Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
File: NharGOa87eCFC8quvZWZk-hAhus.mft (raw, json)
Hash identifier: ojDmiSE5o0h8XT+dvZlL1MSje8jRQQPh9ZkTqVyJy88=
Subject key identifier: 25:9A:46:B7:10:A5:09:C8:20:67:A8:93:03:CB:CA:6C:C8:93:EB:5C
Authority key identifier: 36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
Certificate issuer: /CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Certificate serial: 01976D3DF82E2F713CCF2F4ADFBBB9873B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 07:01:07 +0000
Manifest this update: Sat 14 Jun 2025 07:01:07 +0000
Manifest next update: Sun 15 Jun 2025 07:01:07 +0000
Files and hashes: 1: NharGOa87eCFC8quvZWZk-hAhus.crl (hash: DjNML4mqXTCo6KYRGZZ2Kn+3RVNBqOfEg8C8a0y0wSc=)
2: a86URqUjdV6NGR4_Rkuxzk9nvOQ.roa (hash: QkDObpBQb/2gqaSVK2qoFjm69vfVIidcXe/y1fY7jKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:f8:2e:2f:71:3c:cf:2f:4a:df:bb:b9:87:3b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Validity
Not Before: Jun 14 07:01:07 2025 GMT
Not After : Jun 15 07:01:07 2025 GMT
Subject: CN=259a46b710a509c82067a89303cbca6cc893eb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:79:e3:84:ee:c0:43:1c:fa:21:4e:f2:b0:19:
98:15:64:d8:f0:06:e9:2c:18:6e:e7:e4:f6:12:94:
d8:45:48:37:b9:a8:ed:90:13:be:71:a7:b5:e2:f7:
80:ae:a8:01:93:28:0b:70:58:04:4e:72:04:ab:8d:
f7:1a:82:af:d4:eb:51:1b:22:29:33:cb:37:a2:5b:
17:e3:cf:b4:f4:9a:1f:61:87:e6:f8:2a:50:3a:cd:
73:ef:52:19:b3:c3:b5:40:a6:e2:9f:29:78:0b:7c:
40:60:29:cb:1b:86:fb:7c:d0:3e:14:5f:8e:46:3b:
44:d6:52:5c:d2:c7:87:5e:9a:78:5f:09:d5:3f:99:
fa:c5:15:f1:6f:46:e6:35:33:15:00:14:24:58:83:
c0:a7:05:cd:45:e6:3d:33:5f:a0:6f:7c:cb:2a:96:
de:51:a0:6e:a9:ee:53:7e:7a:13:01:34:e9:57:b1:
81:90:4b:9e:b1:75:79:cf:c1:31:35:eb:27:20:44:
f1:88:d3:f7:7e:61:28:3d:12:aa:59:c3:ec:d3:28:
78:72:18:ce:f3:c7:25:f2:dd:ef:47:e7:c5:96:f6:
f4:0d:4c:59:e4:92:74:21:ac:9f:27:78:0d:15:4a:
18:ec:b8:61:85:c9:a9:a9:1c:c9:c2:30:39:00:24:
46:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9A:46:B7:10:A5:09:C8:20:67:A8:93:03:CB:CA:6C:C8:93:EB:5C
X509v3 Authority Key Identifier:
keyid:36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8c:cb:76:46:ef:47:68:4d:b7:ba:04:ee:5b:a5:28:56:c5:
ba:51:cd:07:91:ab:8f:35:97:3b:d9:f2:48:c8:41:e9:c1:8d:
5e:a6:01:ef:34:72:ca:22:33:56:e5:e9:ed:88:38:54:ec:ea:
0e:fa:8a:6f:28:f9:23:6f:b1:d0:63:72:22:a4:b5:80:b7:05:
94:c6:36:a0:c1:38:7c:c3:79:82:d9:53:56:2e:6f:5d:5c:1c:
bb:4b:8e:73:71:a1:fa:05:e0:85:d7:33:48:6e:7f:e7:d7:6f:
b2:8a:22:c5:31:54:25:ac:3a:f6:80:8d:d4:58:a1:b8:e0:31:
bd:8e:6b:f9:fe:d3:24:65:66:e9:fa:c3:be:f4:5f:78:12:de:
16:e2:55:89:04:b4:fe:89:60:94:25:71:33:03:d0:40:29:dc:
75:54:8c:7b:9d:ce:dd:3b:1d:25:97:14:0a:52:91:ba:a6:97:
c7:e1:1a:1f:8d:8d:9c:58:3f:d3:72:a7:6a:40:35:88:50:3f:
fb:9b:5e:4d:9e:34:42:86:00:20:8d:94:90:92:b6:67:86:39:
ea:9c:01:db:fd:0a:ce:9f:56:b4:ba:44:3f:b3:13:25:e5:42:
26:f3:ae:23:fc:a7:2a:99:14:7b:e5:93:75:08:c0:bd:e5:4b:
d8:9c:f1:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPfguL3E8zy9K37u5hzt8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTZhYjE4ZTZiY2VkZTA4NTBiY2FhZWJkOTU5OTkzZTg0
MDg2ZWIwHhcNMjUwNjE0MDcwMTA3WhcNMjUwNjE1MDcwMTA3WjAzMTEwLwYDVQQD
EygyNTlhNDZiNzEwYTUwOWM4MjA2N2E4OTMwM2NiY2E2Y2M4OTNlYjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3njhO7AQxz6IU7ysBmYFWTY8Abp
LBhu5+T2EpTYRUg3uajtkBO+cae14veArqgBkygLcFgETnIEq433GoKv1OtRGyIp
M8s3olsX48+09JofYYfm+CpQOs1z71IZs8O1QKbinyl4C3xAYCnLG4b7fNA+FF+O
RjtE1lJc0seHXpp4XwnVP5n6xRXxb0bmNTMVABQkWIPApwXNReY9M1+gb3zLKpbe
UaBuqe5TfnoTATTpV7GBkEuesXV5z8ExNesnIETxiNP3fmEoPRKqWcPs0yh4chjO
88cl8t3vR+fFlvb0DUxZ5JJ0IayfJ3gNFUoY7LhhhcmpqRzJwjA5ACRGTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWaRrcQpQnIIGeokwPLymzIk+tcMB8GA1UdIwQY
MBaAFDYWqxjmvO3ghQvKrr2VmZPoQIbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhhckdPYTg3ZUNGQzhxdXZaV1prLWhBaHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83ZDJmMzQtYWZmZC00ZDFjLWI0MTYt
YWFjMmViY2JmNWQ0LzEvTmhhckdPYTg3ZUNGQzhxdXZaV1prLWhBaHVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83ZDJmMzQtYWZmZC00ZDFjLWI0MTYtYWFjMmViY2JmNWQ0
LzEvTmhhckdPYTg3ZUNGQzhxdXZaV1prLWhBaHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIzLdkbv
R2hNt7oE7lulKFbFulHNB5GrjzWXO9nySMhB6cGNXqYB7zRyyiIzVuXp7Yg4VOzq
DvqKbyj5I2+x0GNyIqS1gLcFlMY2oME4fMN5gtlTVi5vXVwcu0uOc3Gh+gXghdcz
SG5/59dvsooixTFUJaw69oCN1FihuOAxvY5r+f7TJGVm6frDvvRfeBLeFuJViQS0
/olglCVxMwPQQCncdVSMe53O3TsdJZcUClKRuqaXx+EaH42NnFg/03KnakA1iFA/
+5teTZ40QoYAII2UkJK2Z4Y56pwB2/0Kzp9WtLpEP7MTJeVCJvOuI/ynKpkUe+WT
dQjAveVL2Jzx2w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:32:17 2025 by rpki-client