Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
File: nl1ITra0tWiaVEzwsTt--TJFfvE.mft (raw, json)
Hash identifier: mAa0k+YQudhSVqv64YCLlN9zv1NV5idlA5IMmDqc9So=
Subject key identifier: 09:6F:88:67:A3:26:D7:71:3B:2A:77:09:72:C6:B7:05:53:52:3A:BE
Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
Certificate issuer: /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Certificate serial: 0197CEA91485CED0E09A3ACE7257B75FC8C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
Manifest number: 1477
Signing time: Thu 03 Jul 2025 05:01:16 +0000
Manifest this update: Thu 03 Jul 2025 05:01:16 +0000
Manifest next update: Fri 04 Jul 2025 05:01:16 +0000
Files and hashes: 1: nl1ITra0tWiaVEzwsTt--TJFfvE.crl (hash: FgBQSUvZAro8umYKCeeWjl5m4Kk9bCF9+fhEDtfxb+4=)
2: z9Zyukoi2uOHQdEe-vCyq46DaFo.roa (hash: aTR5i5ZEuCcMlVNNZ8y9Ak4ulLNXmEOMB0JCISwIQQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:a9:14:85:ce:d0:e0:9a:3a:ce:72:57:b7:5f:c8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Validity
Not Before: Jul 3 05:01:16 2025 GMT
Not After : Jul 4 05:01:16 2025 GMT
Subject: CN=096f8867a326d7713b2a770972c6b70553523abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:d7:24:e8:5a:48:6c:81:72:3f:b6:ad:b8:
46:03:88:c6:f0:1d:41:11:62:84:2b:50:c9:22:1a:
fd:f7:78:36:84:15:c7:fb:8c:aa:6a:3b:38:7e:91:
da:a2:0a:3e:ee:cb:66:22:cc:1c:f3:f1:2b:e6:46:
ef:36:3b:57:c7:b9:de:41:29:09:43:9b:b7:23:37:
55:fe:a9:8a:56:31:98:1e:13:0a:73:76:92:8e:27:
21:c9:cb:bb:8b:df:52:63:14:d6:25:6b:14:5e:07:
b7:17:3f:7b:0f:a7:7e:61:38:28:da:f7:f1:3b:0b:
e0:e1:d1:70:a3:a9:73:d4:ac:85:a2:e1:f0:e3:2c:
3a:0a:b1:02:4a:ca:8b:fb:86:a9:a1:0a:45:87:e7:
ab:72:02:5c:47:a2:f5:e1:f2:39:dd:66:96:4a:cc:
dc:44:14:4f:59:66:1f:b2:d1:2c:47:d8:5b:e9:23:
fc:19:c3:0d:0f:cc:e7:23:cd:29:fd:b9:ab:03:2e:
62:6c:2b:b5:06:99:7b:ce:1b:e7:9b:a0:7d:0b:4d:
91:7c:10:2c:b0:49:d7:ee:cb:3e:34:a4:11:84:19:
e4:0f:b5:68:6b:fb:50:68:e5:6d:da:7c:c0:81:cc:
da:cf:f3:4c:b9:96:79:da:15:54:bd:a4:c0:4e:1a:
be:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6F:88:67:A3:26:D7:71:3B:2A:77:09:72:C6:B7:05:53:52:3A:BE
X509v3 Authority Key Identifier:
keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6a:37:97:95:0e:38:31:8d:65:00:57:43:56:43:b6:ed:55:
31:05:a1:da:d3:cd:53:28:b5:c8:e8:ee:35:21:0a:5f:eb:7e:
62:1e:3e:0d:f5:85:95:77:09:76:ec:19:8a:c9:7f:94:c4:c5:
34:df:c8:e0:c0:af:2f:ff:e3:b6:42:02:83:13:e5:b5:3e:05:
d0:37:a6:12:2b:6e:64:6b:00:3a:99:f8:73:7c:65:a6:de:03:
50:e5:a6:bf:61:6b:41:f8:37:cc:d6:9c:f0:45:f3:cc:8a:7c:
15:15:b1:af:33:ba:b2:45:c2:5b:d8:ce:4d:f6:30:20:55:f9:
b8:94:18:50:91:55:10:f0:48:94:b0:5b:13:17:88:aa:21:f3:
ca:d9:a3:8e:58:94:34:20:4c:45:03:0a:59:c2:e3:bd:ed:e1:
17:59:ab:02:d3:b8:79:ef:c4:f6:c7:c5:cf:b9:36:da:94:54:
1e:78:ea:1a:f9:a7:b5:77:66:b4:4c:47:c9:a5:5c:58:d8:d4:
f3:08:f6:4e:7d:ff:08:8b:80:c2:92:63:ac:2f:2d:d3:69:c0:
3f:42:5c:de:56:ea:e5:bb:ed:73:93:db:b5:15:30:eb:b6:20:
6a:1b:69:62:14:53:9e:5c:7b:8d:87:35:38:fc:95:85:9f:af:
db:91:2d:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfOqRSFztDgmjrOcle3X8jGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNWQ0ODRlYjZiNGI1Njg5YTU0NGNmMGIxM2I3ZWY5MzI0
NTdlZjEwHhcNMjUwNzAzMDUwMTE2WhcNMjUwNzA0MDUwMTE2WjAzMTEwLwYDVQQD
EygwOTZmODg2N2EzMjZkNzcxM2IyYTc3MDk3MmM2YjcwNTUzNTIzYWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpzXJOhaSGyBcj+2rbhGA4jG8B1B
EWKEK1DJIhr993g2hBXH+4yqajs4fpHaogo+7stmIswc8/Er5kbvNjtXx7neQSkJ
Q5u3IzdV/qmKVjGYHhMKc3aSjichycu7i99SYxTWJWsUXge3Fz97D6d+YTgo2vfx
Owvg4dFwo6lz1KyFouHw4yw6CrECSsqL+4apoQpFh+ercgJcR6L14fI53WaWSszc
RBRPWWYfstEsR9hb6SP8GcMND8znI80p/bmrAy5ibCu1Bpl7zhvnm6B9C02RfBAs
sEnX7ss+NKQRhBnkD7Voa/tQaOVt2nzAgczaz/NMuZZ52hVUvaTAThq+GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlviGejJtdxOyp3CXLGtwVTUjq+MB8GA1UdIwQY
MBaAFJ5dSE62tLVomlRM8LE7fvkyRX7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmwxSVRyYTB0V2lhVkV6d3NUdC0tVEpGZnZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iNjc0YmItMDQ0Ny00ZDcyLWIzMDIt
NmVjNDBhMzgxODE5LzEvbmwxSVRyYTB0V2lhVkV6d3NUdC0tVEpGZnZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iNjc0YmItMDQ0Ny00ZDcyLWIzMDItNmVjNDBhMzgxODE5
LzEvbmwxSVRyYTB0V2lhVkV6d3NUdC0tVEpGZnZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmo3l5UO
ODGNZQBXQ1ZDtu1VMQWh2tPNUyi1yOjuNSEKX+t+Yh4+DfWFlXcJduwZisl/lMTF
NN/I4MCvL//jtkICgxPltT4F0DemEituZGsAOpn4c3xlpt4DUOWmv2FrQfg3zNac
8EXzzIp8FRWxrzO6skXCW9jOTfYwIFX5uJQYUJFVEPBIlLBbExeIqiHzytmjjliU
NCBMRQMKWcLjve3hF1mrAtO4ee/E9sfFz7k22pRUHnjqGvmntXdmtExHyaVcWNjU
8wj2Tn3/CIuAwpJjrC8t02nAP0Jc3lbq5bvtc5PbtRUw67YgahtpYhRTnlx7jYc1
OPyVhZ+v25EtYg==
-----END CERTIFICATE-----
Generated at Thu Jul 3 10:08:05 2025 by rpki-client