Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
File: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft (raw, json)
Hash identifier: IXUg5OEkThuSf2jxWQcAS2EH3qW74RICQnAsSHt9l1k=
Subject key identifier: E5:28:20:F4:10:D4:6D:F6:C4:EA:88:19:41:C4:19:8B:DD:39:38:D2
Authority key identifier: 34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB
Certificate issuer: /CN=34380cfba34b61f5db4565145928d9e4add930eb
Certificate serial: 01976EF4FD1F2234EB2E0BFBF9C972C5F072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
Manifest number: 45
Signing time: Sat 14 Jun 2025 15:00:38 +0000
Manifest this update: Sat 14 Jun 2025 15:00:38 +0000
Manifest next update: Sun 15 Jun 2025 15:00:38 +0000
Files and hashes: 1: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl (hash: lq2TPoHpAuB+RNu4PrZv2Z2+zzOeFU8O6kzAelxWg30=)
2: eNjKHdv8IHiSMT5DlWURZ12GtE8.roa (hash: 0PyZvOHXEJvjs+fUIrJG3NCT3v2ngertxaHruNIycnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:fd:1f:22:34:eb:2e:0b:fb:f9:c9:72:c5:f0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34380cfba34b61f5db4565145928d9e4add930eb
Validity
Not Before: Jun 14 15:00:38 2025 GMT
Not After : Jun 15 15:00:38 2025 GMT
Subject: CN=e52820f410d46df6c4ea881941c4198bdd3938d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:d8:d3:c1:27:71:eb:73:c3:06:5a:0b:c7:
19:1a:05:f1:38:ac:94:78:bd:cd:ee:d9:2e:9c:8b:
10:0f:6a:29:96:eb:cd:02:50:43:7a:09:2f:b1:09:
ae:84:05:01:b3:fb:49:8b:e8:e7:65:cb:c2:39:dc:
ba:0c:90:d7:46:a9:fa:12:e8:7e:74:ae:ad:42:85:
f5:f4:f4:30:65:3f:44:6f:88:11:b4:2b:8f:62:f7:
10:10:bf:62:4e:e2:fd:4f:82:3b:79:bf:2a:4d:0d:
7a:98:c5:40:60:4e:91:04:aa:50:fa:f9:7f:32:88:
5f:0a:09:58:c2:85:2d:9a:a4:e3:e4:93:e6:83:45:
0c:72:29:29:ba:39:12:6b:03:14:41:78:38:a9:f6:
9e:67:eb:3c:ad:c6:e0:44:df:52:e6:9d:5d:f4:ee:
29:e7:07:af:c0:b4:be:55:cf:60:d0:63:db:f9:8d:
ff:15:a2:a3:18:a3:77:a0:5f:f3:b2:a8:b3:2e:bb:
79:94:9a:c3:b4:77:2b:6a:15:db:20:c9:21:1f:6f:
ac:5f:16:ef:b5:42:82:41:28:3a:d4:87:30:39:61:
8d:9f:da:02:aa:ed:c5:63:f5:2c:b1:d5:a0:4b:de:
84:26:c3:f8:96:be:cf:3e:ab:c0:d7:cd:31:8f:06:
97:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:28:20:F4:10:D4:6D:F6:C4:EA:88:19:41:C4:19:8B:DD:39:38:D2
X509v3 Authority Key Identifier:
keyid:34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:47:62:7d:7a:e2:c7:57:47:24:1b:11:ee:cb:e8:d5:69:86:
34:13:06:95:8c:e0:22:a9:63:ce:64:2d:53:23:7e:13:db:f9:
8c:92:aa:db:00:43:9e:ca:41:1d:90:16:4a:61:76:68:71:86:
5d:9b:04:2a:54:01:99:f3:22:49:75:70:1b:31:ff:16:e5:8a:
54:ea:73:a5:55:70:4a:be:43:5a:32:26:5e:d7:b8:a4:5a:4e:
9a:45:47:23:a6:6f:62:97:66:c9:bc:07:83:f3:d6:03:65:79:
7c:1a:90:7f:68:5e:d5:25:f7:1a:34:57:fe:99:c5:10:73:12:
09:7c:df:c5:09:df:16:2f:35:62:22:ff:b8:98:c5:45:04:7d:
73:14:c2:84:1d:18:d2:d4:f2:a4:79:60:d8:59:24:74:66:84:
8f:0e:3d:7d:22:4c:0e:16:31:5e:5f:59:35:7a:59:66:ef:a3:
ab:d5:bf:62:9f:91:09:b5:c8:a2:02:24:f2:58:5f:27:74:05:
3e:44:eb:16:f7:62:95:db:d9:b0:e3:45:13:e3:d2:a5:62:8e:
ec:77:1f:df:ac:cc:cc:a2:74:d7:fb:0a:c1:1e:4f:a0:53:2f:
84:c5:9e:2f:e4:28:40:80:96:fb:e8:92:cc:a2:bd:02:ab:6d:
a7:3b:74:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9P0fIjTrLgv7+clyxfByMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MzgwY2ZiYTM0YjYxZjVkYjQ1NjUxNDU5MjhkOWU0YWRk
OTMwZWIwHhcNMjUwNjE0MTUwMDM4WhcNMjUwNjE1MTUwMDM4WjAzMTEwLwYDVQQD
EyhlNTI4MjBmNDEwZDQ2ZGY2YzRlYTg4MTk0MWM0MTk4YmRkMzkzOGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfjY08EncetzwwZaC8cZGgXxOKyU
eL3N7tkunIsQD2opluvNAlBDegkvsQmuhAUBs/tJi+jnZcvCOdy6DJDXRqn6Euh+
dK6tQoX19PQwZT9Eb4gRtCuPYvcQEL9iTuL9T4I7eb8qTQ16mMVAYE6RBKpQ+vl/
MohfCglYwoUtmqTj5JPmg0UMcikpujkSawMUQXg4qfaeZ+s8rcbgRN9S5p1d9O4p
5wevwLS+Vc9g0GPb+Y3/FaKjGKN3oF/zsqizLrt5lJrDtHcrahXbIMkhH2+sXxbv
tUKCQSg61IcwOWGNn9oCqu3FY/UssdWgS96EJsP4lr7PPqvA180xjwaXsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUoIPQQ1G32xOqIGUHEGYvdOTjSMB8GA1UdIwQY
MBaAFDQ4DPujS2H120VlFFko2eSt2TDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8yOWM4ZWItNjFlMi00YWFkLTlhYTQt
MzI3OTEzN2ZkZTQ0LzEvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8yOWM4ZWItNjFlMi00YWFkLTlhYTQtMzI3OTEzN2ZkZTQ0
LzEvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0difXri
x1dHJBsR7svo1WmGNBMGlYzgIqljzmQtUyN+E9v5jJKq2wBDnspBHZAWSmF2aHGG
XZsEKlQBmfMiSXVwGzH/FuWKVOpzpVVwSr5DWjImXte4pFpOmkVHI6ZvYpdmybwH
g/PWA2V5fBqQf2he1SX3GjRX/pnFEHMSCXzfxQnfFi81YiL/uJjFRQR9cxTChB0Y
0tTypHlg2FkkdGaEjw49fSJMDhYxXl9ZNXpZZu+jq9W/Yp+RCbXIogIk8lhfJ3QF
PkTrFvdildvZsONFE+PSpWKO7Hcf36zMzKJ01/sKwR5PoFMvhMWeL+QoQICW++iS
zKK9Aqttpzt07g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:40:14 2025 by rpki-client