Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
File: 0NhScDKV7Pi5cgH5FjEPiPTAirc.mft (raw, json)
Hash identifier: ieAbHnuJbjAEcHJmYY93SNUk3Y0wxCtoAGryTCFaHVw=
Subject key identifier: 56:68:CD:E9:77:21:89:33:BF:9B:54:5F:F5:B6:B3:BB:6B:72:E0:98
Authority key identifier: D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
Certificate issuer: /CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Certificate serial: 0197B6A0AA4F99D3EAED949B3E856BF9345D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:01:12 +0000
Manifest this update: Sat 28 Jun 2025 13:01:12 +0000
Manifest next update: Sun 29 Jun 2025 13:01:12 +0000
Files and hashes: 1: 0NhScDKV7Pi5cgH5FjEPiPTAirc.crl (hash: 3+u83f46PZrxv6mw4qcYbN8cRmT4m+gH4f5i2dz1Si8=)
2: YlrLpRr6jHVjZjhSp57OuuJNoDA.roa (hash: 3sLpE4GcZV46VhUEypK4IVzC6Mp0SDmiK7VScSwFOfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:aa:4f:99:d3:ea:ed:94:9b:3e:85:6b:f9:34:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Validity
Not Before: Jun 28 13:01:12 2025 GMT
Not After : Jun 29 13:01:12 2025 GMT
Subject: CN=5668cde977218933bf9b545ff5b6b3bb6b72e098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:4c:c1:4d:e6:8c:1f:a8:57:2e:2a:5a:57:
a3:fa:98:12:e1:98:67:8a:77:6c:1a:f7:75:8f:5a:
b4:18:0e:40:ce:65:6e:c3:3b:6a:3f:7a:e5:04:0a:
0d:30:d4:ee:90:22:1f:c1:4b:4d:75:9f:38:b6:77:
6a:63:14:13:a6:ca:31:a3:52:55:0e:96:40:bb:eb:
19:13:5b:bc:a5:8a:9a:45:34:d7:19:2c:7e:d7:e9:
b1:8a:a3:b9:5f:f2:63:e7:44:c2:12:79:9f:7c:6c:
74:77:2d:50:2e:92:60:ef:5a:09:b6:aa:04:53:39:
da:9d:35:90:74:d5:10:be:d0:b7:23:1a:d5:d2:a7:
2c:ad:84:0a:2a:34:d9:cc:78:e2:0c:48:d5:c1:ef:
ad:13:fd:81:01:f4:f5:94:ef:bd:0e:60:95:ac:dc:
dc:1b:5c:d5:ff:76:bd:e1:d3:4f:fe:55:db:2e:5e:
6c:12:85:d6:c7:57:6a:e3:9a:12:a9:0c:b1:b9:7f:
c8:30:4f:43:10:43:24:de:d6:e9:6f:42:79:eb:6c:
64:28:ac:e4:9b:a7:1b:02:4f:2a:04:a9:3b:ac:b6:
04:30:40:6e:d1:d5:87:f4:d4:2c:df:33:60:bc:d2:
a0:46:37:35:d8:b4:fe:94:ee:c7:dc:c2:a2:81:55:
3a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:68:CD:E9:77:21:89:33:BF:9B:54:5F:F5:B6:B3:BB:6B:72:E0:98
X509v3 Authority Key Identifier:
keyid:D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f1:06:4d:c3:62:9c:9e:7d:ee:1a:76:10:42:f3:35:c1:55:
61:47:ac:40:01:85:e0:e0:4a:b8:a7:6d:c7:9e:65:bd:7a:3f:
c9:52:9e:74:1c:48:68:de:92:19:ec:e0:11:92:61:3b:bf:c1:
51:73:61:df:17:f4:9d:c5:9f:5e:c2:44:14:18:71:16:ee:a7:
f4:93:46:23:f4:75:0c:66:69:85:5d:ab:b0:30:72:18:8b:11:
15:53:97:b8:37:b4:ad:c6:bb:03:ca:0a:91:56:c3:ed:3f:ac:
ff:ad:1c:3b:3a:c1:be:32:90:ca:4a:f6:8a:04:d1:a0:4a:00:
21:b7:34:67:c8:e7:e0:30:fc:d6:79:33:d2:ff:41:24:95:d2:
9e:f0:93:9c:16:1b:87:ed:ce:5a:9e:93:88:2a:a8:76:1e:df:
9d:f0:81:4e:cc:e4:b8:2a:8b:ae:9a:d7:9a:d5:be:dc:c8:3f:
03:b5:02:04:d5:f7:2c:5e:2f:44:d6:9c:6a:be:87:fc:4e:ee:
25:60:b4:82:4b:00:a7:cb:79:9e:8b:ee:b0:d5:ac:5e:c5:26:
fa:6b:98:3a:fd:27:ef:96:fc:00:d5:f8:9d:f1:24:e8:2b:28:
e3:e5:8e:cf:29:24:5c:a8:db:ae:e5:87:64:36:68:89:44:d9:
cb:32:41:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oKpPmdPq7ZSbPoVr+TRdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZDg1MjcwMzI5NWVjZjhiOTcyMDFmOTE2MzEwZjg4ZjRj
MDhhYjcwHhcNMjUwNjI4MTMwMTEyWhcNMjUwNjI5MTMwMTEyWjAzMTEwLwYDVQQD
Eyg1NjY4Y2RlOTc3MjE4OTMzYmY5YjU0NWZmNWI2YjNiYjZiNzJlMDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMZMwU3mjB+oVy4qWlej+pgS4Zhn
indsGvd1j1q0GA5AzmVuwztqP3rlBAoNMNTukCIfwUtNdZ84tndqYxQTpsoxo1JV
DpZAu+sZE1u8pYqaRTTXGSx+1+mxiqO5X/Jj50TCEnmffGx0dy1QLpJg71oJtqoE
UznanTWQdNUQvtC3IxrV0qcsrYQKKjTZzHjiDEjVwe+tE/2BAfT1lO+9DmCVrNzc
G1zV/3a94dNP/lXbLl5sEoXWx1dq45oSqQyxuX/IME9DEEMk3tbpb0J562xkKKzk
m6cbAk8qBKk7rLYEMEBu0dWH9NQs3zNgvNKgRjc12LT+lO7H3MKigVU6hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZozel3IYkzv5tUX/W2s7trcuCYMB8GA1UdIwQY
MBaAFNDYUnAylez4uXIB+RYxD4j0wIq3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME5oU2NES1Y3UGk1Y2dINUZqRVBpUFRBaXJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lYWY5NzQtNmVmZC00NjMzLWI4NGEt
YThhYWY4ODZjODIwLzEvME5oU2NES1Y3UGk1Y2dINUZqRVBpUFRBaXJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9lYWY5NzQtNmVmZC00NjMzLWI4NGEtYThhYWY4ODZjODIw
LzEvME5oU2NES1Y3UGk1Y2dINUZqRVBpUFRBaXJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvEGTcNi
nJ597hp2EELzNcFVYUesQAGF4OBKuKdtx55lvXo/yVKedBxIaN6SGezgEZJhO7/B
UXNh3xf0ncWfXsJEFBhxFu6n9JNGI/R1DGZphV2rsDByGIsRFVOXuDe0rca7A8oK
kVbD7T+s/60cOzrBvjKQykr2igTRoEoAIbc0Z8jn4DD81nkz0v9BJJXSnvCTnBYb
h+3OWp6TiCqodh7fnfCBTszkuCqLrprXmtW+3Mg/A7UCBNX3LF4vRNacar6H/E7u
JWC0gksAp8t5novusNWsXsUm+muYOv0n75b8ANX4nfEk6Cso4+WOzykkXKjbruWH
ZDZoiUTZyzJBUw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:16 2025 by rpki-client