Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
File: nYHLUEMmdDsX02SiBIdcOcbtvAk.mft (raw, json)
Hash identifier: Xc6OroYJFfb9/Dj+LLRq0nqhULVMuVXLJEvCsBvECXU=
Subject key identifier: 2D:70:AA:0C:6A:F2:57:EC:C1:F4:B5:CD:AA:C8:50:E3:4F:5C:1B:B5
Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09
Certificate serial: 01977F0CB0B29B6310E2067F354C60C0C75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
Manifest number: 0F2F
Signing time: Tue 17 Jun 2025 18:00:27 +0000
Manifest this update: Tue 17 Jun 2025 18:00:27 +0000
Manifest next update: Wed 18 Jun 2025 18:00:27 +0000
Files and hashes: 1: JP_mk9oH8p5bvlYYSWGek7KXox0.roa (hash: QozdhhJZu+Cfz+XSJNvXYpnVEpaUzqrN6lM64Dbcl70=)
2: nYHLUEMmdDsX02SiBIdcOcbtvAk.crl (hash: /5Ce7nSAnw/xI31PZYze8durclywgHa9eoiXhehQ82c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0c:b0:b2:9b:63:10:e2:06:7f:35:4c:60:c0:c7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09
Validity
Not Before: Jun 17 18:00:27 2025 GMT
Not After : Jun 18 18:00:27 2025 GMT
Subject: CN=2d70aa0c6af257ecc1f4b5cdaac850e34f5c1bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:a0:4c:cd:ab:fb:62:09:26:7a:64:9b:8f:
b0:ce:ae:ca:fe:5e:e6:ae:bb:3f:97:85:bb:83:f5:
88:e0:b9:6f:8f:23:40:87:88:e4:9d:82:fa:ac:74:
e1:7e:af:d7:69:3e:00:69:13:db:71:54:9a:33:41:
c0:e9:bb:ff:26:b6:d5:46:42:38:e6:b2:74:a7:01:
3d:9c:2e:08:13:c5:d1:91:89:62:7a:24:e0:ec:ac:
9f:a7:dd:3f:8f:47:c6:82:dc:a8:3d:80:84:db:b8:
6c:33:7d:d6:30:fb:b6:e1:df:ed:4f:29:b1:7d:f7:
6a:b1:cc:d3:8c:1e:79:4a:56:e4:a8:27:a5:1e:ee:
c6:64:a4:98:82:fc:0f:0d:77:01:cb:e5:e1:6d:a1:
61:7e:f7:88:db:07:0b:f6:70:3e:e1:24:1b:fd:e2:
10:24:f7:a1:e5:a5:21:0c:f3:0d:1c:8d:a3:67:ec:
23:61:31:a4:cd:52:6b:1d:2b:0a:fd:59:f4:50:b6:
e4:54:b9:5c:4f:b7:42:c0:a9:63:84:dd:94:3e:c6:
5a:72:3f:c1:d3:92:3e:26:bc:b2:f0:1c:30:c1:2a:
76:79:7b:40:2f:c0:08:6d:c2:28:73:81:2d:56:fe:
67:ef:bf:02:e2:16:bf:28:69:d5:72:f6:22:d6:25:
5a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:70:AA:0C:6A:F2:57:EC:C1:F4:B5:CD:AA:C8:50:E3:4F:5C:1B:B5
X509v3 Authority Key Identifier:
keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:59:fb:b2:1c:ec:80:c3:30:17:7a:6a:97:2f:29:15:54:ea:
03:87:72:1a:a9:bb:fb:40:b5:35:0d:a7:13:6c:a9:55:2c:22:
e9:7f:9f:af:80:cd:c7:8e:bb:e5:f7:2d:3c:8c:22:d5:c3:73:
28:03:b2:ee:31:7a:d3:3b:71:de:80:c5:b4:d8:2d:bb:0f:3e:
8c:b0:b5:24:1f:57:ad:cc:c9:48:cb:05:ca:57:51:35:41:a5:
6f:1f:f6:9f:40:6f:c8:ee:c4:8d:e2:d3:a9:ee:3b:1d:91:c3:
03:cc:2b:07:bf:73:6d:4b:f5:ba:6d:1a:c1:7f:df:59:bb:22:
5e:2e:cd:e3:73:91:11:78:f3:fa:a9:c6:65:71:91:4a:bc:bf:
65:42:a7:42:c6:03:dc:96:c7:3f:5c:c4:95:92:74:19:83:1d:
9d:1f:eb:ff:4c:06:6c:f4:5e:40:3f:b2:5c:79:1d:61:a6:15:
9f:8a:c9:70:23:d8:c8:f5:e6:85:ac:ef:7c:d3:df:a9:82:cb:
4a:10:d2:7f:bb:12:df:4b:72:d1:bb:9f:c1:ed:ad:a5:9b:5f:
2f:b5:ad:85:20:8b:f9:6b:41:a1:e0:ab:67:b1:26:31:cc:ca:
c3:df:85:12:46:ee:ad:8b:dd:1d:48:a9:e0:ff:f6:d7:bb:55:
21:05:22:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd/DLCym2MQ4gZ/NUxgwMddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkODFjYjUwNDMyNjc0M2IxN2QzNjRhMjA0ODc1YzM5YzZl
ZGJjMDkwHhcNMjUwNjE3MTgwMDI3WhcNMjUwNjE4MTgwMDI3WjAzMTEwLwYDVQQD
EygyZDcwYWEwYzZhZjI1N2VjYzFmNGI1Y2RhYWM4NTBlMzRmNWMxYmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo76gTM2r+2IJJnpkm4+wzq7K/l7m
rrs/l4W7g/WI4LlvjyNAh4jknYL6rHThfq/XaT4AaRPbcVSaM0HA6bv/JrbVRkI4
5rJ0pwE9nC4IE8XRkYlieiTg7Kyfp90/j0fGgtyoPYCE27hsM33WMPu24d/tTymx
ffdqsczTjB55SlbkqCelHu7GZKSYgvwPDXcBy+XhbaFhfveI2wcL9nA+4SQb/eIQ
JPeh5aUhDPMNHI2jZ+wjYTGkzVJrHSsK/Vn0ULbkVLlcT7dCwKljhN2UPsZacj/B
05I+Jryy8BwwwSp2eXtAL8AIbcIoc4EtVv5n778C4ha/KGnVcvYi1iVapQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1wqgxq8lfswfS1zarIUONPXBu1MB8GA1UdIwQY
MBaAFJ2By1BDJnQ7F9NkogSHXDnG7bwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMzlkMjktNzEyYS00Yzg2LTk1MTAt
ZTRkNmJjZjMzNmI3LzEvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zMzlkMjktNzEyYS00Yzg2LTk1MTAtZTRkNmJjZjMzNmI3
LzEvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXln7shzs
gMMwF3pqly8pFVTqA4dyGqm7+0C1NQ2nE2ypVSwi6X+fr4DNx4675fctPIwi1cNz
KAOy7jF60ztx3oDFtNgtuw8+jLC1JB9XrczJSMsFyldRNUGlbx/2n0BvyO7EjeLT
qe47HZHDA8wrB79zbUv1um0awX/fWbsiXi7N43OREXjz+qnGZXGRSry/ZUKnQsYD
3JbHP1zElZJ0GYMdnR/r/0wGbPReQD+yXHkdYaYVn4rJcCPYyPXmhazvfNPfqYLL
ShDSf7sS30ty0bufwe2tpZtfL7WthSCL+WtBoeCrZ7EmMczKw9+FEkburYvdHUip
4P/217tVIQUiKA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 23:03:41 2025 by rpki-client