Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
File: NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json)
Hash identifier: iuGbBfDQHAmFZjX5hatDcU45/l9YuLZJt5FAQtiQAZE=
Subject key identifier: FE:12:92:50:A7:82:63:04:80:AD:F7:68:3E:5E:1F:88:96:0E:57:79
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Certificate issuer: /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial: 0199221EC718A259652CDF66B9D874A03A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
Manifest number: 039C
Signing time: Sun 07 Sep 2025 03:01:06 +0000
Manifest this update: Sun 07 Sep 2025 03:01:06 +0000
Manifest next update: Mon 08 Sep 2025 03:01:06 +0000
Files and hashes: 1: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: h7JboP4lsAZDxe9n9NnagwdvfiuYf6rlZCKfzyNnx+M=)
2: cEQi14kKuKL4ZWozyPewcuSD5kQ.roa (hash: AQa4zimuZDO+7ACyM4KJjx7KQcRwuoNCJUovJ5T5Vck=)
3: xGHkCj7QXTK91-IzTTuEVkNvzos.roa (hash: jRuba4ysEPA//Moy/YkHQHxGDPSKQ/jX38S+l3o0ZrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:c7:18:a2:59:65:2c:df:66:b9:d8:74:a0:3a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Validity
Not Before: Sep 7 03:01:06 2025 GMT
Not After : Sep 8 03:01:06 2025 GMT
Subject: CN=fe129250a782630480adf7683e5e1f88960e5779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d1:28:a6:c7:cb:66:8c:6b:4e:04:1d:66:a3:
9c:11:23:9b:ae:a1:8c:11:19:da:9c:b9:d2:b6:f9:
ff:38:66:e0:f5:c4:19:d2:02:7e:35:7a:68:b3:f5:
20:65:61:49:1f:f3:97:05:d5:28:8e:74:29:b2:d0:
cd:5a:69:dc:ec:5e:da:f0:22:cc:b9:4e:72:f9:30:
38:5f:16:3a:a3:3e:9e:4c:e9:68:67:8c:cd:cd:71:
b5:70:e7:ed:19:3a:bf:43:0a:30:21:9c:eb:3d:ae:
ee:09:eb:49:c4:c0:b7:eb:08:10:10:74:c7:4c:d2:
da:43:d4:77:d9:9f:d6:3e:85:d2:a7:ff:fb:8f:de:
db:3a:eb:e5:fe:fd:da:2d:4a:2c:ff:1c:da:1f:c0:
70:92:50:45:ff:85:8a:37:c1:d5:14:47:65:18:fd:
ce:2c:63:1e:25:d3:bc:59:3a:97:7f:91:03:15:9b:
74:12:9e:4f:04:19:b7:20:94:d0:9e:31:2b:2c:26:
05:00:ca:08:80:cc:ec:1e:31:11:96:00:e2:8f:66:
e6:54:10:4e:6f:de:27:66:13:25:f2:58:ce:92:26:
95:84:5e:a2:4c:d5:f1:7b:c2:ee:a9:79:4f:3f:63:
4c:85:d8:ad:0f:23:0e:c1:d8:d2:c0:22:c9:2b:a9:
a1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:12:92:50:A7:82:63:04:80:AD:F7:68:3E:5E:1F:88:96:0E:57:79
X509v3 Authority Key Identifier:
keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2c:f1:4d:a9:d0:19:95:26:8c:58:ce:6a:bd:94:3d:3d:12:
09:e9:4f:0d:cc:3b:54:6a:23:70:09:2d:5f:a7:f4:83:76:26:
73:ba:27:1b:30:4b:ce:85:6d:dd:85:39:95:f8:dc:06:a9:49:
6f:30:91:77:d4:2a:96:65:8e:4e:c0:bb:d5:bc:63:ef:42:21:
24:25:a2:f9:5d:2d:97:31:05:70:3d:33:66:93:09:46:f1:01:
f6:c9:00:91:98:d8:ca:be:5e:ea:20:3e:0b:4f:ed:67:f2:6b:
39:49:bb:63:ab:77:23:fc:21:9e:16:f2:bc:20:c4:7e:3a:e2:
ce:8b:d4:7d:24:9d:4c:62:49:e9:1b:41:58:dd:d2:7d:de:82:
48:af:d1:9a:0f:4b:15:75:d1:a0:8b:bd:4a:f7:d0:bc:e1:cd:
db:eb:03:0e:b2:df:20:24:38:0a:da:59:23:d3:12:7f:7c:be:
3a:13:2a:49:e5:1f:07:b5:b2:3b:b9:e6:29:cc:a0:b8:d6:7e:
ee:b8:be:b5:a8:39:2a:d9:34:c3:93:9e:5e:e1:b9:58:eb:08:
bf:3c:f3:e2:59:70:bd:69:f8:7f:e2:f2:04:0d:f1:b9:4f:c5:
91:33:28:e1:34:84:dd:35:68:ae:bc:fb:10:73:60:46:ab:44:
57:0b:d0:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHscYolllLN9mudh0oDoMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NjE0YmFlOTZjMTMzN2Q3OTdiZDk2NmU3ZDZhODJhODhk
ZjlkMjkwHhcNMjUwOTA3MDMwMTA2WhcNMjUwOTA4MDMwMTA2WjAzMTEwLwYDVQQD
EyhmZTEyOTI1MGE3ODI2MzA0ODBhZGY3NjgzZTVlMWY4ODk2MGU1Nzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9EopsfLZoxrTgQdZqOcESObrqGM
ERnanLnStvn/OGbg9cQZ0gJ+NXpos/UgZWFJH/OXBdUojnQpstDNWmnc7F7a8CLM
uU5y+TA4XxY6oz6eTOloZ4zNzXG1cOftGTq/QwowIZzrPa7uCetJxMC36wgQEHTH
TNLaQ9R32Z/WPoXSp//7j97bOuvl/v3aLUos/xzaH8BwklBF/4WKN8HVFEdlGP3O
LGMeJdO8WTqXf5EDFZt0Ep5PBBm3IJTQnjErLCYFAMoIgMzsHjERlgDij2bmVBBO
b94nZhMl8ljOkiaVhF6iTNXxe8LuqXlPP2NMhditDyMOwdjSwCLJK6mhSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4SklCngmMEgK33aD5eH4iWDld5MB8GA1UdIwQY
MBaAFDZhS66WwTN9eXvZZufWqCqI350pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9jZjJjYWItZTE4Mi00ZTliLWE2ZWUt
YWYwMTRmYWJmNGJlLzEvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9jZjJjYWItZTE4Mi00ZTliLWE2ZWUtYWYwMTRmYWJmNGJl
LzEvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCzxTanQ
GZUmjFjOar2UPT0SCelPDcw7VGojcAktX6f0g3Ymc7onGzBLzoVt3YU5lfjcBqlJ
bzCRd9QqlmWOTsC71bxj70IhJCWi+V0tlzEFcD0zZpMJRvEB9skAkZjYyr5e6iA+
C0/tZ/JrOUm7Y6t3I/whnhbyvCDEfjrizovUfSSdTGJJ6RtBWN3Sfd6CSK/Rmg9L
FXXRoIu9SvfQvOHN2+sDDrLfICQ4CtpZI9MSf3y+OhMqSeUfB7WyO7nmKcyguNZ+
7ri+tag5Ktk0w5OeXuG5WOsIvzzz4llwvWn4f+LyBA3xuU/FkTMo4TSE3TVorrz7
EHNgRqtEVwvQSw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:23 2025 by rpki-client