Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
File: nfbRY1k964rv8HL-yljm8_HE5-U.mft (raw, json)
Hash identifier: NEAS1qCjl2QgEEp+2TRkXj3FCaj28lvOx9UbRVNvMHc=
Subject key identifier: CF:A1:94:8D:0B:40:0B:28:C8:71:98:78:2B:EE:FE:BD:FF:EF:AA:08
Authority key identifier: 9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
Certificate issuer: /CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Certificate serial: 0197C5010FB8016D41B9031422E37BF28CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
Manifest number: 0C58
Signing time: Tue 01 Jul 2025 08:01:10 +0000
Manifest this update: Tue 01 Jul 2025 08:01:10 +0000
Manifest next update: Wed 02 Jul 2025 08:01:10 +0000
Files and hashes: 1: XM057xIBl4X4QJASTmfkRwaiNaE.roa (hash: vZ1H1/yQjb9EVPL0oyydRTCpB/F5AEPyVx/M+2z5CZ0=)
2: nfbRY1k964rv8HL-yljm8_HE5-U.crl (hash: uLvhrRREKrqtusWLNzMSID/I2Q2r74dsHLySBuGYR1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:01:0f:b8:01:6d:41:b9:03:14:22:e3:7b:f2:8c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Validity
Not Before: Jul 1 08:01:10 2025 GMT
Not After : Jul 2 08:01:10 2025 GMT
Subject: CN=cfa1948d0b400b28c87198782beefebdffefaa08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:3f:ef:71:f5:05:df:ed:dd:3f:1a:3a:32:
f3:c4:a6:8d:76:11:31:ad:9a:5d:f4:97:c8:e1:44:
c7:d4:07:64:3a:78:1c:a5:4a:bf:c1:ea:a6:29:12:
cf:fd:09:4d:83:49:8f:6e:b6:de:24:ad:d9:06:7d:
6f:fb:2e:ee:90:b6:db:a5:fd:31:15:d2:e3:15:24:
9a:9a:e8:25:a3:c7:40:9d:c8:9c:02:1c:2c:66:c1:
d9:66:c7:a4:ff:2b:a8:c4:0b:20:a1:f7:73:fe:30:
34:41:e0:0f:c5:46:53:df:31:46:eb:a6:86:2e:77:
4f:9b:19:45:c7:c9:00:55:3a:b5:d7:ad:8c:4d:e5:
47:74:b5:98:9e:97:e2:0d:1f:6b:e4:ea:7a:65:cf:
df:33:c9:db:e8:d7:d6:0e:f0:0e:ee:9e:5b:bb:41:
f0:a0:ea:81:86:5a:42:08:01:4c:a9:dc:db:c1:64:
57:30:d5:fa:d2:e3:17:fd:c8:6a:d4:14:b7:aa:df:
2c:cf:f4:45:cf:78:aa:30:60:40:c8:b6:35:2e:91:
e4:17:d0:b1:1e:b1:1c:2f:6e:26:6e:9a:02:dc:d9:
96:de:a0:4f:11:09:b0:2c:bf:23:66:65:9f:42:e5:
46:ff:88:8f:a6:eb:fb:9b:27:79:bd:f4:5f:2e:e7:
ea:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A1:94:8D:0B:40:0B:28:C8:71:98:78:2B:EE:FE:BD:FF:EF:AA:08
X509v3 Authority Key Identifier:
keyid:9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2a:d1:2a:d7:fd:2c:ef:be:71:cf:64:21:f6:a9:b3:e5:9a:
97:9e:24:47:2c:59:5a:8f:37:90:3f:f8:3b:63:30:1b:a7:0e:
a2:e3:54:e3:70:5c:8b:24:50:c8:db:2e:0a:5a:cf:77:6a:8d:
5b:0d:6c:57:6c:91:5f:50:6b:e5:0d:72:ad:69:45:e3:6d:18:
9f:6c:4b:0c:66:01:eb:13:29:07:a6:47:28:2b:8d:77:18:2a:
fc:d4:2f:70:b0:8c:93:56:41:0d:42:6c:8c:42:9b:08:06:0d:
fd:dd:53:68:ea:43:7d:63:89:65:5f:c6:19:95:20:30:51:4d:
c6:16:a5:35:65:bc:99:47:64:4f:1b:40:fa:b5:75:86:b2:84:
d9:eb:08:2c:9d:0b:20:e1:a6:d2:38:12:40:b8:a7:af:12:d3:
33:42:39:70:53:f7:db:7d:cf:7d:cb:36:b7:35:b2:21:ea:bf:
90:38:1c:37:8e:9c:6a:3a:bc:47:76:3a:44:02:49:82:cd:de:
99:64:53:ea:3e:d9:93:e8:b1:e0:5a:27:c2:b4:f4:14:cc:f2:
52:f8:5a:78:8f:fc:de:bf:fa:f2:76:93:7e:18:55:5a:08:46:
76:f0:da:df:44:a9:f8:f9:77:d4:2f:49:79:dd:9b:36:11:d8:
4e:df:75:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfFAQ+4AW1BuQMUIuN78oz7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZjZkMTYzNTkzZGViOGFlZmYwNzJmZWNhNThlNmYzZjFj
NGU3ZTUwHhcNMjUwNzAxMDgwMTEwWhcNMjUwNzAyMDgwMTEwWjAzMTEwLwYDVQQD
EyhjZmExOTQ4ZDBiNDAwYjI4Yzg3MTk4NzgyYmVlZmViZGZmZWZhYTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5M/73H1Bd/t3T8aOjLzxKaNdhEx
rZpd9JfI4UTH1AdkOngcpUq/weqmKRLP/QlNg0mPbrbeJK3ZBn1v+y7ukLbbpf0x
FdLjFSSamuglo8dAncicAhwsZsHZZsek/yuoxAsgofdz/jA0QeAPxUZT3zFG66aG
LndPmxlFx8kAVTq1162MTeVHdLWYnpfiDR9r5Op6Zc/fM8nb6NfWDvAO7p5bu0Hw
oOqBhlpCCAFMqdzbwWRXMNX60uMX/chq1BS3qt8sz/RFz3iqMGBAyLY1LpHkF9Cx
HrEcL24mbpoC3NmW3qBPEQmwLL8jZmWfQuVG/4iPpuv7myd5vfRfLufqOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+hlI0LQAsoyHGYeCvu/r3/76oIMB8GA1UdIwQY
MBaAFJ320WNZPeuK7/By/spY5vPxxOflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmZiUlkxazk2NHJ2OEhMLXlsam04X0hFNS1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mZjI1ZDctNWZmYS00Njg2LTgzMjYt
NjlkNzljOWQwNzIxLzEvbmZiUlkxazk2NHJ2OEhMLXlsam04X0hFNS1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mZjI1ZDctNWZmYS00Njg2LTgzMjYtNjlkNzljOWQwNzIx
LzEvbmZiUlkxazk2NHJ2OEhMLXlsam04X0hFNS1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdirRKtf9
LO++cc9kIfaps+Wal54kRyxZWo83kD/4O2MwG6cOouNU43BciyRQyNsuClrPd2qN
Ww1sV2yRX1Br5Q1yrWlF420Yn2xLDGYB6xMpB6ZHKCuNdxgq/NQvcLCMk1ZBDUJs
jEKbCAYN/d1TaOpDfWOJZV/GGZUgMFFNxhalNWW8mUdkTxtA+rV1hrKE2esILJ0L
IOGm0jgSQLinrxLTM0I5cFP3233Pfcs2tzWyIeq/kDgcN46cajq8R3Y6RAJJgs3e
mWRT6j7Zk+ix4FonwrT0FMzyUvhaeI/83r/68naTfhhVWghGdvDa30Sp+Pl31C9J
ed2bNhHYTt91uw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 18:35:53 2025 by rpki-client