Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
File: nmh1g4EMwAZO207-QFf1phpV5ws.mft (raw, json)
Hash identifier: UUIgYd4sBv12VUNPtonzAahFucpDvLnaWmoJT+1fFI0=
Subject key identifier: 0F:52:62:91:84:93:76:54:15:74:E7:7E:82:46:2D:C8:A2:E2:51:5D
Authority key identifier: 9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
Certificate issuer: /CN=9e687583810cc0064edb4efe4057f5a61a55e70b
Certificate serial: 0197B70F248D7DE54773D5DD47AFD45B92A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
Manifest number: 048A
Signing time: Sat 28 Jun 2025 15:01:52 +0000
Manifest this update: Sat 28 Jun 2025 15:01:52 +0000
Manifest next update: Sun 29 Jun 2025 15:01:52 +0000
Files and hashes: 1: nmh1g4EMwAZO207-QFf1phpV5ws.crl (hash: B6pJEyQm8WTSO+bTBAFugrSfqEWeBCMffc+GqXXw6Aw=)
2: qw-aF3yIkt-72WfpE7ETeHkvHMU.roa (hash: 3nZH1KB8lozx5AtSdJomkLmrFoDBz1VyVSOmQdHc1wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:24:8d:7d:e5:47:73:d5:dd:47:af:d4:5b:92:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e687583810cc0064edb4efe4057f5a61a55e70b
Validity
Not Before: Jun 28 15:01:52 2025 GMT
Not After : Jun 29 15:01:52 2025 GMT
Subject: CN=0f526291849376541574e77e82462dc8a2e2515d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:92:b0:ca:57:b8:88:a6:80:f6:97:07:8d:
f6:f5:b2:09:cf:99:08:77:e4:75:7f:1a:ca:e6:79:
c6:d3:e3:2f:31:63:ce:36:c9:7c:a3:9b:2a:62:dc:
4e:fa:91:15:c3:3a:f6:26:6e:02:79:28:5a:fa:f0:
b0:f1:af:2a:5e:3e:4c:84:33:10:07:ea:fb:39:68:
8a:9c:83:c0:93:54:5d:4f:68:f2:c9:6f:2f:6f:a1:
78:0b:bf:f0:1c:59:d2:13:23:03:14:04:d5:c3:92:
92:40:bd:16:51:bb:af:5e:7d:ff:f6:cf:ef:0e:e2:
50:f4:16:89:07:93:46:49:a6:d7:12:ff:cd:11:ac:
cc:e5:7a:4c:01:b3:5c:63:a3:b0:59:c4:eb:8d:99:
4a:f9:3b:f3:60:6c:62:d2:b4:5d:3d:0f:76:69:4e:
3d:92:83:88:ac:65:f7:a2:dc:7e:6c:f4:38:56:96:
ad:fb:38:82:50:0e:2e:54:f3:73:58:80:d9:80:44:
ff:1d:f4:2c:c9:94:29:af:54:8a:34:02:78:6c:ee:
b0:5e:38:f4:96:70:dc:61:50:89:f9:de:1f:f0:59:
e2:cf:40:b1:71:95:12:80:ac:f3:00:55:20:7f:e2:
a9:23:18:e4:70:bd:89:96:19:e9:34:4d:b2:b3:90:
8e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:52:62:91:84:93:76:54:15:74:E7:7E:82:46:2D:C8:A2:E2:51:5D
X509v3 Authority Key Identifier:
keyid:9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:a7:99:69:b9:2c:c7:84:0f:69:39:01:ab:70:a6:19:c6:31:
17:0a:e8:2b:e1:94:22:17:af:a0:e2:fe:45:8c:68:86:92:ac:
0f:86:6c:e7:ef:86:b6:bc:d6:3c:83:39:47:9f:4c:36:1c:60:
95:d3:e4:92:eb:4c:3e:e3:e1:72:94:09:b2:4d:ce:44:79:fd:
ac:c3:0a:22:bd:e4:d4:4b:da:f9:f4:89:68:00:63:20:db:22:
fd:3f:4c:71:06:20:2f:73:0b:50:ac:3a:c7:3b:03:1c:a0:1d:
5a:8f:da:c6:88:5a:65:3e:26:7d:db:b4:f8:ae:11:52:0a:0f:
33:ea:cd:a8:7a:eb:31:1f:b1:0f:2e:b4:b3:22:3f:c7:22:26:
30:37:f9:13:8c:ea:b1:30:4d:e7:ae:7f:56:da:50:d2:8b:06:
c2:dc:b1:2f:df:ef:82:59:b3:f5:50:38:9e:70:79:10:25:dc:
76:f0:bd:05:36:cf:77:5e:04:7b:0a:e5:c7:7d:f2:57:68:a4:
7a:60:33:5e:de:b2:5e:0c:f6:1d:65:ac:f9:91:d6:96:d1:50:
d5:bc:b5:10:70:20:ca:5f:6a:1b:83:c6:6b:4d:b3:0f:f7:5c:
68:e5:80:a9:42:38:95:29:c9:ef:82:c7:72:83:7c:e3:6e:d0:
1a:9f:b4:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DySNfeVHc9XdR6/UW5KoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNjg3NTgzODEwY2MwMDY0ZWRiNGVmZTQwNTdmNWE2MWE1
NWU3MGIwHhcNMjUwNjI4MTUwMTUyWhcNMjUwNjI5MTUwMTUyWjAzMTEwLwYDVQQD
EygwZjUyNjI5MTg0OTM3NjU0MTU3NGU3N2U4MjQ2MmRjOGEyZTI1MTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8KSsMpXuIimgPaXB4329bIJz5kI
d+R1fxrK5nnG0+MvMWPONsl8o5sqYtxO+pEVwzr2Jm4CeSha+vCw8a8qXj5MhDMQ
B+r7OWiKnIPAk1RdT2jyyW8vb6F4C7/wHFnSEyMDFATVw5KSQL0WUbuvXn3/9s/v
DuJQ9BaJB5NGSabXEv/NEazM5XpMAbNcY6OwWcTrjZlK+TvzYGxi0rRdPQ92aU49
koOIrGX3otx+bPQ4Vpat+ziCUA4uVPNzWIDZgET/HfQsyZQpr1SKNAJ4bO6wXjj0
lnDcYVCJ+d4f8Fniz0CxcZUSgKzzAFUgf+KpIxjkcL2JlhnpNE2ys5COnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9SYpGEk3ZUFXTnfoJGLcii4lFdMB8GA1UdIwQY
MBaAFJ5odYOBDMAGTttO/kBX9aYaVecLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm1oMWc0RU13QVpPMjA3LVFGZjFwaHBWNXdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC83Zjc4ZTMtMGNjZC00MWZjLTk4ODMt
NjliZTAzN2JmMDc5LzEvbm1oMWc0RU13QVpPMjA3LVFGZjFwaHBWNXdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC83Zjc4ZTMtMGNjZC00MWZjLTk4ODMtNjliZTAzN2JmMDc5
LzEvbm1oMWc0RU13QVpPMjA3LVFGZjFwaHBWNXdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyqeZabks
x4QPaTkBq3CmGcYxFwroK+GUIhevoOL+RYxohpKsD4Zs5++GtrzWPIM5R59MNhxg
ldPkkutMPuPhcpQJsk3ORHn9rMMKIr3k1Eva+fSJaABjINsi/T9McQYgL3MLUKw6
xzsDHKAdWo/axohaZT4mfdu0+K4RUgoPM+rNqHrrMR+xDy60syI/xyImMDf5E4zq
sTBN565/VtpQ0osGwtyxL9/vglmz9VA4nnB5ECXcdvC9BTbPd14Eewrlx33yV2ik
emAzXt6yXgz2HWWs+ZHWltFQ1by1EHAgyl9qG4PGa02zD/dcaOWAqUI4lSnJ74LH
coN8427QGp+0Mg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:28:31 2025 by rpki-client