Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
File: pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft (raw, json)
Hash identifier: lRgdqjIb2swnhcfpDatswo+1nBZISR6S4fJsHWQ19U8=
Subject key identifier: 2B:5C:E1:BE:00:FB:4E:33:CF:8E:C0:32:33:3B:BA:74:B4:52:70:FA
Authority key identifier: A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
Certificate issuer: /CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Certificate serial: 0197B96AB4CB3849303BDABDD3DBEB8A45AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
Manifest number: 0E9C
Signing time: Sun 29 Jun 2025 02:01:07 +0000
Manifest this update: Sun 29 Jun 2025 02:01:07 +0000
Manifest next update: Mon 30 Jun 2025 02:01:07 +0000
Files and hashes: 1: WhtcuJJ0NSWsio8f8rQNMbqqeD8.roa (hash: uBIazeW9ZJrIEfawzpjRmH4sNuGdOT1AiFSbiZsPXDU=)
2: pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl (hash: pTjZ7/9k2dNjIldqweY6Fe/CWVYFHhxJLgT+5DJpnqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:b4:cb:38:49:30:3b:da:bd:d3:db:eb:8a:45:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Validity
Not Before: Jun 29 02:01:07 2025 GMT
Not After : Jun 30 02:01:07 2025 GMT
Subject: CN=2b5ce1be00fb4e33cf8ec032333bba74b45270fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:aa:3b:44:60:32:e1:0f:50:31:5f:4d:cb:
78:a2:40:15:64:db:7d:b2:28:42:55:1e:b4:d5:48:
aa:2f:db:cd:19:48:c4:3d:50:48:96:7b:bf:ee:45:
7e:93:96:6f:2c:2c:98:b8:02:6d:c7:b7:a3:d5:69:
b4:f5:f2:22:50:6c:59:79:01:dd:d0:3c:48:c5:a7:
20:7f:de:36:f9:f7:30:dc:ab:9f:7f:7a:d6:5c:6e:
12:dd:8f:97:6d:29:77:05:4c:7c:5b:df:45:a1:65:
e3:e1:ca:74:26:43:ab:a8:e1:7c:6d:e2:79:06:e9:
96:45:c0:84:dc:d6:ff:cd:63:df:6f:96:1a:86:ea:
d9:1a:43:70:de:24:82:12:7d:2e:79:4f:07:31:d4:
30:57:14:cb:3c:87:bb:96:27:ef:67:f2:52:3d:0a:
ca:8f:c7:c8:ff:1a:4f:b3:3d:c7:46:d1:4f:12:80:
ed:d7:71:ff:b6:df:22:80:55:b9:48:98:1a:aa:d2:
90:03:5f:b0:fd:6f:45:35:9b:7f:68:40:59:3c:c4:
f3:a5:e9:18:48:9f:fa:99:8a:7e:6b:ac:24:12:67:
70:4a:d8:34:e4:cc:00:79:ef:ab:b4:62:eb:fc:b1:
75:62:81:ed:59:7d:77:70:5d:c1:66:7e:53:87:b6:
40:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5C:E1:BE:00:FB:4E:33:CF:8E:C0:32:33:3B:BA:74:B4:52:70:FA
X509v3 Authority Key Identifier:
keyid:A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:75:21:b4:e4:bf:5d:b5:f2:37:1a:d3:ba:19:97:79:bf:47:
db:81:af:48:25:1e:a6:1d:df:ed:25:f3:28:ed:18:13:1b:f1:
46:db:43:c7:35:59:54:30:c3:6f:6b:89:73:4b:f2:c2:4f:5b:
cc:02:fe:4a:55:22:4c:e0:6f:58:e0:fa:66:31:aa:a3:68:3d:
0e:e6:ee:69:e5:f4:61:7f:2b:04:06:b7:a2:1d:8c:8a:1c:c3:
6c:9a:a3:1d:b0:98:db:5f:45:24:62:81:35:d8:db:a3:82:2e:
cf:b3:90:2a:de:4c:46:58:bc:2e:2d:ee:71:af:8d:a8:84:04:
39:d4:10:bd:2f:61:e4:2f:05:00:29:19:3c:df:e4:fc:3c:cf:
5a:07:85:2b:2d:e7:9e:45:ad:53:e2:9d:86:e9:cf:7e:95:1b:
32:cc:7f:fd:a8:49:5f:ed:07:1d:6a:0b:31:fa:45:9b:c7:46:
62:f3:5a:3d:69:ba:10:eb:8a:37:83:b8:68:eb:fc:3f:f2:b0:
a9:43:01:73:82:4b:3e:38:c8:c2:76:56:5f:50:8f:f5:2c:ed:
af:0c:ec:24:09:92:30:89:9c:7a:5e:b0:19:40:a6:07:6a:d3:
26:0c:59:1d:3b:6a:57:f9:8c:b5:55:15:fc:0a:72:92:2c:cf:
78:93:f7:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5arTLOEkwO9q909vrikWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZDMyMjY5MzAyZTFjYmNjYmFhYzBlMGU1YWY4YTg2NDQ5
OGExMzUwHhcNMjUwNjI5MDIwMTA3WhcNMjUwNjMwMDIwMTA3WjAzMTEwLwYDVQQD
EygyYjVjZTFiZTAwZmI0ZTMzY2Y4ZWMwMzIzMzNiYmE3NGI0NTI3MGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MuqO0RgMuEPUDFfTct4okAVZNt9
sihCVR601UiqL9vNGUjEPVBIlnu/7kV+k5ZvLCyYuAJtx7ej1Wm09fIiUGxZeQHd
0DxIxacgf942+fcw3Kuff3rWXG4S3Y+XbSl3BUx8W99FoWXj4cp0JkOrqOF8beJ5
BumWRcCE3Nb/zWPfb5YahurZGkNw3iSCEn0ueU8HMdQwVxTLPIe7lifvZ/JSPQrK
j8fI/xpPsz3HRtFPEoDt13H/tt8igFW5SJgaqtKQA1+w/W9FNZt/aEBZPMTzpekY
SJ/6mYp+a6wkEmdwStg05MwAee+rtGLr/LF1YoHtWX13cF3BZn5Th7ZA1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtc4b4A+04zz47AMjM7unS0UnD6MB8GA1UdIwQY
MBaAFKTTImkwLhy8y6rA4OWvioZEmKE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE5NaWFUQXVITHpMcXNEZzVhLUtoa1NZb1RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85NjE2ZWUtMzgxZC00YWZlLTg5MGMt
NmVlNTE0YjI5MTE1LzEvcE5NaWFUQXVITHpMcXNEZzVhLUtoa1NZb1RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85NjE2ZWUtMzgxZC00YWZlLTg5MGMtNmVlNTE0YjI5MTE1
LzEvcE5NaWFUQXVITHpMcXNEZzVhLUtoa1NZb1RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs3UhtOS/
XbXyNxrTuhmXeb9H24GvSCUeph3f7SXzKO0YExvxRttDxzVZVDDDb2uJc0vywk9b
zAL+SlUiTOBvWOD6ZjGqo2g9DubuaeX0YX8rBAa3oh2MihzDbJqjHbCY219FJGKB
Ndjbo4Iuz7OQKt5MRli8Li3uca+NqIQEOdQQvS9h5C8FACkZPN/k/DzPWgeFKy3n
nkWtU+KdhunPfpUbMsx//ahJX+0HHWoLMfpFm8dGYvNaPWm6EOuKN4O4aOv8P/Kw
qUMBc4JLPjjIwnZWX1CP9SztrwzsJAmSMImcel6wGUCmB2rTJgxZHTtqV/mMtVUV
/ApykizPeJP3vw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:32:06 2025 by rpki-client