Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
File: NssW5Ez78H6X9vXkSucYqlDQUpE.mft (raw, json)
Hash identifier: es9wR65KIFRktOcL5uUf1yphI6oi4k40wGcQW5baXos=
Subject key identifier: E1:37:73:65:FB:D8:27:E5:81:F1:1A:18:9D:56:91:0E:5F:2E:4F:BB
Authority key identifier: 36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
Certificate issuer: /CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Certificate serial: 019749D5A1BDE736303CD16EAEC9E10C53FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 10:00:26 +0000
Manifest this update: Sat 07 Jun 2025 10:00:26 +0000
Manifest next update: Sun 08 Jun 2025 10:00:26 +0000
Files and hashes: 1: L5MQK89fxZaRwM_CqURZbBomtGM.roa (hash: dfoa3Oa+GHxXVfHS0ZcfFlTwLP7no4RhSrEEs8sBD0U=)
2: NssW5Ez78H6X9vXkSucYqlDQUpE.crl (hash: qXJ4TvE0yQlqZwLn1q1me3YH6X/RwhHTL0Hvkc69aRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:a1:bd:e7:36:30:3c:d1:6e:ae:c9:e1:0c:53:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Validity
Not Before: Jun 7 10:00:26 2025 GMT
Not After : Jun 8 10:00:26 2025 GMT
Subject: CN=e1377365fbd827e581f11a189d56910e5f2e4fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:3f:4f:a5:0c:10:81:18:25:c6:ae:fd:ff:
fc:cd:81:bd:90:1d:e3:7d:d0:8d:a7:8b:14:9b:f2:
53:4c:48:75:ab:99:f2:82:0d:85:c4:43:38:d9:ac:
58:f1:ea:7c:17:9b:d0:b7:66:6d:63:7c:fd:d1:4f:
dc:5f:0d:0e:4f:32:87:ca:4d:df:35:e9:65:82:e8:
9f:4f:f9:ce:13:8c:62:01:ce:54:e2:42:ac:96:ab:
37:9d:f1:38:f7:7c:11:91:5c:22:2d:36:ad:cf:7a:
04:ed:19:37:35:5b:16:b9:7b:ee:24:fd:35:a1:a0:
10:bd:30:0b:e3:05:0b:4a:4d:84:ab:48:90:bf:ac:
e9:2c:8c:ce:cd:67:82:97:e0:99:0a:f0:d2:d9:cf:
df:3e:02:7d:19:7e:48:10:42:5f:9d:b5:e5:b2:9e:
8f:78:3d:66:12:92:c7:40:e0:dc:c3:64:53:aa:3f:
02:f7:d3:6f:87:0d:1d:87:97:c9:84:e4:75:02:12:
84:b0:1f:b3:5c:18:7a:10:d7:b5:ce:a7:35:17:ce:
59:f8:ad:c4:5f:c0:07:b3:4a:6c:71:b2:aa:75:60:
28:c8:fa:f1:6c:3d:86:94:c6:3c:9d:25:99:3f:f9:
bd:9d:d9:0d:38:e7:4b:fe:c9:64:82:0d:5e:35:34:
2a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:37:73:65:FB:D8:27:E5:81:F1:1A:18:9D:56:91:0E:5F:2E:4F:BB
X509v3 Authority Key Identifier:
keyid:36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6c:3f:9e:4c:a2:ac:8f:02:a4:0e:3f:7e:a7:13:d0:9e:56:
6d:3b:f8:66:93:af:5c:a4:be:2d:49:30:40:48:18:c5:e5:4d:
b9:63:ca:c6:15:c6:dc:a9:c6:e6:3a:f2:1d:7f:84:53:c4:44:
98:75:b0:cc:b1:47:ba:f4:ee:e1:15:d1:bf:af:d0:45:d9:a6:
4e:5a:f4:68:90:56:56:02:98:61:0a:04:dd:0f:7f:47:9d:28:
9d:b3:2c:c7:3f:bd:2c:d4:c1:ea:38:20:8d:54:b2:9a:b3:27:
76:3d:68:bf:6b:65:3d:37:ba:99:08:8f:fb:b9:9a:a5:ac:4b:
f6:79:dd:70:5b:78:6f:48:d3:02:ef:75:f9:5c:40:0b:3e:fa:
d8:77:e1:6f:55:fd:58:19:ba:f4:e2:d1:85:9d:b1:4d:e1:67:
f3:f6:4f:8f:ad:1b:74:b3:3b:84:db:bc:45:1d:d8:10:89:21:
ea:d5:69:40:45:75:58:d2:3c:c7:d0:9b:b0:7f:1e:97:cf:8a:
f5:4d:a1:6e:5e:1a:af:c2:ef:65:44:eb:5b:a8:47:6e:7f:8d:
8f:87:c5:de:b5:59:dd:97:70:d4:b6:55:2a:88:1e:7d:71:4a:
dc:ff:86:e2:63:23:07:74:71:64:38:f6:f5:c5:e7:13:5f:a4:
fd:c5:ac:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1aG95zYwPNFursnhDFP6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Y2IxNmU0NGNmYmYwN2U5N2Y2ZjVlNDRhZTcxOGFhNTBk
MDUyOTEwHhcNMjUwNjA3MTAwMDI2WhcNMjUwNjA4MTAwMDI2WjAzMTEwLwYDVQQD
EyhlMTM3NzM2NWZiZDgyN2U1ODFmMTFhMTg5ZDU2OTEwZTVmMmU0ZmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDU/T6UMEIEYJcau/f/8zYG9kB3j
fdCNp4sUm/JTTEh1q5nygg2FxEM42axY8ep8F5vQt2ZtY3z90U/cXw0OTzKHyk3f
NellguifT/nOE4xiAc5U4kKslqs3nfE493wRkVwiLTatz3oE7Rk3NVsWuXvuJP01
oaAQvTAL4wULSk2Eq0iQv6zpLIzOzWeCl+CZCvDS2c/fPgJ9GX5IEEJfnbXlsp6P
eD1mEpLHQODcw2RTqj8C99Nvhw0dh5fJhOR1AhKEsB+zXBh6ENe1zqc1F85Z+K3E
X8AHs0pscbKqdWAoyPrxbD2GlMY8nSWZP/m9ndkNOOdL/slkgg1eNTQq2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOE3c2X72CflgfEaGJ1WkQ5fLk+7MB8GA1UdIwQY
MBaAFDbLFuRM+/B+l/b15ErnGKpQ0FKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNzVzVFejc4SDZYOXZYa1N1Y1lxbERRVXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jODA0M2UtZWE5NS00ODUxLWEyZmIt
MTBjYmM1OTdhNzFhLzEvTnNzVzVFejc4SDZYOXZYa1N1Y1lxbERRVXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jODA0M2UtZWE5NS00ODUxLWEyZmItMTBjYmM1OTdhNzFh
LzEvTnNzVzVFejc4SDZYOXZYa1N1Y1lxbERRVXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo2w/nkyi
rI8CpA4/fqcT0J5WbTv4ZpOvXKS+LUkwQEgYxeVNuWPKxhXG3KnG5jryHX+EU8RE
mHWwzLFHuvTu4RXRv6/QRdmmTlr0aJBWVgKYYQoE3Q9/R50onbMsxz+9LNTB6jgg
jVSymrMndj1ov2tlPTe6mQiP+7mapaxL9nndcFt4b0jTAu91+VxACz762Hfhb1X9
WBm69OLRhZ2xTeFn8/ZPj60bdLM7hNu8RR3YEIkh6tVpQEV1WNI8x9CbsH8el8+K
9U2hbl4ar8LvZUTrW6hHbn+Nj4fF3rVZ3Zdw1LZVKogefXFK3P+G4mMjB3RxZDj2
9cXnE1+k/cWstw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:31:46 2025 by rpki-client