Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
File: NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft (raw, json)
Hash identifier: oVPbDEwBHMHkZzvTRTaAxhGTbI7E3S2trOiqVqRX+N4=
Subject key identifier: 51:67:12:E4:CE:11:47:BA:D8:01:79:D7:AE:C0:00:59:91:FF:EC:DF
Authority key identifier: 34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
Certificate issuer: /CN=34921598b6a261aa4c3e67144ac876033253e0aa
Certificate serial: 019781D7783FC59BC76697B09CD10DF4975B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
Manifest number: 159A
Signing time: Wed 18 Jun 2025 07:01:11 +0000
Manifest this update: Wed 18 Jun 2025 07:01:11 +0000
Manifest next update: Thu 19 Jun 2025 07:01:11 +0000
Files and hashes: 1: 7H80yAVL4R2QfCHsY7d1neAHwRc.roa (hash: CpyD2cHx4DtvY6d+1rHWrMEbiOladccjX6t3p/lpNsI=)
2: NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl (hash: t6ET29gq2veSY+HAkr/2Q2g4zhmeFGgfdia1l1XhXwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:d7:78:3f:c5:9b:c7:66:97:b0:9c:d1:0d:f4:97:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34921598b6a261aa4c3e67144ac876033253e0aa
Validity
Not Before: Jun 18 07:01:11 2025 GMT
Not After : Jun 19 07:01:11 2025 GMT
Subject: CN=516712e4ce1147bad80179d7aec0005991ffecdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c3:0d:27:80:fb:43:4b:18:a9:dc:2b:1a:5f:
93:3d:87:90:bb:3e:e9:59:16:bf:96:2d:3a:f3:89:
3d:b4:d1:9e:1f:4c:f3:5c:c1:8f:62:5a:13:8b:02:
36:93:d1:e4:00:c6:a3:e7:00:a5:ef:fd:41:30:44:
cf:d4:1f:03:17:2c:41:2a:7c:74:0c:5c:b1:fe:cd:
7a:50:31:30:64:89:fb:ce:e7:7f:17:40:41:19:2b:
d9:c6:80:80:67:1c:cf:d8:06:ef:90:d2:2a:a8:2b:
76:0d:e9:34:1c:67:57:eb:ff:01:fa:dd:3e:ab:d3:
42:3e:24:56:90:e2:6b:0b:4c:18:93:ac:a4:76:a7:
81:2c:6d:61:f0:69:bf:dd:cf:3b:31:19:3e:a4:99:
48:62:0f:7a:3b:26:df:06:62:31:c4:60:c1:12:68:
59:66:88:93:6c:e6:4d:5b:cf:89:72:95:7a:0c:2b:
5b:c5:c2:52:44:f2:33:1a:ea:29:b8:99:26:94:83:
83:35:e7:40:d9:70:66:3b:27:05:63:c8:2d:ec:c3:
dd:fa:97:ef:c6:a4:39:f3:89:89:2a:0b:58:c0:93:
20:4c:ca:d4:df:08:6f:8d:08:58:50:4c:2c:c6:a8:
65:59:d9:a3:43:74:14:72:b5:33:23:05:02:5b:3e:
00:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:67:12:E4:CE:11:47:BA:D8:01:79:D7:AE:C0:00:59:91:FF:EC:DF
X509v3 Authority Key Identifier:
keyid:34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9b:19:0e:a8:3e:08:1f:e4:a6:64:80:ae:66:94:7a:75:e9:
21:4d:bf:ab:f6:d2:77:67:6f:2e:a1:9b:e8:b2:b0:d2:5a:02:
7e:b0:85:84:d3:16:a6:41:2e:3a:f9:db:78:01:8a:cb:82:a2:
21:6f:5f:a1:83:ca:e8:44:9d:cb:4f:eb:62:0d:97:86:07:a1:
84:0b:f2:9d:5a:03:8c:4a:b0:54:63:c3:47:71:51:ea:9d:2f:
41:c2:4d:d1:0f:27:87:b9:fe:e0:6e:f9:a7:24:10:77:a7:54:
a4:92:18:0c:94:51:9e:22:04:84:b7:1e:9e:35:ff:9f:27:2c:
9e:e7:3a:61:56:34:f6:c7:4c:41:65:0d:13:0d:b6:29:f6:b4:
84:f9:60:ec:d9:d9:17:ac:70:7f:c9:87:c2:ea:7a:cd:c1:e2:
81:c4:61:4a:96:9b:ea:b1:aa:84:a7:d0:1e:03:ac:38:af:00:
75:d8:4a:55:ed:9c:af:65:ee:76:0c:c4:54:47:13:55:79:db:
61:fd:be:8c:86:98:ba:fc:c1:02:df:f8:f3:1c:44:b9:b3:62:
89:7a:95:3d:99:a1:8a:cc:be:b2:39:36:8d:e8:fe:dd:73:2f:
fb:ba:5f:4d:01:44:19:bf:b9:10:6e:6a:58:cb:8e:e2:00:2f:
8b:b7:1f:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeB13g/xZvHZpewnNEN9JdbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OTIxNTk4YjZhMjYxYWE0YzNlNjcxNDRhYzg3NjAzMzI1
M2UwYWEwHhcNMjUwNjE4MDcwMTExWhcNMjUwNjE5MDcwMTExWjAzMTEwLwYDVQQD
Eyg1MTY3MTJlNGNlMTE0N2JhZDgwMTc5ZDdhZWMwMDA1OTkxZmZlY2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cMNJ4D7Q0sYqdwrGl+TPYeQuz7p
WRa/li0684k9tNGeH0zzXMGPYloTiwI2k9HkAMaj5wCl7/1BMETP1B8DFyxBKnx0
DFyx/s16UDEwZIn7zud/F0BBGSvZxoCAZxzP2AbvkNIqqCt2Dek0HGdX6/8B+t0+
q9NCPiRWkOJrC0wYk6ykdqeBLG1h8Gm/3c87MRk+pJlIYg96OybfBmIxxGDBEmhZ
ZoiTbOZNW8+JcpV6DCtbxcJSRPIzGuopuJkmlIODNedA2XBmOycFY8gt7MPd+pfv
xqQ584mJKgtYwJMgTMrU3whvjQhYUEwsxqhlWdmjQ3QUcrUzIwUCWz4AewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFnEuTOEUe62AF5167AAFmR/+zfMB8GA1UdIwQY
MBaAFDSSFZi2omGqTD5nFErIdgMyU+CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpJVm1MYWlZYXBNUG1jVVNzaDJBekpUNEtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iMDAwZTItNjdjMy00NmY3LTg4MjAt
NDJlMDAyZGFkOWFlLzEvTkpJVm1MYWlZYXBNUG1jVVNzaDJBekpUNEtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9iMDAwZTItNjdjMy00NmY3LTg4MjAtNDJlMDAyZGFkOWFl
LzEvTkpJVm1MYWlZYXBNUG1jVVNzaDJBekpUNEtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpsZDqg+
CB/kpmSArmaUenXpIU2/q/bSd2dvLqGb6LKw0loCfrCFhNMWpkEuOvnbeAGKy4Ki
IW9foYPK6ESdy0/rYg2XhgehhAvynVoDjEqwVGPDR3FR6p0vQcJN0Q8nh7n+4G75
pyQQd6dUpJIYDJRRniIEhLcenjX/nycsnuc6YVY09sdMQWUNEw22Kfa0hPlg7NnZ
F6xwf8mHwup6zcHigcRhSpab6rGqhKfQHgOsOK8AddhKVe2cr2XudgzEVEcTVXnb
Yf2+jIaYuvzBAt/48xxEubNiiXqVPZmhisy+sjk2jej+3XMv+7pfTQFEGb+5EG5q
WMuO4gAvi7cf4g==
-----END CERTIFICATE-----
Generated at Wed Jun 18 15:45:37 2025 by rpki-client