Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
File: nYHLUEMmdDsX02SiBIdcOcbtvAk.mft (raw, json)
Hash identifier: b472xSclfm59+Vxfpb8bUAaFkgPv5a5yI8G/iIvEoWA=
Subject key identifier: 10:F1:99:25:9E:DA:72:D4:84:2F:AA:4C:BC:65:9C:65:6F:11:17:AD
Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09
Certificate serial: 0197B70EB7348070577C26AE430B37AEDC4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
Manifest number: 0F4C
Signing time: Sat 28 Jun 2025 15:01:24 +0000
Manifest this update: Sat 28 Jun 2025 15:01:24 +0000
Manifest next update: Sun 29 Jun 2025 15:01:24 +0000
Files and hashes: 1: JP_mk9oH8p5bvlYYSWGek7KXox0.roa (hash: QozdhhJZu+Cfz+XSJNvXYpnVEpaUzqrN6lM64Dbcl70=)
2: nYHLUEMmdDsX02SiBIdcOcbtvAk.crl (hash: VfBvfrPQyNx4DHR8vEK8Qf5mMcTIo64WkZbw+HE1a68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b7:34:80:70:57:7c:26:ae:43:0b:37:ae:dc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09
Validity
Not Before: Jun 28 15:01:24 2025 GMT
Not After : Jun 29 15:01:24 2025 GMT
Subject: CN=10f199259eda72d4842faa4cbc659c656f1117ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:77:8c:9a:8d:ec:8b:9c:92:79:33:b0:95:3b:
b1:9e:e9:df:e2:41:d7:c6:a5:7b:c7:6f:1f:28:df:
2d:9d:8e:f0:44:b3:a0:55:01:55:8a:91:bd:f8:86:
ce:86:96:04:2f:6c:10:24:2a:18:65:0d:75:b9:a7:
96:ee:16:68:0e:91:e3:24:93:63:7f:59:39:dd:24:
3c:d0:13:31:e9:89:cc:db:c0:86:f0:a5:25:1c:b7:
12:74:05:81:84:45:1d:50:c6:bc:e8:1b:01:58:6a:
c9:44:78:1e:ce:8c:8c:14:c9:10:b2:5c:54:67:b2:
7e:21:e1:7e:d8:a9:47:14:c3:6c:ab:37:29:44:02:
ac:d9:e7:85:25:1c:0e:ce:45:07:eb:87:6a:68:eb:
5a:cc:0c:1c:91:74:ca:22:60:74:fe:cf:91:33:d9:
96:0c:93:cb:a0:5b:7a:39:b7:4f:eb:47:cd:9e:e5:
eb:09:23:c0:2b:4e:79:c8:f3:dc:8b:5d:f7:56:36:
84:c1:f2:48:19:60:5c:f3:8d:d0:e6:e0:de:d5:ea:
35:fe:14:95:6b:85:96:e3:a3:c1:8c:ec:50:cb:31:
d1:b3:35:65:3a:7c:a5:4c:07:02:7b:41:35:6b:24:
db:67:c8:f0:14:4f:aa:3a:ad:3c:50:da:16:d3:f5:
ee:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F1:99:25:9E:DA:72:D4:84:2F:AA:4C:BC:65:9C:65:6F:11:17:AD
X509v3 Authority Key Identifier:
keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:87:36:43:43:0c:0a:c0:eb:cf:5a:a9:38:bb:cc:33:b2:01:
0a:8e:a0:d6:fd:09:f5:9f:06:e7:ad:22:c1:fa:62:88:99:11:
37:d0:cb:72:72:4f:62:ea:1e:c9:1b:07:09:54:52:38:af:74:
d6:54:27:08:52:e7:0b:50:21:74:d7:7f:e8:02:3c:f3:29:32:
b0:be:04:9d:fa:4f:19:6d:d8:81:50:36:f2:7d:61:1d:4e:7a:
8e:c2:05:ea:70:8c:c2:96:5a:96:01:e2:1f:71:f8:be:23:33:
33:c9:4c:67:8c:7c:f9:69:ee:6a:97:eb:fb:3f:b5:76:7a:f7:
de:04:a0:77:19:77:97:ee:dd:b7:d9:de:dc:80:34:9e:37:b1:
9a:be:53:6b:13:4b:73:11:a5:57:01:f3:93:12:8d:9a:03:31:
bc:90:cb:24:a0:87:dd:b3:2f:e1:6b:e8:7b:c2:dc:ba:6f:dc:
a4:4b:45:5b:30:1c:24:85:1b:e0:a3:c9:54:ff:b3:47:cf:fb:
64:28:2e:99:23:67:97:78:60:ce:91:61:af:06:1c:eb:a1:b6:
20:78:51:6d:00:d1:05:e1:e1:68:2e:b9:4f:75:f4:53:d5:7e:
bc:de:0b:0d:5b:1a:f0:58:03:b1:c4:74:d6:a8:54:fb:9d:2d:
15:76:c1:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Drc0gHBXfCauQws3rtxLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkODFjYjUwNDMyNjc0M2IxN2QzNjRhMjA0ODc1YzM5YzZl
ZGJjMDkwHhcNMjUwNjI4MTUwMTI0WhcNMjUwNjI5MTUwMTI0WjAzMTEwLwYDVQQD
EygxMGYxOTkyNTllZGE3MmQ0ODQyZmFhNGNiYzY1OWM2NTZmMTExN2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHeMmo3si5ySeTOwlTuxnunf4kHX
xqV7x28fKN8tnY7wRLOgVQFVipG9+IbOhpYEL2wQJCoYZQ11uaeW7hZoDpHjJJNj
f1k53SQ80BMx6YnM28CG8KUlHLcSdAWBhEUdUMa86BsBWGrJRHgezoyMFMkQslxU
Z7J+IeF+2KlHFMNsqzcpRAKs2eeFJRwOzkUH64dqaOtazAwckXTKImB0/s+RM9mW
DJPLoFt6ObdP60fNnuXrCSPAK055yPPci133VjaEwfJIGWBc843Q5uDe1eo1/hSV
a4WW46PBjOxQyzHRszVlOnylTAcCe0E1ayTbZ8jwFE+qOq08UNoW0/XuRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDxmSWe2nLUhC+qTLxlnGVvERetMB8GA1UdIwQY
MBaAFJ2By1BDJnQ7F9NkogSHXDnG7bwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMzlkMjktNzEyYS00Yzg2LTk1MTAt
ZTRkNmJjZjMzNmI3LzEvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zMzlkMjktNzEyYS00Yzg2LTk1MTAtZTRkNmJjZjMzNmI3
LzEvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYc2Q0MM
CsDrz1qpOLvMM7IBCo6g1v0J9Z8G560iwfpiiJkRN9DLcnJPYuoeyRsHCVRSOK90
1lQnCFLnC1AhdNd/6AI88ykysL4EnfpPGW3YgVA28n1hHU56jsIF6nCMwpZalgHi
H3H4viMzM8lMZ4x8+Wnuapfr+z+1dnr33gSgdxl3l+7dt9ne3IA0njexmr5TaxNL
cxGlVwHzkxKNmgMxvJDLJKCH3bMv4Wvoe8Lcum/cpEtFWzAcJIUb4KPJVP+zR8/7
ZCgumSNnl3hgzpFhrwYc66G2IHhRbQDRBeHhaC65T3X0U9V+vN4LDVsa8FgDscR0
1qhU+50tFXbBag==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:26 2025 by rpki-client