Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
File: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft (raw, json)
Hash identifier: FV5I8IgiNmKneVsAaT2LIOXNr1LB/hK59PJBm23YYxY=
Subject key identifier: C0:3F:6B:82:1E:02:DC:50:6A:7F:84:71:9E:E7:FC:A7:EC:5D:6A:DF
Authority key identifier: 9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
Certificate issuer: /CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Certificate serial: 019768BBF259D7D30C078E52C96EFB82005F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 10:00:37 +0000
Manifest this update: Fri 13 Jun 2025 10:00:37 +0000
Manifest next update: Sat 14 Jun 2025 10:00:37 +0000
Files and hashes: 1: k80BCKNHzgDvKK_3k-MEya8lNoM.roa (hash: XRBQsFrhhLJ6RMDFPAKpPWk13Lc3Ws+YcSUdoLvIOo8=)
2: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl (hash: tqxATWDXjViw8qpbN/8J5UrWaC7NtyPVANF0aqy1KbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:f2:59:d7:d3:0c:07:8e:52:c9:6e:fb:82:00:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Validity
Not Before: Jun 13 10:00:37 2025 GMT
Not After : Jun 14 10:00:37 2025 GMT
Subject: CN=c03f6b821e02dc506a7f84719ee7fca7ec5d6adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:fa:b8:c9:a1:b5:08:ee:38:48:60:bb:96:
72:9a:38:a1:d0:d3:be:4b:d3:ee:89:4c:62:60:c8:
0d:c1:ee:18:f5:b3:7c:37:01:bb:87:e4:b8:ce:d2:
48:28:9f:af:90:3b:29:0c:71:04:59:68:6a:b2:f5:
b5:9f:9f:a8:3f:22:8d:14:03:d2:5b:e5:18:d8:63:
89:52:75:bb:30:22:6e:73:be:af:24:23:d0:13:04:
72:79:72:3c:88:70:12:92:f3:94:de:e4:86:fa:6c:
3d:5c:db:fc:92:2b:f9:ed:4c:96:b1:ff:5c:e7:f8:
e5:0e:75:3a:cf:d1:8a:c6:4e:03:15:1c:58:13:09:
0d:ae:02:8f:6e:63:ea:dd:d2:af:55:da:0f:df:52:
93:40:2d:34:c4:47:c1:8b:07:f3:fa:df:cc:81:b8:
8f:df:25:2e:58:23:78:ee:18:3f:a4:8e:ba:65:1f:
06:a1:d1:aa:b1:9a:67:68:bb:c8:59:e1:00:7a:7b:
8b:5f:df:bd:b3:96:73:7e:7b:41:26:4b:f0:c6:df:
2d:c9:7f:dc:da:30:3c:98:93:1b:4b:2a:a1:57:fe:
56:91:cd:22:d1:00:7b:93:84:f8:77:14:69:81:6c:
44:cf:9d:b0:07:d3:0d:8f:cb:ab:34:1b:35:6d:d1:
31:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3F:6B:82:1E:02:DC:50:6A:7F:84:71:9E:E7:FC:A7:EC:5D:6A:DF
X509v3 Authority Key Identifier:
keyid:9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:b8:8d:76:10:76:be:53:df:75:c3:3d:1b:49:81:a0:1e:cf:
c7:ea:c6:af:ce:86:87:8a:6a:bd:6e:56:21:56:48:87:9f:65:
bf:a4:db:89:16:e0:ba:1e:96:2a:29:04:09:26:f9:53:c8:6a:
e3:a7:44:07:c9:99:77:66:79:37:9b:c4:1f:32:49:67:ae:2e:
90:ab:9a:25:9e:af:d2:5e:eb:61:f4:a3:ad:54:f0:f1:6b:5a:
fb:31:e8:4c:d6:14:7d:ef:24:db:56:8b:48:0e:47:3a:23:df:
5e:15:47:03:1f:27:83:a0:f9:15:82:27:8b:a1:2a:ae:43:0c:
aa:f3:08:9c:2a:24:b9:7e:be:04:8e:f7:04:28:6d:22:46:ce:
d7:32:e4:da:9f:3b:ed:9d:3e:af:72:bf:28:53:83:9d:f6:84:
21:ca:84:a2:bb:e2:ee:65:63:5f:cd:43:9d:b1:a7:7d:fe:aa:
a2:d3:39:38:25:f1:dc:c3:04:9e:b1:1b:e9:1f:97:13:2a:40:
36:a6:ef:99:b9:8a:f2:c3:23:06:ce:76:dd:2f:81:fe:2b:80:
08:76:e5:e8:0d:94:77:5b:e5:0c:15:d9:c5:01:56:54:0f:d0:
88:78:52:ad:5b:88:eb:a2:64:f3:b1:7e:32:ef:c5:fa:98:52:
e3:67:6a:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdou/JZ19MMB45SyW77ggBfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNjE0MDNhYzY5ZTI4NzRmNTYyMmQ3ZWU1NjhlOGU0OWYw
NjRjMmUwHhcNMjUwNjEzMTAwMDM3WhcNMjUwNjE0MTAwMDM3WjAzMTEwLwYDVQQD
EyhjMDNmNmI4MjFlMDJkYzUwNmE3Zjg0NzE5ZWU3ZmNhN2VjNWQ2YWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIr6uMmhtQjuOEhgu5Zymjih0NO+
S9PuiUxiYMgNwe4Y9bN8NwG7h+S4ztJIKJ+vkDspDHEEWWhqsvW1n5+oPyKNFAPS
W+UY2GOJUnW7MCJuc76vJCPQEwRyeXI8iHASkvOU3uSG+mw9XNv8kiv57UyWsf9c
5/jlDnU6z9GKxk4DFRxYEwkNrgKPbmPq3dKvVdoP31KTQC00xEfBiwfz+t/MgbiP
3yUuWCN47hg/pI66ZR8GodGqsZpnaLvIWeEAenuLX9+9s5ZzfntBJkvwxt8tyX/c
2jA8mJMbSyqhV/5Wkc0i0QB7k4T4dxRpgWxEz52wB9MNj8urNBs1bdExlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMA/a4IeAtxQan+EcZ7n/KfsXWrfMB8GA1UdIwQY
MBaAFJ5hQDrGnih09WItfuVo6OSfBkwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm1GQU9zYWVLSFQxWWkxLTVXam81SjhHVEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lY2EzMjctZDU4Zi00OTFjLTk0Yzgt
ZTNkMDQ1NDgzNDEyLzEvbm1GQU9zYWVLSFQxWWkxLTVXam81SjhHVEM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lY2EzMjctZDU4Zi00OTFjLTk0YzgtZTNkMDQ1NDgzNDEy
LzEvbm1GQU9zYWVLSFQxWWkxLTVXam81SjhHVEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyriNdhB2
vlPfdcM9G0mBoB7Px+rGr86Gh4pqvW5WIVZIh59lv6TbiRbguh6WKikECSb5U8hq
46dEB8mZd2Z5N5vEHzJJZ64ukKuaJZ6v0l7rYfSjrVTw8Wta+zHoTNYUfe8k21aL
SA5HOiPfXhVHAx8ng6D5FYIni6EqrkMMqvMInCokuX6+BI73BChtIkbO1zLk2p87
7Z0+r3K/KFODnfaEIcqEorvi7mVjX81DnbGnff6qotM5OCXx3MMEnrEb6R+XEypA
NqbvmbmK8sMjBs523S+B/iuACHbl6A2Ud1vlDBXZxQFWVA/QiHhSrVuI66Jk87F+
Mu/F+phS42dqTg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:08:31 2025 by rpki-client