Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
File: NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft (raw, json)
Hash identifier: 0KZyKJmChq1qwLnQbxS9waNcFUf4djWuWtlAzZkU0NY=
Subject key identifier: A7:B1:D4:1E:AA:B8:89:A4:5F:18:7D:C4:7E:30:A7:AB:C3:69:28:75
Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
Certificate issuer: /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Certificate serial: 01972C0341F472669EB25142FD20E8B2F17A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
Manifest number: 12D7
Signing time: Sun 01 Jun 2025 15:01:40 +0000
Manifest this update: Sun 01 Jun 2025 15:01:40 +0000
Manifest next update: Mon 02 Jun 2025 15:01:40 +0000
Files and hashes: 1: HXMlv9NxuKboyUtKNMBCZQbSjW0.roa (hash: mL85Iwg8ADnZv62S9C7eQgo7c8UTYuO4j6CsY6zppGQ=)
2: NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl (hash: AJxK33L0JRJI7ioyqj0qbQZGkavHABiCqyBthw7CS8U=)
3: eJTJ2xXloI9cYA2PdEb7QzgzZMI.roa (hash: pJvyPt1aoxPTKu/5G35raZf6vtLPUO+Laz/ssfLJWrA=)
4: nyGwWtmUUenCuiNvi2rme3JvAnM.roa (hash: mv2iRNCUpphbjEmFj2ZluXSrRNCmkDp7k1nJS6ve48g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Jun 2025 14:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2c:03:41:f4:72:66:9e:b2:51:42:fd:20:e8:b2:f1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Validity
Not Before: Jun 1 15:01:40 2025 GMT
Not After : Jun 2 15:01:40 2025 GMT
Subject: CN=a7b1d41eaab889a45f187dc47e30a7abc3692875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:5e:29:e8:f8:b0:8f:9f:94:a6:40:70:53:
68:28:42:3e:72:63:e1:69:8e:21:64:50:70:e7:54:
cd:21:c5:2f:b1:10:f0:86:ad:8c:2a:1a:6c:c3:7b:
7e:7b:33:b1:08:05:68:2b:12:6e:5c:3c:30:ab:50:
04:9c:53:6c:6d:fb:d4:45:f8:2a:56:50:83:49:57:
ef:5f:b2:7f:29:2f:9e:63:4b:7c:2f:48:68:d6:57:
4f:6d:00:37:c5:56:eb:0f:48:ab:ae:26:24:b0:f3:
73:f8:3f:9f:ce:be:72:a8:cc:63:1d:e6:4b:05:bd:
d9:c7:83:8c:bc:88:91:29:68:18:61:19:8a:0b:af:
4a:8b:94:64:c5:6c:66:ac:3f:6a:c4:0e:a5:14:73:
48:25:40:e2:30:b5:15:c7:0d:6a:b5:b3:4a:de:3f:
33:76:7a:02:f7:a0:cc:00:46:5b:3a:48:08:cf:b5:
ee:fa:9b:43:40:e3:24:99:65:63:17:1e:89:4a:af:
00:0d:ad:15:d4:1c:86:cc:48:d0:72:e9:37:97:55:
ca:60:fc:b3:41:05:83:85:2c:1c:0d:5f:44:fb:1a:
00:8b:cc:8d:31:82:2e:8c:c8:54:09:2f:7d:4f:4e:
ba:b9:c4:79:c7:5c:e6:d2:9a:67:99:70:ac:09:df:
a2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B1:D4:1E:AA:B8:89:A4:5F:18:7D:C4:7E:30:A7:AB:C3:69:28:75
X509v3 Authority Key Identifier:
keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0a:b1:5e:e7:a3:06:f2:e8:05:d5:ec:f2:3e:6b:c7:45:e2:
13:ff:24:cc:c8:bc:b8:3e:70:ae:4d:30:de:27:c1:f3:72:1c:
1c:37:a8:dc:f2:a1:0e:aa:fa:43:1e:54:9a:57:ac:2b:81:1d:
f4:f8:13:bd:18:64:30:b4:2d:10:ba:e8:20:72:14:3b:e5:ac:
d5:49:78:b5:94:4b:ef:3d:88:4f:31:3e:d7:13:f6:13:94:e0:
8a:58:17:7e:4b:27:90:6a:18:b0:c3:50:e5:a7:57:95:a8:75:
80:fe:a5:12:86:c4:78:06:1a:ac:37:17:0e:a9:6f:d6:ff:c8:
53:9f:20:c8:74:71:e4:ff:7f:d0:92:db:a8:42:40:2d:d4:41:
88:82:f7:07:b8:43:d4:e7:19:69:e9:ee:27:f8:43:6b:a8:51:
b2:3d:d3:97:9a:5d:a9:a9:3f:d1:f5:d0:c1:9e:93:85:6a:37:
72:bd:2a:db:a9:73:ba:61:d1:89:b2:7f:0c:a6:ee:e7:c6:02:
73:9f:e9:a7:0a:61:34:fa:02:67:76:68:7f:26:97:af:74:90:
79:ee:1f:e7:23:5d:6a:c5:81:2b:f4:af:00:43:9b:b2:30:2d:
a8:cd:b7:b0:01:16:03:1b:79:85:ef:10:a5:82:22:dc:e4:c4:
94:67:c9:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZcsA0H0cmaeslFC/SDosvF6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZmU2YjlkMGNjMWU3ZjZlMTZiMmE0NmI0MmNhNWUwMWM3
MDAzNDYwHhcNMjUwNjAxMTUwMTQwWhcNMjUwNjAyMTUwMTQwWjAzMTEwLwYDVQQD
EyhhN2IxZDQxZWFhYjg4OWE0NWYxODdkYzQ3ZTMwYTdhYmMzNjkyODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/deKej4sI+flKZAcFNoKEI+cmPh
aY4hZFBw51TNIcUvsRDwhq2MKhpsw3t+ezOxCAVoKxJuXDwwq1AEnFNsbfvURfgq
VlCDSVfvX7J/KS+eY0t8L0ho1ldPbQA3xVbrD0irriYksPNz+D+fzr5yqMxjHeZL
Bb3Zx4OMvIiRKWgYYRmKC69Ki5RkxWxmrD9qxA6lFHNIJUDiMLUVxw1qtbNK3j8z
dnoC96DMAEZbOkgIz7Xu+ptDQOMkmWVjFx6JSq8ADa0V1ByGzEjQcuk3l1XKYPyz
QQWDhSwcDV9E+xoAi8yNMYIujMhUCS99T066ucR5x1zm0ppnmXCsCd+iJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKex1B6quImkXxh9xH4wp6vDaSh1MB8GA1UdIwQY
MBaAFDT+a50Mwef24WsqRrQspeAccANGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlA1cm5RekI1X2JoYXlwR3RDeWw0Qnh3QTBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82MmRmMzYtZmQzNi00YmFmLTlkMmUt
MTE4YWZlZDdhNWFlLzEvTlA1cm5RekI1X2JoYXlwR3RDeWw0Qnh3QTBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC82MmRmMzYtZmQzNi00YmFmLTlkMmUtMTE4YWZlZDdhNWFl
LzEvTlA1cm5RekI1X2JoYXlwR3RDeWw0Qnh3QTBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQqxXuej
BvLoBdXs8j5rx0XiE/8kzMi8uD5wrk0w3ifB83IcHDeo3PKhDqr6Qx5UmlesK4Ed
9PgTvRhkMLQtELroIHIUO+Ws1Ul4tZRL7z2ITzE+1xP2E5TgilgXfksnkGoYsMNQ
5adXlah1gP6lEobEeAYarDcXDqlv1v/IU58gyHRx5P9/0JLbqEJALdRBiIL3B7hD
1OcZaenuJ/hDa6hRsj3Tl5pdqak/0fXQwZ6ThWo3cr0q26lzumHRibJ/DKbu58YC
c5/ppwphNPoCZ3ZofyaXr3SQee4f5yNdasWBK/SvAEObsjAtqM23sAEWAxt5he8Q
pYIi3OTElGfJNg==
-----END CERTIFICATE-----
Generated at Sun Jun 1 17:44:02 2025 by rpki-client