Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
File: ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft (raw, json)
Hash identifier: 0YUtTSaQcS8mqxJUuf+rU3mQpBpjELx9TFfUo0axj88=
Subject key identifier: C4:DD:34:30:56:B1:E7:9B:05:94:EE:10:E9:B1:65:EB:F3:DD:B6:49
Authority key identifier: 9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3
Certificate issuer: /CN=9e07e7c372a9db09332c479c7291b8629721afe3
Certificate serial: 01976F2C61D66ED9A3CD549A3658BD07D2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
Manifest number: 76
Signing time: Sat 14 Jun 2025 16:01:08 +0000
Manifest this update: Sat 14 Jun 2025 16:01:08 +0000
Manifest next update: Sun 15 Jun 2025 16:01:08 +0000
Files and hashes: 1: ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl (hash: hO5A1FY0fzPM3fUPzpQwmV2A8HAd6zY+v87smA+wV08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:61:d6:6e:d9:a3:cd:54:9a:36:58:bd:07:d2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e07e7c372a9db09332c479c7291b8629721afe3
Validity
Not Before: Jun 14 16:01:08 2025 GMT
Not After : Jun 15 16:01:08 2025 GMT
Subject: CN=c4dd343056b1e79b0594ee10e9b165ebf3ddb649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:43:c5:f2:52:3b:ad:1c:1f:47:e8:ef:3a:
50:e0:a4:ef:98:9a:c4:a6:33:e5:eb:12:85:e0:20:
56:aa:97:6b:74:66:03:11:45:22:ca:9c:dc:1c:24:
70:a6:65:9d:e0:d8:4e:83:76:66:2c:c7:cf:ee:bf:
50:fa:be:89:70:f2:b1:d1:98:66:22:78:b2:2a:f6:
81:6f:e0:c2:f7:e0:f4:1d:fb:c3:47:85:5e:a8:39:
25:b0:22:e4:23:0d:09:5c:e2:23:1b:c8:f3:81:d0:
30:33:97:a9:6b:f9:e7:eb:1f:5b:f4:86:00:ca:87:
0d:19:1e:db:2e:72:13:6d:3a:a9:f4:ce:e3:d6:5d:
f7:45:37:37:21:11:21:2c:c7:2f:57:12:c8:03:e6:
99:42:09:a4:4a:16:ff:c7:5c:62:e3:fb:5a:82:65:
0f:03:39:b0:7a:a8:33:02:ee:57:67:a2:1e:3e:85:
bb:5b:06:24:18:9b:b7:1c:a0:68:25:b0:6b:98:0d:
bc:46:55:ec:ba:54:e4:6d:d9:8c:0a:e5:58:44:1a:
b6:00:35:9d:e2:c3:92:b6:43:19:bd:a9:63:bd:b4:
91:4f:01:97:ce:56:6a:42:96:9e:ba:cd:d2:67:e8:
83:1e:95:bf:2e:66:13:41:b9:e5:f9:7c:8d:2d:88:
62:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DD:34:30:56:B1:E7:9B:05:94:EE:10:E9:B1:65:EB:F3:DD:B6:49
X509v3 Authority Key Identifier:
keyid:9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:10:16:c1:be:8e:15:40:47:7a:9c:ad:6b:35:d9:b9:3c:d3:
e6:ea:8d:a2:dc:5b:d1:66:ce:2d:2f:f5:00:c8:1c:00:83:94:
1d:0d:3a:59:68:d7:b6:79:13:a7:3a:3b:22:f4:37:f4:ce:9a:
27:dd:db:06:38:72:e3:52:01:55:5d:c8:73:d2:65:5e:6e:b5:
30:e3:72:f6:67:73:a0:36:d0:9b:00:bd:52:7a:b8:ba:85:be:
d4:77:95:df:b1:a6:2f:d2:33:f0:79:80:14:81:43:8b:dd:63:
1c:5c:06:46:d7:7e:8a:4c:ff:ae:86:6f:85:47:c3:c7:b6:f7:
94:6e:7c:b7:dc:63:d8:3c:e2:43:5c:c8:79:05:cd:97:63:a4:
9e:36:d3:29:11:0f:b9:60:83:36:08:65:f2:d0:33:0c:40:b6:
00:57:51:74:03:ba:75:33:e8:c2:72:0a:a7:50:1c:1b:fe:04:
53:bf:6d:11:14:3d:ac:3e:a0:4e:8c:11:fa:59:f7:41:a7:f0:
33:3c:3d:d6:8c:f3:f1:2a:b9:9e:88:54:ef:52:fd:75:4f:b9:
98:e4:56:93:16:58:7a:d6:7e:3c:3b:a4:ef:0a:b5:f1:c7:60:
c1:65:e6:6b:99:ed:d5:28:39:a4:d4:87:f1:18:b5:58:92:70:
04:5c:da:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLGHWbtmjzVSaNli9B9LXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMDdlN2MzNzJhOWRiMDkzMzJjNDc5YzcyOTFiODYyOTcy
MWFmZTMwHhcNMjUwNjE0MTYwMTA4WhcNMjUwNjE1MTYwMTA4WjAzMTEwLwYDVQQD
EyhjNGRkMzQzMDU2YjFlNzliMDU5NGVlMTBlOWIxNjVlYmYzZGRiNjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhVDxfJSO60cH0fo7zpQ4KTvmJrE
pjPl6xKF4CBWqpdrdGYDEUUiypzcHCRwpmWd4NhOg3ZmLMfP7r9Q+r6JcPKx0Zhm
IniyKvaBb+DC9+D0HfvDR4VeqDklsCLkIw0JXOIjG8jzgdAwM5epa/nn6x9b9IYA
yocNGR7bLnITbTqp9M7j1l33RTc3IREhLMcvVxLIA+aZQgmkShb/x1xi4/tagmUP
AzmweqgzAu5XZ6IePoW7WwYkGJu3HKBoJbBrmA28RlXsulTkbdmMCuVYRBq2ADWd
4sOStkMZvaljvbSRTwGXzlZqQpaeus3SZ+iDHpW/LmYTQbnl+XyNLYhiMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTdNDBWseebBZTuEOmxZevz3bZJMB8GA1UdIwQY
MBaAFJ4H58NyqdsJMyxHnHKRuGKXIa/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmdmbnczS3Ayd2t6TEVlY2NwRzRZcGNoci1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9hMTU2ZTYtMWU0MS00MDRhLTk2ODgt
NTdiNDBmY2VkODI5LzEvbmdmbnczS3Ayd2t6TEVlY2NwRzRZcGNoci1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9hMTU2ZTYtMWU0MS00MDRhLTk2ODgtNTdiNDBmY2VkODI5
LzEvbmdmbnczS3Ayd2t6TEVlY2NwRzRZcGNoci1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhAWwb6O
FUBHepytazXZuTzT5uqNotxb0WbOLS/1AMgcAIOUHQ06WWjXtnkTpzo7IvQ39M6a
J93bBjhy41IBVV3Ic9JlXm61MONy9mdzoDbQmwC9Unq4uoW+1HeV37GmL9Iz8HmA
FIFDi91jHFwGRtd+ikz/roZvhUfDx7b3lG58t9xj2DziQ1zIeQXNl2OknjbTKREP
uWCDNghl8tAzDEC2AFdRdAO6dTPownIKp1AcG/4EU79tERQ9rD6gTowR+ln3Qafw
Mzw91ozz8Sq5nohU71L9dU+5mORWkxZYetZ+PDuk7wq18cdgwWXma5nt1Sg5pNSH
8Ri1WJJwBFza/g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:23:42 2025 by rpki-client