Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier: HiNdd9Vd5uzqOxp9ED7189VdBOrfm9h40ZuYljn4aL8=
Subject key identifier: 6C:7B:18:C4:CB:2A:59:3D:90:5B:7E:5E:84:8B:EE:77:BB:0F:34:47
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 0197692A054C184E85FDAC0C495591CC5F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number: 1089
Signing time: Fri 13 Jun 2025 12:00:50 +0000
Manifest this update: Fri 13 Jun 2025 12:00:50 +0000
Manifest next update: Sat 14 Jun 2025 12:00:50 +0000
Files and hashes: 1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: 9OSGXuOk5mdNQFnxeSkiyIXWiDe8volBBioFUzWiR3E=)
2: saaFFJdprL2UcH3v0LL3zZpp7jc.roa (hash: YyF7BBYn0BiV4oWuG7tgrnT28h9nKay6fwuXu0twrBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:2a:05:4c:18:4e:85:fd:ac:0c:49:55:91:cc:5f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: Jun 13 12:00:50 2025 GMT
Not After : Jun 14 12:00:50 2025 GMT
Subject: CN=6c7b18c4cb2a593d905b7e5e848bee77bb0f3447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:36:f8:5c:81:81:2c:b9:81:73:39:2a:e9:a2:
40:88:c4:16:c0:42:5b:d4:48:a3:21:a3:e3:e2:71:
ff:df:fc:06:c6:58:3f:2b:a0:23:96:1e:65:91:35:
f5:f4:b5:62:52:44:e3:b1:c5:d2:2b:ff:4a:b7:7f:
5c:4a:48:4c:fa:d7:26:c2:9b:06:7a:0b:fd:9c:2b:
e2:8d:84:44:ac:a8:2f:23:e9:3c:7c:3a:9b:d3:10:
10:4f:1c:be:f8:ff:5c:37:1a:ba:82:bc:5f:71:47:
df:59:fc:cb:df:7b:ea:13:65:a4:b9:05:9b:3b:24:
96:c8:a5:d8:63:98:02:2c:c3:be:76:94:78:c5:af:
e0:88:51:60:d9:3e:a8:4d:fe:d3:17:3a:ea:19:0b:
20:54:89:bb:4c:c6:41:4e:79:06:10:36:8f:d3:5c:
39:aa:99:06:20:4c:a5:97:3d:2e:31:42:bb:bb:2a:
e0:8d:df:cb:be:0e:2f:db:8e:27:e1:9d:aa:ec:c9:
c6:75:08:88:98:78:d0:00:99:81:9a:83:96:96:47:
d8:76:66:89:bc:7a:44:df:69:cd:5f:34:43:ab:75:
ae:24:08:d5:fd:6e:05:08:fc:cf:b9:be:40:9a:78:
a6:06:81:b6:47:51:7e:1e:e8:5d:26:e8:46:9e:8b:
b4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7B:18:C4:CB:2A:59:3D:90:5B:7E:5E:84:8B:EE:77:BB:0F:34:47
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:93:b0:df:5a:7a:bd:62:37:a5:e5:af:14:8b:34:0a:6e:ef:
c6:39:9c:41:5c:f6:59:a0:1c:ca:74:15:59:af:b2:63:38:53:
d6:b9:42:46:36:bb:7d:49:13:39:fb:ed:6b:89:46:e4:26:00:
00:8b:f8:63:f1:6a:cc:63:0e:01:7d:24:0e:81:d7:2b:a1:03:
90:f0:63:a4:df:2e:0b:43:c4:4c:9d:5e:1c:24:e6:b5:3d:ef:
3d:ad:4e:f1:11:5b:34:44:8f:5c:82:63:a4:44:90:e3:a9:4d:
06:6c:d7:ae:6f:16:4d:cb:66:b1:6b:9d:7a:b2:ea:d9:f0:2c:
25:03:de:e4:fb:fe:71:a5:07:b5:89:29:fb:73:02:ec:aa:d2:
ca:0a:ad:06:1e:8d:a1:20:f4:64:35:1f:a0:e2:c2:c5:82:fe:
8b:88:f4:4d:53:97:85:ef:24:39:06:91:75:01:e5:1f:d4:03:
5d:4b:18:0e:bd:17:66:c5:66:58:11:64:4a:fd:b3:4a:ec:c3:
9b:b9:9a:29:2a:1f:c8:ab:3a:c4:f4:29:aa:f5:e7:bc:a9:14:
4e:f5:f9:7f:42:3a:14:ac:4a:3d:c4:b0:63:10:c4:03:e1:4c:
46:19:04:b7:d7:18:5b:e8:af:92:a2:45:a3:33:4b:c9:24:9d:
99:51:51:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKgVMGE6F/awMSVWRzF8vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NDJiYmM4M2UyOGMxMDNjMTdkNWEyMDFlZGVmNTY3MjYz
NGRiZTgwHhcNMjUwNjEzMTIwMDUwWhcNMjUwNjE0MTIwMDUwWjAzMTEwLwYDVQQD
Eyg2YzdiMThjNGNiMmE1OTNkOTA1YjdlNWU4NDhiZWU3N2JiMGYzNDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDb4XIGBLLmBczkq6aJAiMQWwEJb
1EijIaPj4nH/3/wGxlg/K6Ajlh5lkTX19LViUkTjscXSK/9Kt39cSkhM+tcmwpsG
egv9nCvijYRErKgvI+k8fDqb0xAQTxy++P9cNxq6grxfcUffWfzL33vqE2WkuQWb
OySWyKXYY5gCLMO+dpR4xa/giFFg2T6oTf7TFzrqGQsgVIm7TMZBTnkGEDaP01w5
qpkGIEyllz0uMUK7uyrgjd/Lvg4v244n4Z2q7MnGdQiImHjQAJmBmoOWlkfYdmaJ
vHpE32nNXzRDq3WuJAjV/W4FCPzPub5AmnimBoG2R1F+HuhdJuhGnou03QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGx7GMTLKlk9kFt+XoSL7ne7DzRHMB8GA1UdIwQY
MBaAFDZCu8g+KMEDwX1aIB7e9WcmNNvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYt
NmNiMmUwMmNhZWYyLzEvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYtNmNiMmUwMmNhZWYy
LzEvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5Ow31p6
vWI3peWvFIs0Cm7vxjmcQVz2WaAcynQVWa+yYzhT1rlCRja7fUkTOfvta4lG5CYA
AIv4Y/FqzGMOAX0kDoHXK6EDkPBjpN8uC0PETJ1eHCTmtT3vPa1O8RFbNESPXIJj
pESQ46lNBmzXrm8WTctmsWuderLq2fAsJQPe5Pv+caUHtYkp+3MC7KrSygqtBh6N
oSD0ZDUfoOLCxYL+i4j0TVOXhe8kOQaRdQHlH9QDXUsYDr0XZsVmWBFkSv2zSuzD
m7maKSofyKs6xPQpqvXnvKkUTvX5f0I6FKxKPcSwYxDEA+FMRhkEt9cYW+ivkqJF
ozNLySSdmVFRzg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:46 2025 by rpki-client