Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
File: nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft (raw, json)
Hash identifier: KFghphyDTo3WXHP6xv/CPhOKKov20mHg0xe2vjPINKQ=
Subject key identifier: C2:2E:38:D2:D6:B5:FE:51:52:FB:8E:59:3B:A7:3E:EE:7D:8D:FF:C0
Authority key identifier: 9C:C3:27:11:ED:68:FB:A0:58:49:92:94:3F:9A:DD:1B:1E:0E:87:3A
Certificate issuer: /CN=9cc32711ed68fba0584992943f9add1b1e0e873a
Certificate serial: 01974DB2A2D800248E08F44C39E3F850DE45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
Manifest number: 157A
Signing time: Sun 08 Jun 2025 04:00:41 +0000
Manifest this update: Sun 08 Jun 2025 04:00:41 +0000
Manifest next update: Mon 09 Jun 2025 04:00:41 +0000
Files and hashes: 1: nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl (hash: JptvtCB6sZhYJ6U5DAB1xdc4EAj85O9ZoJiiVV24MOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:a2:d8:00:24:8e:08:f4:4c:39:e3:f8:50:de:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc32711ed68fba0584992943f9add1b1e0e873a
Validity
Not Before: Jun 8 04:00:41 2025 GMT
Not After : Jun 9 04:00:41 2025 GMT
Subject: CN=c22e38d2d6b5fe5152fb8e593ba73eee7d8dffc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:b9:46:93:23:b2:bf:93:5e:a0:49:2a:fa:
be:16:96:c2:7b:78:72:6e:48:85:d9:70:84:f8:2b:
74:1c:a0:83:e7:2c:d0:d3:61:4a:05:ad:d2:c2:49:
13:55:e3:03:63:3c:d0:13:ee:28:07:ce:c3:a3:18:
9c:de:c6:59:ae:55:06:35:92:7c:f8:0c:70:82:e0:
22:2d:3c:7c:6e:65:60:57:e1:3b:00:35:53:1f:22:
e0:ae:42:0f:d0:e5:81:a9:99:b5:44:68:49:ff:3a:
7b:02:5a:2a:82:03:e1:c5:2a:77:ac:c7:4e:db:49:
89:b7:2e:3a:28:70:a0:66:86:fa:44:52:df:95:32:
ee:e4:86:58:0c:2b:32:8a:23:81:0b:e0:7e:8c:f8:
1c:c0:10:86:86:f3:2d:9c:16:b0:6f:90:4f:f1:d1:
3d:2b:5d:0b:69:22:4e:c5:b3:0b:6b:92:4b:27:4b:
06:4d:eb:86:07:c6:25:45:ee:e9:79:d1:35:10:ca:
61:8d:d5:d7:a5:38:a2:a5:44:b9:9d:83:32:49:c3:
7b:fb:3f:79:3d:78:40:6f:56:01:e1:8f:4d:6b:28:
f6:af:f1:f5:4c:3b:ec:31:b0:c2:76:17:e5:7d:4d:
48:44:43:8f:87:04:ce:e0:c5:7d:22:b6:5d:e7:1f:
84:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2E:38:D2:D6:B5:FE:51:52:FB:8E:59:3B:A7:3E:EE:7D:8D:FF:C0
X509v3 Authority Key Identifier:
keyid:9C:C3:27:11:ED:68:FB:A0:58:49:92:94:3F:9A:DD:1B:1E:0E:87:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c9:05:ae:3b:1a:f4:b8:85:8f:a6:d9:21:88:d1:cb:5d:e8:
eb:a4:38:b3:c3:a2:43:40:1e:ac:2b:5b:ef:ee:38:d9:8a:37:
60:4a:34:c4:bc:06:60:db:c2:55:78:d2:55:d9:01:99:61:83:
75:9e:8c:d3:27:f1:a2:ec:50:39:51:4a:f3:37:9c:4d:2e:6c:
30:1c:5b:78:9e:6d:7a:7d:36:ab:d1:77:8a:82:8e:27:8f:64:
f9:22:4b:ad:d4:66:17:5e:09:ae:b8:dd:73:c7:eb:39:c4:7b:
25:a0:e3:4a:49:3b:f5:41:53:a9:4f:eb:e3:9b:e4:05:91:8a:
56:d0:9d:61:21:b2:81:9a:10:d5:fb:b5:82:66:a6:7e:0e:cd:
88:4d:09:b8:3b:6c:54:3e:38:07:72:e2:c7:4f:4a:90:f2:c5:
90:04:2b:97:f6:1b:74:f0:d2:e0:a0:15:18:95:8c:21:65:5b:
77:3c:1a:a7:dc:03:96:63:aa:b5:04:5b:a3:8f:d5:45:e7:e7:
90:cc:0b:ba:86:3c:5e:a7:ae:e5:7f:67:7c:75:06:00:4b:8f:
42:32:01:20:e3:dc:c7:9b:79:b5:0d:2b:4a:4e:f1:f1:03:3a:
51:98:08:81:1f:81:4e:d1:e6:1d:a8:24:67:d6:bf:79:84:44:
86:a6:7d:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNsqLYACSOCPRMOeP4UN5FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYzMyNzExZWQ2OGZiYTA1ODQ5OTI5NDNmOWFkZDFiMWUw
ZTg3M2EwHhcNMjUwNjA4MDQwMDQxWhcNMjUwNjA5MDQwMDQxWjAzMTEwLwYDVQQD
EyhjMjJlMzhkMmQ2YjVmZTUxNTJmYjhlNTkzYmE3M2VlZTdkOGRmZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoES5RpMjsr+TXqBJKvq+FpbCe3hy
bkiF2XCE+Ct0HKCD5yzQ02FKBa3SwkkTVeMDYzzQE+4oB87Doxic3sZZrlUGNZJ8
+AxwguAiLTx8bmVgV+E7ADVTHyLgrkIP0OWBqZm1RGhJ/zp7AloqggPhxSp3rMdO
20mJty46KHCgZob6RFLflTLu5IZYDCsyiiOBC+B+jPgcwBCGhvMtnBawb5BP8dE9
K10LaSJOxbMLa5JLJ0sGTeuGB8YlRe7pedE1EMphjdXXpTiipUS5nYMyScN7+z95
PXhAb1YB4Y9Nayj2r/H1TDvsMbDCdhflfU1IREOPhwTO4MV9IrZd5x+EMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIuONLWtf5RUvuOWTunPu59jf/AMB8GA1UdIwQY
MBaAFJzDJxHtaPugWEmSlD+a3RseDoc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk1NbkVlMW8tNkJZU1pLVVA1cmRHeDRPaHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9hZWZhODItNmVjNC00NzBiLWI5Y2It
ZGUyMjVmNGIwYTA0LzEvbk1NbkVlMW8tNkJZU1pLVVA1cmRHeDRPaHpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9hZWZhODItNmVjNC00NzBiLWI5Y2ItZGUyMjVmNGIwYTA0
LzEvbk1NbkVlMW8tNkJZU1pLVVA1cmRHeDRPaHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8kFrjsa
9LiFj6bZIYjRy13o66Q4s8OiQ0AerCtb7+442Yo3YEo0xLwGYNvCVXjSVdkBmWGD
dZ6M0yfxouxQOVFK8zecTS5sMBxbeJ5ten02q9F3ioKOJ49k+SJLrdRmF14Jrrjd
c8frOcR7JaDjSkk79UFTqU/r45vkBZGKVtCdYSGygZoQ1fu1gmamfg7NiE0JuDts
VD44B3Lix09KkPLFkAQrl/YbdPDS4KAVGJWMIWVbdzwap9wDlmOqtQRbo4/VRefn
kMwLuoY8Xqeu5X9nfHUGAEuPQjIBIOPcx5t5tQ0rSk7x8QM6UZgIgR+BTtHmHagk
Z9a/eYREhqZ9mQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:21:58 2025 by rpki-client