Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json)
Hash identifier: VYDFH2bmVYZM+lW3hLonHKmv5Qp+8ZQOBsl8bALBUiE=
Subject key identifier: 27:D0:53:12:B7:0E:DD:52:A6:E1:0A:F0:BD:B4:3A:E9:18:BD:84:B6
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial: 0197850F1F96EF6B51CD0F8189D64F3045D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
Manifest number: 0EEA
Signing time: Wed 18 Jun 2025 22:00:50 +0000
Manifest this update: Wed 18 Jun 2025 22:00:50 +0000
Manifest next update: Thu 19 Jun 2025 22:00:50 +0000
Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: g4zxG6OfsyLE0mvaisOVY43QIyLmTJyrTViEY5+Sfr8=)
2: nxVkwWxp31G9Nhk5RnHhT1dH-NE.roa (hash: dlhfhOwY+Ae+4z4M/Srqh6E06sqatloTn5dl72qTwng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:0f:1f:96:ef:6b:51:cd:0f:81:89:d6:4f:30:45:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Validity
Not Before: Jun 18 22:00:50 2025 GMT
Not After : Jun 19 22:00:50 2025 GMT
Subject: CN=27d05312b70edd52a6e10af0bdb43ae918bd84b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:3b:81:fb:e5:7c:f6:96:89:65:cb:a7:c2:
e9:dc:81:8f:52:8b:a9:6e:14:e2:08:14:88:c4:34:
cd:e7:83:1c:8d:f7:5b:4f:87:70:7d:10:e8:1d:e8:
19:e5:c7:aa:80:2d:78:28:b1:ca:ba:94:f4:0a:ee:
8c:f3:c3:54:78:36:5a:af:a8:af:ad:88:1e:a8:95:
21:9f:bf:64:39:19:a3:f4:61:41:17:cd:ef:91:e6:
d6:42:a1:8a:21:92:2a:cf:49:16:2d:c3:28:17:cd:
d4:50:66:39:7b:9b:16:a4:85:78:ec:c6:20:c7:3c:
02:65:3c:cb:22:92:fd:77:6f:83:9b:88:42:9e:0d:
93:f5:4d:dd:c7:89:12:e4:be:3c:82:fa:a5:d9:79:
94:36:0e:fc:a1:3a:c7:f7:85:f9:af:47:5b:d8:7a:
66:66:d6:55:c9:3b:52:66:a9:7d:ff:9d:aa:ed:bc:
45:b6:49:e3:8b:9b:c7:93:d1:aa:58:a1:ff:eb:55:
d7:a4:90:d1:24:a4:f1:c5:a3:98:db:ee:63:42:5c:
e5:30:93:eb:2a:7d:eb:c7:fb:8b:7e:92:b9:0b:61:
89:d0:37:32:ff:34:67:3f:f0:7c:3d:61:8b:4d:ee:
08:63:1e:02:55:7a:d9:1e:6e:06:32:8a:19:99:b5:
75:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D0:53:12:B7:0E:DD:52:A6:E1:0A:F0:BD:B4:3A:E9:18:BD:84:B6
X509v3 Authority Key Identifier:
keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:07:38:1f:39:ce:3a:21:8b:27:71:6f:67:50:17:2f:90:db:
ea:dd:4e:21:66:2e:a2:79:42:41:73:ea:4d:ad:9d:64:ac:71:
2c:c5:b0:72:eb:95:dd:5e:4d:f7:29:91:e8:57:3a:a6:99:1a:
6e:fa:7d:8a:02:4b:46:bd:57:13:f3:83:13:59:f6:7c:06:82:
96:2b:cb:b3:ff:da:21:4a:40:5e:cc:51:0e:06:02:a5:72:16:
e9:17:63:a2:a2:41:fb:e8:f3:97:44:e5:33:bb:52:23:45:45:
cb:aa:95:a4:fc:66:30:fc:f6:ec:80:40:a6:19:ba:e8:0d:08:
02:4f:72:04:86:eb:c1:0d:58:3e:62:82:2b:12:08:d8:d7:39:
3d:8e:35:0a:cf:9b:92:bd:f9:0b:f8:d9:b3:f9:20:7c:ca:92:
43:12:b4:d6:bf:d1:6e:46:e7:1c:0a:64:57:3b:6c:af:79:bb:
85:1a:3f:61:8c:bf:42:7e:f5:2a:30:b4:05:79:b5:34:28:59:
f7:52:40:72:9c:68:bf:c6:a8:51:29:1c:4e:7a:f6:00:eb:9f:
5e:7f:4c:03:26:78:7a:d8:1a:2f:ee:9a:c3:a6:8f:93:9f:a4:
19:42:19:04:af:73:17:dc:61:d7:a1:0d:de:46:fa:15:23:71:
7d:a0:fb:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeFDx+W72tRzQ+BidZPMEXSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YWYwNDFkMTJjNGFkYjY2ZjhjMTYxMTNjOWE2MTQ3ZDAy
Mzg4ZDkwHhcNMjUwNjE4MjIwMDUwWhcNMjUwNjE5MjIwMDUwWjAzMTEwLwYDVQQD
EygyN2QwNTMxMmI3MGVkZDUyYTZlMTBhZjBiZGI0M2FlOTE4YmQ4NGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0I7gfvlfPaWiWXLp8Lp3IGPUoup
bhTiCBSIxDTN54McjfdbT4dwfRDoHegZ5ceqgC14KLHKupT0Cu6M88NUeDZar6iv
rYgeqJUhn79kORmj9GFBF83vkebWQqGKIZIqz0kWLcMoF83UUGY5e5sWpIV47MYg
xzwCZTzLIpL9d2+Dm4hCng2T9U3dx4kS5L48gvql2XmUNg78oTrH94X5r0db2Hpm
ZtZVyTtSZql9/52q7bxFtknji5vHk9GqWKH/61XXpJDRJKTxxaOY2+5jQlzlMJPr
Kn3rx/uLfpK5C2GJ0Dcy/zRnP/B8PWGLTe4IYx4CVXrZHm4GMooZmbV1QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfQUxK3Dt1SpuEK8L20OukYvYS2MB8GA1UdIwQY
MBaAFDavBB0SxK22b4wWETyaYUfQI4jZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnE4RUhSTEVyYlp2akJZUlBKcGhSOUFqaU5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YTU0MmQtNzE5ZS00NmQwLWE1Y2Mt
MDYxZGQ2ODEzMzJjLzEvTnE4RUhSTEVyYlp2akJZUlBKcGhSOUFqaU5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83YTU0MmQtNzE5ZS00NmQwLWE1Y2MtMDYxZGQ2ODEzMzJj
LzEvTnE4RUhSTEVyYlp2akJZUlBKcGhSOUFqaU5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAc4HznO
OiGLJ3FvZ1AXL5Db6t1OIWYuonlCQXPqTa2dZKxxLMWwcuuV3V5N9ymR6Fc6ppka
bvp9igJLRr1XE/ODE1n2fAaClivLs//aIUpAXsxRDgYCpXIW6RdjoqJB++jzl0Tl
M7tSI0VFy6qVpPxmMPz27IBAphm66A0IAk9yBIbrwQ1YPmKCKxII2Nc5PY41Cs+b
kr35C/jZs/kgfMqSQxK01r/RbkbnHApkVztsr3m7hRo/YYy/Qn71KjC0BXm1NChZ
91JAcpxov8aoUSkcTnr2AOufXn9MAyZ4etgaL+6aw6aPk5+kGUIZBK9zF9xh16EN
3kb6FSNxfaD7cQ==
-----END CERTIFICATE-----
Generated at Thu Jun 19 07:51:57 2025 by rpki-client