Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
File: NXMLuLJiPn9lphY2BNHIX5EGKI8.mft (raw, json)
Hash identifier: UvYF6n1VyHSP9FdMI+G887wCQLzULW/8bT6Q0ogAmUA=
Subject key identifier: F2:CA:8D:C3:8A:B5:93:97:EE:01:01:70:50:35:8E:53:CF:64:05:AC
Authority key identifier: 35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
Certificate issuer: /CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Certificate serial: 0197B5C49F03BDBFD88C6E7572FA6E6A90A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 09:00:51 +0000
Manifest this update: Sat 28 Jun 2025 09:00:51 +0000
Manifest next update: Sun 29 Jun 2025 09:00:51 +0000
Files and hashes: 1: 3u_UTWM5MnsnNlqUobIqKDYLwKo.roa (hash: veRRLy9ZMKOvJkYp1WIUbOdpjqnYEIFrYe5fkHyfQnc=)
2: NXMLuLJiPn9lphY2BNHIX5EGKI8.crl (hash: KSwnJ16kJmu/yYTvBf+iTtaQCYliHB7JMzdvS9qKoS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:9f:03:bd:bf:d8:8c:6e:75:72:fa:6e:6a:90:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Validity
Not Before: Jun 28 09:00:51 2025 GMT
Not After : Jun 29 09:00:51 2025 GMT
Subject: CN=f2ca8dc38ab59397ee01017050358e53cf6405ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4f:4c:82:2e:49:fa:8d:62:c3:8f:fa:5f:17:
8e:1a:cb:38:f4:68:f7:f5:6b:88:45:62:ff:41:ad:
ee:bb:5a:61:49:5a:82:cd:da:6c:88:33:b2:e8:56:
74:e4:19:b4:44:e3:e7:07:88:5c:7d:4e:f6:bf:6e:
b5:ae:0c:4d:0f:da:1d:f7:97:21:cf:7e:2d:24:d6:
f3:2a:d5:b6:63:28:6b:e7:7a:b3:38:4e:88:72:c1:
0f:00:94:44:4f:c0:84:2c:44:db:de:28:be:f7:58:
23:7f:27:7f:2d:08:7d:d2:71:01:c5:9d:db:e8:38:
28:7e:3d:bc:68:8b:fb:d0:99:6c:e3:c2:03:df:5c:
26:7b:74:9c:bb:0a:8b:b1:98:cb:25:2a:4f:02:e1:
0e:89:c8:07:0f:d4:ce:78:56:19:61:97:81:46:b8:
d5:db:c9:3f:ce:0e:d3:15:fe:c7:29:5c:31:55:ff:
6e:40:37:77:60:ed:12:34:bc:cb:93:f3:a3:8d:d5:
a8:a2:d4:1f:1d:27:bd:14:99:0e:c1:10:18:a4:e9:
8c:83:0b:35:b4:25:44:53:fe:b5:21:b8:19:e1:62:
fa:2c:5a:40:69:f9:1a:21:44:0e:04:31:06:4d:c3:
15:0d:dd:fa:a0:67:ac:03:bb:36:35:27:69:30:91:
5e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CA:8D:C3:8A:B5:93:97:EE:01:01:70:50:35:8E:53:CF:64:05:AC
X509v3 Authority Key Identifier:
keyid:35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:85:56:d0:bb:f3:5d:d9:73:77:6f:36:41:d6:79:11:ce:45:
cf:7a:bb:d5:02:a0:3a:81:c2:24:0c:0d:56:f5:d1:c0:62:99:
74:a5:e3:b6:ac:b3:c6:e1:87:bb:af:0e:7b:f8:6e:91:bf:f7:
32:cb:fa:5c:93:4e:b1:6a:b9:9e:91:0a:b8:27:34:2f:86:a9:
20:c7:66:0b:dd:e0:2c:91:0b:17:4a:24:4f:de:33:00:19:00:
c1:5b:d5:64:e7:f4:7d:b4:fa:aa:9c:9c:41:c4:49:a5:68:a2:
6f:f5:77:77:b2:b6:de:ab:d5:e7:75:5d:73:07:9f:cb:98:ad:
5d:ff:fb:47:98:d7:db:f4:76:b4:83:86:07:9e:72:b5:45:b4:
3b:4c:98:2f:94:52:da:42:08:d3:33:ea:68:a5:83:17:23:29:
dc:9b:a9:5f:48:d8:19:46:da:dd:3f:51:18:f8:36:1c:e5:63:
f7:d4:cc:11:3f:39:8a:74:b2:7d:13:f7:3f:6a:2e:45:88:f2:
74:9f:64:50:b4:a8:57:9e:8c:b0:63:33:08:56:69:10:5e:1f:
b7:77:ab:f8:65:ca:e1:7a:8a:7f:9e:0f:20:b6:a2:dc:73:09:
55:d3:94:3f:59:5c:59:6c:5c:33:6f:a5:d8:62:7c:a7:76:11:
34:09:c6:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xJ8Dvb/YjG51cvpuapCiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NzMwYmI4YjI2MjNlN2Y2NWE2MTYzNjA0ZDFjODVmOTEw
NjI4OGYwHhcNMjUwNjI4MDkwMDUxWhcNMjUwNjI5MDkwMDUxWjAzMTEwLwYDVQQD
EyhmMmNhOGRjMzhhYjU5Mzk3ZWUwMTAxNzA1MDM1OGU1M2NmNjQwNWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1U9Mgi5J+o1iw4/6XxeOGss49Gj3
9WuIRWL/Qa3uu1phSVqCzdpsiDOy6FZ05Bm0ROPnB4hcfU72v261rgxND9od95ch
z34tJNbzKtW2Yyhr53qzOE6IcsEPAJRET8CELETb3ii+91gjfyd/LQh90nEBxZ3b
6Dgofj28aIv70Jls48ID31wme3ScuwqLsZjLJSpPAuEOicgHD9TOeFYZYZeBRrjV
28k/zg7TFf7HKVwxVf9uQDd3YO0SNLzLk/OjjdWootQfHSe9FJkOwRAYpOmMgws1
tCVEU/61IbgZ4WL6LFpAafkaIUQOBDEGTcMVDd36oGesA7s2NSdpMJFegQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLKjcOKtZOX7gEBcFA1jlPPZAWsMB8GA1UdIwQY
MBaAFDVzC7iyYj5/ZaYWNgTRyF+RBiiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlhNTHVMSmlQbjlscGhZMkJOSElYNUVHS0k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC81YzUxMzgtYWVlNC00ODJjLTkxM2Mt
M2E0ZGZmOGU4ZGVkLzEvTlhNTHVMSmlQbjlscGhZMkJOSElYNUVHS0k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC81YzUxMzgtYWVlNC00ODJjLTkxM2MtM2E0ZGZmOGU4ZGVk
LzEvTlhNTHVMSmlQbjlscGhZMkJOSElYNUVHS0k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYVW0Lvz
Xdlzd282QdZ5Ec5Fz3q71QKgOoHCJAwNVvXRwGKZdKXjtqyzxuGHu68Oe/hukb/3
Msv6XJNOsWq5npEKuCc0L4apIMdmC93gLJELF0okT94zABkAwVvVZOf0fbT6qpyc
QcRJpWiib/V3d7K23qvV53Vdcwefy5itXf/7R5jX2/R2tIOGB55ytUW0O0yYL5RS
2kII0zPqaKWDFyMp3JupX0jYGUba3T9RGPg2HOVj99TMET85inSyfRP3P2ouRYjy
dJ9kULSoV56MsGMzCFZpEF4ft3er+GXK4XqKf54PILai3HMJVdOUP1lcWWxcM2+l
2GJ8p3YRNAnGag==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:50 2025 by rpki-client