Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
File: NkgvLv77kno8r_6h2R8kF_PS59c.mft (raw, json)
Hash identifier: 5GiJGJ52xWWfl8GyX52h12bIZWQkLtOZkxXmwZLeppg=
Subject key identifier: C1:86:0B:09:A5:F2:F6:2A:F4:33:88:9D:2A:DB:A0:E7:C9:2E:A8:22
Authority key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
Certificate issuer: /CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Certificate serial: 0197B6A14BECB1E08555ABD0B8BA85A30498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
Manifest number: 0F76
Signing time: Sat 28 Jun 2025 13:01:53 +0000
Manifest this update: Sat 28 Jun 2025 13:01:53 +0000
Manifest next update: Sun 29 Jun 2025 13:01:53 +0000
Files and hashes: 1: G4a30ttfjHFxij-eVrmW-fidH94.roa (hash: WeyOFJKV6AN+3rP0u3s/qWHiA31iewGjEQEJOzY4D5I=)
2: NkgvLv77kno8r_6h2R8kF_PS59c.crl (hash: GJoiR+1wtQi9ypkZHuGYlaN1c9yhg7HxnuFNi+6cOYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:4b:ec:b1:e0:85:55:ab:d0:b8:ba:85:a3:04:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Validity
Not Before: Jun 28 13:01:53 2025 GMT
Not After : Jun 29 13:01:53 2025 GMT
Subject: CN=c1860b09a5f2f62af433889d2adba0e7c92ea822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:47:10:b5:8f:d9:ad:37:06:e6:d4:9e:e9:74:
64:d3:b5:41:a9:9b:d5:31:52:29:c2:12:28:3c:2b:
04:57:6b:0b:4e:56:3b:53:4b:40:c7:f2:1f:db:d8:
18:b6:4f:b7:64:c0:b5:2f:11:9a:f9:ef:d8:18:59:
90:75:96:5b:3b:16:d3:f6:c9:75:e6:b2:8b:2b:0e:
bb:86:f3:b6:1d:56:5a:8d:90:35:94:67:f0:64:e4:
4e:cb:63:6b:5e:87:a4:68:0f:b3:cb:24:10:88:00:
fb:b3:c1:97:44:2c:a3:8c:af:56:15:a9:e4:ae:e9:
09:f9:ae:86:24:52:1c:1e:56:16:28:1b:5f:bd:21:
a5:6f:69:16:77:62:89:cf:d5:10:09:12:ec:38:d3:
9f:bf:5e:61:59:b0:21:0f:49:e4:37:f1:0e:d0:94:
9a:7b:dd:5a:a3:a3:fe:ac:cf:0f:60:ec:63:9c:b4:
10:6b:89:40:a4:09:bd:85:88:22:8c:a1:27:d8:6e:
71:39:c5:2a:1d:2b:ed:85:5c:28:80:66:17:e9:0b:
4f:14:20:0a:b5:7e:d6:12:2b:30:a9:1a:d4:d8:3f:
32:b5:57:5a:98:f5:f0:7c:6b:e6:e1:fc:3a:26:1b:
56:22:ba:29:de:f2:ca:e3:a6:89:12:4d:52:49:25:
ae:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:86:0B:09:A5:F2:F6:2A:F4:33:88:9D:2A:DB:A0:E7:C9:2E:A8:22
X509v3 Authority Key Identifier:
keyid:36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0e:e7:5f:f0:2d:37:e4:44:09:0e:e7:73:87:d5:92:63:f5:
f2:1a:ef:12:dc:f9:78:1d:12:23:c6:7a:97:e0:e4:66:a4:2c:
f3:16:85:19:ef:18:bf:48:7b:91:ff:a6:15:ec:0a:e4:00:19:
66:dd:e3:8d:05:36:9b:19:a5:54:29:1b:c8:cb:6f:51:94:e2:
be:2b:e2:2a:1e:81:13:c9:ee:63:23:72:73:20:bb:3d:e9:30:
54:36:e7:79:a4:04:bb:bb:f2:4c:74:71:6e:8b:eb:ff:ed:03:
d4:59:71:03:19:70:b2:1e:25:02:fb:7c:d2:53:8d:be:7a:9f:
f0:d4:fb:64:20:7d:c0:69:88:14:cf:1e:52:66:f3:6b:f0:25:
c3:16:29:cc:be:f4:a4:d0:49:96:8d:a6:72:71:70:d1:bd:1e:
d9:02:f4:12:72:34:40:3a:10:b3:fb:78:02:63:b9:c8:51:02:
97:d4:25:7a:ea:7c:ae:80:4b:c7:3a:ea:9d:e4:65:ca:5a:58:
9a:03:9b:05:0c:2f:4a:76:d4:bb:b2:7d:1a:fe:f4:31:8c:6b:
dc:27:6b:41:06:2e:51:2c:94:aa:f6:54:50:56:b9:12:1f:37:
5a:fa:1c:15:58:ef:16:1f:de:88:c4:61:71:88:ca:51:0c:8f:
78:60:6c:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oUvsseCFVavQuLqFowSYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NDgyZjJlZmVmYjkyN2EzY2FmZmVhMWQ5MWYyNDE3ZjNk
MmU3ZDcwHhcNMjUwNjI4MTMwMTUzWhcNMjUwNjI5MTMwMTUzWjAzMTEwLwYDVQQD
EyhjMTg2MGIwOWE1ZjJmNjJhZjQzMzg4OWQyYWRiYTBlN2M5MmVhODIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkcQtY/ZrTcG5tSe6XRk07VBqZvV
MVIpwhIoPCsEV2sLTlY7U0tAx/If29gYtk+3ZMC1LxGa+e/YGFmQdZZbOxbT9sl1
5rKLKw67hvO2HVZajZA1lGfwZOROy2NrXoekaA+zyyQQiAD7s8GXRCyjjK9WFank
rukJ+a6GJFIcHlYWKBtfvSGlb2kWd2KJz9UQCRLsONOfv15hWbAhD0nkN/EO0JSa
e91ao6P+rM8PYOxjnLQQa4lApAm9hYgijKEn2G5xOcUqHSvthVwogGYX6QtPFCAK
tX7WEiswqRrU2D8ytVdamPXwfGvm4fw6JhtWIrop3vLK46aJEk1SSSWuBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGGCwml8vYq9DOInSrboOfJLqgiMB8GA1UdIwQY
MBaAFDZILy7++5J6PK/+odkfJBfz0ufXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmtndkx2Nzdrbm84cl82aDJSOGtGX1BTNTljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lNGIwMGMtYTkyOS00OGQ0LWI3ZDgt
NzY4ODczMWJlZDlkLzEvTmtndkx2Nzdrbm84cl82aDJSOGtGX1BTNTljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lNGIwMGMtYTkyOS00OGQ0LWI3ZDgtNzY4ODczMWJlZDlk
LzEvTmtndkx2Nzdrbm84cl82aDJSOGtGX1BTNTljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYA7nX/At
N+RECQ7nc4fVkmP18hrvEtz5eB0SI8Z6l+DkZqQs8xaFGe8Yv0h7kf+mFewK5AAZ
Zt3jjQU2mxmlVCkbyMtvUZTiviviKh6BE8nuYyNycyC7PekwVDbneaQEu7vyTHRx
bovr/+0D1FlxAxlwsh4lAvt80lONvnqf8NT7ZCB9wGmIFM8eUmbza/AlwxYpzL70
pNBJlo2mcnFw0b0e2QL0EnI0QDoQs/t4AmO5yFECl9Qleup8roBLxzrqneRlylpY
mgObBQwvSnbUu7J9Gv70MYxr3CdrQQYuUSyUqvZUUFa5Eh83WvocFVjvFh/eiMRh
cYjKUQyPeGBsSg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:16 2025 by rpki-client