Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
File: NLFHrBz3fVyPsq90-tO3O10TeyY.mft (raw, json)
Hash identifier: b0ahPxRmCAnjXT8mT1oSlhXXeYIto+3N634c6R0Zqzw=
Subject key identifier: 90:D3:30:F4:76:A0:D7:8C:16:F8:70:82:FD:49:E6:14:E8:FC:64:B2
Authority key identifier: 34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26
Certificate issuer: /CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26
Certificate serial: 0197C3803D1013263DA75412830AF09CFD79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
Manifest number: 014F
Signing time: Tue 01 Jul 2025 01:00:50 +0000
Manifest this update: Tue 01 Jul 2025 01:00:50 +0000
Manifest next update: Wed 02 Jul 2025 01:00:50 +0000
Files and hashes: 1: NLFHrBz3fVyPsq90-tO3O10TeyY.crl (hash: XfcBxQneWUP32OzjpA8rTVs2gZGh9Guavkkwrtpe4l4=)
2: THnq9fycftVoi9SRyG2RAgjh-xM.roa (hash: CvE6vZRBpMVjaRZR6SZYXH1U/C4JGawX5FU1BEkF3Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:80:3d:10:13:26:3d:a7:54:12:83:0a:f0:9c:fd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26
Validity
Not Before: Jul 1 01:00:50 2025 GMT
Not After : Jul 2 01:00:50 2025 GMT
Subject: CN=90d330f476a0d78c16f87082fd49e614e8fc64b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:a7:ac:b4:c0:78:9e:b7:72:e1:15:d0:6e:
fa:35:d8:40:1c:8b:12:9f:dc:02:81:1d:42:0a:01:
52:56:0a:4b:a0:10:4d:14:b1:22:39:c9:87:b3:8e:
c9:5a:1d:89:0c:ff:f7:68:c2:2d:c9:79:06:61:cd:
d6:fe:b4:6f:38:18:7f:7f:af:cd:fa:ee:96:b5:7d:
56:eb:1b:8d:fe:f3:37:10:79:4d:65:36:97:4e:ff:
f0:fd:8a:c1:05:ac:84:58:5d:a3:ae:86:1b:74:75:
01:8a:fa:4e:46:99:df:d2:8a:28:2f:c7:7f:ff:c1:
25:28:79:b7:a5:a1:36:05:56:15:c9:24:55:13:19:
4e:31:a0:76:93:2b:3b:1e:f1:0f:ec:31:d1:ca:4c:
99:90:bb:7f:1f:a3:71:ed:1d:f8:0c:bc:00:cc:6b:
85:31:b8:cc:ba:48:52:45:3d:80:2b:21:76:19:97:
aa:ff:db:eb:c2:76:51:bc:7d:76:90:db:ed:2c:02:
80:4f:9f:7a:e0:b4:34:63:9e:e2:68:b6:e4:5d:07:
09:97:a8:00:f4:ba:db:f5:b3:08:2d:da:70:89:55:
f2:c3:43:f8:43:62:c6:9f:a0:50:2c:73:2a:3a:f8:
f6:05:b2:ae:01:fe:f7:f7:0f:ed:b1:f3:64:a7:88:
9b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D3:30:F4:76:A0:D7:8C:16:F8:70:82:FD:49:E6:14:E8:FC:64:B2
X509v3 Authority Key Identifier:
keyid:34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d0:f7:e3:c2:93:69:78:f9:3f:c2:7d:0f:2b:5b:75:26:ce:
03:78:a1:97:60:02:80:29:a6:b6:ab:c2:33:f6:ec:f8:24:ec:
6c:02:4f:7e:14:9d:03:67:d0:bc:9a:18:6d:08:21:b7:db:e2:
c1:55:26:95:2a:87:d4:93:46:1b:d6:d6:79:40:dd:09:8b:85:
01:ea:04:92:98:ba:b3:23:e5:7f:ae:ca:c6:4d:64:79:95:80:
99:80:aa:05:aa:20:57:cb:b1:73:a0:16:f0:7f:a3:c8:d0:89:
d3:be:25:af:88:d2:3b:70:05:f9:4e:df:55:9a:30:5d:24:9f:
e0:0d:0c:2a:38:46:01:83:12:cd:46:42:75:c5:97:a8:e6:db:
aa:0e:48:92:bd:5b:e9:85:9c:bc:21:1b:d1:f9:68:c9:76:ec:
9d:ea:4e:42:01:89:62:22:c4:a9:fe:45:90:23:7b:a9:ee:ca:
36:16:dc:83:43:62:c2:23:21:84:df:c6:ce:fa:b9:2b:44:fd:
4e:09:4d:5c:bf:d4:4f:73:49:0a:af:5f:15:4c:3f:1f:4f:71:
78:09:d4:8f:98:b4:b6:bf:4c:8b:19:ea:53:b3:e5:37:5c:84:
66:ba:82:9b:39:29:d1:a1:bb:23:a7:2d:b3:95:59:66:bd:92:
3c:ef:d5:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfDgD0QEyY9p1QSgwrwnP15MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YjE0N2FjMWNmNzdkNWM4ZmIyYWY3NGZhZDNiNzNiNWQx
MzdiMjYwHhcNMjUwNzAxMDEwMDUwWhcNMjUwNzAyMDEwMDUwWjAzMTEwLwYDVQQD
Eyg5MGQzMzBmNDc2YTBkNzhjMTZmODcwODJmZDQ5ZTYxNGU4ZmM2NGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjynrLTAeJ63cuEV0G76NdhAHIsS
n9wCgR1CCgFSVgpLoBBNFLEiOcmHs47JWh2JDP/3aMItyXkGYc3W/rRvOBh/f6/N
+u6WtX1W6xuN/vM3EHlNZTaXTv/w/YrBBayEWF2jroYbdHUBivpORpnf0oooL8d/
/8ElKHm3paE2BVYVySRVExlOMaB2kys7HvEP7DHRykyZkLt/H6Nx7R34DLwAzGuF
MbjMukhSRT2AKyF2GZeq/9vrwnZRvH12kNvtLAKAT5964LQ0Y57iaLbkXQcJl6gA
9Lrb9bMILdpwiVXyw0P4Q2LGn6BQLHMqOvj2BbKuAf739w/tsfNkp4ibwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDTMPR2oNeMFvhwgv1J5hTo/GSyMB8GA1UdIwQY
MBaAFDSxR6wc931cj7KvdPrTtztdE3smMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkxGSHJCejNmVnlQc3E5MC10TzNPMTBUZXlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jYjc4ZTctMzQ1NS00YmFlLWI1NDQt
YjEzNzE3NTAzMDEwLzEvTkxGSHJCejNmVnlQc3E5MC10TzNPMTBUZXlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jYjc4ZTctMzQ1NS00YmFlLWI1NDQtYjEzNzE3NTAzMDEw
LzEvTkxGSHJCejNmVnlQc3E5MC10TzNPMTBUZXlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGdD348KT
aXj5P8J9DytbdSbOA3ihl2ACgCmmtqvCM/bs+CTsbAJPfhSdA2fQvJoYbQght9vi
wVUmlSqH1JNGG9bWeUDdCYuFAeoEkpi6syPlf67Kxk1keZWAmYCqBaogV8uxc6AW
8H+jyNCJ074lr4jSO3AF+U7fVZowXSSf4A0MKjhGAYMSzUZCdcWXqObbqg5Ikr1b
6YWcvCEb0floyXbsnepOQgGJYiLEqf5FkCN7qe7KNhbcg0NiwiMhhN/Gzvq5K0T9
TglNXL/UT3NJCq9fFUw/H09xeAnUj5i0tr9MixnqU7PlN1yEZrqCmzkp0aG7I6ct
s5VZZr2SPO/VgA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 07:11:56 2025 by rpki-client