Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
File: nOYfsJJrzgyvrdDysZNIiVpEgUc.mft (raw, json)
Hash identifier: AXj8LoGDPbhoARSTgwbc5k+d2M0lQtGwtcv+G4SEno0=
Subject key identifier: 71:72:AE:58:5A:AA:06:01:B0:26:1E:EB:2E:56:B9:F5:C5:C6:02:FC
Authority key identifier: 9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
Certificate issuer: /CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Certificate serial: 01976CCF704DE694A68DDA800E6DE81D44F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
Manifest number: 0181
Signing time: Sat 14 Jun 2025 05:00:23 +0000
Manifest this update: Sat 14 Jun 2025 05:00:23 +0000
Manifest next update: Sun 15 Jun 2025 05:00:23 +0000
Files and hashes: 1: 7ZCM2DGQAxMoqKS4r08nTwBlTvg.roa (hash: Nsq7TZX/LJBEuY63VFLqAaBjZcBcw7djLWbv9kH4DH4=)
2: nOYfsJJrzgyvrdDysZNIiVpEgUc.crl (hash: Fe+Gm3hZS37/tcLeT8QZOHz+FG/MizUXyBjqRskhujo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:70:4d:e6:94:a6:8d:da:80:0e:6d:e8:1d:44:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Validity
Not Before: Jun 14 05:00:23 2025 GMT
Not After : Jun 15 05:00:23 2025 GMT
Subject: CN=7172ae585aaa0601b0261eeb2e56b9f5c5c602fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:06:b1:24:5b:f1:03:a8:8f:78:c9:1c:2f:42:
47:0e:82:68:42:52:bf:90:96:d9:d3:12:6d:85:dc:
db:56:3c:3b:7b:56:5f:24:b5:06:27:d8:c3:39:00:
ba:3c:56:ad:cd:45:e8:c0:fe:f7:c1:ae:a5:81:68:
8c:ae:14:ea:96:d1:7d:cd:02:56:24:5e:20:14:18:
63:4a:f1:b1:69:8d:15:78:ea:85:83:75:30:16:22:
77:1c:52:5b:ca:e5:d9:a1:af:d8:1f:8c:79:74:16:
5d:fc:c7:2e:24:8a:07:50:70:42:6c:26:2c:0e:55:
95:d3:aa:2a:4d:2d:f0:80:e6:99:7d:51:c2:5a:1c:
13:47:10:2b:fb:4e:18:c0:6f:8b:29:c9:b0:74:5b:
ee:b1:fb:bf:86:b4:20:bd:d8:40:29:36:68:78:78:
22:66:85:4e:b9:0d:6e:48:02:14:88:67:0e:d6:78:
06:e2:98:3e:15:8d:e0:00:00:21:00:15:3f:69:62:
29:c2:1d:b4:f4:72:57:41:c6:b0:30:9c:93:c6:31:
2b:fb:ec:79:1d:0c:0f:44:9a:12:71:c7:65:c0:3e:
ec:fd:54:cd:1e:85:e8:8c:99:7a:bb:31:4c:aa:0f:
6e:cf:a6:f0:03:bb:7f:fe:72:fc:49:3c:ff:c0:8b:
64:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:72:AE:58:5A:AA:06:01:B0:26:1E:EB:2E:56:B9:F5:C5:C6:02:FC
X509v3 Authority Key Identifier:
keyid:9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0c:d5:d5:00:3c:4d:cc:14:4a:cd:3a:54:b0:7b:6c:cc:28:
6f:fe:44:8a:9e:13:e6:ce:0d:a1:7d:55:fe:dd:30:d8:d3:a6:
20:dd:be:f5:bc:ae:d9:f9:6e:36:08:5e:39:19:50:b6:cb:65:
3b:6d:97:bd:18:91:9e:2b:da:50:55:b1:35:4c:54:95:7a:43:
ac:87:f4:7c:db:c0:72:56:7c:69:ae:6d:17:7e:b7:ca:99:93:
f6:01:f5:8d:f6:b0:a6:96:b7:65:0a:5a:e2:95:ee:c9:f8:7b:
1e:8e:b4:92:d9:01:ae:1e:56:91:a2:c9:5b:6b:3a:bd:16:5e:
d4:f5:b8:9c:32:62:c7:c9:43:9c:8e:17:d1:63:16:7d:2a:ed:
38:83:39:75:1a:44:20:24:11:20:68:e1:da:d2:4e:22:1f:c8:
de:18:73:84:0f:2a:27:c9:bb:af:86:50:cc:67:37:62:c6:47:
96:75:cf:63:3f:a1:c1:ba:a0:40:33:64:4d:41:90:14:5f:a9:
78:5e:e7:c4:70:f0:5d:9f:c0:c3:4f:da:dd:84:01:0c:0f:69:
fa:d2:a4:08:a1:97:ef:bc:8d:ed:6b:97:4d:f7:cd:29:91:fc:
ed:6c:11:c9:cb:77:62:f4:e0:75:46:df:c7:ce:2f:b2:8b:cc:
5c:ba:41:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz3BN5pSmjdqADm3oHUTwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZTYxZmIwOTI2YmNlMGNhZmFkZDBmMmIxOTM0ODg5NWE0
NDgxNDcwHhcNMjUwNjE0MDUwMDIzWhcNMjUwNjE1MDUwMDIzWjAzMTEwLwYDVQQD
Eyg3MTcyYWU1ODVhYWEwNjAxYjAyNjFlZWIyZTU2YjlmNWM1YzYwMmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAaxJFvxA6iPeMkcL0JHDoJoQlK/
kJbZ0xJthdzbVjw7e1ZfJLUGJ9jDOQC6PFatzUXowP73wa6lgWiMrhTqltF9zQJW
JF4gFBhjSvGxaY0VeOqFg3UwFiJ3HFJbyuXZoa/YH4x5dBZd/McuJIoHUHBCbCYs
DlWV06oqTS3wgOaZfVHCWhwTRxAr+04YwG+LKcmwdFvusfu/hrQgvdhAKTZoeHgi
ZoVOuQ1uSAIUiGcO1ngG4pg+FY3gAAAhABU/aWIpwh209HJXQcawMJyTxjEr++x5
HQwPRJoSccdlwD7s/VTNHoXojJl6uzFMqg9uz6bwA7t//nL8STz/wItkWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFyrlhaqgYBsCYe6y5WufXFxgL8MB8GA1UdIwQY
MBaAFJzmH7CSa84Mr63Q8rGTSIlaRIFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk9ZZnNKSnJ6Z3l2cmREeXNaTklpVnBFZ1VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MGU5NTctMWUxNy00MTBlLTkxYTEt
OTZiN2UwYThlZTA5LzEvbk9ZZnNKSnJ6Z3l2cmREeXNaTklpVnBFZ1VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MGU5NTctMWUxNy00MTBlLTkxYTEtOTZiN2UwYThlZTA5
LzEvbk9ZZnNKSnJ6Z3l2cmREeXNaTklpVnBFZ1VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgzV1QA8
TcwUSs06VLB7bMwob/5Eip4T5s4NoX1V/t0w2NOmIN2+9byu2fluNgheORlQtstl
O22XvRiRnivaUFWxNUxUlXpDrIf0fNvAclZ8aa5tF363ypmT9gH1jfawppa3ZQpa
4pXuyfh7Ho60ktkBrh5WkaLJW2s6vRZe1PW4nDJix8lDnI4X0WMWfSrtOIM5dRpE
ICQRIGjh2tJOIh/I3hhzhA8qJ8m7r4ZQzGc3YsZHlnXPYz+hwbqgQDNkTUGQFF+p
eF7nxHDwXZ/Aw0/a3YQBDA9p+tKkCKGX77yN7WuXTffNKZH87WwRyct3YvTgdUbf
x84vsovMXLpBzw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:57:23 2025 by rpki-client