Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
File: niX4djqjUWiba6M2JpqyHE4BILM.mft (raw, json)
Hash identifier: 9vDxUM8+8+AvsqSJRmNqynEUSF3t8yDsghWt74mhFr0=
Subject key identifier: 06:13:8B:38:6E:0E:C0:B0:80:7A:06:EE:A2:33:A4:B7:E2:26:48:E1
Authority key identifier: 9E:25:F8:76:3A:A3:51:68:9B:6B:A3:36:26:9A:B2:1C:4E:01:20:B3
Certificate issuer: /CN=9e25f8763aa351689b6ba336269ab21c4e0120b3
Certificate serial: 01976BBCF3BFCD3ED3A7F7E4BD3EB3853921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
Manifest number: 03B2
Signing time: Sat 14 Jun 2025 00:00:34 +0000
Manifest this update: Sat 14 Jun 2025 00:00:34 +0000
Manifest next update: Sun 15 Jun 2025 00:00:34 +0000
Files and hashes: 1: 3lv0MS0KMvs2NqTlqtd3HvxtHfA.roa (hash: Jn8Yd6x4goPshXFFHZFFSl5WpHb8SXFgvxZ7Lsgfvu4=)
2: niX4djqjUWiba6M2JpqyHE4BILM.crl (hash: /ZRV0niFoBZVRhOfRv26QW05IiFiHo/1isQp+RcRCu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:f3:bf:cd:3e:d3:a7:f7:e4:bd:3e:b3:85:39:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e25f8763aa351689b6ba336269ab21c4e0120b3
Validity
Not Before: Jun 14 00:00:34 2025 GMT
Not After : Jun 15 00:00:34 2025 GMT
Subject: CN=06138b386e0ec0b0807a06eea233a4b7e22648e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:06:96:ae:f5:23:4c:66:85:be:02:60:99:82:
0e:4d:e7:9b:c4:13:b3:d0:b5:02:36:fb:16:58:70:
8c:bf:86:f9:27:f1:b1:f0:fa:21:34:b9:11:66:f6:
1e:a7:b0:6c:6f:e0:8d:6d:a7:16:18:82:77:4d:05:
b4:9e:2a:dd:9a:fd:06:55:2a:57:60:9e:f5:e2:8a:
b8:f5:71:6a:01:0c:b5:24:0c:34:c6:5b:6c:54:23:
6a:1c:7a:0c:48:66:3c:28:a8:8b:31:bd:84:f9:2b:
34:50:40:9b:ef:4e:45:a4:68:9d:70:a6:0f:1c:6e:
b8:c7:49:e3:02:12:25:ed:7c:00:a3:d4:d2:d6:de:
58:ae:62:2e:5f:a9:83:fe:45:71:91:0b:31:a5:a7:
64:fe:b1:ef:12:cb:9c:8d:0b:d4:3b:42:37:88:7b:
e6:35:6a:8e:b3:76:f2:e6:9b:ec:17:b8:db:19:8f:
b2:be:d5:ee:63:7f:6a:54:f1:64:b7:17:3a:01:41:
e9:51:84:fc:3a:70:c9:78:f1:f9:6b:0f:3e:3e:02:
3b:34:13:dc:9b:99:bf:77:95:a5:18:61:10:b2:b2:
15:84:3b:92:1d:60:b2:83:24:70:e2:22:bd:0f:42:
5f:a8:3b:e9:96:a8:c4:e9:fe:56:a9:e5:bc:f9:ea:
b8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:13:8B:38:6E:0E:C0:B0:80:7A:06:EE:A2:33:A4:B7:E2:26:48:E1
X509v3 Authority Key Identifier:
keyid:9E:25:F8:76:3A:A3:51:68:9B:6B:A3:36:26:9A:B2:1C:4E:01:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e5:e9:00:e6:c2:c0:2f:46:e7:0b:25:1d:2c:1c:23:1d:7d:
c5:9a:28:0a:94:ba:03:f6:f1:71:8f:50:1d:cc:f0:e5:ce:2a:
b3:9b:03:d0:da:14:64:c6:3a:bd:d1:e3:79:75:91:fc:88:5a:
61:00:4d:68:40:1d:a4:90:87:4a:76:95:97:34:d6:1c:2b:a3:
b8:e1:d3:b2:3f:db:f4:24:15:a2:02:12:13:3c:ca:ef:68:6a:
b6:a9:89:56:39:b1:8c:29:51:79:94:5a:a5:76:e8:43:a3:76:
c0:39:f5:c5:79:bc:c3:c4:af:1e:59:06:70:df:b1:cd:ae:c9:
ff:25:ea:eb:32:a8:08:4d:09:d2:44:f0:f4:44:12:3c:f2:b8:
3b:72:90:ef:fb:ed:c9:46:ee:d0:b3:c7:73:0d:a8:cf:ee:cf:
26:d6:45:80:f1:f7:d0:dd:97:68:c7:32:05:3d:87:e5:da:e3:
ac:00:b5:51:05:2d:46:d2:eb:0e:c0:09:dc:19:6a:41:96:75:
bf:04:8e:3c:57:0c:7f:fe:2e:28:9f:a2:06:76:10:ae:a0:f9:
de:0c:14:76:46:6c:e9:18:50:a7:8c:93:c3:aa:a0:a3:50:0f:
52:fb:47:e0:d8:56:ff:2d:e4:fa:02:66:d2:9e:98:1a:f4:a0:
ae:57:17:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvPO/zT7Tp/fkvT6zhTkhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMjVmODc2M2FhMzUxNjg5YjZiYTMzNjI2OWFiMjFjNGUw
MTIwYjMwHhcNMjUwNjE0MDAwMDM0WhcNMjUwNjE1MDAwMDM0WjAzMTEwLwYDVQQD
EygwNjEzOGIzODZlMGVjMGIwODA3YTA2ZWVhMjMzYTRiN2UyMjY0OGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AaWrvUjTGaFvgJgmYIOTeebxBOz
0LUCNvsWWHCMv4b5J/Gx8PohNLkRZvYep7Bsb+CNbacWGIJ3TQW0nirdmv0GVSpX
YJ714oq49XFqAQy1JAw0xltsVCNqHHoMSGY8KKiLMb2E+Ss0UECb705FpGidcKYP
HG64x0njAhIl7XwAo9TS1t5YrmIuX6mD/kVxkQsxpadk/rHvEsucjQvUO0I3iHvm
NWqOs3by5pvsF7jbGY+yvtXuY39qVPFktxc6AUHpUYT8OnDJePH5aw8+PgI7NBPc
m5m/d5WlGGEQsrIVhDuSHWCygyRw4iK9D0JfqDvplqjE6f5WqeW8+eq4xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYTizhuDsCwgHoG7qIzpLfiJkjhMB8GA1UdIwQY
MBaAFJ4l+HY6o1Fom2ujNiaashxOASCzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmlYNGRqcWpVV2liYTZNMkpwcXlIRTRCSUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wYTQ1NjQtYTUyNS00NjE1LTlhM2Et
ODkzMGViYjgzZTMxLzEvbmlYNGRqcWpVV2liYTZNMkpwcXlIRTRCSUxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8wYTQ1NjQtYTUyNS00NjE1LTlhM2EtODkzMGViYjgzZTMx
LzEvbmlYNGRqcWpVV2liYTZNMkpwcXlIRTRCSUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuXpAObC
wC9G5wslHSwcIx19xZooCpS6A/bxcY9QHczw5c4qs5sD0NoUZMY6vdHjeXWR/Iha
YQBNaEAdpJCHSnaVlzTWHCujuOHTsj/b9CQVogISEzzK72hqtqmJVjmxjClReZRa
pXboQ6N2wDn1xXm8w8SvHlkGcN+xza7J/yXq6zKoCE0J0kTw9EQSPPK4O3KQ7/vt
yUbu0LPHcw2oz+7PJtZFgPH30N2XaMcyBT2H5drjrAC1UQUtRtLrDsAJ3BlqQZZ1
vwSOPFcMf/4uKJ+iBnYQrqD53gwUdkZs6RhQp4yTw6qgo1APUvtH4NhW/y3k+gJm
0p6YGvSgrlcXMQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:15:34 2025 by rpki-client