Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
File: NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json)
Hash identifier: u2AW3Fj3HczhcHYk6lYT9gSw/lYfoF59lP3I1h4fkD8=
Subject key identifier: 76:84:7C:FD:9C:00:73:57:EC:75:4E:FF:90:38:22:3B:00:EE:D7:E8
Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Certificate issuer: /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Certificate serial: 0197684DE6A3DE36D06F23FCDCA5656F8E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
Manifest number: E7
Signing time: Fri 13 Jun 2025 08:00:25 +0000
Manifest this update: Fri 13 Jun 2025 08:00:25 +0000
Manifest next update: Sat 14 Jun 2025 08:00:25 +0000
Files and hashes: 1: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: UivZhUgRpSgTaRKq0tao5Be0iOTFNQobduqbfQxioP4=)
2: zIR-Nz3H2D4s_KM8Bm98PoR8Mws.roa (hash: vxeo0iUuDX5Ze9Stf4uTh6KeWV+Vu5qvbWwTZuqVEFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:e6:a3:de:36:d0:6f:23:fc:dc:a5:65:6f:8e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Validity
Not Before: Jun 13 08:00:25 2025 GMT
Not After : Jun 14 08:00:25 2025 GMT
Subject: CN=76847cfd9c007357ec754eff9038223b00eed7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:eb:3e:00:86:45:48:b1:79:19:1a:92:1a:3a:
af:bf:e0:e4:a3:1d:4a:06:e3:9e:44:83:c4:9f:59:
19:59:fb:26:50:18:11:fe:43:b7:32:53:1c:b2:41:
d8:32:03:bb:ca:19:ed:25:f5:26:b6:b3:63:bb:48:
5f:89:fb:9d:7d:00:d0:c1:7a:04:b2:cd:c3:1d:f8:
cf:58:80:94:0e:ca:70:b5:73:77:c3:c7:2f:8a:9f:
28:64:04:ac:b2:96:fa:05:a6:87:37:16:09:1d:e5:
7e:db:e6:74:bf:0c:4b:b4:73:77:a8:02:52:81:40:
5e:35:bd:95:9e:09:a4:c4:30:df:41:90:29:40:e9:
b4:62:72:94:33:a3:63:c1:fa:d8:09:2d:f5:0a:90:
28:29:0d:00:60:d0:73:ed:3a:10:ca:bb:ea:b5:9b:
80:c7:c8:a9:e6:79:43:bd:76:08:b1:20:df:45:34:
58:e1:00:49:4d:63:a6:b2:29:6d:6b:4f:3a:ea:aa:
df:77:47:4c:c6:ad:fc:98:3f:22:0d:d6:91:dc:6c:
db:24:c4:24:0a:54:10:40:f1:4d:fa:c4:71:1d:eb:
00:0f:68:63:3d:20:b0:e0:90:b0:72:53:43:66:10:
71:c1:d0:83:26:91:1f:50:54:e0:2e:16:3e:b4:1e:
62:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:84:7C:FD:9C:00:73:57:EC:75:4E:FF:90:38:22:3B:00:EE:D7:E8
X509v3 Authority Key Identifier:
keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5f:34:d0:60:64:87:93:ae:42:ee:d9:1d:d1:34:db:a6:50:
81:e1:38:8d:96:4b:fc:cf:06:90:60:94:c5:23:6f:b3:03:23:
ad:ff:71:81:52:af:4e:1b:64:d9:e1:91:f2:1a:df:7e:81:60:
c0:86:92:24:74:02:48:3a:7a:39:29:fc:49:4e:fe:ca:e3:94:
f6:30:ab:b6:0b:58:93:39:5b:be:14:c1:9a:a0:14:05:45:f0:
5f:41:f4:5c:07:7a:af:cc:8e:2a:91:36:01:41:b4:a1:f8:05:
56:09:3b:ae:24:81:30:8b:b1:45:59:25:ce:b8:46:e8:a1:f8:
fe:0f:29:c8:56:a5:4d:47:d4:f6:23:48:43:c2:74:c9:24:ea:
a4:17:d0:b2:c8:99:4c:f5:da:ca:01:7b:b9:47:48:f6:ea:b1:
ba:5f:6e:3c:44:b9:39:b8:e2:e6:3d:73:3a:81:0e:88:6f:3b:
71:61:53:7e:67:e0:ec:67:59:db:ca:e9:b7:c8:14:9d:ff:aa:
ab:60:ed:85:ac:db:fa:93:2a:79:c4:57:66:ea:0f:56:61:3a:
5c:59:72:ae:30:4b:03:75:84:7c:7f:e4:52:3f:c5:43:ab:5b:
47:58:3d:c6:b9:62:78:9f:e2:93:3f:58:d6:02:9e:a5:3e:67:
76:e8:1b:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoTeaj3jbQbyP83KVlb459MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjQyMTQ4ZTNlNjM2YTkwMzQzZjNlOTUwNDRiOGRmZGI5
ZDFjZDkwHhcNMjUwNjEzMDgwMDI1WhcNMjUwNjE0MDgwMDI1WjAzMTEwLwYDVQQD
Eyg3Njg0N2NmZDljMDA3MzU3ZWM3NTRlZmY5MDM4MjIzYjAwZWVkN2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+s+AIZFSLF5GRqSGjqvv+Dkox1K
BuOeRIPEn1kZWfsmUBgR/kO3MlMcskHYMgO7yhntJfUmtrNju0hfifudfQDQwXoE
ss3DHfjPWICUDspwtXN3w8cvip8oZASsspb6BaaHNxYJHeV+2+Z0vwxLtHN3qAJS
gUBeNb2VngmkxDDfQZApQOm0YnKUM6NjwfrYCS31CpAoKQ0AYNBz7ToQyrvqtZuA
x8ip5nlDvXYIsSDfRTRY4QBJTWOmsilta0866qrfd0dMxq38mD8iDdaR3GzbJMQk
ClQQQPFN+sRxHesAD2hjPSCw4JCwclNDZhBxwdCDJpEfUFTgLhY+tB5iHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaEfP2cAHNX7HVO/5A4IjsA7tfoMB8GA1UdIwQY
MBaAFDYkIUjj5japA0Pz6VBEuN/bnRzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zYzNkYTAtZDNmOC00YWEyLTgzMzQt
MjZkNzU5MzY1NDAyLzEvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zYzNkYTAtZDNmOC00YWEyLTgzMzQtMjZkNzU5MzY1NDAy
LzEvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAF800GBk
h5OuQu7ZHdE026ZQgeE4jZZL/M8GkGCUxSNvswMjrf9xgVKvThtk2eGR8hrffoFg
wIaSJHQCSDp6OSn8SU7+yuOU9jCrtgtYkzlbvhTBmqAUBUXwX0H0XAd6r8yOKpE2
AUG0ofgFVgk7riSBMIuxRVklzrhG6KH4/g8pyFalTUfU9iNIQ8J0ySTqpBfQssiZ
TPXaygF7uUdI9uqxul9uPES5Obji5j1zOoEOiG87cWFTfmfg7GdZ28rpt8gUnf+q
q2Dthazb+pMqecRXZuoPVmE6XFlyrjBLA3WEfH/kUj/FQ6tbR1g9xrlieJ/ikz9Y
1gKepT5ndugbxQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 09:33:58 2025 by rpki-client