Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
File: m-NDwvs9a40jeJq02m_NRlppBYM.mft (raw, json)
Hash identifier: mCSOztUZkV9HGaRdPJhvem5ZbPJAG/1XnRnH1301+AY=
Subject key identifier: B2:0B:A6:9D:9F:95:32:7B:BE:A9:56:29:0C:5D:49:8C:B3:D5:82:CC
Authority key identifier: 9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83
Certificate issuer: /CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583
Certificate serial: 01976E506FD59AA40F66B7BAC0BEA05DCA13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
Manifest number: 097A
Signing time: Sat 14 Jun 2025 12:00:54 +0000
Manifest this update: Sat 14 Jun 2025 12:00:54 +0000
Manifest next update: Sun 15 Jun 2025 12:00:54 +0000
Files and hashes: 1: V1rYVkHJ4iIIHNg29wauYpELwcg.roa (hash: 7R1pOTL7gS5y/fLoZFKL53bP7clTOjblHiZzRpiMJxQ=)
2: m-NDwvs9a40jeJq02m_NRlppBYM.crl (hash: vbot9//hacROHFJU4wkZUAiz3O75rAP7g9bll5EQZgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:6f:d5:9a:a4:0f:66:b7:ba:c0:be:a0:5d:ca:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583
Validity
Not Before: Jun 14 12:00:54 2025 GMT
Not After : Jun 15 12:00:54 2025 GMT
Subject: CN=b20ba69d9f95327bbea956290c5d498cb3d582cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:d5:4d:3e:dc:57:36:3d:37:3d:62:20:3a:
bb:66:5a:66:74:09:5f:13:35:1b:3c:5c:a4:99:46:
1e:35:d1:df:d6:eb:1f:2f:22:36:d4:a1:80:ac:88:
51:7c:7a:f2:59:49:83:c6:ed:d8:12:65:02:d0:21:
8e:c5:9c:c0:66:e7:f4:dd:6c:ad:86:a8:1d:fa:1e:
f0:32:a5:07:1b:c5:b0:cd:9b:30:49:59:ae:2f:ab:
6d:62:2b:1a:e9:20:d2:59:3a:9f:56:91:2d:7f:f6:
5c:fa:53:ef:7e:cb:ce:05:cc:11:f3:29:1d:4e:01:
f7:15:54:65:f7:25:f7:35:06:37:af:1e:21:2d:c0:
a7:c2:0b:8b:89:ea:25:4e:32:b5:4e:0d:a4:58:80:
ca:56:b8:9b:a0:ab:09:93:b3:20:22:fc:fc:38:48:
33:a7:7b:b8:f2:b7:a1:c4:9e:ca:d6:8b:f7:ef:56:
8a:18:56:b7:70:fa:2f:7b:50:b8:2e:33:18:df:25:
a9:69:b6:5c:f0:49:b4:e0:95:cd:b1:00:82:a7:ea:
b2:13:13:8a:89:2d:d3:18:18:96:27:e2:72:ae:50:
94:45:88:5b:39:5b:ca:be:ee:41:49:43:75:1d:47:
38:4a:0e:d1:07:ff:dc:b2:91:12:75:ca:13:bf:4f:
91:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0B:A6:9D:9F:95:32:7B:BE:A9:56:29:0C:5D:49:8C:B3:D5:82:CC
X509v3 Authority Key Identifier:
keyid:9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:37:8b:65:c9:eb:b0:3f:a8:ce:b3:36:a2:e3:66:ae:ca:3a:
d3:4e:7f:90:da:b5:3f:e4:0c:fc:99:73:39:b1:bf:4f:8c:22:
ec:d6:c9:14:31:e7:88:11:01:bc:d0:d7:44:b1:dd:0f:32:9d:
f2:bd:a6:58:d5:e8:18:f6:35:be:f7:86:ea:4b:1a:fa:53:be:
27:48:50:df:33:2f:22:65:2f:b4:4c:68:ab:6f:0a:33:16:cb:
a2:2f:8f:f5:d2:0a:04:3c:2b:36:1c:52:fb:a4:20:b3:25:61:
25:7d:9f:b5:9f:90:f3:5f:44:2d:f2:0a:30:3e:5c:5c:c1:0c:
fe:d7:c2:1c:eb:5f:61:c6:b3:b4:35:5b:36:c3:11:dd:51:e0:
fa:59:aa:da:5f:7f:f6:30:3c:ef:6d:5f:48:a3:5a:20:4c:90:
0d:05:a5:fc:ce:c8:c3:af:e4:6b:37:8c:26:75:01:06:91:8e:
64:a5:68:5c:d5:e7:59:4b:62:b1:6e:0d:a1:ce:c8:37:80:9d:
01:aa:d0:2b:d7:88:cd:8f:1b:22:d7:b2:a9:fb:f8:67:bd:0d:
9b:53:9c:7b:0a:6d:6e:03:f9:50:88:e6:e1:24:c4:9a:78:74:
34:b2:d8:da:06:59:2b:4c:d5:b0:1d:16:1c:f8:cf:f5:61:92:
b7:b5:43:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduUG/VmqQPZre6wL6gXcoTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZTM0M2MyZmIzZDZiOGQyMzc4OWFiNGRhNmZjZDQ2NWE2
OTA1ODMwHhcNMjUwNjE0MTIwMDU0WhcNMjUwNjE1MTIwMDU0WjAzMTEwLwYDVQQD
EyhiMjBiYTY5ZDlmOTUzMjdiYmVhOTU2MjkwYzVkNDk4Y2IzZDU4MmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz3VTT7cVzY9Nz1iIDq7ZlpmdAlf
EzUbPFykmUYeNdHf1usfLyI21KGArIhRfHryWUmDxu3YEmUC0CGOxZzAZuf03Wyt
hqgd+h7wMqUHG8WwzZswSVmuL6ttYisa6SDSWTqfVpEtf/Zc+lPvfsvOBcwR8ykd
TgH3FVRl9yX3NQY3rx4hLcCnwguLieolTjK1Tg2kWIDKVriboKsJk7MgIvz8OEgz
p3u48rehxJ7K1ov371aKGFa3cPove1C4LjMY3yWpabZc8Em04JXNsQCCp+qyExOK
iS3TGBiWJ+JyrlCURYhbOVvKvu5BSUN1HUc4Sg7RB//cspESdcoTv0+RTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLILpp2flTJ7vqlWKQxdSYyz1YLMMB8GA1UdIwQY
MBaAFJvjQ8L7PWuNI3iatNpvzUZaaQWDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS1ORHd2czlhNDBqZUpxMDJtX05SbHBwQllNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOWJkOTMtOTJiZC00YmY5LWI2NTUt
YWRjZWZkYWExMDI4LzEvbS1ORHd2czlhNDBqZUpxMDJtX05SbHBwQllNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hOWJkOTMtOTJiZC00YmY5LWI2NTUtYWRjZWZkYWExMDI4
LzEvbS1ORHd2czlhNDBqZUpxMDJtX05SbHBwQllNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTeLZcnr
sD+ozrM2ouNmrso6005/kNq1P+QM/JlzObG/T4wi7NbJFDHniBEBvNDXRLHdDzKd
8r2mWNXoGPY1vveG6ksa+lO+J0hQ3zMvImUvtExoq28KMxbLoi+P9dIKBDwrNhxS
+6QgsyVhJX2ftZ+Q819ELfIKMD5cXMEM/tfCHOtfYcaztDVbNsMR3VHg+lmq2l9/
9jA8721fSKNaIEyQDQWl/M7Iw6/kazeMJnUBBpGOZKVoXNXnWUtisW4Noc7IN4Cd
AarQK9eIzY8bIteyqfv4Z70Nm1OcewptbgP5UIjm4STEmnh0NLLY2gZZK0zVsB0W
HPjP9WGSt7VDRQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 20:05:21 2025 by rpki-client