Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File: NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier: OdRumL7I0c0HJBIC2+zJmYi2xRC5LQZuPJznwo0yBG4=
Subject key identifier: B8:C5:58:CB:72:8E:55:A8:31:F3:36:B8:74:A6:08:F8:EE:2C:2A:27
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial: 01988242AAF7821A5D8ECBFA6C59284A56F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number: 063F
Signing time: Thu 07 Aug 2025 02:01:03 +0000
Manifest this update: Thu 07 Aug 2025 02:01:03 +0000
Manifest next update: Fri 08 Aug 2025 02:01:03 +0000
Files and hashes: 1: 4WEE6M8dthgW-fAXTbXKabGLlL0.roa (hash: Vz/LsTTjIy8GCO6P/Fc6vDeS0OdzaRulpb9xjUaoVO0=)
2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: pifeqPcXDEmDHWDDqCCGoJ2kg7Y6QrMLasxRwEiW960=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:42:aa:f7:82:1a:5d:8e:cb:fa:6c:59:28:4a:56:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
Validity
Not Before: Aug 7 02:01:03 2025 GMT
Not After : Aug 8 02:01:03 2025 GMT
Subject: CN=b8c558cb728e55a831f336b874a608f8ee2c2a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:4b:4c:1e:3d:27:80:27:18:27:e8:cc:93:
6a:68:79:0e:21:b9:9b:c8:6a:38:7e:4c:a2:91:90:
77:b0:ac:da:1d:6c:76:c4:83:bb:b7:0b:62:b7:4a:
8f:9f:d3:df:98:8d:e2:18:75:85:80:01:67:6f:2e:
06:a9:1c:3b:75:22:dc:56:b6:73:9a:17:29:b6:64:
5b:a3:bb:ac:86:72:96:10:c0:23:c9:98:44:11:75:
2c:34:14:8a:81:99:0b:b3:12:d8:b3:9d:8e:76:57:
13:c0:e0:2a:63:fc:e1:cb:30:b8:62:06:0c:94:30:
b3:16:ba:2f:d3:f9:a8:43:73:1b:38:7e:d4:d0:4a:
30:e6:b5:30:53:50:fc:6e:66:d9:04:7e:6d:f4:d0:
a0:96:a0:69:53:c2:8e:8b:1f:86:e6:14:de:38:16:
77:16:a8:bf:64:da:d5:69:fe:6c:4c:d4:59:9c:78:
91:a0:6c:2d:72:53:79:90:02:04:8b:b0:95:05:5a:
5d:58:6a:b8:8a:cd:1c:5a:53:98:8c:f5:9d:81:cc:
50:a4:79:df:42:f0:d1:9e:b6:f2:1c:ed:89:f8:ab:
c9:1f:fc:d7:b8:3c:c0:2c:21:54:7a:85:c8:f6:3b:
eb:1a:c4:f2:ae:5c:22:d6:50:72:aa:d4:c6:b7:40:
40:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C5:58:CB:72:8E:55:A8:31:F3:36:B8:74:A6:08:F8:EE:2C:2A:27
X509v3 Authority Key Identifier:
keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:43:82:a1:03:dd:27:a4:f0:c3:5f:49:64:c7:07:84:66:0c:
2e:1c:15:9d:09:30:c3:76:bf:b7:d3:54:b6:2f:80:fa:24:82:
ae:6e:d9:fa:5f:86:11:37:bc:19:9a:46:ec:da:8d:cb:02:1a:
2b:22:12:a1:66:0b:7e:91:62:b0:85:bd:ea:3f:88:b1:4f:14:
ad:d4:de:56:9a:7c:4d:a1:0e:40:00:a1:6e:4e:7f:67:a0:8e:
fc:f8:13:d6:71:ab:8e:d3:db:21:21:e7:e5:42:90:e5:dc:0c:
90:e7:f3:ad:03:6c:16:2b:4d:12:a9:25:db:5c:7b:8b:98:f4:
93:ae:34:d7:80:c4:d6:15:aa:58:dd:bf:19:10:1d:41:1f:60:
63:d3:71:f3:47:de:ca:9f:75:96:44:9d:31:db:83:e3:ae:41:
0c:68:74:a2:e9:c0:d7:32:cd:c6:c8:54:dd:44:f1:32:40:74:
98:ec:c3:29:19:9c:8f:f5:0f:95:11:1a:a2:54:58:5b:88:3f:
31:70:fc:6c:61:b5:23:77:bb:e6:21:9b:66:bf:86:35:64:53:
62:a0:ec:bb:a7:58:ab:6e:ff:41:4b:ef:1f:77:fb:e7:a4:68:
0c:84:eb:b1:ef:17:3b:22:14:04:4c:8e:f2:15:e9:fa:01:00:
c5:12:b4:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCQqr3ghpdjsv6bFkoSlb5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ODA2NTFhYmEwNjZiNDA4NGE3ZWQyMGQ3ZjUyMDFiMjI5
NmMxOTcwHhcNMjUwODA3MDIwMTAzWhcNMjUwODA4MDIwMTAzWjAzMTEwLwYDVQQD
EyhiOGM1NThjYjcyOGU1NWE4MzFmMzM2Yjg3NGE2MDhmOGVlMmMyYTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3NLTB49J4AnGCfozJNqaHkOIbmb
yGo4fkyikZB3sKzaHWx2xIO7twtit0qPn9PfmI3iGHWFgAFnby4GqRw7dSLcVrZz
mhcptmRbo7ushnKWEMAjyZhEEXUsNBSKgZkLsxLYs52OdlcTwOAqY/zhyzC4YgYM
lDCzFrov0/moQ3MbOH7U0Eow5rUwU1D8bmbZBH5t9NCglqBpU8KOix+G5hTeOBZ3
Fqi/ZNrVaf5sTNRZnHiRoGwtclN5kAIEi7CVBVpdWGq4is0cWlOYjPWdgcxQpHnf
QvDRnrbyHO2J+KvJH/zXuDzALCFUeoXI9jvrGsTyrlwi1lByqtTGt0BAEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjFWMtyjlWoMfM2uHSmCPjuLConMB8GA1UdIwQY
MBaAFDaAZRq6BmtAhKftINf1IBsilsGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm9CbEdyb0dhMENFcC0wZzFfVWdHeUtXd1pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kMTBiOTQtNDEwNS00NWUyLWE3MDct
NTIyNGNmMTNmNTg2LzEvTm9CbEdyb0dhMENFcC0wZzFfVWdHeUtXd1pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9kMTBiOTQtNDEwNS00NWUyLWE3MDctNTIyNGNmMTNmNTg2
LzEvTm9CbEdyb0dhMENFcC0wZzFfVWdHeUtXd1pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUOCoQPd
J6Tww19JZMcHhGYMLhwVnQkww3a/t9NUti+A+iSCrm7Z+l+GETe8GZpG7NqNywIa
KyISoWYLfpFisIW96j+IsU8UrdTeVpp8TaEOQAChbk5/Z6CO/PgT1nGrjtPbISHn
5UKQ5dwMkOfzrQNsFitNEqkl21x7i5j0k64014DE1hWqWN2/GRAdQR9gY9Nx80fe
yp91lkSdMduD465BDGh0ounA1zLNxshU3UTxMkB0mOzDKRmcj/UPlREaolRYW4g/
MXD8bGG1I3e75iGbZr+GNWRTYqDsu6dYq27/QUvvH3f756RoDITrse8XOyIUBEyO
8hXp+gEAxRK0VA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:56:58 2025 by rpki-client