Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json)
Hash identifier: vMQORBOu4uhN/KXgjnTbVt6QDIbYPCqLuIRm2R6PluE=
Subject key identifier: C9:E6:03:67:CF:6B:A9:A4:2D:FC:52:FE:36:EB:7C:AC:21:E9:A0:25
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial: 019750EA52F6C4FB2D5072B9BB5ECBC4E617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
Manifest number: 0ECF
Signing time: Sun 08 Jun 2025 19:00:23 +0000
Manifest this update: Sun 08 Jun 2025 19:00:23 +0000
Manifest next update: Mon 09 Jun 2025 19:00:23 +0000
Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: PFIGGbv0eRMaisFqC1Z9ZUAqmqer27CzIW0mMUYE2v8=)
2: nxVkwWxp31G9Nhk5RnHhT1dH-NE.roa (hash: dlhfhOwY+Ae+4z4M/Srqh6E06sqatloTn5dl72qTwng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:52:f6:c4:fb:2d:50:72:b9:bb:5e:cb:c4:e6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Validity
Not Before: Jun 8 19:00:23 2025 GMT
Not After : Jun 9 19:00:23 2025 GMT
Subject: CN=c9e60367cf6ba9a42dfc52fe36eb7cac21e9a025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f1:8e:a5:8d:5d:8e:50:4f:9a:ae:1f:84:9f:
6f:79:9f:65:9c:a5:d1:99:c8:bd:4a:5a:b2:99:d9:
d5:32:64:b8:b1:9c:4b:a4:e6:18:ef:e7:ee:29:0b:
04:7d:ea:4d:4a:3c:f3:20:2c:d6:77:f2:f3:d5:43:
cf:cb:c7:e2:9f:42:16:e1:7e:5d:ab:58:03:41:d5:
79:e6:3d:4e:2e:02:8d:d8:6f:5e:02:e8:28:5f:c8:
67:a6:d0:75:60:ad:01:ff:29:0c:a4:70:83:f3:08:
ac:71:c4:4d:ad:9d:ec:d8:63:f6:7b:e6:bb:d5:95:
09:f6:c0:9a:65:e7:10:48:72:e8:48:63:3a:40:c7:
41:16:b7:ce:0c:60:19:c2:88:15:97:ff:f7:2b:eb:
a7:f2:89:16:55:6e:c4:42:c8:a7:ab:9e:bb:f5:18:
e5:b4:6f:f2:d0:a0:6b:55:41:ac:b5:84:7e:e9:e7:
ae:36:98:14:9a:84:8c:46:68:84:29:e4:38:36:fb:
11:9f:13:30:c3:e4:53:cb:bb:17:93:7a:7c:00:8c:
98:56:a9:11:6e:72:76:79:1a:02:4b:4b:d1:a7:5d:
3d:03:fe:22:51:ef:b6:74:27:4e:87:6e:10:fe:f2:
36:91:93:50:43:31:c0:b1:69:50:de:38:ae:d6:12:
c8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E6:03:67:CF:6B:A9:A4:2D:FC:52:FE:36:EB:7C:AC:21:E9:A0:25
X509v3 Authority Key Identifier:
keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d4:88:67:52:0c:fe:4f:28:aa:e0:8a:04:34:ab:05:65:9a:
87:94:d5:4a:1f:a3:93:05:a2:66:a5:8d:48:41:44:08:fe:b4:
55:74:2b:94:a6:51:06:6f:18:17:95:c3:c8:fb:cd:e5:38:20:
0e:00:96:ba:ec:a1:a0:e1:68:18:2d:87:15:3f:0f:d8:87:08:
b3:e7:68:08:e9:7d:07:5f:ed:08:9e:c1:8a:c2:f8:28:c5:0c:
a1:9c:07:f7:48:29:90:77:c9:ff:66:a5:2c:13:a4:27:c7:62:
b0:0d:c5:9d:fe:10:48:3d:52:5b:04:bc:8a:f7:9a:c6:21:e8:
bd:99:93:33:80:53:79:b4:83:53:88:1f:cb:00:23:d6:f4:31:
d7:13:68:58:ee:fa:0d:ec:b9:6b:45:bc:c7:45:b1:42:6e:72:
43:54:3c:2e:e1:d1:bc:1e:2c:08:c4:95:dd:aa:30:69:ac:2b:
99:5c:b8:86:f5:3d:2e:e0:aa:9f:1f:1c:a2:82:07:e6:ae:4b:
a2:cd:4e:9f:dd:95:f2:71:ac:9a:54:c5:bb:dc:23:c4:eb:67:
c9:f3:55:bb:37:47:cd:e9:1f:cb:52:a8:36:f5:03:22:49:b6:
ad:02:91:35:9e:2c:43:0c:0c:b0:32:18:d0:5c:07:d4:8a:5a:
20:8a:5a:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQ6lL2xPstUHK5u17LxOYXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YWYwNDFkMTJjNGFkYjY2ZjhjMTYxMTNjOWE2MTQ3ZDAy
Mzg4ZDkwHhcNMjUwNjA4MTkwMDIzWhcNMjUwNjA5MTkwMDIzWjAzMTEwLwYDVQQD
EyhjOWU2MDM2N2NmNmJhOWE0MmRmYzUyZmUzNmViN2NhYzIxZTlhMDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/GOpY1djlBPmq4fhJ9veZ9lnKXR
mci9SlqymdnVMmS4sZxLpOYY7+fuKQsEfepNSjzzICzWd/Lz1UPPy8fin0IW4X5d
q1gDQdV55j1OLgKN2G9eAugoX8hnptB1YK0B/ykMpHCD8wisccRNrZ3s2GP2e+a7
1ZUJ9sCaZecQSHLoSGM6QMdBFrfODGAZwogVl//3K+un8okWVW7EQsinq5679Rjl
tG/y0KBrVUGstYR+6eeuNpgUmoSMRmiEKeQ4NvsRnxMww+RTy7sXk3p8AIyYVqkR
bnJ2eRoCS0vRp109A/4iUe+2dCdOh24Q/vI2kZNQQzHAsWlQ3jiu1hLIbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnmA2fPa6mkLfxS/jbrfKwh6aAlMB8GA1UdIwQY
MBaAFDavBB0SxK22b4wWETyaYUfQI4jZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnE4RUhSTEVyYlp2akJZUlBKcGhSOUFqaU5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YTU0MmQtNzE5ZS00NmQwLWE1Y2Mt
MDYxZGQ2ODEzMzJjLzEvTnE4RUhSTEVyYlp2akJZUlBKcGhSOUFqaU5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83YTU0MmQtNzE5ZS00NmQwLWE1Y2MtMDYxZGQ2ODEzMzJj
LzEvTnE4RUhSTEVyYlp2akJZUlBKcGhSOUFqaU5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdSIZ1IM
/k8oquCKBDSrBWWah5TVSh+jkwWiZqWNSEFECP60VXQrlKZRBm8YF5XDyPvN5Tgg
DgCWuuyhoOFoGC2HFT8P2IcIs+doCOl9B1/tCJ7BisL4KMUMoZwH90gpkHfJ/2al
LBOkJ8disA3Fnf4QSD1SWwS8iveaxiHovZmTM4BTebSDU4gfywAj1vQx1xNoWO76
Dey5a0W8x0WxQm5yQ1Q8LuHRvB4sCMSV3aowaawrmVy4hvU9LuCqnx8cooIH5q5L
os1On92V8nGsmlTFu9wjxOtnyfNVuzdHzekfy1KoNvUDIkm2rQKRNZ4sQwwMsDIY
0FwH1IpaIIpaDw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:56:27 2025 by rpki-client