Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
File: NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft (raw, json)
Hash identifier: SxmXePtIWTYg1NuEE/jkNg5/fZ8ju+t953/yqNh69bs=
Subject key identifier: 2B:D6:FA:7E:D2:0D:9A:B1:1F:37:EB:0D:90:E4:2F:77:12:16:64:C5
Authority key identifier: 34:CB:95:6E:C3:A1:4F:6F:5E:4B:76:D5:43:42:FA:98:D5:9C:77:A6
Certificate issuer: /CN=34cb956ec3a14f6f5e4b76d54342fa98d59c77a6
Certificate serial: 019770E37F025FF80BD2AC0FD3774E0A43B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
Manifest number: 126C
Signing time: Sun 15 Jun 2025 00:00:46 +0000
Manifest this update: Sun 15 Jun 2025 00:00:46 +0000
Manifest next update: Mon 16 Jun 2025 00:00:46 +0000
Files and hashes: 1: NMuVbsOhT29eS3bVQ0L6mNWcd6Y.crl (hash: eZN+2H3Wd7NTYp1yFJgfFyq16epBcLuRtezUKDd64pQ=)
2: pJ8B6gtnj6CL56vYC6LrCO5oBmo.roa (hash: F88j9ZRyVWoqzEm3QsXJ4KW1kEET+j/VAKZytfrtK/M=)
3: zsR2hosRcU8M1KGjXd1_k-ktlfc.roa (hash: rTq5tN+JofEk5Za1xiOrbVhdFMOSTGjrPTYOHgXaK+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:7f:02:5f:f8:0b:d2:ac:0f:d3:77:4e:0a:43:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cb956ec3a14f6f5e4b76d54342fa98d59c77a6
Validity
Not Before: Jun 15 00:00:46 2025 GMT
Not After : Jun 16 00:00:46 2025 GMT
Subject: CN=2bd6fa7ed20d9ab11f37eb0d90e42f77121664c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ac:7d:ce:38:79:af:a8:c7:23:f8:26:da:eb:
41:b5:f9:96:28:2c:a1:a2:88:cd:db:c1:68:a5:53:
43:75:30:ea:33:04:44:1e:35:12:19:cb:e8:7e:fe:
a7:57:7a:10:77:08:1e:08:da:09:0e:60:2d:bb:14:
f8:97:e1:91:e0:15:f6:64:36:ed:d4:89:85:57:3a:
31:13:ee:bd:c0:e0:f9:89:05:97:35:17:97:ba:90:
5c:82:60:aa:d3:bc:37:ed:90:8a:a1:f0:32:bd:e4:
33:af:9c:39:fa:ad:73:cf:8a:e3:64:c7:73:7b:55:
c7:71:a4:b0:4d:d7:04:27:f8:f6:23:4a:7b:84:52:
05:4d:c3:9f:54:96:51:8a:a9:8b:1e:75:9c:c9:8c:
d4:e6:4a:32:ba:2f:3c:0f:13:ac:08:0f:32:1f:db:
42:93:fa:82:9c:3f:d4:fc:e9:fa:81:1b:68:c0:f9:
bf:6d:f9:9d:f3:56:4d:96:3d:d3:10:4a:90:0e:dd:
ea:cc:89:7c:f6:17:96:96:90:47:bc:64:0a:66:55:
78:44:88:a2:03:e2:71:19:d9:1f:e4:47:48:14:b8:
2f:ee:59:62:69:bc:3a:9a:a2:42:bb:6e:04:b2:58:
fb:aa:e7:cf:5b:16:bd:ad:a5:9d:df:b4:9e:ac:ef:
18:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D6:FA:7E:D2:0D:9A:B1:1F:37:EB:0D:90:E4:2F:77:12:16:64:C5
X509v3 Authority Key Identifier:
keyid:34:CB:95:6E:C3:A1:4F:6F:5E:4B:76:D5:43:42:FA:98:D5:9C:77:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:54:51:70:18:0f:f9:54:f6:68:35:88:9f:f6:eb:c7:c5:de:
22:7c:4b:f5:a9:66:a6:16:09:23:fa:a6:87:41:bf:30:6c:f9:
32:17:30:97:7d:3a:8b:7f:a0:7a:d5:88:58:dc:f4:8b:04:2b:
c1:b9:50:47:a1:62:26:d4:7f:52:54:70:d9:7b:f5:f3:fb:aa:
aa:71:59:d7:b8:f9:03:4a:52:77:24:d6:fe:95:00:b2:5c:91:
58:d8:0a:a9:29:21:53:ec:ed:e0:9d:53:33:0a:50:3a:0f:ad:
57:11:23:37:e2:03:d2:87:b4:29:bd:22:5a:a9:20:9e:41:4e:
54:6d:7f:4a:c2:07:af:9d:fe:dc:8b:37:2f:6f:cd:d8:6d:64:
10:30:c7:0b:84:cc:b4:30:9f:67:51:1f:8c:ca:82:8d:d6:00:
58:65:f7:ba:ce:2f:18:76:b9:86:0b:38:9b:48:ae:13:d4:e2:
da:e0:14:37:ff:5d:e4:46:9c:19:ed:2c:1a:39:99:96:75:ca:
91:66:42:08:c5:53:fa:40:3f:49:74:41:d8:9c:a7:0e:0a:66:
9e:c3:c3:7e:3c:96:57:0f:bf:15:79:d1:14:1f:cd:51:cf:f4:
81:ba:aa:71:b9:c4:47:c8:0d:28:69:2c:f4:54:95:a9:77:2d:
11:60:51:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdw438CX/gL0qwP03dOCkO5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0Y2I5NTZlYzNhMTRmNmY1ZTRiNzZkNTQzNDJmYTk4ZDU5
Yzc3YTYwHhcNMjUwNjE1MDAwMDQ2WhcNMjUwNjE2MDAwMDQ2WjAzMTEwLwYDVQQD
EygyYmQ2ZmE3ZWQyMGQ5YWIxMWYzN2ViMGQ5MGU0MmY3NzEyMTY2NGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6x9zjh5r6jHI/gm2utBtfmWKCyh
oojN28FopVNDdTDqMwREHjUSGcvofv6nV3oQdwgeCNoJDmAtuxT4l+GR4BX2ZDbt
1ImFVzoxE+69wOD5iQWXNReXupBcgmCq07w37ZCKofAyveQzr5w5+q1zz4rjZMdz
e1XHcaSwTdcEJ/j2I0p7hFIFTcOfVJZRiqmLHnWcyYzU5koyui88DxOsCA8yH9tC
k/qCnD/U/On6gRtowPm/bfmd81ZNlj3TEEqQDt3qzIl89heWlpBHvGQKZlV4RIii
A+JxGdkf5EdIFLgv7lliabw6mqJCu24Eslj7qufPWxa9raWd37SerO8YrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvW+n7SDZqxHzfrDZDkL3cSFmTFMB8GA1UdIwQY
MBaAFDTLlW7DoU9vXkt21UNC+pjVnHemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk11VmJzT2hUMjllUzNiVlEwTDZtTldjZDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNGY5ZjUtMjVkNy00NWU4LWJjMjQt
OWE2ODgwODBhNTc5LzEvTk11VmJzT2hUMjllUzNiVlEwTDZtTldjZDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xNGY5ZjUtMjVkNy00NWU4LWJjMjQtOWE2ODgwODBhNTc5
LzEvTk11VmJzT2hUMjllUzNiVlEwTDZtTldjZDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1RRcBgP
+VT2aDWIn/brx8XeInxL9almphYJI/qmh0G/MGz5Mhcwl306i3+getWIWNz0iwQr
wblQR6FiJtR/UlRw2Xv18/uqqnFZ17j5A0pSdyTW/pUAslyRWNgKqSkhU+zt4J1T
MwpQOg+tVxEjN+ID0oe0Kb0iWqkgnkFOVG1/SsIHr53+3Is3L2/N2G1kEDDHC4TM
tDCfZ1EfjMqCjdYAWGX3us4vGHa5hgs4m0iuE9Ti2uAUN/9d5EacGe0sGjmZlnXK
kWZCCMVT+kA/SXRB2JynDgpmnsPDfjyWVw+/FXnRFB/NUc/0gbqqcbnER8gNKGks
9FSVqXctEWBRjw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:09:19 2025 by rpki-client