Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
File: NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft (raw, json)
Hash identifier: MJHZLVbNFqZKZiGH2HM1ugfXZkrDDwlZHEoSEz3T/xE=
Subject key identifier: C5:52:08:D9:CE:6D:DF:9D:F2:FA:91:8A:36:CF:5D:C5:4D:43:74:BF
Authority key identifier: 35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
Certificate issuer: /CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Certificate serial: 0197B77CCE7F2DA972A250158A18361259F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
Manifest number: 0410
Signing time: Sat 28 Jun 2025 17:01:38 +0000
Manifest this update: Sat 28 Jun 2025 17:01:38 +0000
Manifest next update: Sun 29 Jun 2025 17:01:38 +0000
Files and hashes: 1: NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl (hash: onnyU/rhWLtbpAWxL95gx92XFgJp6ZEzKgHXapOAefY=)
2: YYXnMCAt040NcLATlrH2pdrRzy4.roa (hash: //AxvWil0+RRuTzD9Iyynz1Qj6s3Pa74fW9rqeU5a2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:ce:7f:2d:a9:72:a2:50:15:8a:18:36:12:59:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Validity
Not Before: Jun 28 17:01:38 2025 GMT
Not After : Jun 29 17:01:38 2025 GMT
Subject: CN=c55208d9ce6ddf9df2fa918a36cf5dc54d4374bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:85:53:d5:4e:d5:21:aa:ac:d2:6b:73:ad:
64:a4:35:c7:ff:93:e6:6c:a7:3b:59:60:e6:e9:23:
d9:de:ac:8e:33:97:a8:77:c2:ac:40:a5:15:2c:3c:
2b:3e:0e:e6:6b:81:37:75:7a:a4:a9:50:b5:c5:5b:
e3:04:b3:17:a8:39:fc:61:76:8e:8e:df:41:9c:ac:
ea:0f:c4:0d:53:6e:93:9c:bc:6d:68:4c:c2:77:ba:
b6:3e:21:99:dc:7d:a7:98:de:82:f6:ad:f0:be:38:
c3:3e:da:40:7a:1f:de:16:ec:13:40:7e:70:77:b8:
d1:d7:28:fd:fb:f8:43:f1:64:21:9c:40:b1:96:66:
a6:ce:2c:cd:be:f5:7f:a3:80:c5:2c:8e:79:90:a5:
ca:79:f9:4e:40:5b:56:c7:ad:6d:6c:42:7d:e2:6d:
e2:59:18:f5:01:41:4d:04:5f:12:93:35:80:ff:ff:
33:b6:7f:1f:ae:02:56:29:d0:1b:7a:4b:5c:a7:49:
61:ac:64:aa:25:e5:8f:4c:8d:12:d9:da:8d:c8:40:
31:1f:f2:c2:21:f1:20:99:69:15:4a:64:9c:a3:f0:
05:9d:04:7c:ae:02:86:ad:73:95:00:b9:e5:e0:57:
9f:6f:fe:ab:ef:23:ec:00:31:7d:2e:1e:c5:88:f6:
6e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:52:08:D9:CE:6D:DF:9D:F2:FA:91:8A:36:CF:5D:C5:4D:43:74:BF
X509v3 Authority Key Identifier:
keyid:35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b0:40:aa:b1:09:42:a0:5d:f7:67:ee:63:95:99:b3:36:07:
20:d9:5a:07:8d:b3:06:77:0e:53:35:99:3a:32:54:15:99:b3:
f7:67:a8:d9:1e:4b:8c:9b:5d:72:14:e6:41:2e:d2:19:31:73:
c8:bb:40:5f:bc:1b:6e:01:16:ca:bc:96:0d:8e:9c:69:25:63:
b6:72:c5:a4:b3:66:8f:ad:58:e3:be:44:d9:e9:57:61:65:d4:
e5:27:dc:e9:e5:f0:1f:66:eb:2a:10:e2:e6:7f:49:28:d0:ad:
9e:49:bc:e9:4c:21:80:c5:ab:45:dd:14:f3:0d:2b:16:d2:04:
41:35:8f:f8:dd:de:9e:49:51:fc:d5:96:06:86:b9:47:e9:c3:
21:df:4b:c9:3a:13:cf:8a:eb:58:6a:d3:7c:c0:e2:40:79:2b:
eb:5d:9a:a8:74:42:83:50:1d:0f:b5:0e:27:52:93:a5:73:d0:
3a:a6:b8:d3:22:b3:38:9e:96:bd:67:07:24:c1:55:1b:41:2a:
68:ed:c9:ac:f5:87:6c:ff:7d:ea:19:a0:74:42:b3:6d:b4:ff:
c8:72:13:c3:31:db:d1:ec:08:56:23:45:1a:ed:3e:78:1d:bd:
70:67:bf:06:dd:c6:b4:67:d4:96:f1:5b:9c:55:b5:29:b1:6b:
66:e8:eb:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fM5/LalyolAVihg2ElnyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MzYyMGRhNDQ1MmFjODJhYWY0YzhjMDg4MTllYjBiODI1
MTNiODMwHhcNMjUwNjI4MTcwMTM4WhcNMjUwNjI5MTcwMTM4WjAzMTEwLwYDVQQD
EyhjNTUyMDhkOWNlNmRkZjlkZjJmYTkxOGEzNmNmNWRjNTRkNDM3NGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgqFU9VO1SGqrNJrc61kpDXH/5Pm
bKc7WWDm6SPZ3qyOM5eod8KsQKUVLDwrPg7ma4E3dXqkqVC1xVvjBLMXqDn8YXaO
jt9BnKzqD8QNU26TnLxtaEzCd7q2PiGZ3H2nmN6C9q3wvjjDPtpAeh/eFuwTQH5w
d7jR1yj9+/hD8WQhnECxlmamzizNvvV/o4DFLI55kKXKeflOQFtWx61tbEJ94m3i
WRj1AUFNBF8SkzWA//8ztn8frgJWKdAbektcp0lhrGSqJeWPTI0S2dqNyEAxH/LC
IfEgmWkVSmSco/AFnQR8rgKGrXOVALnl4Fefb/6r7yPsADF9Lh7FiPZu7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVSCNnObd+d8vqRijbPXcVNQ3S/MB8GA1UdIwQY
MBaAFDU2INpEUqyCqvTIwIgZ6wuCUTuDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlRZZzJrUlNySUtxOU1qQWlCbnJDNEpSTzRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iZjI2MzEtY2ZhYy00YTg3LWEzN2It
NTUxNTg0ZTVjMGE0LzEvTlRZZzJrUlNySUtxOU1qQWlCbnJDNEpSTzRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9iZjI2MzEtY2ZhYy00YTg3LWEzN2ItNTUxNTg0ZTVjMGE0
LzEvTlRZZzJrUlNySUtxOU1qQWlCbnJDNEpSTzRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOrBAqrEJ
QqBd92fuY5WZszYHINlaB42zBncOUzWZOjJUFZmz92eo2R5LjJtdchTmQS7SGTFz
yLtAX7wbbgEWyryWDY6caSVjtnLFpLNmj61Y475E2elXYWXU5Sfc6eXwH2brKhDi
5n9JKNCtnkm86UwhgMWrRd0U8w0rFtIEQTWP+N3enklR/NWWBoa5R+nDId9LyToT
z4rrWGrTfMDiQHkr612aqHRCg1AdD7UOJ1KTpXPQOqa40yKzOJ6WvWcHJMFVG0Eq
aO3JrPWHbP996hmgdEKzbbT/yHITwzHb0ewIViNFGu0+eB29cGe/Bt3GtGfUlvFb
nFW1KbFrZujr5A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:18 2025 by rpki-client