Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
File: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft (raw, json)
Hash identifier: LMDeFnJLDS66ieC7gToQx7hCJQPu/bqSUxzrO9AcBe4=
Subject key identifier: FE:18:AC:FE:3D:55:AA:BE:3B:1C:9C:60:68:B6:A4:90:7C:1A:4D:23
Authority key identifier: 9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
Certificate issuer: /CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Certificate serial: 01976026E0170979CC73B828076EB3950CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
Manifest number: 158B
Signing time: Wed 11 Jun 2025 18:00:49 +0000
Manifest this update: Wed 11 Jun 2025 18:00:49 +0000
Manifest next update: Thu 12 Jun 2025 18:00:49 +0000
Files and hashes: 1: 9v5VLNQmHUC6c_AtiguXiv9VBlw.roa (hash: iNy4HwSBG8Jz28fsrZBO8bxra5HKthytWN8pQ51S61o=)
2: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl (hash: B1MIR7nRzgp3NKcEFHicw3ijNuUQvG5UmlZDhn3Ishs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:26:e0:17:09:79:cc:73:b8:28:07:6e:b3:95:0c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Validity
Not Before: Jun 11 18:00:49 2025 GMT
Not After : Jun 12 18:00:49 2025 GMT
Subject: CN=fe18acfe3d55aabe3b1c9c6068b6a4907c1a4d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:53:eb:bb:e1:c1:50:8c:27:4b:ae:a0:dd:
8e:f1:de:74:83:54:bc:3e:3c:c2:cf:0d:12:7e:18:
7b:26:31:ef:df:57:3f:0f:30:03:63:0c:b4:d2:ec:
e9:99:e5:3d:28:49:3e:ea:2e:65:3e:9a:b5:9b:13:
c7:77:1f:17:d2:bc:37:a7:b1:c0:47:de:df:1f:92:
cb:9c:8f:e6:65:36:20:ac:aa:00:c7:04:82:e4:b3:
3e:ae:89:51:61:0f:14:e9:41:31:9b:54:d1:34:16:
a3:c5:d4:5c:ff:c5:50:38:1b:88:71:2a:da:a9:bb:
c7:6b:2b:5c:72:89:96:18:5b:74:8d:20:1f:41:ef:
1e:87:35:23:b5:94:34:7c:71:8e:30:b7:5b:17:90:
11:57:b6:58:0f:73:a0:19:ff:52:89:49:96:61:38:
a6:b1:94:34:bb:be:2f:8e:0e:97:c5:b6:6a:8e:6f:
d8:4f:90:0c:f2:49:e3:dc:84:4a:a2:c8:da:70:e0:
49:f1:ae:65:b4:e8:d3:6f:f1:62:4e:5a:0a:50:13:
29:19:40:c5:da:63:39:72:14:5b:67:e1:f9:89:95:
b9:77:6a:ae:4d:ea:05:86:49:29:0b:ee:59:6d:cc:
0a:3d:73:2e:a5:85:81:08:79:39:d6:fd:00:0d:93:
f8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:18:AC:FE:3D:55:AA:BE:3B:1C:9C:60:68:B6:A4:90:7C:1A:4D:23
X509v3 Authority Key Identifier:
keyid:9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:15:f2:e4:bb:57:1b:87:d7:20:1d:c3:bf:66:15:52:da:81:
52:b9:56:13:db:57:3d:53:70:6e:31:c9:ab:ba:3c:8e:25:c7:
d5:75:00:87:d2:4b:e3:8b:40:c1:0b:45:4f:be:83:d4:1d:70:
93:9d:7c:40:b2:6f:93:ab:0c:6d:6c:a5:9a:fc:50:04:c5:b6:
62:30:ed:64:f4:2b:cc:d1:dd:7b:86:1e:59:9e:7f:cf:23:5c:
c7:28:57:52:b8:9f:1b:62:44:da:64:1b:d0:77:f3:04:d9:47:
a6:7e:1f:dd:9e:bf:41:9f:91:06:f0:03:c7:62:23:d0:ee:1d:
74:37:31:0f:46:fe:0f:cc:cf:9a:0f:df:f9:e3:1a:20:37:9b:
44:44:c9:11:65:2a:a6:c7:bb:bb:c1:50:1c:4c:2d:62:bf:81:
d4:03:9e:4e:aa:91:fb:ca:79:8a:89:41:83:dc:ce:3d:8d:e7:
9f:49:c9:be:1e:8b:6f:e1:30:70:e3:a2:fa:a0:03:26:5a:5b:
af:fa:f4:f3:e0:e5:31:df:10:00:10:12:7e:48:dc:c7:ba:87:
1a:90:f1:b8:e3:02:96:84:30:7f:f8:68:de:1f:3b:1f:ff:ce:
4b:13:99:01:06:73:12:1d:59:86:7c:ce:b3:7e:c4:9f:b3:f2:
d6:f6:d3:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdgJuAXCXnMc7goB26zlQy0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNTA1ZjJlNjdhMWU2MDRiM2Y5NjNjZTRjMzY3ZDE5NThi
ZDRiNzgwHhcNMjUwNjExMTgwMDQ5WhcNMjUwNjEyMTgwMDQ5WjAzMTEwLwYDVQQD
EyhmZTE4YWNmZTNkNTVhYWJlM2IxYzljNjA2OGI2YTQ5MDdjMWE0ZDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi9T67vhwVCMJ0uuoN2O8d50g1S8
PjzCzw0Sfhh7JjHv31c/DzADYwy00uzpmeU9KEk+6i5lPpq1mxPHdx8X0rw3p7HA
R97fH5LLnI/mZTYgrKoAxwSC5LM+rolRYQ8U6UExm1TRNBajxdRc/8VQOBuIcSra
qbvHaytccomWGFt0jSAfQe8ehzUjtZQ0fHGOMLdbF5ARV7ZYD3OgGf9SiUmWYTim
sZQ0u74vjg6XxbZqjm/YT5AM8knj3IRKosjacOBJ8a5ltOjTb/FiTloKUBMpGUDF
2mM5chRbZ+H5iZW5d2quTeoFhkkpC+5ZbcwKPXMupYWBCHk51v0ADZP4ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4YrP49Vaq+OxycYGi2pJB8Gk0jMB8GA1UdIwQY
MBaAFJ5QXy5noeYEs/ljzkw2fRlYvUt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmxCZkxtZWg1Z1N6LVdQT1REWjlHVmk5UzNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mYjc4NjQtNTc5NS00MjA4LWFiZTAt
MDg1NDI0NTRkMTZiLzEvbmxCZkxtZWg1Z1N6LVdQT1REWjlHVmk5UzNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9mYjc4NjQtNTc5NS00MjA4LWFiZTAtMDg1NDI0NTRkMTZi
LzEvbmxCZkxtZWg1Z1N6LVdQT1REWjlHVmk5UzNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxXy5LtX
G4fXIB3Dv2YVUtqBUrlWE9tXPVNwbjHJq7o8jiXH1XUAh9JL44tAwQtFT76D1B1w
k518QLJvk6sMbWylmvxQBMW2YjDtZPQrzNHde4YeWZ5/zyNcxyhXUrifG2JE2mQb
0HfzBNlHpn4f3Z6/QZ+RBvADx2Ij0O4ddDcxD0b+D8zPmg/f+eMaIDebRETJEWUq
pse7u8FQHEwtYr+B1AOeTqqR+8p5iolBg9zOPY3nn0nJvh6Lb+EwcOOi+qADJlpb
r/r08+DlMd8QABASfkjcx7qHGpDxuOMCloQwf/ho3h87H//OSxOZAQZzEh1ZhnzO
s37En7Py1vbTcA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 20:35:21 2025 by rpki-client