Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
File: nlf4Q7F__OqpuGNlgf5NVONG3cw.mft (raw, json)
Hash identifier: 0esXthMJm34TCWlDFLfmUBVmGsCJ4bKJeaqPpohwhWw=
Subject key identifier: 36:F7:F9:D8:AB:5B:C6:E5:71:36:CD:E3:CD:43:5F:CE:5C:49:69:04
Authority key identifier: 9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
Certificate issuer: /CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Certificate serial: 01975949478F5D0A85506E0F155ABB687974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
Manifest number: 0BD9
Signing time: Tue 10 Jun 2025 10:01:04 +0000
Manifest this update: Tue 10 Jun 2025 10:01:04 +0000
Manifest next update: Wed 11 Jun 2025 10:01:04 +0000
Files and hashes: 1: IFXNgHuEN8ycsfhuA4dEpX7GYeY.roa (hash: 0NAgcHKOW4VLEuD8zIQn9OzSwjmjjTPr1tkjSBELdjk=)
2: nlf4Q7F__OqpuGNlgf5NVONG3cw.crl (hash: XE9ezWX/CprazWH60hDLWTogAb/+aY+Hxeo6r5jhXjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:49:47:8f:5d:0a:85:50:6e:0f:15:5a:bb:68:79:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Validity
Not Before: Jun 10 10:01:04 2025 GMT
Not After : Jun 11 10:01:04 2025 GMT
Subject: CN=36f7f9d8ab5bc6e57136cde3cd435fce5c496904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9c:80:b0:35:cb:ea:f1:6d:73:ea:08:4a:e6:
f9:7f:53:0f:0d:5f:69:cd:d5:a1:b8:6b:00:ac:5d:
aa:9b:ec:58:d5:59:98:08:77:76:d9:f0:3e:1d:ee:
de:56:54:69:76:e0:40:23:90:48:f8:c4:04:f5:27:
b7:94:32:fd:8b:73:da:4a:1f:27:df:64:99:cd:76:
e9:aa:5c:34:b2:14:37:6f:68:b8:b6:72:42:63:1e:
01:11:3b:44:f9:7a:16:1e:06:67:4c:db:b9:c4:c2:
a8:19:5b:ce:bb:d5:4d:0a:d1:ff:ce:76:00:cc:3b:
c3:40:3d:c0:fb:12:e8:fe:4d:5e:0e:1b:bd:17:3a:
0b:48:54:8f:38:ac:b1:ed:82:31:c4:66:9e:5b:e0:
19:e2:bc:5f:62:79:bf:1a:db:ca:8a:de:fe:3a:83:
79:48:03:fa:a9:7a:c7:89:7f:f2:25:5f:69:6b:a6:
12:26:e3:49:bc:84:18:6d:c1:75:fe:c0:77:de:b4:
46:29:e8:4c:3b:02:20:86:7c:39:9a:b3:21:61:a7:
1b:67:6f:3b:70:0a:7d:58:b1:68:49:06:73:df:23:
f0:82:78:d8:97:bb:d9:29:a1:00:9b:2a:28:5f:2b:
5f:af:fe:5d:5c:4f:e1:77:d5:c8:9f:c1:d2:80:54:
bf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F7:F9:D8:AB:5B:C6:E5:71:36:CD:E3:CD:43:5F:CE:5C:49:69:04
X509v3 Authority Key Identifier:
keyid:9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e5:75:de:f1:55:09:87:1e:81:2f:7f:e1:20:f3:f2:fd:aa:
f2:d3:09:90:1d:40:ef:65:b0:91:e6:0d:5b:ea:ce:9c:4a:1f:
e4:04:52:d6:4f:a0:85:a3:1a:5f:83:8f:54:d6:eb:47:28:86:
b4:e4:7b:14:dc:2e:88:44:60:55:f0:16:30:8c:88:35:7f:b0:
f9:3d:c4:20:40:89:31:44:73:bb:b5:0a:3e:27:e4:b0:40:3b:
3d:81:69:11:ad:46:b3:3b:62:d7:94:43:a5:07:7a:4c:4c:65:
a8:30:18:7e:3f:eb:41:d9:94:63:f2:42:f5:3c:2e:cc:d6:65:
35:50:17:6e:27:30:e6:ab:56:56:36:c8:0f:9e:22:65:96:93:
d8:b6:c2:9d:8a:ab:0b:0e:f3:67:08:09:97:54:b3:f7:dc:2b:
76:10:09:21:02:b2:f4:ed:0d:cb:6a:21:d0:51:9b:bf:ae:7a:
c4:c2:99:e4:87:21:b1:92:3f:b8:4a:de:b6:09:1e:f6:7c:31:
e5:d1:fb:68:6e:aa:51:d7:03:01:1b:92:66:01:a6:90:58:b6:
af:25:3b:7d:96:0e:12:01:95:bb:33:cb:00:b7:17:61:66:a2:
50:9e:dd:9c:01:a8:82:88:da:5a:00:18:db:d5:1d:fe:12:fd:
2d:b7:ea:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZSUePXQqFUG4PFVq7aHl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNTdmODQzYjE3ZmZjZWFhOWI4NjM2NTgxZmU0ZDU0ZTM0
NmRkY2MwHhcNMjUwNjEwMTAwMTA0WhcNMjUwNjExMTAwMTA0WjAzMTEwLwYDVQQD
EygzNmY3ZjlkOGFiNWJjNmU1NzEzNmNkZTNjZDQzNWZjZTVjNDk2OTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JyAsDXL6vFtc+oISub5f1MPDV9p
zdWhuGsArF2qm+xY1VmYCHd22fA+He7eVlRpduBAI5BI+MQE9Se3lDL9i3PaSh8n
32SZzXbpqlw0shQ3b2i4tnJCYx4BETtE+XoWHgZnTNu5xMKoGVvOu9VNCtH/znYA
zDvDQD3A+xLo/k1eDhu9FzoLSFSPOKyx7YIxxGaeW+AZ4rxfYnm/GtvKit7+OoN5
SAP6qXrHiX/yJV9pa6YSJuNJvIQYbcF1/sB33rRGKehMOwIghnw5mrMhYacbZ287
cAp9WLFoSQZz3yPwgnjYl7vZKaEAmyooXytfr/5dXE/hd9XIn8HSgFS/mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDb3+dirW8blcTbN481DX85cSWkEMB8GA1UdIwQY
MBaAFJ5X+EOxf/zqqbhjZYH+TVTjRt3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmxmNFE3Rl9fT3FwdUdObGdmNU5WT05HM2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC83ZDBlZmUtNzA5ZC00ZDExLWI2OTIt
MGUyMzA4MDZiNTc5LzEvbmxmNFE3Rl9fT3FwdUdObGdmNU5WT05HM2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC83ZDBlZmUtNzA5ZC00ZDExLWI2OTItMGUyMzA4MDZiNTc5
LzEvbmxmNFE3Rl9fT3FwdUdObGdmNU5WT05HM2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+V13vFV
CYcegS9/4SDz8v2q8tMJkB1A72WwkeYNW+rOnEof5ARS1k+ghaMaX4OPVNbrRyiG
tOR7FNwuiERgVfAWMIyINX+w+T3EIECJMURzu7UKPifksEA7PYFpEa1Gszti15RD
pQd6TExlqDAYfj/rQdmUY/JC9TwuzNZlNVAXbicw5qtWVjbID54iZZaT2LbCnYqr
Cw7zZwgJl1Sz99wrdhAJIQKy9O0Ny2oh0FGbv656xMKZ5IchsZI/uEretgke9nwx
5dH7aG6qUdcDARuSZgGmkFi2ryU7fZYOEgGVuzPLALcXYWaiUJ7dnAGogojaWgAY
29Ud/hL9Lbfqdg==
-----END CERTIFICATE-----
Generated at Tue Jun 10 14:57:15 2025 by rpki-client