Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
File: NbA-yF0IYHprHd8f553GUcz-Pzc.mft (raw, json)
Hash identifier: WJlA6J+DZ1FCFyYw0ZNoeHwrNQf3sBkILXBEAYrdIPg=
Subject key identifier: 63:06:CF:30:40:52:6A:36:B7:F1:86:09:CE:24:19:18:4E:31:23:35
Authority key identifier: 35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
Certificate issuer: /CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Certificate serial: 0197B632B69EFB052C9BC6655A4490A39D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 11:01:06 +0000
Manifest this update: Sat 28 Jun 2025 11:01:06 +0000
Manifest next update: Sun 29 Jun 2025 11:01:06 +0000
Files and hashes: 1: EeFPhEstvW1EwmoMEs09YH1cZlE.roa (hash: zuogsczPuVIDLnfiQ5YgxbbQeRIuIE6FvsJkQLHPGfI=)
2: NbA-yF0IYHprHd8f553GUcz-Pzc.crl (hash: v/tZUg3ZHA/FOu7lAO7EXXeJMImsuof0Zob9mpU48rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:b6:9e:fb:05:2c:9b:c6:65:5a:44:90:a3:9d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Validity
Not Before: Jun 28 11:01:06 2025 GMT
Not After : Jun 29 11:01:06 2025 GMT
Subject: CN=6306cf3040526a36b7f18609ce2419184e312335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7a:23:bf:83:a7:89:c8:c9:31:f3:ff:b1:da:
bb:7c:9a:71:91:f8:fa:75:2a:63:95:0b:17:1f:12:
dc:1c:ef:ba:70:c6:a9:e9:e5:55:64:73:47:fd:d2:
cc:97:16:8a:61:21:ad:99:72:0f:e9:9d:e7:ac:a1:
49:29:35:c8:c0:12:a9:e9:a8:9f:ce:a3:22:ff:26:
5c:91:d8:d7:8f:77:7f:47:8d:22:43:36:33:da:67:
e8:d7:07:eb:29:ed:57:3e:a2:18:fc:ee:aa:8d:e6:
b5:a1:83:a8:cb:be:0c:ba:67:14:f7:4d:47:24:0d:
86:ce:af:61:6f:99:fd:22:9b:c4:a5:2b:76:64:23:
7b:7c:ff:e2:a8:a5:18:47:eb:ab:5a:d0:63:85:a5:
2b:39:8e:fa:f4:1f:33:79:03:ce:bf:81:c4:69:24:
20:01:3a:0f:dc:e9:4d:f4:d9:bb:ad:83:09:75:71:
f4:52:c8:71:fc:c9:c0:20:df:ca:ed:e0:a5:f0:9c:
0c:e7:0a:b8:15:47:94:55:43:87:e7:ca:70:82:41:
b5:8a:ee:35:25:ba:8e:fe:06:b7:72:94:f2:37:86:
4c:72:74:f5:a2:2a:3c:f9:f1:9d:14:d3:a0:ee:9b:
a2:68:11:e4:06:81:af:f5:90:9b:e9:fe:ca:9e:a8:
9d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:06:CF:30:40:52:6A:36:B7:F1:86:09:CE:24:19:18:4E:31:23:35
X509v3 Authority Key Identifier:
keyid:35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4f:4f:5b:15:ad:43:79:12:9e:d6:98:f8:79:19:7d:61:82:
74:d3:51:82:18:c9:e4:61:47:00:63:0c:79:00:41:7c:7d:f6:
47:da:5c:39:97:b4:ca:5e:05:c2:69:6f:4a:ce:1e:46:3d:2a:
6e:99:d2:d7:fa:c0:29:3a:8d:fa:b5:11:77:3b:0c:c3:02:bf:
ef:34:29:44:7c:e7:ed:24:df:bd:3b:5c:1e:dc:f7:10:e2:13:
a8:b2:26:46:e7:0b:9b:30:0c:88:87:7f:08:f0:e7:20:ff:8f:
7a:a6:c5:9d:78:71:29:33:34:9a:af:66:c3:44:75:a0:db:63:
0f:7a:f3:21:b2:f9:81:3f:6b:8e:85:a3:98:e6:cf:e3:02:00:
71:6f:cd:05:f1:b3:be:58:9e:74:ba:bc:8b:b6:77:ee:63:ca:
8e:81:24:34:49:13:5c:3e:d6:a6:17:3b:80:e4:13:a5:86:7f:
e7:7b:ab:60:91:3b:21:9c:a2:92:eb:69:ee:e0:99:85:5d:99:
fc:f7:c6:9b:b9:1f:d3:b4:16:37:e3:1f:3f:78:30:6c:ed:22:
cb:87:cd:3d:55:64:32:5c:62:a5:0b:f9:44:ae:ce:dc:2d:bb:
87:7f:9c:6b:ff:0c:6a:3c:e0:a0:9c:2b:71:98:06:2c:5e:32:
3d:7c:12:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2Mrae+wUsm8ZlWkSQo52eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1YjAzZWM4NWQwODYwN2E2YjFkZGYxZmU3OWRjNjUxY2Nm
ZTNmMzcwHhcNMjUwNjI4MTEwMTA2WhcNMjUwNjI5MTEwMTA2WjAzMTEwLwYDVQQD
Eyg2MzA2Y2YzMDQwNTI2YTM2YjdmMTg2MDljZTI0MTkxODRlMzEyMzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXojv4OnicjJMfP/sdq7fJpxkfj6
dSpjlQsXHxLcHO+6cMap6eVVZHNH/dLMlxaKYSGtmXIP6Z3nrKFJKTXIwBKp6aif
zqMi/yZckdjXj3d/R40iQzYz2mfo1wfrKe1XPqIY/O6qjea1oYOoy74MumcU901H
JA2Gzq9hb5n9IpvEpSt2ZCN7fP/iqKUYR+urWtBjhaUrOY769B8zeQPOv4HEaSQg
AToP3OlN9Nm7rYMJdXH0Ushx/MnAIN/K7eCl8JwM5wq4FUeUVUOH58pwgkG1iu41
JbqO/ga3cpTyN4ZMcnT1oio8+fGdFNOg7puiaBHkBoGv9ZCb6f7KnqidcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMGzzBAUmo2t/GGCc4kGRhOMSM1MB8GA1UdIwQY
MBaAFDWwPshdCGB6ax3fH+edxlHM/j83MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmJBLXlGMElZSHBySGQ4ZjU1M0dVY3otUHpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9jYzRmZTktZTQ4Yy00MmRhLTk3ZWEt
YWI1N2NhYmMxOGY3LzEvTmJBLXlGMElZSHBySGQ4ZjU1M0dVY3otUHpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9jYzRmZTktZTQ4Yy00MmRhLTk3ZWEtYWI1N2NhYmMxOGY3
LzEvTmJBLXlGMElZSHBySGQ4ZjU1M0dVY3otUHpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABU9PWxWt
Q3kSntaY+HkZfWGCdNNRghjJ5GFHAGMMeQBBfH32R9pcOZe0yl4FwmlvSs4eRj0q
bpnS1/rAKTqN+rURdzsMwwK/7zQpRHzn7STfvTtcHtz3EOITqLImRucLmzAMiId/
CPDnIP+PeqbFnXhxKTM0mq9mw0R1oNtjD3rzIbL5gT9rjoWjmObP4wIAcW/NBfGz
vliedLq8i7Z37mPKjoEkNEkTXD7Wphc7gOQTpYZ/53urYJE7IZyikutp7uCZhV2Z
/PfGm7kf07QWN+MfP3gwbO0iy4fNPVVkMlxipQv5RK7O3C27h3+ca/8MajzgoJwr
cZgGLF4yPXwS+A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:59 2025 by rpki-client