Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
File: NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json)
Hash identifier: tAAv3a5Pq9LNmKTnYsDjwAT9pKj8AJkIF+8Wh4ldwZU=
Subject key identifier: 5B:EF:3E:61:97:D0:6E:F4:78:97:3D:36:19:0E:02:44:C6:8F:4F:1D
Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Certificate issuer: /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Certificate serial: 019771F5D8FFC1355F992DF503FADD9564D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
Manifest number: EC
Signing time: Sun 15 Jun 2025 05:00:26 +0000
Manifest this update: Sun 15 Jun 2025 05:00:26 +0000
Manifest next update: Mon 16 Jun 2025 05:00:26 +0000
Files and hashes: 1: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: Ov9nFJYKBdx7r/JEUVejN1a9RTDzNamGdS20ZlWJ7xA=)
2: zIR-Nz3H2D4s_KM8Bm98PoR8Mws.roa (hash: vxeo0iUuDX5Ze9Stf4uTh6KeWV+Vu5qvbWwTZuqVEFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:d8:ff:c1:35:5f:99:2d:f5:03:fa:dd:95:64:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Validity
Not Before: Jun 15 05:00:26 2025 GMT
Not After : Jun 16 05:00:26 2025 GMT
Subject: CN=5bef3e6197d06ef478973d36190e0244c68f4f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:5a:a8:dc:60:d5:29:b8:1e:d4:15:2c:9b:
f7:cc:cb:e1:a2:0b:fe:79:56:db:31:ea:0d:ac:5c:
fc:dc:03:52:9d:8d:ae:d5:4a:b3:30:e0:e1:91:61:
2a:a4:16:3f:0d:24:f9:f5:bb:ab:30:f1:4b:02:0f:
c1:7d:83:d2:7a:c8:5a:a5:de:44:12:de:7c:72:3c:
2d:d2:a5:d0:d9:93:ae:db:14:be:23:65:33:fe:84:
c5:76:6d:ee:1e:a5:68:8d:b7:2c:72:de:b1:fe:d0:
a6:3c:14:ba:19:d4:d5:6d:37:6e:a2:02:75:c2:ee:
5d:02:42:b9:20:8d:b0:cf:90:57:97:b1:a5:9a:1d:
87:79:95:1e:b7:bc:3a:72:a1:ce:3e:12:18:67:74:
8c:85:07:4e:ea:5d:e6:0f:59:0b:3d:5b:c6:08:90:
2f:c5:32:8e:dc:c2:b6:2b:b9:95:10:c2:a0:67:4b:
64:20:00:76:31:70:c8:92:93:4d:4d:62:4b:f5:7c:
31:8f:ce:b5:13:6d:6c:d2:00:54:19:33:c3:0a:ed:
a2:ea:17:e8:e5:01:5e:0c:cf:41:07:d5:2c:0a:5e:
aa:78:23:5a:bb:d9:8f:d2:06:d4:4b:b0:28:0e:4c:
1a:6f:75:e3:d6:81:19:02:14:7d:cf:ba:bb:dc:5e:
60:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EF:3E:61:97:D0:6E:F4:78:97:3D:36:19:0E:02:44:C6:8F:4F:1D
X509v3 Authority Key Identifier:
keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:0a:34:de:42:2e:6d:44:b0:b1:08:fd:7a:14:8a:23:48:06:
2b:90:58:dd:78:92:6e:32:56:d9:1f:1e:0f:a5:16:a4:4f:8f:
bb:0f:ca:a1:5e:dd:8a:35:f9:3d:8a:c3:f0:8b:51:4b:49:62:
ba:85:04:5f:f0:b8:69:d0:f9:9d:c7:23:ae:17:64:b4:2c:a9:
40:25:30:4d:2b:d3:8c:1f:4f:ad:9e:4b:a1:dd:4e:ea:39:0b:
ca:1d:ca:04:93:8e:fe:ee:fe:56:05:42:b8:6e:f5:94:6e:06:
4e:f0:d0:bb:eb:40:14:b8:8c:9e:4f:eb:f6:80:dc:9a:17:16:
ef:45:2f:96:f4:9f:7c:3b:b4:db:d8:f0:d3:99:55:74:93:88:
13:55:3d:1a:aa:21:4f:76:a3:12:75:16:3d:72:b6:0c:cc:22:
f5:f8:3b:ac:2f:45:6c:b6:61:13:cb:8c:3e:cb:36:11:ac:40:
71:4f:12:18:22:63:13:07:8e:85:fd:d1:e5:59:08:d8:ee:48:
77:53:9f:c8:79:77:3d:cf:ee:87:94:12:11:6d:a3:db:8e:91:
f4:e4:70:52:d5:85:b4:c1:4f:36:27:44:eb:88:33:de:e5:b5:
4b:1e:73:b4:dc:58:ee:a1:5c:27:de:e1:3b:db:b5:e8:5f:56:
22:2f:98:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdx9dj/wTVfmS31A/rdlWTWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjQyMTQ4ZTNlNjM2YTkwMzQzZjNlOTUwNDRiOGRmZGI5
ZDFjZDkwHhcNMjUwNjE1MDUwMDI2WhcNMjUwNjE2MDUwMDI2WjAzMTEwLwYDVQQD
Eyg1YmVmM2U2MTk3ZDA2ZWY0Nzg5NzNkMzYxOTBlMDI0NGM2OGY0ZjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttNaqNxg1Sm4HtQVLJv3zMvhogv+
eVbbMeoNrFz83ANSnY2u1UqzMODhkWEqpBY/DST59burMPFLAg/BfYPSeshapd5E
Et58cjwt0qXQ2ZOu2xS+I2Uz/oTFdm3uHqVojbcsct6x/tCmPBS6GdTVbTduogJ1
wu5dAkK5II2wz5BXl7Glmh2HeZUet7w6cqHOPhIYZ3SMhQdO6l3mD1kLPVvGCJAv
xTKO3MK2K7mVEMKgZ0tkIAB2MXDIkpNNTWJL9Xwxj861E21s0gBUGTPDCu2i6hfo
5QFeDM9BB9UsCl6qeCNau9mP0gbUS7AoDkwab3Xj1oEZAhR9z7q73F5giwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvvPmGX0G70eJc9NhkOAkTGj08dMB8GA1UdIwQY
MBaAFDYkIUjj5japA0Pz6VBEuN/bnRzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zYzNkYTAtZDNmOC00YWEyLTgzMzQt
MjZkNzU5MzY1NDAyLzEvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zYzNkYTAtZDNmOC00YWEyLTgzMzQtMjZkNzU5MzY1NDAy
LzEvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQo03kIu
bUSwsQj9ehSKI0gGK5BY3XiSbjJW2R8eD6UWpE+Puw/KoV7dijX5PYrD8ItRS0li
uoUEX/C4adD5nccjrhdktCypQCUwTSvTjB9PrZ5Lod1O6jkLyh3KBJOO/u7+VgVC
uG71lG4GTvDQu+tAFLiMnk/r9oDcmhcW70UvlvSffDu029jw05lVdJOIE1U9Gqoh
T3ajEnUWPXK2DMwi9fg7rC9FbLZhE8uMPss2EaxAcU8SGCJjEweOhf3R5VkI2O5I
d1OfyHl3Pc/uh5QSEW2j246R9ORwUtWFtMFPNidE64gz3uW1Sx5ztNxY7qFcJ97h
O9u16F9WIi+YIQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:52:50 2025 by rpki-client