Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
File: nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json)
Hash identifier: o08WYba5dWQhNfXNL4rauoF4MPxeA+5KJtnVcdQ04A8=
Subject key identifier: 14:68:39:7F:A7:55:F1:05:BE:36:B8:51:27:A9:78:39:47:71:63:19
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial: 019774F75EBEABC41E04129A9F98290772C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
Manifest number: 08C3
Signing time: Sun 15 Jun 2025 19:00:58 +0000
Manifest this update: Sun 15 Jun 2025 19:00:58 +0000
Manifest next update: Mon 16 Jun 2025 19:00:58 +0000
Files and hashes: 1: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: +Q43A7j2eY/lEWx2Wi07SlLGU8jrUEpMPDU4PQCo0f8=)
2: udQIyLLEg9QQXb-UkTqLHg_TlmY.roa (hash: tqfLE5OeUFZI9sRR907kQS3AlAfPN5yiahDFaxm0yMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f7:5e:be:ab:c4:1e:04:12:9a:9f:98:29:07:72:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
Validity
Not Before: Jun 15 19:00:58 2025 GMT
Not After : Jun 16 19:00:58 2025 GMT
Subject: CN=1468397fa755f105be36b85127a9783947716319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:c8:da:aa:d6:1e:c8:6a:ad:3b:37:79:0e:
54:23:4f:2b:8d:ca:31:32:41:df:15:83:19:72:29:
2d:69:4b:92:15:4e:48:2c:84:af:62:a7:53:99:5c:
9d:a0:bc:0b:03:97:0f:24:76:de:19:4d:d0:bd:8c:
a7:d7:b1:da:21:55:bd:ba:c1:7d:6a:9c:86:05:84:
3e:b4:15:fa:09:8b:7f:9a:2c:c2:35:47:71:2c:c1:
9e:51:e2:b1:ea:ec:b5:49:43:3d:76:0f:e6:40:a8:
dc:ed:be:d1:eb:b0:9d:3f:83:3f:f5:73:6d:60:72:
da:99:5e:87:2c:62:cd:53:e8:c8:02:8c:58:8a:49:
89:64:c4:8d:8f:e4:63:45:63:60:b0:cb:5a:86:80:
f1:b3:c3:5d:a6:2f:47:fb:09:8e:d3:2d:73:84:00:
ea:df:f7:70:e4:70:ee:0a:a8:a1:23:f7:1f:eb:71:
d6:c8:a0:11:dd:43:b0:76:9a:f0:4b:cc:51:bb:ee:
13:cf:4c:d8:29:b8:fb:5e:dc:7c:0a:37:23:89:52:
f0:24:96:62:c7:b3:f6:2b:4b:b6:86:21:2a:bb:74:
62:aa:9f:7f:ec:ff:3a:4f:3b:d0:4b:8a:91:52:89:
14:a4:d5:5e:b4:53:10:46:97:f0:1a:f9:87:67:b6:
4e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:68:39:7F:A7:55:F1:05:BE:36:B8:51:27:A9:78:39:47:71:63:19
X509v3 Authority Key Identifier:
keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:02:1a:df:1d:50:94:88:95:48:93:27:b6:d6:80:b8:02:c5:
f6:f5:63:09:25:a3:ac:6b:ec:be:cd:b7:94:4f:c6:fc:2d:d1:
20:39:36:d9:28:9b:f0:cb:be:c6:34:60:ad:2f:f8:c7:b0:5c:
d8:ea:9c:04:51:96:54:19:74:8e:f9:c0:ef:fd:ca:f9:8b:78:
cb:05:fb:f4:9c:1a:40:d2:3a:1e:3c:0e:f0:96:a0:98:53:e8:
2e:90:09:ee:4d:7d:30:91:a0:12:e0:e3:56:5c:df:d6:68:a5:
ec:72:ff:6a:50:5e:b4:58:28:38:f2:8a:85:4e:85:4c:68:26:
91:55:92:f5:c0:ab:8c:f9:72:a1:7d:3d:f1:28:d3:d1:90:00:
7b:44:9b:4e:9d:a1:b5:63:b2:a0:25:97:ee:63:3a:4d:5a:26:
97:bd:3b:07:c6:76:25:e2:b1:8d:1b:a8:a0:51:f5:ee:e1:b2:
34:48:c7:e2:e3:65:76:08:d2:35:0a:99:ed:5a:f9:3e:5c:8d:
1d:8d:87:34:05:70:33:89:21:46:df:68:eb:7e:87:e8:3b:c1:
e2:c0:e2:1a:0f:35:d1:f8:a5:f9:c9:ab:d4:f2:8b:b3:7f:9e:
38:4c:6c:5b:e4:7c:f2:36:f3:a5:35:c3:5f:7a:88:15:da:49:
65:2d:3b:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0916+q8QeBBKan5gpB3LIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNjgzNGFlMzU2MzBhMDRjNzhmMjc3NjA1MjUyNjc4ZmI2
NDVjNDUwHhcNMjUwNjE1MTkwMDU4WhcNMjUwNjE2MTkwMDU4WjAzMTEwLwYDVQQD
EygxNDY4Mzk3ZmE3NTVmMTA1YmUzNmI4NTEyN2E5NzgzOTQ3NzE2MzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsDI2qrWHshqrTs3eQ5UI08rjcox
MkHfFYMZciktaUuSFU5ILISvYqdTmVydoLwLA5cPJHbeGU3QvYyn17HaIVW9usF9
apyGBYQ+tBX6CYt/mizCNUdxLMGeUeKx6uy1SUM9dg/mQKjc7b7R67CdP4M/9XNt
YHLamV6HLGLNU+jIAoxYikmJZMSNj+RjRWNgsMtahoDxs8Ndpi9H+wmO0y1zhADq
3/dw5HDuCqihI/cf63HWyKAR3UOwdprwS8xRu+4Tz0zYKbj7Xtx8CjcjiVLwJJZi
x7P2K0u2hiEqu3Riqp9/7P86TzvQS4qRUokUpNVetFMQRpfwGvmHZ7ZOqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRoOX+nVfEFvja4USepeDlHcWMZMB8GA1UdIwQY
MBaAFJ5oNK41YwoEx48ndgUlJnj7ZFxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYjk3YzgtOTU3Ni00MjQ3LTk2ZTYt
NTI3OTg0ZmMxMTgxLzEvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zYjk3YzgtOTU3Ni00MjQ3LTk2ZTYtNTI3OTg0ZmMxMTgx
LzEvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgIa3x1Q
lIiVSJMnttaAuALF9vVjCSWjrGvsvs23lE/G/C3RIDk22Sib8Mu+xjRgrS/4x7Bc
2OqcBFGWVBl0jvnA7/3K+Yt4ywX79JwaQNI6HjwO8JagmFPoLpAJ7k19MJGgEuDj
Vlzf1mil7HL/alBetFgoOPKKhU6FTGgmkVWS9cCrjPlyoX098SjT0ZAAe0SbTp2h
tWOyoCWX7mM6TVoml707B8Z2JeKxjRuooFH17uGyNEjH4uNldgjSNQqZ7Vr5PlyN
HY2HNAVwM4khRt9o636H6DvB4sDiGg810fil+cmr1PKLs3+eOExsW+R88jbzpTXD
X3qIFdpJZS07ew==
-----END CERTIFICATE-----
Generated at Sun Jun 15 22:08:03 2025 by rpki-client