Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
File: NWrJx2mXb24ugqrM_iObaqGSI3g.mft (raw, json)
Hash identifier: +LjsNzS+d0ZwhyLQsrAAZo01tRLyDLSVVoJEMiiV5k8=
Subject key identifier: B6:F1:60:DC:81:AD:45:86:1A:A6:3B:D3:72:69:61:E4:1B:07:93:19
Authority key identifier: 35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
Certificate issuer: /CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Certificate serial: 0197B77C83107A2597DEEE9C970836168891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 17:01:19 +0000
Manifest this update: Sat 28 Jun 2025 17:01:19 +0000
Manifest next update: Sun 29 Jun 2025 17:01:19 +0000
Files and hashes: 1: NWrJx2mXb24ugqrM_iObaqGSI3g.crl (hash: DG6UgMVC0biDF80Ltb7bITAr6TryWpSWdBwQ2a8B0YU=)
2: kVipI_xyp0_kuJlOJOnoAHsePks.roa (hash: 1FUuhHfAvSDiWJAZOii+4sL3nFhAdH6ZW0fC89DJLKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:83:10:7a:25:97:de:ee:9c:97:08:36:16:88:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Validity
Not Before: Jun 28 17:01:19 2025 GMT
Not After : Jun 29 17:01:19 2025 GMT
Subject: CN=b6f160dc81ad45861aa63bd3726961e41b079319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2c:fa:0a:c8:84:96:fc:42:9d:37:9f:53:ca:
cb:02:a2:88:2a:b3:11:62:6e:d8:e3:56:a1:85:b9:
d7:8c:0c:94:84:4d:42:22:e9:33:99:eb:86:7b:32:
70:81:84:1b:a4:ca:59:7d:c8:fa:54:71:40:66:ba:
e2:3a:5d:d7:3b:3f:70:69:f6:c3:9c:8c:f4:4a:61:
c3:31:51:d8:55:09:e0:0c:c3:ad:75:9a:a5:1f:be:
7b:51:e8:07:da:2d:62:ee:92:66:02:f7:79:fd:02:
72:d4:56:98:2c:e9:4c:f7:a3:db:94:72:14:e6:27:
2d:c1:db:86:2e:a2:b0:a9:a2:a5:0c:b8:29:3d:85:
da:a2:11:0a:29:bc:d9:86:d1:c1:b0:72:57:4f:84:
fb:e5:43:ab:af:71:fb:6c:4c:d2:23:58:e3:3a:df:
d8:6c:fb:e5:fc:f5:3e:d6:a5:9c:eb:7e:de:ca:51:
1d:52:9d:b7:1f:7b:c6:6c:af:dd:50:f0:9d:35:fc:
5a:08:1e:71:cb:5b:11:c3:f6:43:c9:ac:b6:45:11:
30:c2:82:1d:77:56:66:12:da:62:99:56:ba:d6:d0:
71:90:a6:b5:18:13:4d:ca:fc:f6:7a:75:c4:a9:ae:
2b:bd:61:11:83:7d:43:c1:8f:5a:df:15:10:9a:b7:
a5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F1:60:DC:81:AD:45:86:1A:A6:3B:D3:72:69:61:E4:1B:07:93:19
X509v3 Authority Key Identifier:
keyid:35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c0:46:72:33:1f:61:d1:b4:04:55:ff:b0:c7:03:12:51:98:
36:6b:a0:b0:48:a5:30:d8:1b:91:82:6f:f5:7e:f2:b0:f9:6e:
89:d1:5b:8d:af:55:0b:4e:0e:04:8b:49:01:a3:e6:70:49:ed:
47:24:a7:24:c4:29:37:3c:b5:37:40:4a:07:e3:62:48:e6:1f:
e2:f9:b0:c7:5d:b7:21:ea:db:f6:0e:ed:36:e9:1c:bc:b4:2f:
6b:54:11:74:8a:81:80:f9:04:f7:6c:a5:ff:dd:3e:a1:55:a5:
ec:51:5b:c6:08:d1:1c:b2:dd:d3:87:a9:10:28:79:0c:3d:28:
6c:d1:b6:73:b6:9d:83:a5:56:08:b8:2d:5c:a8:28:b2:0c:c3:
35:bf:99:16:ed:59:36:45:04:fa:b6:1b:9a:19:72:3b:2f:c1:
17:d8:3c:2c:b2:2b:72:f8:0c:89:e0:65:7b:af:a2:6f:9d:03:
94:60:0f:81:b9:9f:58:7a:20:be:78:7f:16:ba:36:c3:92:20:
80:ea:5b:05:58:65:fb:7d:83:45:27:0e:bd:50:ac:53:9a:20:
20:54:82:f8:95:7b:97:65:32:1b:33:a8:ba:f9:f2:4e:af:e1:
e7:52:a0:73:39:68:4f:8b:ed:1a:53:ab:fb:4c:fc:75:50:87:
8e:2b:de:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fIMQeiWX3u6clwg2FoiRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NmFjOWM3Njk5NzZmNmUyZTgyYWFjY2ZlMjM5YjZhYTE5
MjIzNzgwHhcNMjUwNjI4MTcwMTE5WhcNMjUwNjI5MTcwMTE5WjAzMTEwLwYDVQQD
EyhiNmYxNjBkYzgxYWQ0NTg2MWFhNjNiZDM3MjY5NjFlNDFiMDc5MzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSz6CsiElvxCnTefU8rLAqKIKrMR
Ym7Y41ahhbnXjAyUhE1CIukzmeuGezJwgYQbpMpZfcj6VHFAZrriOl3XOz9wafbD
nIz0SmHDMVHYVQngDMOtdZqlH757UegH2i1i7pJmAvd5/QJy1FaYLOlM96PblHIU
5ictwduGLqKwqaKlDLgpPYXaohEKKbzZhtHBsHJXT4T75UOrr3H7bEzSI1jjOt/Y
bPvl/PU+1qWc637eylEdUp23H3vGbK/dUPCdNfxaCB5xy1sRw/ZDyay2RREwwoId
d1ZmEtpimVa61tBxkKa1GBNNyvz2enXEqa4rvWERg31DwY9a3xUQmrel5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbxYNyBrUWGGqY703JpYeQbB5MZMB8GA1UdIwQY
MBaAFDVqycdpl29uLoKqzP4jm2qhkiN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldySngybVhiMjR1Z3FyTV9pT2JhcUdTSTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZWZlNjctM2ViZC00NmNiLWJjYzgt
NmM2MWE5MDIzMTM5LzEvTldySngybVhiMjR1Z3FyTV9pT2JhcUdTSTNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lZWZlNjctM2ViZC00NmNiLWJjYzgtNmM2MWE5MDIzMTM5
LzEvTldySngybVhiMjR1Z3FyTV9pT2JhcUdTSTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccBGcjMf
YdG0BFX/sMcDElGYNmugsEilMNgbkYJv9X7ysPluidFbja9VC04OBItJAaPmcEnt
RySnJMQpNzy1N0BKB+NiSOYf4vmwx123Ierb9g7tNukcvLQva1QRdIqBgPkE92yl
/90+oVWl7FFbxgjRHLLd04epECh5DD0obNG2c7adg6VWCLgtXKgosgzDNb+ZFu1Z
NkUE+rYbmhlyOy/BF9g8LLIrcvgMieBle6+ib50DlGAPgbmfWHogvnh/Fro2w5Ig
gOpbBVhl+32DRScOvVCsU5ogIFSC+JV7l2UyGzOouvnyTq/h51KgczloT4vtGlOr
+0z8dVCHjiveNw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:25 2025 by rpki-client