Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
File: Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft (raw, json)
Hash identifier: dHL/EzZai/WoeLCNyHMTfcQ40l2WDrTG0JLDduyqL7Y=
Subject key identifier: DF:DD:A5:45:E7:5B:69:29:81:8B:61:BF:FC:DB:25:4A:AB:28:F3:71
Authority key identifier: 37:0E:A1:B0:5C:BD:4E:5C:09:26:78:7C:79:53:3E:E2:9D:94:BE:96
Certificate issuer: /CN=370ea1b05cbd4e5c0926787c79533ee29d94be96
Certificate serial: 0197729AF41BDA55ECAF8AA070446C52903A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
Manifest number: 0D43
Signing time: Sun 15 Jun 2025 08:00:47 +0000
Manifest this update: Sun 15 Jun 2025 08:00:47 +0000
Manifest next update: Mon 16 Jun 2025 08:00:47 +0000
Files and hashes: 1: Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl (hash: LsTve6a4rrhUZ0Dzg2+g1Va8iGQl6REgcMW43tMy260=)
2: agomHzSEGLU5uAKAS4YLGwlj-Q4.roa (hash: 7ISU2WJyj8nXTFjL/d0M7asR7w4tkrVLJaIrTwedHgs=)
3: vkfZgYornLyFRcsSczSPVSrUfQk.roa (hash: KEormr1cuV7WUv9lxgaJIBb9fC8nujOGpBV6adXBfrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:9a:f4:1b:da:55:ec:af:8a:a0:70:44:6c:52:90:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370ea1b05cbd4e5c0926787c79533ee29d94be96
Validity
Not Before: Jun 15 08:00:47 2025 GMT
Not After : Jun 16 08:00:47 2025 GMT
Subject: CN=dfdda545e75b6929818b61bffcdb254aab28f371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:9c:16:bd:5c:03:7b:bf:90:54:cc:7c:90:
9f:69:f5:77:de:38:43:61:c4:17:90:ca:ee:d1:8f:
d4:4e:8f:c5:05:e4:6f:f3:95:94:54:0c:24:2e:ad:
e7:ba:89:1c:aa:8c:2d:7b:3f:53:9a:0d:c3:81:d8:
76:bf:4e:2a:82:15:b3:94:c2:38:55:61:9b:09:28:
77:8b:fd:b8:72:43:a7:26:34:a3:69:9e:9c:d9:84:
d1:28:dd:77:ca:0c:0a:6d:bf:c5:77:92:5c:d3:13:
c4:33:5b:a6:64:31:81:e6:9d:0f:c4:34:dd:e1:18:
00:4c:d3:ea:53:c8:23:82:92:70:70:74:14:c6:1d:
8f:ba:a5:4f:9b:f1:e0:1b:ac:72:84:33:7b:64:0e:
fa:62:7a:45:f1:9d:99:f7:29:57:26:3c:20:54:8e:
ec:79:ba:a9:b8:20:fc:38:a4:38:90:90:27:b1:7f:
cf:8a:f2:46:90:e4:9e:03:c5:8f:f8:e1:89:80:23:
5d:86:0a:99:c8:64:95:0a:1e:4f:2d:5e:26:b7:f3:
61:d8:7b:a8:7c:c4:67:c6:12:d4:9f:f1:73:b7:17:
84:41:a8:29:55:b7:73:2b:6b:02:a1:85:e0:12:73:
d5:be:85:86:9f:ae:be:23:85:d1:be:9f:b7:3e:2f:
b7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DD:A5:45:E7:5B:69:29:81:8B:61:BF:FC:DB:25:4A:AB:28:F3:71
X509v3 Authority Key Identifier:
keyid:37:0E:A1:B0:5C:BD:4E:5C:09:26:78:7C:79:53:3E:E2:9D:94:BE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5e:3e:7f:3f:20:e7:8f:8a:19:16:66:11:33:26:ad:3c:31:
90:c0:c3:a9:fd:23:29:d2:87:10:90:9c:b6:80:e9:f5:65:14:
d4:1a:a3:5d:20:83:66:f5:e0:aa:07:e4:44:ba:3a:bc:97:1c:
84:80:03:98:37:e4:20:a3:ff:c6:12:71:b0:a1:f5:41:5d:41:
9a:1b:ed:9f:b4:f4:e6:25:7a:81:f2:69:c7:c0:7a:40:0f:b8:
2c:95:11:75:8f:43:53:83:94:2c:ed:c1:a2:9f:6e:cf:db:df:
f9:32:19:22:1f:3f:5d:bb:1e:6d:13:cc:71:4c:0e:66:6b:52:
b5:d4:4d:87:d3:c2:d1:27:76:18:0b:ce:11:64:e7:e7:1c:fb:
35:c2:3f:cf:49:ca:92:a6:39:11:be:3d:46:99:d7:4b:cc:b6:
38:35:60:74:c4:31:de:46:63:3e:9e:51:47:88:fc:02:73:68:
ae:c9:c1:66:d5:36:46:f8:cd:6d:72:d1:38:44:4a:35:67:e7:
fa:c7:42:6e:bd:c3:c1:1b:19:60:1b:7a:6d:ce:25:5b:e8:dc:
d7:6d:b7:b6:a3:3d:08:a9:08:94:1d:b6:41:36:25:ab:65:93:
b4:3b:b9:ef:35:45:b2:43:e3:f3:22:0c:03:1d:7d:42:71:2f:
df:84:38:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdymvQb2lXsr4qgcERsUpA6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MGVhMWIwNWNiZDRlNWMwOTI2Nzg3Yzc5NTMzZWUyOWQ5
NGJlOTYwHhcNMjUwNjE1MDgwMDQ3WhcNMjUwNjE2MDgwMDQ3WjAzMTEwLwYDVQQD
EyhkZmRkYTU0NWU3NWI2OTI5ODE4YjYxYmZmY2RiMjU0YWFiMjhmMzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZWcFr1cA3u/kFTMfJCfafV33jhD
YcQXkMru0Y/UTo/FBeRv85WUVAwkLq3nuokcqowtez9Tmg3Dgdh2v04qghWzlMI4
VWGbCSh3i/24ckOnJjSjaZ6c2YTRKN13ygwKbb/Fd5Jc0xPEM1umZDGB5p0PxDTd
4RgATNPqU8gjgpJwcHQUxh2PuqVPm/HgG6xyhDN7ZA76YnpF8Z2Z9ylXJjwgVI7s
ebqpuCD8OKQ4kJAnsX/PivJGkOSeA8WP+OGJgCNdhgqZyGSVCh5PLV4mt/Nh2Huo
fMRnxhLUn/FztxeEQagpVbdzK2sCoYXgEnPVvoWGn66+I4XRvp+3Pi+3wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/dpUXnW2kpgYthv/zbJUqrKPNxMB8GA1UdIwQY
MBaAFDcOobBcvU5cCSZ4fHlTPuKdlL6WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnc2aHNGeTlUbHdKSm5oOGVWTS00cDJVdnBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81YjJkMTYtMDg3Zi00ODhjLTllYmIt
ZThhMzIyODQ2NjQxLzEvTnc2aHNGeTlUbHdKSm5oOGVWTS00cDJVdnBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81YjJkMTYtMDg3Zi00ODhjLTllYmItZThhMzIyODQ2NjQx
LzEvTnc2aHNGeTlUbHdKSm5oOGVWTS00cDJVdnBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYl4+fz8g
54+KGRZmETMmrTwxkMDDqf0jKdKHEJCctoDp9WUU1BqjXSCDZvXgqgfkRLo6vJcc
hIADmDfkIKP/xhJxsKH1QV1Bmhvtn7T05iV6gfJpx8B6QA+4LJURdY9DU4OULO3B
op9uz9vf+TIZIh8/XbsebRPMcUwOZmtStdRNh9PC0Sd2GAvOEWTn5xz7NcI/z0nK
kqY5Eb49RpnXS8y2ODVgdMQx3kZjPp5RR4j8AnNorsnBZtU2RvjNbXLROERKNWfn
+sdCbr3DwRsZYBt6bc4lW+jc1223tqM9CKkIlB22QTYlq2WTtDu57zVFskPj8yIM
Ax19QnEv34Q4PQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:02:09 2025 by rpki-client