Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
File: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft (raw, json)
Hash identifier: 0lFW8jvI+KCnkuDqZ4kvJMgIh809gmWXfCOgDiNaU2c=
Subject key identifier: 18:A5:45:F3:30:C5:70:99:A5:CE:DE:B1:B1:D8:C8:40:CE:9D:E1:7C
Authority key identifier: 34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB
Certificate issuer: /CN=34380cfba34b61f5db4565145928d9e4add930eb
Certificate serial: 01976D069B2DF56684BCA9C457A97811881A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
Manifest number: 44
Signing time: Sat 14 Jun 2025 06:00:38 +0000
Manifest this update: Sat 14 Jun 2025 06:00:38 +0000
Manifest next update: Sun 15 Jun 2025 06:00:38 +0000
Files and hashes: 1: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl (hash: 5q7QcU+3dHNCCmtUHcm894/mN8TMTeiFcSWk2rr5vRE=)
2: eNjKHdv8IHiSMT5DlWURZ12GtE8.roa (hash: 0PyZvOHXEJvjs+fUIrJG3NCT3v2ngertxaHruNIycnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:9b:2d:f5:66:84:bc:a9:c4:57:a9:78:11:88:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34380cfba34b61f5db4565145928d9e4add930eb
Validity
Not Before: Jun 14 06:00:38 2025 GMT
Not After : Jun 15 06:00:38 2025 GMT
Subject: CN=18a545f330c57099a5cedeb1b1d8c840ce9de17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:1d:a6:ca:39:ef:1a:00:99:f5:83:1c:cd:
1e:fa:8f:21:2f:a9:6a:18:b0:b7:9f:1f:4f:a5:10:
d8:6b:17:02:73:3c:bf:bb:ef:ca:11:2a:ef:e8:e7:
05:1f:ba:5e:ec:5b:42:f5:e6:70:8e:83:48:0c:f9:
c6:3a:14:49:b6:47:7c:92:38:e8:e4:83:30:03:d6:
95:bf:01:72:b0:4f:75:91:c0:b3:68:0a:a9:29:02:
67:8c:e4:ef:0e:d4:0a:12:50:da:8f:b6:07:ed:32:
b4:07:04:df:14:8a:c9:5b:b5:f9:e8:ef:30:2e:d0:
b5:01:b1:85:0d:dd:96:ad:6c:04:fb:55:4c:31:49:
74:2a:63:79:08:e9:62:47:e7:4e:5c:04:bd:3c:9e:
7d:3e:19:d7:a6:5a:04:74:d4:1e:42:56:72:36:b8:
94:c1:d2:52:3f:ad:53:cc:69:56:2f:8e:4f:02:82:
63:d3:e2:9f:9d:40:4f:00:f8:62:7b:74:49:35:35:
43:b8:4d:98:2c:39:67:f4:0e:c1:da:e9:d1:8c:19:
02:28:20:14:8a:6e:37:78:a6:da:83:0e:e2:93:b5:
0d:ec:39:52:c9:af:4a:0c:09:46:68:88:b6:75:c2:
22:d8:b3:5b:ab:b1:24:4f:5d:5d:e9:52:dd:83:4a:
62:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A5:45:F3:30:C5:70:99:A5:CE:DE:B1:B1:D8:C8:40:CE:9D:E1:7C
X509v3 Authority Key Identifier:
keyid:34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f4:fb:ab:70:b2:3d:bd:5d:c2:ca:a5:b5:2e:65:98:c0:95:
79:0a:4e:8f:71:7d:51:f9:b8:c1:63:4f:0d:fd:a1:81:09:46:
b0:f1:75:2e:71:3a:67:b9:ec:54:fc:cb:e2:7f:a0:10:d6:21:
ac:33:d3:91:5b:11:af:0a:d0:da:c3:05:59:ae:fd:64:42:4c:
02:5a:02:83:ef:16:eb:75:0a:ef:13:ea:c5:8d:fb:3b:cb:36:
41:a2:30:a6:04:58:3d:e3:ba:cc:5f:a8:4e:c4:30:17:9e:f5:
d3:f7:5c:5f:b0:3d:b2:a1:8c:32:0e:d7:97:53:a4:9a:60:3b:
51:54:73:9c:4b:e5:8b:40:5c:fa:56:a2:96:8c:b4:ca:74:1e:
4a:64:60:9a:9e:84:b0:d1:6b:af:f7:b0:86:90:be:eb:62:16:
a1:1b:3b:26:6f:6a:bd:21:36:59:04:bf:41:11:f7:05:2c:a0:
20:29:a3:82:12:00:b2:06:04:75:5f:16:67:1d:7a:f3:03:c0:
5b:21:4a:26:64:45:bf:5c:b2:6f:ca:99:d1:28:23:f8:a8:f1:
c0:8a:25:a1:b1:41:06:a8:4c:46:ba:25:40:f1:e7:17:67:fc:
bd:f1:00:47:35:f3:d0:19:f5:24:21:8e:e5:9e:4e:2a:e1:f5:
75:60:d8:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBpst9WaEvKnEV6l4EYgaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MzgwY2ZiYTM0YjYxZjVkYjQ1NjUxNDU5MjhkOWU0YWRk
OTMwZWIwHhcNMjUwNjE0MDYwMDM4WhcNMjUwNjE1MDYwMDM4WjAzMTEwLwYDVQQD
EygxOGE1NDVmMzMwYzU3MDk5YTVjZWRlYjFiMWQ4Yzg0MGNlOWRlMTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVAdpso57xoAmfWDHM0e+o8hL6lq
GLC3nx9PpRDYaxcCczy/u+/KESrv6OcFH7pe7FtC9eZwjoNIDPnGOhRJtkd8kjjo
5IMwA9aVvwFysE91kcCzaAqpKQJnjOTvDtQKElDaj7YH7TK0BwTfFIrJW7X56O8w
LtC1AbGFDd2WrWwE+1VMMUl0KmN5COliR+dOXAS9PJ59PhnXploEdNQeQlZyNriU
wdJSP61TzGlWL45PAoJj0+KfnUBPAPhie3RJNTVDuE2YLDln9A7B2unRjBkCKCAU
im43eKbagw7ik7UN7DlSya9KDAlGaIi2dcIi2LNbq7EkT11d6VLdg0piTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBilRfMwxXCZpc7esbHYyEDOneF8MB8GA1UdIwQY
MBaAFDQ4DPujS2H120VlFFko2eSt2TDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8yOWM4ZWItNjFlMi00YWFkLTlhYTQt
MzI3OTEzN2ZkZTQ0LzEvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8yOWM4ZWItNjFlMi00YWFkLTlhYTQtMzI3OTEzN2ZkZTQ0
LzEvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvT7q3Cy
Pb1dwsqltS5lmMCVeQpOj3F9Ufm4wWNPDf2hgQlGsPF1LnE6Z7nsVPzL4n+gENYh
rDPTkVsRrwrQ2sMFWa79ZEJMAloCg+8W63UK7xPqxY37O8s2QaIwpgRYPeO6zF+o
TsQwF5710/dcX7A9sqGMMg7Xl1OkmmA7UVRznEvli0Bc+lailoy0ynQeSmRgmp6E
sNFrr/ewhpC+62IWoRs7Jm9qvSE2WQS/QRH3BSygICmjghIAsgYEdV8WZx168wPA
WyFKJmRFv1yyb8qZ0Sgj+KjxwIolobFBBqhMRrolQPHnF2f8vfEARzXz0Bn1JCGO
5Z5OKuH1dWDYZg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:56:21 2025 by rpki-client