Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json)
Hash identifier: ZxplP0mPeAh/2UF1L4RedF1ghNJskpFG3wYDNVAU4sw=
Subject key identifier: 99:22:6F:9B:E9:03:4E:A8:DF:34:40:24:DB:F4:9F:F7:2F:4E:95:32
Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Certificate serial: 01976D74AE7166EC5602333BA8B5779D5A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
Manifest number: 1523
Signing time: Sat 14 Jun 2025 08:00:52 +0000
Manifest this update: Sat 14 Jun 2025 08:00:52 +0000
Manifest next update: Sun 15 Jun 2025 08:00:52 +0000
Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: t0lvoFLs9IIWfl6ztJ5q/wo3wDZMgIa7m0xBUDSWBtc=)
2: SJfqIxwijuwzDWomUXLMaLkPe54.roa (hash: hJwzF9WKMllQghsjNYhVq3jDd69NqlMlN06DZcOFQjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:ae:71:66:ec:56:02:33:3b:a8:b5:77:9d:5a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Validity
Not Before: Jun 14 08:00:52 2025 GMT
Not After : Jun 15 08:00:52 2025 GMT
Subject: CN=99226f9be9034ea8df344024dbf49ff72f4e9532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:48:6b:6a:1d:62:a9:29:62:84:ce:ea:e1:
d7:6a:e2:0c:08:29:61:5c:5e:a4:aa:28:83:7c:41:
f7:20:8a:78:f9:cb:f5:71:5f:9b:90:bc:cd:b0:e7:
b9:eb:be:1d:71:a4:37:e3:04:51:88:d5:55:95:31:
44:15:4d:4d:d0:dc:69:b8:87:dd:36:6c:3b:c3:c7:
03:ad:b0:f5:59:d1:19:f2:90:4f:ec:f1:05:6a:55:
94:56:27:4c:a1:de:55:c8:41:97:96:99:38:81:c7:
7e:5f:2e:91:99:a5:36:3b:d1:d4:47:28:c5:ae:7e:
e3:7b:ed:91:2f:95:6f:c4:a5:c9:02:4f:81:64:32:
2f:44:8f:45:2a:f3:08:7b:43:f2:dc:34:1b:92:a5:
fc:0d:f2:b1:2b:18:4c:af:ae:f9:3b:b5:f2:70:aa:
e3:44:76:21:71:fc:f4:99:e1:67:12:4c:e0:4e:c0:
ee:7b:aa:3f:77:bf:33:1e:2d:f0:cd:d7:ab:fe:6d:
d6:02:46:a4:8a:f6:dd:bb:d4:77:9b:3e:ab:03:00:
5c:f8:dc:21:0e:08:23:12:63:f4:9e:30:4a:da:96:
b3:8b:06:f6:33:bc:7e:39:48:fd:50:60:17:cf:02:
01:99:0f:9c:8a:6d:51:d0:e8:b2:00:4e:8a:ff:5d:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:22:6F:9B:E9:03:4E:A8:DF:34:40:24:DB:F4:9F:F7:2F:4E:95:32
X509v3 Authority Key Identifier:
keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4a:12:56:08:ee:dc:64:ba:ee:bb:ae:cc:db:bc:73:f1:fb:
10:f2:00:d1:3c:f9:c2:0c:27:5f:8a:a6:59:cc:85:42:d6:a1:
c1:5a:85:0e:87:7e:94:65:13:a7:bf:7b:ce:71:31:9b:c7:bb:
36:a2:3d:dd:2f:f9:ee:4d:36:87:0b:17:cd:c9:c0:ee:39:24:
30:4b:44:d8:b4:20:54:08:c9:09:ec:59:72:bf:7f:90:81:7c:
8e:76:c6:3c:28:db:f9:fd:2d:e6:83:8b:27:d3:1b:b6:83:d5:
85:bc:61:f2:cb:13:08:ec:65:7c:cf:c2:03:b4:17:42:73:d7:
fa:2b:f8:63:1f:96:cc:8b:57:19:51:5f:41:74:00:35:40:22:
15:5c:87:78:e4:6c:38:19:e4:5d:01:9e:8d:22:9d:79:2f:70:
ca:fa:dd:27:34:c2:14:f8:79:44:25:02:ef:65:e3:73:90:29:
44:3e:bf:67:52:24:94:a1:f8:93:86:ef:9f:78:54:d2:b7:a0:
bd:44:d4:93:36:2a:ba:fd:5a:ae:31:04:e8:f9:9c:c9:c9:3e:
19:16:62:45:ba:2d:9f:56:7f:0d:8e:16:31:86:a4:f4:5e:10:
f7:36:f6:aa:07:cd:b6:7c:b1:07:d0:22:fd:6f:d4:cb:9f:2c:
4e:42:10:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtdK5xZuxWAjM7qLV3nVo9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OTE5MjA0YjdhYzQ3NDI0YmFhYmZiMjkxYmQzZmM4ZmE5
ZTA1ZjYwHhcNMjUwNjE0MDgwMDUyWhcNMjUwNjE1MDgwMDUyWjAzMTEwLwYDVQQD
Eyg5OTIyNmY5YmU5MDM0ZWE4ZGYzNDQwMjRkYmY0OWZmNzJmNGU5NTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuFIa2odYqkpYoTO6uHXauIMCClh
XF6kqiiDfEH3IIp4+cv1cV+bkLzNsOe5674dcaQ34wRRiNVVlTFEFU1N0NxpuIfd
Nmw7w8cDrbD1WdEZ8pBP7PEFalWUVidMod5VyEGXlpk4gcd+Xy6RmaU2O9HURyjF
rn7je+2RL5VvxKXJAk+BZDIvRI9FKvMIe0Py3DQbkqX8DfKxKxhMr675O7XycKrj
RHYhcfz0meFnEkzgTsDue6o/d78zHi3wzder/m3WAkakivbdu9R3mz6rAwBc+Nwh
DggjEmP0njBK2paziwb2M7x+OUj9UGAXzwIBmQ+cim1R0OiyAE6K/10WywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkib5vpA06o3zRAJNv0n/cvTpUyMB8GA1UdIwQY
MBaAFDSRkgS3rEdCS6q/spG9P8j6ngX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgt
YTM3MWYyODg5MTM4LzEvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgtYTM3MWYyODg5MTM4
LzEvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkoSVgju
3GS67ruuzNu8c/H7EPIA0Tz5wgwnX4qmWcyFQtahwVqFDod+lGUTp797znExm8e7
NqI93S/57k02hwsXzcnA7jkkMEtE2LQgVAjJCexZcr9/kIF8jnbGPCjb+f0t5oOL
J9MbtoPVhbxh8ssTCOxlfM/CA7QXQnPX+iv4Yx+WzItXGVFfQXQANUAiFVyHeORs
OBnkXQGejSKdeS9wyvrdJzTCFPh5RCUC72Xjc5ApRD6/Z1IklKH4k4bvn3hU0reg
vUTUkzYquv1arjEE6Pmcyck+GRZiRbotn1Z/DY4WMYak9F4Q9zb2qgfNtnyxB9Ai
/W/Uy58sTkIQJw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:03:33 2025 by rpki-client