Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
File: nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft (raw, json)
Hash identifier: DxiYbZU+7VH15VEVGgBL3E5YpYnAbYcBEpOLKg5hCco=
Subject key identifier: 12:49:04:E5:BA:45:E9:D7:6F:38:D0:86:06:AE:67:2B:C7:4A:87:F8
Authority key identifier: 9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2
Certificate issuer: /CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2
Certificate serial: 01974AE87795419641C6DC106AD9C542E9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
Manifest number: 0711
Signing time: Sat 07 Jun 2025 15:00:38 +0000
Manifest this update: Sat 07 Jun 2025 15:00:38 +0000
Manifest next update: Sun 08 Jun 2025 15:00:38 +0000
Files and hashes: 1: bre9O2wrDggeCO-gClQtVcXHgMs.roa (hash: TZRQyZuvSyRj0lGzf2b/FG9R/6ZAoSht1L/fXzqCZUg=)
2: nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl (hash: LzmN4+A3CqmziXcgEV+i2IHlg5TVCQTLwrvl8UOKIno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:77:95:41:96:41:c6:dc:10:6a:d9:c5:42:e9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2
Validity
Not Before: Jun 7 15:00:38 2025 GMT
Not After : Jun 8 15:00:38 2025 GMT
Subject: CN=124904e5ba45e9d76f38d08606ae672bc74a87f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b5:57:2a:e1:39:35:ef:d4:a5:aa:6e:9a:f3:
34:42:06:fa:1e:82:6d:6a:0b:4a:e5:e6:9e:4a:92:
08:f0:ad:f8:01:df:58:47:a3:bd:ac:1d:0f:32:63:
2f:78:2e:fb:9b:fa:c2:1c:a4:80:9b:39:51:1e:b3:
80:f0:d8:9c:77:f0:16:96:52:3c:47:bf:a3:9d:6c:
83:11:c3:db:7c:0a:1f:47:0e:3d:8e:a6:e1:2b:00:
d5:c2:63:d0:62:b1:3e:c5:29:9f:b0:71:a0:8b:1e:
bb:fe:28:c7:7a:8f:60:59:9e:27:d3:78:b4:41:12:
28:60:c3:d8:a6:4b:b4:95:7f:85:19:c0:a7:e3:a1:
8d:86:b7:02:95:75:e0:1f:3a:c6:95:bf:8d:37:66:
19:43:f4:a0:10:1d:ca:16:1a:58:c7:1e:1e:f6:9b:
02:eb:f7:a7:1e:49:df:9b:48:fd:df:48:61:07:8a:
6a:2e:e2:15:92:36:5f:e2:2a:9d:2e:5d:0b:65:d7:
7b:3d:75:66:9d:76:6a:d4:f4:ac:ff:f3:37:09:ff:
9a:f6:74:fe:e7:7b:9f:c2:87:53:fa:7c:83:f2:99:
eb:63:4c:ae:de:47:6a:07:21:24:a3:44:8d:25:d9:
76:eb:1d:9b:fb:c3:e9:47:b6:9f:48:e3:17:99:16:
d9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:49:04:E5:BA:45:E9:D7:6F:38:D0:86:06:AE:67:2B:C7:4A:87:F8
X509v3 Authority Key Identifier:
keyid:9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:1c:d6:60:ac:66:f4:a1:01:55:95:5e:13:d1:aa:b6:65:55:
c1:a0:f8:85:70:f6:ad:e4:ba:6f:a2:61:6b:71:11:0d:78:40:
b1:87:a8:a9:9d:89:f3:b4:3f:63:5d:66:42:c5:8f:3b:35:36:
d5:21:4b:22:4b:a2:fa:39:ae:8e:18:dd:0c:d7:90:ba:64:f4:
08:a1:03:4e:9c:ed:74:df:fb:4c:f2:c4:3e:34:02:cf:18:b9:
49:be:a6:4f:18:ea:11:12:39:76:ae:84:8a:20:dd:3f:36:bd:
ad:76:10:fe:18:cc:31:89:78:96:ab:e1:83:d7:a8:a6:6f:54:
d9:20:f2:59:e9:dc:e8:16:1c:6b:53:2b:c6:b6:4a:80:fa:da:
02:45:78:dc:db:ed:fe:a9:2c:cb:47:04:b0:0d:2a:b4:b9:17:
fe:12:56:d3:a2:0b:53:93:d3:4d:ba:db:ce:ee:bb:9e:bc:33:
0d:cf:0f:43:76:22:ef:0d:fc:7e:40:df:bb:2d:54:6d:b1:a7:
f6:74:01:9e:5d:ad:4d:6c:01:53:57:19:1d:c7:51:57:46:a0:
2d:1e:62:f5:5b:2c:ee:60:40:00:09:0e:82:be:95:8d:dd:ea:
4d:af:d1:b4:a0:2b:d8:21:e2:41:84:a1:d5:26:01:e2:8d:44:
94:2a:77:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6HeVQZZBxtwQatnFQun7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNDMwM2EwYTk5OWQ4MTE4YmJjN2U5NmFkMzhlZmJiMTQ0
OTZlYTIwHhcNMjUwNjA3MTUwMDM4WhcNMjUwNjA4MTUwMDM4WjAzMTEwLwYDVQQD
EygxMjQ5MDRlNWJhNDVlOWQ3NmYzOGQwODYwNmFlNjcyYmM3NGE4N2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirVXKuE5Ne/UpapumvM0Qgb6HoJt
agtK5eaeSpII8K34Ad9YR6O9rB0PMmMveC77m/rCHKSAmzlRHrOA8Nicd/AWllI8
R7+jnWyDEcPbfAofRw49jqbhKwDVwmPQYrE+xSmfsHGgix67/ijHeo9gWZ4n03i0
QRIoYMPYpku0lX+FGcCn46GNhrcClXXgHzrGlb+NN2YZQ/SgEB3KFhpYxx4e9psC
6/enHknfm0j930hhB4pqLuIVkjZf4iqdLl0LZdd7PXVmnXZq1PSs//M3Cf+a9nT+
53ufwodT+nyD8pnrY0yu3kdqByEko0SNJdl26x2b+8PpR7afSOMXmRbZ1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJJBOW6RenXbzjQhgauZyvHSof4MB8GA1UdIwQY
MBaAFJ1DA6CpmdgRi7x+lq0477sUSW6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblVNRG9LbVoyQkdMdkg2V3JUanZ1eFJKYnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iZDllMDItYzQyNC00ZTE0LWFhYjct
Mzk0NjFhYWE1YmU3LzEvblVNRG9LbVoyQkdMdkg2V3JUanZ1eFJKYnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9iZDllMDItYzQyNC00ZTE0LWFhYjctMzk0NjFhYWE1YmU3
LzEvblVNRG9LbVoyQkdMdkg2V3JUanZ1eFJKYnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyBzWYKxm
9KEBVZVeE9GqtmVVwaD4hXD2reS6b6Jha3ERDXhAsYeoqZ2J87Q/Y11mQsWPOzU2
1SFLIkui+jmujhjdDNeQumT0CKEDTpztdN/7TPLEPjQCzxi5Sb6mTxjqERI5dq6E
iiDdPza9rXYQ/hjMMYl4lqvhg9eopm9U2SDyWenc6BYca1MrxrZKgPraAkV43Nvt
/qksy0cEsA0qtLkX/hJW06ILU5PTTbrbzu67nrwzDc8PQ3Yi7w38fkDfuy1UbbGn
9nQBnl2tTWwBU1cZHcdRV0agLR5i9Vss7mBAAAkOgr6Vjd3qTa/RtKAr2CHiQYSh
1SYB4o1ElCp3Gg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:06:50 2025 by rpki-client