Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
File: NrEA4fbz_-bjXph-DQGVt5k6jTM.mft (raw, json)
Hash identifier: vLsR8bVby3R+Qza6490q98ppclvXTkzQJOb8Nj7blN4=
Subject key identifier: C5:76:A1:50:64:4F:74:F0:8A:47:60:A9:B3:1A:D6:FE:A1:4C:96:95
Authority key identifier: 36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
Certificate issuer: /CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Certificate serial: 01976DE27C4C6E07DB87C894EC12EBEEAD61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 10:00:48 +0000
Manifest this update: Sat 14 Jun 2025 10:00:48 +0000
Manifest next update: Sun 15 Jun 2025 10:00:48 +0000
Files and hashes: 1: KwzLAJFh9AChcSwdy64vpYAmPMw.roa (hash: gKP8z3trUWmnbUH4Fi3xjFDbQv59f3+z5G16CBeShsM=)
2: NrEA4fbz_-bjXph-DQGVt5k6jTM.crl (hash: XbzGwpa0I3VrCV8TIaGYfbOt/8dAZ1V2YC7XaS3p9UU=)
3: xgRFqxuYECy3s3qxM6WfghCOWpk.roa (hash: C6vhgdbkPh06biK8G7xaWybwcmLZK2bGK2ryBwYlob0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:7c:4c:6e:07:db:87:c8:94:ec:12:eb:ee:ad:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Validity
Not Before: Jun 14 10:00:48 2025 GMT
Not After : Jun 15 10:00:48 2025 GMT
Subject: CN=c576a150644f74f08a4760a9b31ad6fea14c9695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1a:bc:2e:62:86:e3:30:ec:60:01:32:7f:6a:
7b:34:3e:dd:ad:ef:0a:35:9b:31:69:e8:f1:72:55:
7b:56:3c:e2:bc:0c:21:63:9e:bc:5e:b5:37:92:0e:
2c:b7:2d:dd:76:ec:d3:94:71:4d:a4:d1:7e:0b:24:
53:ca:61:09:3c:bc:d8:89:29:9d:09:c3:67:d5:bf:
a0:34:24:40:0a:7c:42:f5:4d:e6:31:66:2d:e9:b9:
87:a5:de:35:a1:31:87:29:d7:a7:b7:52:06:40:3d:
de:6a:cd:94:c8:e8:3b:e0:92:fe:75:4b:1c:aa:7e:
a7:2e:8b:50:62:c0:64:fa:7c:86:2a:d9:60:d1:b8:
9e:57:47:8a:61:f3:69:a7:99:9b:07:4d:38:37:a4:
f4:79:27:fe:a3:d2:ec:62:3e:0b:0c:4a:ba:22:34:
d5:69:02:3c:ee:ad:92:8a:36:c1:4e:f4:44:37:98:
70:89:0b:b0:98:54:6f:06:6e:3e:3b:d0:75:9e:6d:
10:5b:7d:de:ce:47:bf:ba:11:d7:4c:02:b9:a1:f0:
43:8b:f4:30:fd:a4:c3:af:61:c3:96:ec:e9:44:b4:
22:15:55:eb:ba:65:2d:19:94:92:d0:6d:e3:8b:d9:
8b:56:64:33:ba:e9:26:8e:c7:01:97:74:8b:20:91:
13:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:76:A1:50:64:4F:74:F0:8A:47:60:A9:B3:1A:D6:FE:A1:4C:96:95
X509v3 Authority Key Identifier:
keyid:36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7c:f7:fb:26:5c:7f:ce:8e:c0:88:7d:d6:c2:e6:16:f4:c9:
45:95:ac:d9:7d:60:81:a4:88:77:bb:75:06:db:84:22:f0:43:
83:5e:df:61:33:57:38:4e:95:34:4d:5f:ec:19:d0:80:45:ae:
02:2e:b8:cd:bc:57:2d:97:80:b4:41:b4:1c:a9:87:ac:35:24:
3a:2e:fe:09:49:d0:b7:74:31:15:5c:89:f2:d7:ae:07:f1:9b:
4d:67:42:b1:23:81:02:a2:31:bd:fa:44:bc:9f:7f:e9:ed:aa:
9f:5c:51:0c:6d:3e:7a:ec:33:da:2c:99:29:69:f5:c5:97:ad:
2d:15:b8:d9:51:db:23:92:2c:7c:83:cd:e4:d9:77:95:4d:7b:
0d:2d:ab:62:5c:be:6c:38:4a:2b:02:1e:4b:bf:bb:d8:bb:f2:
2f:17:a2:2b:6d:55:ae:93:9b:7e:20:e3:f1:16:6d:fc:55:03:
94:99:32:17:8d:d0:84:ac:6b:db:08:2f:98:7f:16:c2:53:a2:
38:8e:fb:c0:bf:b5:64:25:55:ff:55:ac:1f:24:fb:e6:d1:e2:
89:f7:11:37:9e:9b:51:70:94:45:dd:25:89:66:46:93:b9:57:
2b:0e:e4:ab:49:29:5a:ae:c2:d8:a0:81:64:19:9a:e1:cb:e8:
12:06:60:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdt4nxMbgfbh8iU7BLr7q1hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YjEwMGUxZjZmM2ZmZTZlMzVlOTg3ZTBkMDE5NWI3OTkz
YThkMzMwHhcNMjUwNjE0MTAwMDQ4WhcNMjUwNjE1MTAwMDQ4WjAzMTEwLwYDVQQD
EyhjNTc2YTE1MDY0NGY3NGYwOGE0NzYwYTliMzFhZDZmZWExNGM5Njk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Rq8LmKG4zDsYAEyf2p7ND7dre8K
NZsxaejxclV7VjzivAwhY568XrU3kg4sty3dduzTlHFNpNF+CyRTymEJPLzYiSmd
CcNn1b+gNCRACnxC9U3mMWYt6bmHpd41oTGHKdent1IGQD3eas2UyOg74JL+dUsc
qn6nLotQYsBk+nyGKtlg0bieV0eKYfNpp5mbB004N6T0eSf+o9LsYj4LDEq6IjTV
aQI87q2SijbBTvREN5hwiQuwmFRvBm4+O9B1nm0QW33ezke/uhHXTAK5ofBDi/Qw
/aTDr2HDluzpRLQiFVXrumUtGZSS0G3ji9mLVmQzuukmjscBl3SLIJETtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMV2oVBkT3TwikdgqbMa1v6hTJaVMB8GA1UdIwQY
MBaAFDaxAOH28//m416Yfg0BlbeZOo0zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnJFQTRmYnpfLWJqWHBoLURRR1Z0NWs2alRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83MTMzOGQtZTYwMy00OTI2LWEwZjQt
ZTIyYzZlZDc4NDg1LzEvTnJFQTRmYnpfLWJqWHBoLURRR1Z0NWs2alRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83MTMzOGQtZTYwMy00OTI2LWEwZjQtZTIyYzZlZDc4NDg1
LzEvTnJFQTRmYnpfLWJqWHBoLURRR1Z0NWs2alRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHz3+yZc
f86OwIh91sLmFvTJRZWs2X1ggaSId7t1BtuEIvBDg17fYTNXOE6VNE1f7BnQgEWu
Ai64zbxXLZeAtEG0HKmHrDUkOi7+CUnQt3QxFVyJ8teuB/GbTWdCsSOBAqIxvfpE
vJ9/6e2qn1xRDG0+euwz2iyZKWn1xZetLRW42VHbI5IsfIPN5Nl3lU17DS2rYly+
bDhKKwIeS7+72LvyLxeiK21VrpObfiDj8RZt/FUDlJkyF43QhKxr2wgvmH8WwlOi
OI77wL+1ZCVV/1WsHyT75tHiifcRN56bUXCURd0liWZGk7lXKw7kq0kpWq7C2KCB
ZBma4cvoEgZg2A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:51:32 2025 by rpki-client