Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
File: nPMilEsEi3BX5F7SyzQbVg4KxsM.mft (raw, json)
Hash identifier: SsRr+APoYNGuEqiD7qmuHRRwszYBXjVnrEmyTjj/gSw=
Subject key identifier: E2:CE:33:50:14:A7:EB:BD:FD:E0:35:A6:97:B9:1B:85:38:81:C3:DE
Authority key identifier: 9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
Certificate issuer: /CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Certificate serial: 019784D7D3F4B9B8096C62121CD343662FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
Manifest number: 1597
Signing time: Wed 18 Jun 2025 21:00:26 +0000
Manifest this update: Wed 18 Jun 2025 21:00:26 +0000
Manifest next update: Thu 19 Jun 2025 21:00:26 +0000
Files and hashes: 1: nPMilEsEi3BX5F7SyzQbVg4KxsM.crl (hash: wD+3SlQq+6lF0Kmj/SsYhkmCPltBJZQBqpH+H+EJLbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:d7:d3:f4:b9:b8:09:6c:62:12:1c:d3:43:66:2f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Validity
Not Before: Jun 18 21:00:26 2025 GMT
Not After : Jun 19 21:00:26 2025 GMT
Subject: CN=e2ce335014a7ebbdfde035a697b91b853881c3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:cb:d1:a5:fa:3e:77:c6:f4:a1:55:d1:48:
c4:2d:b6:df:56:4f:c5:da:c4:46:55:20:88:b9:38:
77:43:09:54:b7:43:b0:77:15:c7:59:16:59:63:1d:
b1:02:ca:bc:a1:1a:90:e2:30:87:2e:86:9b:2f:25:
40:7f:84:48:9c:29:94:13:9c:7c:29:64:d4:6c:43:
8c:6a:25:6f:8e:a8:b9:52:ba:63:79:ee:64:6d:23:
b7:f4:77:a8:6d:ec:ab:4c:60:25:52:41:d9:0f:59:
6d:7c:37:c9:a1:77:c6:af:6f:eb:af:12:ce:4a:86:
0b:f2:ed:c5:83:14:14:2c:86:62:0d:68:d6:22:a4:
a0:d5:bf:b1:6b:67:79:14:b0:dc:a9:28:d1:b0:7a:
0a:ee:81:6f:fb:54:42:17:ec:8b:48:d0:56:b6:58:
50:c8:99:b9:cf:92:e8:92:e6:1f:83:65:60:d7:02:
e9:48:c9:98:6c:08:7d:82:d3:ce:c2:84:06:b4:aa:
82:c1:50:0e:c5:45:51:dc:6d:c5:14:12:fa:01:b6:
f2:2a:b1:e0:34:61:d3:a8:33:29:4b:a2:62:8a:64:
d2:67:e8:1b:38:45:a7:e5:f7:c0:71:16:00:e3:d8:
07:ce:46:0f:36:3e:0d:bc:16:a8:c8:af:f1:16:74:
50:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CE:33:50:14:A7:EB:BD:FD:E0:35:A6:97:B9:1B:85:38:81:C3:DE
X509v3 Authority Key Identifier:
keyid:9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a2:e4:0b:7e:73:04:0b:03:43:0a:b4:97:0c:a1:45:2c:c1:
d5:99:89:a7:f7:64:bd:82:ae:d1:27:50:7c:f4:e1:52:59:9f:
1e:59:b1:85:35:e9:9c:0a:97:f0:15:32:5f:b9:39:7f:40:5f:
3b:f5:b4:24:49:68:fc:49:91:6c:ce:07:c7:3c:66:0b:8c:47:
69:2d:63:a4:2b:c9:1f:32:ba:8c:09:94:69:9c:91:d3:b8:c2:
48:a7:07:7d:7d:b1:bb:3a:03:ef:3a:1e:3a:92:71:ac:d0:08:
07:6f:fb:35:f1:2c:eb:8b:cf:07:af:4f:75:63:c8:6d:da:b9:
9b:0f:bb:1b:1d:21:a0:f3:56:7b:d6:99:88:62:1c:80:31:85:
00:cf:d4:94:10:aa:c6:f1:b3:fc:da:82:99:a2:ae:a4:7c:3c:
2b:02:df:74:af:28:92:af:3e:f7:38:f1:36:d5:fc:0e:3e:22:
87:1e:87:ab:ce:6b:96:08:d7:0f:5f:ec:90:61:39:c8:32:c6:
52:99:78:5f:f1:b6:99:14:92:49:15:55:b3:b8:51:66:ed:5a:
21:8f:37:1c:16:a3:a4:a0:e5:69:e3:49:38:19:8d:d1:f1:0d:
a7:2b:41:39:49:a6:30:ec:d4:b3:15:6b:0c:f7:2f:59:ab:68:
7f:47:4e:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeE19P0ubgJbGISHNNDZi/eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZjMyMjk0NGIwNDhiNzA1N2U0NWVkMmNiMzQxYjU2MGUw
YWM2YzMwHhcNMjUwNjE4MjEwMDI2WhcNMjUwNjE5MjEwMDI2WjAzMTEwLwYDVQQD
EyhlMmNlMzM1MDE0YTdlYmJkZmRlMDM1YTY5N2I5MWI4NTM4ODFjM2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R3L0aX6PnfG9KFV0UjELbbfVk/F
2sRGVSCIuTh3QwlUt0OwdxXHWRZZYx2xAsq8oRqQ4jCHLoabLyVAf4RInCmUE5x8
KWTUbEOMaiVvjqi5Urpjee5kbSO39HeobeyrTGAlUkHZD1ltfDfJoXfGr2/rrxLO
SoYL8u3FgxQULIZiDWjWIqSg1b+xa2d5FLDcqSjRsHoK7oFv+1RCF+yLSNBWtlhQ
yJm5z5LokuYfg2Vg1wLpSMmYbAh9gtPOwoQGtKqCwVAOxUVR3G3FFBL6AbbyKrHg
NGHTqDMpS6JiimTSZ+gbOEWn5ffAcRYA49gHzkYPNj4NvBaoyK/xFnRQMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLOM1AUp+u9/eA1ppe5G4U4gcPeMB8GA1UdIwQY
MBaAFJzzIpRLBItwV+Re0ss0G1YOCsbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblBNaWxFc0VpM0JYNUY3U3l6UWJWZzRLeHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mYWQwNmMtZjM2OC00NmFiLWFlNzkt
YjNjNWMwOTMzZDk3LzEvblBNaWxFc0VpM0JYNUY3U3l6UWJWZzRLeHNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9mYWQwNmMtZjM2OC00NmFiLWFlNzktYjNjNWMwOTMzZDk3
LzEvblBNaWxFc0VpM0JYNUY3U3l6UWJWZzRLeHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6LkC35z
BAsDQwq0lwyhRSzB1ZmJp/dkvYKu0SdQfPThUlmfHlmxhTXpnAqX8BUyX7k5f0Bf
O/W0JElo/EmRbM4HxzxmC4xHaS1jpCvJHzK6jAmUaZyR07jCSKcHfX2xuzoD7zoe
OpJxrNAIB2/7NfEs64vPB69PdWPIbdq5mw+7Gx0hoPNWe9aZiGIcgDGFAM/UlBCq
xvGz/NqCmaKupHw8KwLfdK8okq8+9zjxNtX8Dj4ihx6Hq85rlgjXD1/skGE5yDLG
Upl4X/G2mRSSSRVVs7hRZu1aIY83HBajpKDlaeNJOBmN0fENpytBOUmmMOzUsxVr
DPcvWatof0dOVg==
-----END CERTIFICATE-----
Generated at Thu Jun 19 07:58:52 2025 by rpki-client