Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
File: nlf4Q7F__OqpuGNlgf5NVONG3cw.mft (raw, json)
Hash identifier: WZUrxqgidmirYRzvGN5EKs2wkRnPMuhfSroIgSayWvk=
Subject key identifier: B3:CE:AD:33:18:54:9D:18:67:84:9E:23:9C:81:E8:72:D7:7A:00:A2
Authority key identifier: 9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
Certificate issuer: /CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Certificate serial: 01976C99124722E8F6B9C9391AB1B8317575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
Manifest number: 0BE3
Signing time: Sat 14 Jun 2025 04:01:00 +0000
Manifest this update: Sat 14 Jun 2025 04:01:00 +0000
Manifest next update: Sun 15 Jun 2025 04:01:00 +0000
Files and hashes: 1: IFXNgHuEN8ycsfhuA4dEpX7GYeY.roa (hash: 0NAgcHKOW4VLEuD8zIQn9OzSwjmjjTPr1tkjSBELdjk=)
2: nlf4Q7F__OqpuGNlgf5NVONG3cw.crl (hash: UT6wrhWCzSPYcVkoqgMYhvRTE+W8493DSGe6t32+8dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:12:47:22:e8:f6:b9:c9:39:1a:b1:b8:31:75:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Validity
Not Before: Jun 14 04:01:00 2025 GMT
Not After : Jun 15 04:01:00 2025 GMT
Subject: CN=b3cead3318549d1867849e239c81e872d77a00a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:46:e4:5f:9a:8f:1a:30:19:78:2e:81:69:
d7:b7:79:a8:dc:a9:63:14:44:25:d0:b8:d7:14:78:
d2:75:be:f1:23:3b:f5:60:e5:39:03:39:23:d3:6c:
2c:61:e5:25:8b:a9:97:d0:b4:b5:25:e8:0c:0f:ae:
b1:f2:d4:cc:09:6f:b7:3a:db:e1:b3:b2:50:60:82:
66:b7:f6:6a:ea:d6:1f:67:8f:69:2c:9c:ec:17:b4:
93:ae:e6:6e:6f:2b:da:6d:a1:d9:96:62:4d:30:e9:
f0:0c:77:a8:3c:42:fc:90:a3:58:12:5d:85:d4:a3:
31:55:34:d0:a2:f9:84:6a:d8:bf:d4:d7:21:4d:8e:
8c:8d:ef:24:8c:3f:d8:e0:2a:6b:06:34:31:f8:bb:
34:14:97:2f:b8:6f:d9:0a:97:ef:bf:e2:bb:7c:51:
f1:ab:b1:c5:ff:6f:43:05:4d:47:80:3b:3c:5f:05:
ca:c4:dc:dd:64:fa:ef:bd:0a:56:f1:bf:6c:4e:ec:
f3:82:52:f7:5a:47:e7:f4:f7:01:f4:10:d0:99:94:
8a:1a:f7:b0:0b:e2:b4:0b:ad:be:c0:09:2f:ea:a9:
21:95:28:4f:67:2e:e5:1b:3a:bc:0b:1d:1a:f4:34:
39:39:12:22:cf:6f:fd:ab:1d:b8:14:2d:60:d6:61:
68:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CE:AD:33:18:54:9D:18:67:84:9E:23:9C:81:E8:72:D7:7A:00:A2
X509v3 Authority Key Identifier:
keyid:9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:fe:0d:db:41:44:7b:99:04:f1:d3:e5:e0:11:0b:3a:7e:16:
32:ec:9a:c4:ef:7a:fb:e8:3f:0b:16:64:23:08:ea:1b:9b:64:
15:bc:4a:2a:92:f9:58:7e:7a:31:f6:95:f4:bd:88:72:31:9a:
c9:d2:3d:e3:89:a8:86:13:2b:72:b9:88:83:9b:56:66:8a:a6:
70:a4:ea:ca:75:85:e1:69:29:34:44:a8:4f:98:24:50:68:5a:
93:43:d7:75:3b:b7:3d:07:3a:92:76:20:c8:7b:9a:72:53:fb:
c9:05:d3:1b:21:a7:f0:47:5f:22:63:30:67:ab:c4:c6:79:87:
d5:76:df:9e:d7:a8:29:95:c6:ab:f7:02:ef:3e:45:51:65:c2:
2c:75:7c:d9:c4:03:88:e2:db:92:eb:3e:dd:8d:8a:b9:c3:d3:
d5:45:df:29:5c:dc:e5:01:0d:ff:b8:0f:30:01:78:9a:a5:24:
f7:10:6b:da:c9:b9:14:bd:20:da:d1:a4:80:98:78:dc:8e:6d:
43:1b:cf:27:68:f1:97:e3:43:30:95:4a:b9:6c:f1:d8:54:48:
83:9f:db:62:9b:e6:e2:eb:58:4d:9c:3b:a8:81:ae:77:11:42:
a8:33:23:27:97:39:26:81:55:d6:37:08:f9:d4:7f:13:dd:c1:
63:17:bd:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmRJHIuj2uck5GrG4MXV1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNTdmODQzYjE3ZmZjZWFhOWI4NjM2NTgxZmU0ZDU0ZTM0
NmRkY2MwHhcNMjUwNjE0MDQwMTAwWhcNMjUwNjE1MDQwMTAwWjAzMTEwLwYDVQQD
EyhiM2NlYWQzMzE4NTQ5ZDE4Njc4NDllMjM5YzgxZTg3MmQ3N2EwMGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYhG5F+ajxowGXgugWnXt3mo3Klj
FEQl0LjXFHjSdb7xIzv1YOU5Azkj02wsYeUli6mX0LS1JegMD66x8tTMCW+3Otvh
s7JQYIJmt/Zq6tYfZ49pLJzsF7STruZubyvabaHZlmJNMOnwDHeoPEL8kKNYEl2F
1KMxVTTQovmEati/1NchTY6Mje8kjD/Y4CprBjQx+Ls0FJcvuG/ZCpfvv+K7fFHx
q7HF/29DBU1HgDs8XwXKxNzdZPrvvQpW8b9sTuzzglL3Wkfn9PcB9BDQmZSKGvew
C+K0C62+wAkv6qkhlShPZy7lGzq8Cx0a9DQ5ORIiz2/9qx24FC1g1mFoWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPOrTMYVJ0YZ4SeI5yB6HLXegCiMB8GA1UdIwQY
MBaAFJ5X+EOxf/zqqbhjZYH+TVTjRt3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmxmNFE3Rl9fT3FwdUdObGdmNU5WT05HM2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC83ZDBlZmUtNzA5ZC00ZDExLWI2OTIt
MGUyMzA4MDZiNTc5LzEvbmxmNFE3Rl9fT3FwdUdObGdmNU5WT05HM2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC83ZDBlZmUtNzA5ZC00ZDExLWI2OTItMGUyMzA4MDZiNTc5
LzEvbmxmNFE3Rl9fT3FwdUdObGdmNU5WT05HM2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/4N20FE
e5kE8dPl4BELOn4WMuyaxO96++g/CxZkIwjqG5tkFbxKKpL5WH56MfaV9L2IcjGa
ydI944mohhMrcrmIg5tWZoqmcKTqynWF4WkpNESoT5gkUGhak0PXdTu3PQc6knYg
yHuaclP7yQXTGyGn8EdfImMwZ6vExnmH1XbfnteoKZXGq/cC7z5FUWXCLHV82cQD
iOLbkus+3Y2KucPT1UXfKVzc5QEN/7gPMAF4mqUk9xBr2sm5FL0g2tGkgJh43I5t
QxvPJ2jxl+NDMJVKuWzx2FRIg5/bYpvm4utYTZw7qIGudxFCqDMjJ5c5JoFV1jcI
+dR/E93BYxe9wQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:45:48 2025 by rpki-client