Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
File: t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft (raw, json)
Hash identifier: rJbmXV8ZhPk9GHcR0Yx8lOOTdsIh2YQo4PjxNrHq/Rc=
Subject key identifier: 3C:6B:B9:56:C4:69:46:FE:0A:EF:79:22:34:9A:9A:E0:0D:37:6D:7C
Authority key identifier: B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
Certificate issuer: /CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Certificate serial: 01977376F131D94292125B55A8D053DB66FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
Manifest number: 09F6
Signing time: Sun 15 Jun 2025 12:01:04 +0000
Manifest this update: Sun 15 Jun 2025 12:01:04 +0000
Manifest next update: Mon 16 Jun 2025 12:01:04 +0000
Files and hashes: 1: 7HgZFirs9to5YNlgGjCrLE4fFdw.roa (hash: gvtNC6tdiAxQLr0n4eBnmWFLLNsQSfj98rKVj8SvSuA=)
2: GFzeRaBmyIOkrDv5Yl4eeRJ9yBo.roa (hash: rZYvabv/j2AaljGdwS148ssayLuXys6DbuYJ6bJxVGw=)
3: t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl (hash: FNmLkDo0jPVl342BDOceZOkaEWfIjoWIFXe5FJUgJN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:76:f1:31:d9:42:92:12:5b:55:a8:d0:53:db:66:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Validity
Not Before: Jun 15 12:01:04 2025 GMT
Not After : Jun 16 12:01:04 2025 GMT
Subject: CN=3c6bb956c46946fe0aef7922349a9ae00d376d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:00:b9:ac:9f:83:8f:bd:76:df:69:10:2f:
0a:cb:b2:dd:95:73:d1:e3:90:67:2d:b4:99:35:85:
12:a4:73:e0:4d:a5:e7:01:9b:e0:8c:08:b6:e0:47:
94:63:65:65:2d:71:a5:f2:45:48:e9:20:7f:34:03:
c5:23:60:a0:2f:04:bf:ad:38:58:10:58:0a:90:d4:
c1:7e:25:de:c5:f3:d1:bd:c2:2a:6b:cc:56:f6:7b:
3c:1e:f1:57:ef:c5:b2:3b:c8:f4:72:37:16:73:81:
a3:99:f7:98:0a:79:4c:31:cd:f3:ce:8b:73:83:1e:
85:50:a9:4e:19:52:b8:cf:31:cf:c4:bb:bb:48:c7:
66:86:ef:e2:4b:4f:5e:3f:fb:8f:12:fe:77:2a:46:
b3:4e:d5:e2:5a:bd:a5:6d:c4:44:e7:6b:ca:ef:b7:
8f:68:d3:08:3f:70:23:1a:ec:a0:0a:a7:23:05:ca:
2a:b7:c6:4e:59:1f:3c:74:78:a2:c2:9a:74:85:65:
d7:30:5f:ea:e2:be:63:35:0b:41:56:df:7a:46:55:
f0:17:7f:af:f9:fa:81:54:a3:b1:98:9f:85:2a:22:
4d:20:31:f1:4c:2f:60:f3:12:18:92:8b:87:db:42:
cd:b8:8e:dd:b9:c4:1b:4c:ae:91:4e:05:ac:0b:49:
86:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6B:B9:56:C4:69:46:FE:0A:EF:79:22:34:9A:9A:E0:0D:37:6D:7C
X509v3 Authority Key Identifier:
keyid:B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:82:2d:45:d5:5a:87:0b:26:ad:4b:25:9c:96:7e:d8:7b:c1:
75:b8:9a:cf:1a:98:d5:8a:38:fd:a5:3f:70:db:53:27:75:23:
c8:f9:3a:94:4c:61:df:85:d7:32:de:c1:ac:4a:2f:60:d8:38:
be:e2:1c:ee:dc:f3:9d:30:a0:94:b6:35:31:35:6e:58:5b:c3:
d0:18:30:32:53:a0:77:78:d1:a2:ac:b0:7d:cf:c2:cb:54:fb:
87:cd:5f:1d:45:7c:c0:a4:46:4e:7f:46:ad:1d:23:4f:80:eb:
80:10:f3:41:c8:f6:f6:e2:8b:94:f9:f6:5b:8c:84:27:f3:f0:
88:d3:c4:23:28:d2:7b:a8:67:14:8c:3a:c9:fa:a0:11:e3:89:
d2:84:57:66:fc:5a:5f:1d:ba:be:77:a5:ea:bf:35:c1:c2:ba:
50:16:cf:b4:b0:5b:92:f1:bb:bb:cd:ea:f6:e0:01:1d:d0:10:
38:5e:8c:44:79:80:db:df:dc:6f:5a:95:10:83:85:fd:ef:ac:
c7:43:98:56:ec:be:ad:7b:83:8f:c4:b5:79:6f:f0:fd:6e:e4:
84:34:04:f0:14:38:44:d2:ad:e5:05:33:f7:dc:dd:cb:a7:31:
6d:5c:73:df:d3:c0:d3:41:3b:84:17:55:97:db:c4:c8:5b:4e:
a8:bc:70:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdzdvEx2UKSEltVqNBT22b7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ZTM0ZjU3ZDAwNzE2NmRlZjRkZDg4MWQ4ZjdkNWI2ZWQ5
NWU2NTYwHhcNMjUwNjE1MTIwMTA0WhcNMjUwNjE2MTIwMTA0WjAzMTEwLwYDVQQD
EygzYzZiYjk1NmM0Njk0NmZlMGFlZjc5MjIzNDlhOWFlMDBkMzc2ZDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwMAuayfg4+9dt9pEC8Ky7LdlXPR
45BnLbSZNYUSpHPgTaXnAZvgjAi24EeUY2VlLXGl8kVI6SB/NAPFI2CgLwS/rThY
EFgKkNTBfiXexfPRvcIqa8xW9ns8HvFX78WyO8j0cjcWc4GjmfeYCnlMMc3zzotz
gx6FUKlOGVK4zzHPxLu7SMdmhu/iS09eP/uPEv53KkazTtXiWr2lbcRE52vK77eP
aNMIP3AjGuygCqcjBcoqt8ZOWR88dHiiwpp0hWXXMF/q4r5jNQtBVt96RlXwF3+v
+fqBVKOxmJ+FKiJNIDHxTC9g8xIYkouH20LNuI7ducQbTK6RTgWsC0mGWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxruVbEaUb+Cu95IjSamuANN218MB8GA1UdIwQY
MBaAFLfjT1fQBxZt703Ygdj31bbtleZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdC1OUFY5QUhGbTN2VGRpQjJQZlZ0dTJWNWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lNWQ1ODAtZWVlOC00NjNlLTg0YTgt
ZWFjY2I4YjQyZGM5LzEvdC1OUFY5QUhGbTN2VGRpQjJQZlZ0dTJWNWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lNWQ1ODAtZWVlOC00NjNlLTg0YTgtZWFjY2I4YjQyZGM5
LzEvdC1OUFY5QUhGbTN2VGRpQjJQZlZ0dTJWNWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIItRdVa
hwsmrUslnJZ+2HvBdbiazxqY1Yo4/aU/cNtTJ3UjyPk6lExh34XXMt7BrEovYNg4
vuIc7tzznTCglLY1MTVuWFvD0BgwMlOgd3jRoqywfc/Cy1T7h81fHUV8wKRGTn9G
rR0jT4DrgBDzQcj29uKLlPn2W4yEJ/PwiNPEIyjSe6hnFIw6yfqgEeOJ0oRXZvxa
Xx26vnel6r81wcK6UBbPtLBbkvG7u83q9uABHdAQOF6MRHmA29/cb1qVEIOF/e+s
x0OYVuy+rXuDj8S1eW/w/W7khDQE8BQ4RNKt5QUz99zdy6cxbVxz39PA00E7hBdV
l9vEyFtOqLxwLg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:34:15 2025 by rpki-client