4xZoAyB6ozP7dMz0vpOQ.roa (hash: MPgwr3P3oOg7+ut0sMgX1kiy6aK0r7pykdMfFbGH85I=)
2: nurBz77ElK6UV8hm5jYYZcTzAEg.crl (hash: qboYh7OcCbLs36Ws9N1jiDK+T+dOBxqllv0Bpdnfe8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:c1:00:4e:61:c4:42:cc:ef:b5:39:06:ef:47:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eeac1cfbec494ae9457c866e6361865c4f30048
Validity
Not Before: Jun 29 05:01:23 2025 GMT
Not After : Jun 30 05:01:23 2025 GMT
Subject: CN=a33bc6d3a3f2c2651e3cc27eff11cc9e102b9399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:88:e4:e7:04:d1:43:58:50:40:e5:7f:6b:
16:4a:18:43:bf:00:47:8b:6e:2a:eb:c8:49:f0:60:
84:85:f9:c2:95:4d:f5:1e:ed:39:75:a2:20:de:e2:
94:b8:9d:09:13:f1:77:a9:5b:0c:b3:cb:cd:e4:66:
93:e4:73:0b:2d:18:9d:c0:bc:31:c7:3a:b0:34:b5:
d1:68:ce:64:14:fe:03:1e:e1:8c:42:22:66:a0:07:
1a:fe:11:11:d1:e3:0a:5d:06:dc:5b:5f:9b:68:03:
94:19:e4:ba:35:fa:94:0a:df:88:42:f0:e3:87:e0:
01:f5:88:4a:1c:1d:ee:33:36:ed:5c:61:9e:0e:57:
a5:63:56:7d:ec:b1:a2:3d:84:d9:a2:b6:15:7d:c7:
8f:93:be:ba:3d:f5:25:a9:29:3a:21:f8:bf:ed:97:
c6:2e:0e:55:1b:70:f5:c7:9e:b3:7b:e1:0c:81:f0:
bb:dc:ca:ee:36:ff:28:fa:e2:6e:24:bc:4f:a7:00:
ee:d4:4f:b0:ff:c3:9d:db:e7:7c:68:bd:df:be:9c:
0b:fb:4a:24:54:40:b6:45:99:fc:2e:96:cd:de:4d:
85:f1:f2:ec:d5:9e:2b:72:6a:cf:9a:1e:dd:b2:9b:
73:be:27:3f:0a:33:7e:01:7c:15:f5:6c:b8:e4:32:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3B:C6:D3:A3:F2:C2:65:1E:3C:C2:7E:FF:11:CC:9E:10:2B:93:99
X509v3 Authority Key Identifier:
keyid:9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5d:77:99:6a:46:c9:e3:c1:6b:3e:ee:8f:ac:e9:42:e2:2c:
19:c2:92:6f:64:b9:e6:15:ae:bc:64:0c:8e:65:76:9a:15:75:
40:62:87:fb:5f:52:a6:b7:82:da:e2:94:de:b8:82:11:85:5f:
34:eb:a5:53:01:a9:de:1a:bd:af:80:9a:18:cc:71:66:08:7c:
e7:be:d7:3f:44:90:9a:bb:6d:75:34:89:c3:21:3a:7c:53:3b:
cc:6d:7b:16:12:7e:84:a9:1c:49:d8:4f:73:5c:85:dc:90:f1:
9a:b5:68:99:fc:db:40:91:4f:82:39:f5:2b:f9:ff:c3:0f:2d:
b3:17:68:ad:25:de:7e:61:88:ff:82:86:39:bb:1b:90:77:64:
d2:ef:4a:6c:1e:05:70:41:59:de:96:33:c9:47:ca:05:81:89:
fa:16:63:13:2c:7b:b5:f3:e8:70:4d:82:96:71:ee:fd:20:80:
84:3a:25:52:a1:69:d8:85:9d:fe:61:58:16:b4:4c:16:0c:ac:
62:b5:b1:62:56:ef:4a:d0:e9:02:97:d2:79:b1:87:94:cb:a7:
fb:dd:22:74:ce:87:d4:92:7f:41:67:c0:d9:35:15:f3:c0:0b:
9d:5f:8e:65:3b:b9:0f:cc:7c:06:e1:8b:fa:8e:42:93:ad:3d:
43:85:95:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6D8EATmHEQszvtTkG70cCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZWFjMWNmYmVjNDk0YWU5NDU3Yzg2NmU2MzYxODY1YzRm
MzAwNDgwHhcNMjUwNjI5MDUwMTIzWhcNMjUwNjMwMDUwMTIzWjAzMTEwLwYDVQQD
EyhhMzNiYzZkM2EzZjJjMjY1MWUzY2MyN2VmZjExY2M5ZTEwMmI5Mzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm6I5OcE0UNYUEDlf2sWShhDvwBH
i24q68hJ8GCEhfnClU31Hu05daIg3uKUuJ0JE/F3qVsMs8vN5GaT5HMLLRidwLwx
xzqwNLXRaM5kFP4DHuGMQiJmoAca/hER0eMKXQbcW1+baAOUGeS6NfqUCt+IQvDj
h+AB9YhKHB3uMzbtXGGeDlelY1Z97LGiPYTZorYVfcePk766PfUlqSk6Ifi/7ZfG
Lg5VG3D1x56ze+EMgfC73MruNv8o+uJuJLxPpwDu1E+w/8Od2+d8aL3fvpwL+0ok
VEC2RZn8LpbN3k2F8fLs1Z4rcmrPmh7dsptzvic/CjN+AXwV9Wy45DJBQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKM7xtOj8sJlHjzCfv8RzJ4QK5OZMB8GA1UdIwQY
MBaAFJ7qwc++xJSulFfIZuY2GGXE8wBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnVyQno3N0VsSzZVVjhobTVqWVlaY1R6QUVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80N2U2MDktYjZiNy00NDNiLThhMDQt
ZTI4NWNkOGNhZDEyLzEvbnVyQno3N0VsSzZVVjhobTVqWVlaY1R6QUVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80N2U2MDktYjZiNy00NDNiLThhMDQtZTI4NWNkOGNhZDEy
LzEvbnVyQno3N0VsSzZVVjhobTVqWVlaY1R6QUVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANl13mWpG
yePBaz7uj6zpQuIsGcKSb2S55hWuvGQMjmV2mhV1QGKH+19SpreC2uKU3riCEYVf
NOulUwGp3hq9r4CaGMxxZgh8577XP0SQmrttdTSJwyE6fFM7zG17FhJ+hKkcSdhP
c1yF3JDxmrVomfzbQJFPgjn1K/n/ww8tsxdorSXefmGI/4KGObsbkHdk0u9KbB4F
cEFZ3pYzyUfKBYGJ+hZjEyx7tfPocE2ClnHu/SCAhDolUqFp2IWd/mFYFrRMFgys
YrWxYlbvStDpApfSebGHlMun+90idM6H1JJ/QWfA2TUV88ALnV+OZTu5D8x8BuGL
+o5Ck609Q4WVFA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:13:10 2025 by rpki-client