Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
File: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft (raw, json)
Hash identifier: CTUauGHP09ucTC0SmnxZpD7TJz8nifKoPRh66NVsQv0=
Subject key identifier: 12:A8:83:0E:B2:5F:FB:A6:4C:F6:CD:8A:BB:13:0F:D7:13:C5:96:BD
Authority key identifier: 9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
Certificate issuer: /CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Certificate serial: 01975490C2E403208ACCC9B7A5D0652E22AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
Manifest number: 1585
Signing time: Mon 09 Jun 2025 12:01:02 +0000
Manifest this update: Mon 09 Jun 2025 12:01:02 +0000
Manifest next update: Tue 10 Jun 2025 12:01:02 +0000
Files and hashes: 1: 9v5VLNQmHUC6c_AtiguXiv9VBlw.roa (hash: iNy4HwSBG8Jz28fsrZBO8bxra5HKthytWN8pQ51S61o=)
2: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl (hash: 9k+NWcuz9I0TuFCcAJjptTr7rz901MeAJ6XkkbKAVIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:90:c2:e4:03:20:8a:cc:c9:b7:a5:d0:65:2e:22:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Validity
Not Before: Jun 9 12:01:02 2025 GMT
Not After : Jun 10 12:01:02 2025 GMT
Subject: CN=12a8830eb25ffba64cf6cd8abb130fd713c596bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:85:49:2d:4c:8c:43:52:2f:bd:53:e1:78:3d:
e1:a1:66:72:f5:b2:f5:24:7c:9e:a3:a2:6c:9d:28:
dc:a6:96:03:4d:fa:3e:75:44:af:78:00:c7:75:b3:
67:eb:94:75:e8:e8:db:28:b6:76:1a:db:f7:2c:f8:
d9:0a:25:a5:d7:b7:67:fe:e5:e5:5a:39:6a:c1:2d:
4f:3c:13:ea:10:00:66:87:2d:32:be:b3:94:f5:74:
0a:e5:e2:47:6e:4c:e9:35:40:c5:79:0f:8a:01:e8:
23:98:c6:83:87:9c:5f:0e:a2:89:b7:0f:8d:c9:86:
4c:47:12:9f:ce:46:ee:3b:94:5f:31:95:17:7f:a7:
5d:0f:b4:c6:9f:14:0a:a9:b6:59:37:67:d7:bf:a2:
61:e3:05:90:95:31:d9:be:5a:7d:e6:7b:ca:02:89:
3e:1e:df:a6:3c:81:26:8e:a7:f0:b5:5b:82:e0:bf:
1b:92:7c:23:2f:84:89:25:c5:68:55:ab:5d:19:b6:
ff:eb:26:cc:1d:01:fa:ef:57:00:b4:2c:de:16:70:
3b:e1:30:12:52:b8:ae:5e:c7:7d:af:cd:2a:55:38:
af:ad:db:30:ac:35:50:bd:ed:15:9b:50:7c:36:48:
11:62:d1:c7:fd:dc:d6:85:5b:50:37:85:07:e5:ce:
b3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A8:83:0E:B2:5F:FB:A6:4C:F6:CD:8A:BB:13:0F:D7:13:C5:96:BD
X509v3 Authority Key Identifier:
keyid:9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:53:25:a9:68:37:38:25:e0:72:0a:78:e4:e0:6c:6d:e2:20:
18:29:18:1d:8e:20:d4:be:d7:c0:a1:e8:88:fc:8d:46:8f:97:
5d:a4:ff:08:0c:fd:30:1a:48:56:77:01:28:e8:22:2e:04:05:
09:86:52:8f:00:d7:26:87:bb:b0:36:07:c5:8e:82:ca:5b:b2:
25:d8:98:b3:11:65:50:0a:cb:09:95:b7:0e:5e:1a:6a:5b:bd:
bf:6b:d0:05:41:b4:bb:f2:d9:31:c9:e6:b8:78:5f:03:52:e5:
1d:e7:8f:55:e6:ef:82:f8:f3:d8:2e:01:c3:bf:50:b0:b4:b8:
8b:a3:b6:9d:db:ac:73:e1:55:ba:f5:42:0a:76:df:2b:2e:f1:
c0:a6:3c:50:d6:e2:dd:00:30:9d:76:64:c7:c8:2c:3e:c6:48:
36:01:8a:c5:38:69:f8:81:04:ba:96:26:82:d6:99:54:7f:69:
2d:df:e3:37:67:5b:8c:17:f3:34:a7:78:87:6f:08:e3:84:1d:
04:66:f0:4e:6c:1e:7c:3f:18:65:e8:51:6f:2b:24:a5:c6:ec:
54:79:80:87:4d:23:42:b6:8f:28:cb:1d:16:29:f2:74:fc:12:
f3:87:d9:06:dd:f3:d4:5b:a8:29:9c:37:a4:87:45:5e:61:a0:
07:88:a6:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUkMLkAyCKzMm3pdBlLiKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNTA1ZjJlNjdhMWU2MDRiM2Y5NjNjZTRjMzY3ZDE5NThi
ZDRiNzgwHhcNMjUwNjA5MTIwMTAyWhcNMjUwNjEwMTIwMTAyWjAzMTEwLwYDVQQD
EygxMmE4ODMwZWIyNWZmYmE2NGNmNmNkOGFiYjEzMGZkNzEzYzU5NmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4VJLUyMQ1IvvVPheD3hoWZy9bL1
JHyeo6JsnSjcppYDTfo+dUSveADHdbNn65R16OjbKLZ2Gtv3LPjZCiWl17dn/uXl
WjlqwS1PPBPqEABmhy0yvrOU9XQK5eJHbkzpNUDFeQ+KAegjmMaDh5xfDqKJtw+N
yYZMRxKfzkbuO5RfMZUXf6ddD7TGnxQKqbZZN2fXv6Jh4wWQlTHZvlp95nvKAok+
Ht+mPIEmjqfwtVuC4L8bknwjL4SJJcVoVatdGbb/6ybMHQH671cAtCzeFnA74TAS
UriuXsd9r80qVTivrdswrDVQve0Vm1B8NkgRYtHH/dzWhVtQN4UH5c6zpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKogw6yX/umTPbNirsTD9cTxZa9MB8GA1UdIwQY
MBaAFJ5QXy5noeYEs/ljzkw2fRlYvUt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmxCZkxtZWg1Z1N6LVdQT1REWjlHVmk5UzNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mYjc4NjQtNTc5NS00MjA4LWFiZTAt
MDg1NDI0NTRkMTZiLzEvbmxCZkxtZWg1Z1N6LVdQT1REWjlHVmk5UzNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9mYjc4NjQtNTc5NS00MjA4LWFiZTAtMDg1NDI0NTRkMTZi
LzEvbmxCZkxtZWg1Z1N6LVdQT1REWjlHVmk5UzNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVMlqWg3
OCXgcgp45OBsbeIgGCkYHY4g1L7XwKHoiPyNRo+XXaT/CAz9MBpIVncBKOgiLgQF
CYZSjwDXJoe7sDYHxY6CyluyJdiYsxFlUArLCZW3Dl4aalu9v2vQBUG0u/LZMcnm
uHhfA1LlHeePVebvgvjz2C4Bw79QsLS4i6O2ndusc+FVuvVCCnbfKy7xwKY8UNbi
3QAwnXZkx8gsPsZINgGKxThp+IEEupYmgtaZVH9pLd/jN2dbjBfzNKd4h28I44Qd
BGbwTmwefD8YZehRbyskpcbsVHmAh00jQraPKMsdFinydPwS84fZBt3z1FuoKZw3
pIdFXmGgB4imvg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 18:34:10 2025 by rpki-client