Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft
File: NkITiw7v_lajLMuqWNb_5u3D8p4.mft (raw, json)
Hash identifier: WdMk6KDFjYpmuy/ZY3d/eTz9vhfZZfI8Q31E2qOyLfs=
Subject key identifier: B5:A7:C6:9F:AE:E3:70:DD:C2:AE:B1:CE:49:64:E7:CE:A0:1A:50:52
Authority key identifier: 36:42:13:8B:0E:EF:FE:56:A3:2C:CB:AA:58:D6:FF:E6:ED:C3:F2:9E
Certificate issuer: /CN=3642138b0eeffe56a32ccbaa58d6ffe6edc3f29e
Certificate serial: 0197B6A16D95DFCDD9477CF869D372BD6CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkITiw7v_lajLMuqWNb_5u3D8p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft
Manifest number: 04B9
Signing time: Sat 28 Jun 2025 13:02:02 +0000
Manifest this update: Sat 28 Jun 2025 13:02:02 +0000
Manifest next update: Sun 29 Jun 2025 13:02:02 +0000
Files and hashes: 1: NkITiw7v_lajLMuqWNb_5u3D8p4.crl (hash: h7tFymZCLBDo3KGDI7I9VZXOlaFJiCnR7ZE57xxwIKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkITiw7v_lajLMuqWNb_5u3D8p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:6d:95:df:cd:d9:47:7c:f8:69:d3:72:bd:6c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642138b0eeffe56a32ccbaa58d6ffe6edc3f29e
Validity
Not Before: Jun 28 13:02:02 2025 GMT
Not After : Jun 29 13:02:02 2025 GMT
Subject: CN=b5a7c69faee370ddc2aeb1ce4964e7cea01a5052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:80:32:42:70:58:a0:0e:c9:aa:8d:22:1d:
4c:51:a5:8a:b8:91:c2:a3:82:54:08:37:aa:49:11:
24:dc:b9:a0:55:ca:de:cd:6d:70:52:01:5b:63:5e:
57:9b:b2:e0:3a:73:ee:e9:50:38:4b:ab:1b:f6:ba:
bb:dc:0e:95:b8:ba:d9:25:8f:07:31:93:0d:bf:ed:
16:3d:42:81:82:3e:32:96:ef:b2:46:31:76:38:45:
17:ad:67:39:f0:8a:e1:0d:54:81:33:42:84:c2:fa:
02:f2:27:2f:7a:eb:8c:0f:30:c0:77:8f:a6:3b:27:
4a:15:9a:59:85:b3:04:e1:7c:85:3a:54:1b:4f:c6:
e8:af:a7:93:99:c8:b0:b8:03:b2:66:46:ef:99:4d:
c5:b9:3d:8c:74:17:b1:cc:41:65:59:2f:bc:12:d8:
3c:fd:9c:09:09:5c:d4:8a:10:ed:dd:36:3e:08:eb:
be:e5:03:f2:c5:15:d3:d0:09:c9:6e:d8:8c:b5:7e:
2d:5d:d0:79:28:79:01:6c:11:57:39:58:5c:9e:56:
75:d2:6d:1a:e4:4d:a0:be:ea:2c:ed:87:06:e1:21:
ca:a9:d4:3c:dd:ab:b5:30:1e:55:de:41:67:19:10:
d0:11:70:02:b0:9c:0d:af:de:5b:1c:a4:5c:61:02:
04:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A7:C6:9F:AE:E3:70:DD:C2:AE:B1:CE:49:64:E7:CE:A0:1A:50:52
X509v3 Authority Key Identifier:
keyid:36:42:13:8B:0E:EF:FE:56:A3:2C:CB:AA:58:D6:FF:E6:ED:C3:F2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkITiw7v_lajLMuqWNb_5u3D8p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:17:d6:3e:b1:6a:94:9f:f3:98:7d:6f:33:75:cd:d8:27:ee:
6a:2b:1c:62:a5:3e:41:f5:b2:3d:36:f6:29:23:b9:f6:7c:43:
25:a7:90:9f:06:ea:3b:cc:79:03:f9:c0:62:e9:16:1b:7f:af:
61:33:49:80:1a:4f:a4:0c:15:a0:d9:bd:f5:b8:06:6f:ea:d3:
c3:7a:f4:02:9a:94:c9:1a:ea:a6:f5:18:93:3a:15:41:2e:05:
8f:8b:49:3f:b3:98:dd:6e:85:47:d5:a7:6d:e4:02:73:35:64:
20:c5:92:45:e9:e3:d2:6a:35:08:5f:5e:6c:02:80:6b:7e:4c:
6e:76:46:e3:56:5b:e8:05:98:c3:3a:43:96:5c:a8:09:4d:9d:
17:51:93:9a:7e:ba:14:7a:8f:c1:5b:5b:0f:80:c7:b9:df:5c:
cf:8f:d9:c2:48:a1:1b:38:6e:fb:8d:da:3b:fe:6b:11:92:e8:
3c:41:81:01:7a:18:6b:b3:f4:91:5d:58:ec:db:f1:af:bf:59:
a0:5e:b4:35:0a:2e:5f:40:34:40:24:68:25:84:00:10:4b:0a:
43:a4:27:2e:1d:ba:49:04:6e:18:39:22:a3:dd:5c:fe:0f:93:
16:2d:6b:ff:0c:a1:4f:d4:b7:53:b0:3a:ed:7f:f1:03:0f:12:
e7:cf:bb:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oW2V383ZR3z4adNyvWzgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NDIxMzhiMGVlZmZlNTZhMzJjY2JhYTU4ZDZmZmU2ZWRj
M2YyOWUwHhcNMjUwNjI4MTMwMjAyWhcNMjUwNjI5MTMwMjAyWjAzMTEwLwYDVQQD
EyhiNWE3YzY5ZmFlZTM3MGRkYzJhZWIxY2U0OTY0ZTdjZWEwMWE1MDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpuAMkJwWKAOyaqNIh1MUaWKuJHC
o4JUCDeqSREk3LmgVcrezW1wUgFbY15Xm7LgOnPu6VA4S6sb9rq73A6VuLrZJY8H
MZMNv+0WPUKBgj4ylu+yRjF2OEUXrWc58IrhDVSBM0KEwvoC8icveuuMDzDAd4+m
OydKFZpZhbME4XyFOlQbT8bor6eTmciwuAOyZkbvmU3FuT2MdBexzEFlWS+8Etg8
/ZwJCVzUihDt3TY+COu+5QPyxRXT0AnJbtiMtX4tXdB5KHkBbBFXOVhcnlZ10m0a
5E2gvuos7YcG4SHKqdQ83au1MB5V3kFnGRDQEXACsJwNr95bHKRcYQIEzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWnxp+u43Ddwq6xzklk586gGlBSMB8GA1UdIwQY
MBaAFDZCE4sO7/5WoyzLqljW/+btw/KeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmtJVGl3N3ZfbGFqTE11cVdOYl81dTNEOHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80YjVjZjEtNDMyMC00NGMyLTkzNTgt
ZTA3Zjk1OTM1NmExLzEvTmtJVGl3N3ZfbGFqTE11cVdOYl81dTNEOHA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS80YjVjZjEtNDMyMC00NGMyLTkzNTgtZTA3Zjk1OTM1NmEx
LzEvTmtJVGl3N3ZfbGFqTE11cVdOYl81dTNEOHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBfWPrFq
lJ/zmH1vM3XN2CfuaiscYqU+QfWyPTb2KSO59nxDJaeQnwbqO8x5A/nAYukWG3+v
YTNJgBpPpAwVoNm99bgGb+rTw3r0ApqUyRrqpvUYkzoVQS4Fj4tJP7OY3W6FR9Wn
beQCczVkIMWSRenj0mo1CF9ebAKAa35MbnZG41Zb6AWYwzpDllyoCU2dF1GTmn66
FHqPwVtbD4DHud9cz4/ZwkihGzhu+43aO/5rEZLoPEGBAXoYa7P0kV1Y7Nvxr79Z
oF60NQouX0A0QCRoJYQAEEsKQ6QnLh26SQRuGDkio91c/g+TFi1r/wyhT9S3U7A6
7X/xAw8S58+72A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:25:06 2025 by rpki-client