Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
File: nOTmWuzJXURqDLZAuXZvoPgVDjw.mft (raw, json)
Hash identifier: HkCC5B6VWz5NF3WZoD1OOyDtB+ApqAVt9ymLeqaioA8=
Subject key identifier: B9:C6:51:BF:FC:40:28:F5:46:68:8B:44:1C:3F:A1:11:7F:6A:8C:32
Authority key identifier: 9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
Certificate issuer: /CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Certificate serial: 0197CDCD2F48805BEFD9B2EAB5D89633D0EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
Manifest number: 0EC4
Signing time: Thu 03 Jul 2025 01:01:05 +0000
Manifest this update: Thu 03 Jul 2025 01:01:05 +0000
Manifest next update: Fri 04 Jul 2025 01:01:05 +0000
Files and hashes: 1: nOTmWuzJXURqDLZAuXZvoPgVDjw.crl (hash: WoWVGHTXxMYZKmv94MCM6OV3gkKjCXN82FrqERYMrfk=)
2: wnex2LpnDh2tDYAOL_JlA2jqYbg.roa (hash: jkFPmngwGBf/VR9fqzS0+q+xo9EQNuNbpIxHsY+rxw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:2f:48:80:5b:ef:d9:b2:ea:b5:d8:96:33:d0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Validity
Not Before: Jul 3 01:01:05 2025 GMT
Not After : Jul 4 01:01:05 2025 GMT
Subject: CN=b9c651bffc4028f546688b441c3fa1117f6a8c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:77:2b:f9:27:7f:6d:dd:f7:b3:00:51:04:
96:08:a2:8c:65:80:bc:51:3f:d3:70:a9:e5:fe:d8:
9a:18:e1:ea:f6:d7:cd:21:25:e0:ca:1e:bf:d4:f0:
d5:72:da:69:92:37:25:39:b8:c8:a0:26:44:1b:b2:
0d:c0:16:4d:4b:88:89:72:70:6d:bf:e6:06:57:64:
87:0b:6c:07:eb:83:5a:2e:be:f3:e6:fc:59:96:63:
ec:c1:bc:5a:4b:2a:8f:58:88:5b:95:d1:da:5f:ac:
07:34:8e:ef:90:51:ad:67:2e:2b:68:cd:48:cf:18:
84:a9:24:27:d3:bd:db:24:34:4d:80:26:6b:b6:b5:
43:2a:9d:53:4a:79:29:bf:bb:da:54:ec:45:59:63:
57:f2:5c:73:34:e0:79:2e:ce:ec:43:6c:03:06:90:
4c:16:49:1d:0c:a0:f0:1f:e5:20:1f:a3:6b:17:5c:
4e:05:ea:70:9f:8a:e5:25:68:b4:39:be:46:b5:b1:
86:c1:e0:f2:ee:6f:11:ea:89:f0:ed:22:2a:34:c2:
44:4c:11:5f:fb:d6:4d:73:21:11:ec:7f:40:8a:e7:
b4:7c:f6:9b:94:be:0c:b7:99:ba:8e:c9:33:eb:de:
83:0a:7d:85:ce:96:09:4b:a9:8e:38:85:ce:8c:24:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C6:51:BF:FC:40:28:F5:46:68:8B:44:1C:3F:A1:11:7F:6A:8C:32
X509v3 Authority Key Identifier:
keyid:9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:33:8a:dd:07:75:4b:b5:e9:8c:9c:10:60:7e:61:14:c2:ee:
f8:92:d9:97:16:93:d6:83:a4:37:bf:ab:bb:e8:4b:1a:1b:ab:
91:52:d3:8b:43:19:2f:97:e7:2f:d4:f8:89:7c:39:6a:93:21:
9d:f5:40:75:6b:05:de:7c:b8:a9:ef:d2:77:97:c2:be:19:3f:
00:14:87:83:d2:24:50:b3:cd:da:56:19:4d:5a:93:3e:ad:39:
8b:a4:de:3a:c9:80:e3:41:c6:bf:0e:6d:ff:85:01:ce:b3:68:
c0:4b:b9:db:13:79:0b:6d:a0:55:d7:ac:3d:28:4c:30:50:0b:
3a:d7:4b:6d:2b:80:0c:7c:a1:ba:5f:e3:98:82:b6:18:49:76:
f4:82:64:4d:47:2a:dd:8f:45:49:2a:02:7e:be:6d:b1:84:8d:
4d:7b:e3:55:e8:5c:9a:96:d9:77:eb:cf:2c:db:27:fb:3e:6f:
63:8c:28:3f:93:0c:cf:90:98:db:41:fa:02:ef:cd:1f:a7:a2:
ee:e2:aa:23:3c:90:53:50:3a:ba:e9:aa:f9:50:08:04:df:95:
97:18:d5:61:e8:71:b1:14:23:2e:98:ee:c0:eb:40:bc:42:46:
30:9c:a7:f3:81:7b:fb:8f:ad:ef:b7:5e:7d:42:71:9b:28:13:
be:2c:10:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfNzS9IgFvv2bLqtdiWM9DsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZTRlNjVhZWNjOTVkNDQ2YTBjYjY0MGI5NzY2ZmEwZjgx
NTBlM2MwHhcNMjUwNzAzMDEwMTA1WhcNMjUwNzA0MDEwMTA1WjAzMTEwLwYDVQQD
EyhiOWM2NTFiZmZjNDAyOGY1NDY2ODhiNDQxYzNmYTExMTdmNmE4YzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZB3K/knf23d97MAUQSWCKKMZYC8
UT/TcKnl/tiaGOHq9tfNISXgyh6/1PDVctppkjclObjIoCZEG7INwBZNS4iJcnBt
v+YGV2SHC2wH64NaLr7z5vxZlmPswbxaSyqPWIhbldHaX6wHNI7vkFGtZy4raM1I
zxiEqSQn073bJDRNgCZrtrVDKp1TSnkpv7vaVOxFWWNX8lxzNOB5Ls7sQ2wDBpBM
FkkdDKDwH+UgH6NrF1xOBepwn4rlJWi0Ob5GtbGGweDy7m8R6onw7SIqNMJETBFf
+9ZNcyER7H9Aiue0fPablL4Mt5m6jskz696DCn2FzpYJS6mOOIXOjCRzxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnGUb/8QCj1RmiLRBw/oRF/aowyMB8GA1UdIwQY
MBaAFJzk5lrsyV1Eagy2QLl2b6D4FQ48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk9UbVd1ekpYVVJxRExaQXVYWnZvUGdWRGp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZDRlMmMtZTVhZC00MTdhLTg3ODgt
MTE4MjQ0MDZiZDVkLzEvbk9UbVd1ekpYVVJxRExaQXVYWnZvUGdWRGp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9lZDRlMmMtZTVhZC00MTdhLTg3ODgtMTE4MjQ0MDZiZDVk
LzEvbk9UbVd1ekpYVVJxRExaQXVYWnZvUGdWRGp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0TOK3Qd1
S7XpjJwQYH5hFMLu+JLZlxaT1oOkN7+ru+hLGhurkVLTi0MZL5fnL9T4iXw5apMh
nfVAdWsF3ny4qe/Sd5fCvhk/ABSHg9IkULPN2lYZTVqTPq05i6TeOsmA40HGvw5t
/4UBzrNowEu52xN5C22gVdesPShMMFALOtdLbSuADHyhul/jmIK2GEl29IJkTUcq
3Y9FSSoCfr5tsYSNTXvjVehcmpbZd+vPLNsn+z5vY4woP5MMz5CY20H6Au/NH6ei
7uKqIzyQU1A6uumq+VAIBN+VlxjVYehxsRQjLpjuwOtAvEJGMJyn84F7+4+t77de
fUJxmygTviwQRg==
-----END CERTIFICATE-----
Generated at Thu Jul 3 04:26:44 2025 by rpki-client