
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
File: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft (raw, json)
Hash identifier: Nn2jC8G0vPpxoyk/sUhTk1mwY66rQUp6bNVHFwdTuyI=
Subject key identifier: 7A:D7:F2:35:FE:21:20:F1:FA:28:B2:DD:0E:D4:54:F8:94:DB:A7:23
Authority key identifier: 34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB
Certificate issuer: /CN=34380cfba34b61f5db4565145928d9e4add930eb
Certificate serial: 019757C8160CBA0AF2572C1F89ADDB2D5BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
Manifest number: 39
Signing time: Tue 10 Jun 2025 03:00:20 +0000
Manifest this update: Tue 10 Jun 2025 03:00:20 +0000
Manifest next update: Wed 11 Jun 2025 03:00:20 +0000
Files and hashes: 1: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl (hash: Z7ONTM8iZq+Pv9ZC0yylc531eVMPwYqyKSun0rL+TTI=)
2: eNjKHdv8IHiSMT5DlWURZ12GtE8.roa (hash: 0PyZvOHXEJvjs+fUIrJG3NCT3v2ngertxaHruNIycnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 19:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:c8:16:0c:ba:0a:f2:57:2c:1f:89:ad:db:2d:5b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34380cfba34b61f5db4565145928d9e4add930eb
Validity
Not Before: Jun 10 03:00:20 2025 GMT
Not After : Jun 11 03:00:20 2025 GMT
Subject: CN=7ad7f235fe2120f1fa28b2dd0ed454f894dba723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:51:92:bc:46:67:ca:40:9e:cb:69:06:ff:
36:db:44:c2:ff:72:05:09:b1:c2:66:df:09:1f:cd:
29:60:9f:d3:d2:f9:b5:5f:ad:a5:8f:4b:52:35:3a:
0e:42:d4:a4:1a:6c:17:e3:27:c9:7c:9a:f7:e0:83:
ec:48:80:d7:d6:c9:a1:90:04:d2:77:e3:ee:25:5f:
49:f1:88:84:a0:25:18:3f:5e:81:7a:72:f2:90:e8:
d7:74:fc:e6:19:e4:5d:b0:b6:b7:94:15:8b:53:d7:
30:78:c9:da:3b:f4:d3:40:d9:8f:96:c9:02:ae:18:
f9:06:42:fa:83:14:54:e8:77:b6:d9:fc:de:aa:3e:
69:52:3d:e2:ee:59:61:ba:93:35:73:d6:59:91:67:
77:44:fe:eb:f3:13:df:e4:65:ea:b3:35:d9:5c:ba:
a2:11:29:32:83:a2:73:0e:56:ab:0e:36:8a:61:28:
3b:ce:42:b3:ba:ba:15:26:6d:1f:2a:ed:ff:80:40:
fb:36:54:22:20:f1:47:a3:77:df:77:56:61:5c:27:
b1:dd:e0:a8:6a:77:4d:02:7e:15:0f:71:ba:50:1b:
17:40:d9:a9:9a:3f:a1:1d:e8:71:be:f1:2f:6e:d5:
40:20:c8:04:01:1d:8f:d0:88:49:6c:81:6d:d3:b9:
ff:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D7:F2:35:FE:21:20:F1:FA:28:B2:DD:0E:D4:54:F8:94:DB:A7:23
X509v3 Authority Key Identifier:
keyid:34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:cb:54:4e:26:59:f9:41:17:93:d8:1a:d3:53:56:7c:16:7b:
08:8d:16:d6:a5:80:11:91:f2:8a:a6:ea:d2:78:8f:8d:62:17:
69:8b:70:36:1d:b2:1c:ba:0e:b6:3b:bb:91:5c:46:b0:1c:ea:
da:61:fc:0d:6d:2e:ed:9c:8c:5f:a9:dd:5f:d3:e0:46:a5:25:
c4:4d:98:60:f2:a7:d5:01:d2:7e:0f:bd:1f:e3:95:10:6c:da:
70:41:97:74:8e:56:54:82:23:1c:cc:40:f0:1e:48:31:18:d5:
50:29:86:b0:56:0e:8f:7a:38:bd:dc:75:12:60:44:16:7f:2d:
cd:97:54:c3:eb:8e:84:73:37:02:2d:e9:ce:35:7e:00:0b:64:
a2:a3:c3:cb:97:5d:06:bd:b5:78:68:b0:08:b4:8e:64:74:30:
1a:b5:10:5a:e2:db:bc:c0:96:1f:79:47:cd:28:82:0e:a1:51:
c5:c5:cb:0c:12:a1:84:8a:1a:f0:62:b4:d1:eb:cd:97:48:7a:
97:ac:0d:65:a1:63:a1:6a:f7:7a:ef:f6:97:07:6f:6f:57:3b:
e7:90:1b:54:e3:36:df:b1:69:14:35:eb:d8:73:6a:85:62:99:
de:30:35:0e:b4:a0:5d:75:2f:e4:de:6a:d6:90:07:eb:a6:a0:
7b:b4:e0:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdXyBYMugryVywfia3bLVuzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MzgwY2ZiYTM0YjYxZjVkYjQ1NjUxNDU5MjhkOWU0YWRk
OTMwZWIwHhcNMjUwNjEwMDMwMDIwWhcNMjUwNjExMDMwMDIwWjAzMTEwLwYDVQQD
Eyg3YWQ3ZjIzNWZlMjEyMGYxZmEyOGIyZGQwZWQ0NTRmODk0ZGJhNzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNRRkrxGZ8pAnstpBv8220TC/3IF
CbHCZt8JH80pYJ/T0vm1X62lj0tSNToOQtSkGmwX4yfJfJr34IPsSIDX1smhkATS
d+PuJV9J8YiEoCUYP16BenLykOjXdPzmGeRdsLa3lBWLU9cweMnaO/TTQNmPlskC
rhj5BkL6gxRU6He22fzeqj5pUj3i7llhupM1c9ZZkWd3RP7r8xPf5GXqszXZXLqi
ESkyg6JzDlarDjaKYSg7zkKzuroVJm0fKu3/gED7NlQiIPFHo3ffd1ZhXCex3eCo
andNAn4VD3G6UBsXQNmpmj+hHehxvvEvbtVAIMgEAR2P0IhJbIFt07n/HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrX8jX+ISDx+iiy3Q7UVPiU26cjMB8GA1UdIwQY
MBaAFDQ4DPujS2H120VlFFko2eSt2TDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8yOWM4ZWItNjFlMi00YWFkLTlhYTQt
MzI3OTEzN2ZkZTQ0LzEvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8yOWM4ZWItNjFlMi00YWFkLTlhYTQtMzI3OTEzN2ZkZTQ0
LzEvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqctUTiZZ
+UEXk9ga01NWfBZ7CI0W1qWAEZHyiqbq0niPjWIXaYtwNh2yHLoOtju7kVxGsBzq
2mH8DW0u7ZyMX6ndX9PgRqUlxE2YYPKn1QHSfg+9H+OVEGzacEGXdI5WVIIjHMxA
8B5IMRjVUCmGsFYOj3o4vdx1EmBEFn8tzZdUw+uOhHM3Ai3pzjV+AAtkoqPDy5dd
Br21eGiwCLSOZHQwGrUQWuLbvMCWH3lHzSiCDqFRxcXLDBKhhIoa8GK00evNl0h6
l6wNZaFjoWr3eu/2lwdvb1c755AbVOM237FpFDXr2HNqhWKZ3jA1DrSgXXUv5N5q
1pAH66age7TgDw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 05:09:46 2025 by rpki-client