Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
File: t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft (raw, json)
Hash identifier: V+SU26vGmhMoWjMX4IsW3CxKzJ1KFvBs/ywn+Ld0aBY=
Subject key identifier: FE:C4:76:D5:0E:3C:15:51:48:1E:DD:91:A5:9C:18:DE:6B:6D:9C:E6
Authority key identifier: B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
Certificate issuer: /CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Certificate serial: 0197B70ED581075C6CB4C11E4E4D7C148089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
Manifest number: 0A19
Signing time: Sat 28 Jun 2025 15:01:32 +0000
Manifest this update: Sat 28 Jun 2025 15:01:32 +0000
Manifest next update: Sun 29 Jun 2025 15:01:32 +0000
Files and hashes: 1: 7HgZFirs9to5YNlgGjCrLE4fFdw.roa (hash: gvtNC6tdiAxQLr0n4eBnmWFLLNsQSfj98rKVj8SvSuA=)
2: GFzeRaBmyIOkrDv5Yl4eeRJ9yBo.roa (hash: rZYvabv/j2AaljGdwS148ssayLuXys6DbuYJ6bJxVGw=)
3: t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl (hash: V8g8BrkvKa924LF/pwTofBQOdWimdsJnkksONwBby/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d5:81:07:5c:6c:b4:c1:1e:4e:4d:7c:14:80:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Validity
Not Before: Jun 28 15:01:32 2025 GMT
Not After : Jun 29 15:01:32 2025 GMT
Subject: CN=fec476d50e3c1551481edd91a59c18de6b6d9ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:91:f1:3c:99:d8:b6:7f:55:d5:95:55:9f:11:
f4:a8:be:af:6b:15:47:ab:3f:f3:50:02:34:a4:2b:
2f:63:28:04:a9:1a:1c:4d:37:70:ba:27:e0:84:fe:
d7:c4:8b:ce:5d:3a:87:02:12:f4:f1:33:e0:f8:51:
ee:84:42:94:e1:fd:2e:6d:60:58:db:0e:92:33:a6:
2f:a2:9c:f9:4e:31:cf:41:e1:76:44:e4:a8:a2:a6:
13:36:7c:0b:87:41:9e:72:e6:42:8f:7a:e0:8f:98:
fa:ea:f6:75:43:10:32:68:11:df:fa:ef:1f:ac:c8:
01:e8:c5:fa:0b:66:27:4a:ce:98:f6:b8:ca:3f:9f:
82:b5:35:94:c8:46:26:be:36:67:1a:b3:ea:38:3d:
93:21:b8:c2:40:58:2d:b7:27:44:26:9e:64:d4:eb:
55:a3:5d:82:ae:8c:27:8e:7d:ec:dc:09:bd:74:ce:
5c:49:ad:c3:0f:82:f8:dc:39:74:28:88:49:20:11:
26:3f:bf:5c:db:c0:43:02:69:52:a7:df:f3:c9:a3:
f2:28:fe:08:4a:28:dd:c8:6c:0c:8f:56:d0:61:e3:
bd:39:48:05:66:80:80:69:c4:c4:22:31:64:d4:fe:
f2:14:b9:15:c8:17:c5:a0:72:ac:7d:08:66:d8:5b:
2b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C4:76:D5:0E:3C:15:51:48:1E:DD:91:A5:9C:18:DE:6B:6D:9C:E6
X509v3 Authority Key Identifier:
keyid:B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:84:9a:98:42:5a:10:d9:2e:ea:f7:db:bb:91:bb:86:32:fc:
98:53:b1:22:03:37:22:6f:9f:af:e9:96:6d:34:45:d3:d0:2f:
65:74:14:df:5c:63:d1:3a:ca:b3:7d:47:45:ee:30:09:9e:9b:
7b:4f:be:8b:c9:12:84:bf:58:76:d5:77:2c:6a:ec:cc:63:97:
aa:67:d3:a3:3f:74:79:bb:f9:61:c5:e5:1d:b3:1a:aa:5a:6e:
3d:86:93:c5:99:f9:84:50:d0:07:06:d9:3d:e4:44:73:5a:df:
11:bd:40:ee:95:17:83:32:6a:23:70:e9:79:5a:c7:d9:1e:9a:
0b:2d:04:c2:cb:73:73:7b:0d:ff:68:eb:55:5b:d2:0b:77:5e:
38:26:79:0a:c8:1e:ad:ff:02:fc:ba:fc:bf:34:5d:01:74:34:
53:4b:de:04:05:97:b8:72:73:dd:07:51:3a:5d:13:0b:6b:92:
70:a3:72:c7:8a:43:7f:53:f4:ae:dd:56:14:36:e1:b8:89:0b:
b9:91:d1:9c:3e:78:b4:a8:80:8a:fb:14:4d:eb:52:96:1f:48:
a5:95:b3:ae:d9:f3:3c:14:2b:98:ed:db:05:85:11:ab:d7:6b:
e3:98:6e:1f:e2:a5:6d:a9:8a:ca:b5:b9:6f:76:b9:f3:46:e8:
22:43:11:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DtWBB1xstMEeTk18FICJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ZTM0ZjU3ZDAwNzE2NmRlZjRkZDg4MWQ4ZjdkNWI2ZWQ5
NWU2NTYwHhcNMjUwNjI4MTUwMTMyWhcNMjUwNjI5MTUwMTMyWjAzMTEwLwYDVQQD
EyhmZWM0NzZkNTBlM2MxNTUxNDgxZWRkOTFhNTljMThkZTZiNmQ5Y2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupHxPJnYtn9V1ZVVnxH0qL6vaxVH
qz/zUAI0pCsvYygEqRocTTdwuifghP7XxIvOXTqHAhL08TPg+FHuhEKU4f0ubWBY
2w6SM6Yvopz5TjHPQeF2ROSooqYTNnwLh0GecuZCj3rgj5j66vZ1QxAyaBHf+u8f
rMgB6MX6C2YnSs6Y9rjKP5+CtTWUyEYmvjZnGrPqOD2TIbjCQFgttydEJp5k1OtV
o12Crownjn3s3Am9dM5cSa3DD4L43Dl0KIhJIBEmP79c28BDAmlSp9/zyaPyKP4I
SijdyGwMj1bQYeO9OUgFZoCAacTEIjFk1P7yFLkVyBfFoHKsfQhm2FsrPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7EdtUOPBVRSB7dkaWcGN5rbZzmMB8GA1UdIwQY
MBaAFLfjT1fQBxZt703Ygdj31bbtleZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdC1OUFY5QUhGbTN2VGRpQjJQZlZ0dTJWNWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lNWQ1ODAtZWVlOC00NjNlLTg0YTgt
ZWFjY2I4YjQyZGM5LzEvdC1OUFY5QUhGbTN2VGRpQjJQZlZ0dTJWNWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lNWQ1ODAtZWVlOC00NjNlLTg0YTgtZWFjY2I4YjQyZGM5
LzEvdC1OUFY5QUhGbTN2VGRpQjJQZlZ0dTJWNWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAToSamEJa
ENku6vfbu5G7hjL8mFOxIgM3Im+fr+mWbTRF09AvZXQU31xj0TrKs31HRe4wCZ6b
e0++i8kShL9YdtV3LGrszGOXqmfToz90ebv5YcXlHbMaqlpuPYaTxZn5hFDQBwbZ
PeREc1rfEb1A7pUXgzJqI3DpeVrH2R6aCy0Ewstzc3sN/2jrVVvSC3deOCZ5Csge
rf8C/Lr8vzRdAXQ0U0veBAWXuHJz3QdROl0TC2uScKNyx4pDf1P0rt1WFDbhuIkL
uZHRnD54tKiAivsUTetSlh9IpZWzrtnzPBQrmO3bBYURq9dr45huH+KlbamKyrW5
b3a580boIkMRHQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:18 2025 by rpki-client