Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
File: NNsbsppK6oXhnCiS0Mg54vuUXtA.mft (raw, json)
Hash identifier: +zGDM55gVh5/18oOAxOLjHUM6zTgFyZQSc5QZ13w5h0=
Subject key identifier: D7:FA:1C:3C:C4:77:1F:98:DC:7B:35:88:D1:AB:13:92:AD:CF:87:A2
Authority key identifier: 34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
Certificate issuer: /CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Certificate serial: 019769CE8BA97D4B1729D0D8C40E1445F73B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
Manifest number: 026D
Signing time: Fri 13 Jun 2025 15:00:33 +0000
Manifest this update: Fri 13 Jun 2025 15:00:33 +0000
Manifest next update: Sat 14 Jun 2025 15:00:33 +0000
Files and hashes: 1: MxQVcAiuW0p4EDIiEm7q3BWYvP8.roa (hash: JVFsJWGBLPgzxt9uY5l+yySS0Ei3Tn04Hx81eXPjKe4=)
2: NNsbsppK6oXhnCiS0Mg54vuUXtA.crl (hash: L5w4ULyhBZKRnpoGiq/MVqNclABqtV2LOWZuzofDkH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:8b:a9:7d:4b:17:29:d0:d8:c4:0e:14:45:f7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Validity
Not Before: Jun 13 15:00:33 2025 GMT
Not After : Jun 14 15:00:33 2025 GMT
Subject: CN=d7fa1c3cc4771f98dc7b3588d1ab1392adcf87a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5b:34:f4:d3:ec:88:78:6f:7f:3c:ca:08:92:
68:68:f4:c1:98:37:6c:68:2f:94:c0:27:16:29:12:
a3:58:ee:a6:52:d0:cc:90:3a:63:41:b0:1e:c6:c3:
87:e4:f2:6a:55:80:49:89:cc:31:6f:3d:8e:ad:56:
d1:4e:1a:96:22:a8:8b:62:ef:e0:2f:28:27:81:80:
2d:72:09:33:ea:ab:1f:5f:b3:20:32:01:7a:9c:d5:
1d:bf:10:9a:3d:8d:04:c3:4f:7b:e3:25:db:32:e5:
fc:49:c0:de:30:c1:92:78:d2:7a:7d:dc:59:a1:c6:
9c:39:db:dc:58:16:25:e8:e0:39:49:69:3a:1f:82:
84:da:5a:bc:bf:23:62:47:91:4d:58:e9:61:d7:0b:
a6:46:cc:f0:43:37:32:dc:71:c9:f2:b8:10:f4:c5:
9a:b0:e8:2f:5d:bc:89:d2:44:77:b8:9b:ed:b2:05:
78:7c:2c:4b:49:01:be:9d:93:2f:b5:10:70:80:3e:
73:32:2f:5d:e1:3d:e0:3d:da:b3:26:f2:35:ff:eb:
3b:4e:2a:23:24:00:b2:ea:cd:06:aa:e2:5f:82:0c:
cb:0a:09:dd:28:bf:04:6d:6b:0b:57:a9:c5:3c:e8:
2a:4d:b9:28:33:71:18:d5:65:66:1c:24:b4:fd:91:
70:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FA:1C:3C:C4:77:1F:98:DC:7B:35:88:D1:AB:13:92:AD:CF:87:A2
X509v3 Authority Key Identifier:
keyid:34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:64:e8:9a:9f:17:16:8c:ab:81:21:a9:12:80:b2:77:72:e8:
80:16:29:cd:b4:3d:9a:13:92:ab:9e:58:1e:ed:0d:70:b4:41:
20:1d:5b:7c:f6:53:99:a2:b4:84:0c:07:b7:07:c7:10:3f:66:
03:90:3d:a3:13:11:fd:3f:8b:6a:6d:74:48:c3:43:87:52:0a:
94:9b:0e:49:32:66:ed:8b:60:7c:e0:e9:18:df:ca:e0:d4:7f:
1b:08:31:e8:b1:d1:99:0b:bb:65:1d:38:37:da:ed:0b:bd:bd:
f9:74:05:91:2d:77:17:83:2b:cd:35:8c:f8:33:7a:2e:b1:63:
54:81:be:41:f9:ff:42:5f:98:38:9b:0a:2c:f6:67:e6:43:df:
80:d6:09:c4:c8:54:7f:5b:5e:b9:b2:48:24:66:74:2b:17:1d:
e5:82:c8:e1:ab:48:1e:16:9e:61:ab:dc:98:5f:69:ba:8e:a9:
f4:e3:1b:64:bc:54:c2:ae:56:cd:b3:e8:8e:00:68:54:1d:af:
c6:a6:c2:17:a3:9e:42:f6:6c:50:2d:d4:e6:45:5a:06:99:6f:
83:76:a6:f4:06:bd:6b:d0:4d:60:c3:12:ed:60:60:65:f7:85:
97:a9:c3:79:85:ff:32:26:f6:82:bc:e9:9c:24:ad:83:d1:42:
43:9d:61:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzoupfUsXKdDYxA4URfc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZGIxYmIyOWE0YWVhODVlMTljMjg5MmQwYzgzOWUyZmI5
NDVlZDAwHhcNMjUwNjEzMTUwMDMzWhcNMjUwNjE0MTUwMDMzWjAzMTEwLwYDVQQD
EyhkN2ZhMWMzY2M0NzcxZjk4ZGM3YjM1ODhkMWFiMTM5MmFkY2Y4N2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFs09NPsiHhvfzzKCJJoaPTBmDds
aC+UwCcWKRKjWO6mUtDMkDpjQbAexsOH5PJqVYBJicwxbz2OrVbRThqWIqiLYu/g
LygngYAtcgkz6qsfX7MgMgF6nNUdvxCaPY0Ew0974yXbMuX8ScDeMMGSeNJ6fdxZ
ocacOdvcWBYl6OA5SWk6H4KE2lq8vyNiR5FNWOlh1wumRszwQzcy3HHJ8rgQ9MWa
sOgvXbyJ0kR3uJvtsgV4fCxLSQG+nZMvtRBwgD5zMi9d4T3gPdqzJvI1/+s7Tioj
JACy6s0GquJfggzLCgndKL8EbWsLV6nFPOgqTbkoM3EY1WVmHCS0/ZFwDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNf6HDzEdx+Y3Hs1iNGrE5Ktz4eiMB8GA1UdIwQY
MBaAFDTbG7KaSuqF4ZwoktDIOeL7lF7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk5zYnNwcEs2b1hobkNpUzBNZzU0dnVVWHRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84ZGI4ZDItNmIxMS00ZDE5LThlOGQt
NTJhMTA0MjViMTM2LzEvTk5zYnNwcEs2b1hobkNpUzBNZzU0dnVVWHRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84ZGI4ZDItNmIxMS00ZDE5LThlOGQtNTJhMTA0MjViMTM2
LzEvTk5zYnNwcEs2b1hobkNpUzBNZzU0dnVVWHRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImTomp8X
FoyrgSGpEoCyd3LogBYpzbQ9mhOSq55YHu0NcLRBIB1bfPZTmaK0hAwHtwfHED9m
A5A9oxMR/T+Lam10SMNDh1IKlJsOSTJm7YtgfODpGN/K4NR/Gwgx6LHRmQu7ZR04
N9rtC729+XQFkS13F4MrzTWM+DN6LrFjVIG+Qfn/Ql+YOJsKLPZn5kPfgNYJxMhU
f1teubJIJGZ0Kxcd5YLI4atIHhaeYavcmF9puo6p9OMbZLxUwq5WzbPojgBoVB2v
xqbCF6OeQvZsUC3U5kVaBplvg3am9Aa9a9BNYMMS7WBgZfeFl6nDeYX/Mib2grzp
nCStg9FCQ51hag==
-----END CERTIFICATE-----
Generated at Fri Jun 13 20:00:21 2025 by rpki-client