Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft
File: NHkVOIV45h2IaEmiHXC6B1FJwaE.mft (raw, json)
Hash identifier: soKiOuNYWpDM7ynBYPUlDOEQkOSE7ApQ7/KDwxqodf4=
Subject key identifier: 72:99:BE:24:82:02:47:17:D7:5C:54:95:60:6A:55:A3:18:AD:6E:6B
Authority key identifier: 34:79:15:38:85:78:E6:1D:88:68:49:A2:1D:70:BA:07:51:49:C1:A1
Certificate issuer: /CN=347915388578e61d886849a21d70ba075149c1a1
Certificate serial: 01975DCB582D8B9C5A182AC4C24528B0B5DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHkVOIV45h2IaEmiHXC6B1FJwaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft
Manifest number: 0B13
Signing time: Wed 11 Jun 2025 07:01:36 +0000
Manifest this update: Wed 11 Jun 2025 07:01:36 +0000
Manifest next update: Thu 12 Jun 2025 07:01:36 +0000
Files and hashes: 1: NHkVOIV45h2IaEmiHXC6B1FJwaE.crl (hash: Y2rcyzZMydtstLivrw79olgNQymR32brcPMTbh8lADk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHkVOIV45h2IaEmiHXC6B1FJwaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:cb:58:2d:8b:9c:5a:18:2a:c4:c2:45:28:b0:b5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347915388578e61d886849a21d70ba075149c1a1
Validity
Not Before: Jun 11 07:01:36 2025 GMT
Not After : Jun 12 07:01:36 2025 GMT
Subject: CN=7299be2482024717d75c5495606a55a318ad6e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fd:b2:f5:3c:1b:ae:f2:f9:4c:7b:c7:5b:71:
05:4a:9f:57:b6:b0:bf:28:fc:7c:d5:ae:06:72:5f:
79:a4:63:d0:2e:8e:e4:48:27:82:d3:df:85:6b:79:
75:e5:53:fe:a1:85:f2:ef:d7:24:b6:ec:97:7e:ac:
d1:02:5e:7e:48:4b:6e:a9:94:24:8e:41:3c:6f:ba:
26:1f:6a:be:3a:6f:3a:31:20:da:b2:72:fe:c7:2b:
63:e2:4a:21:ca:6c:15:97:cb:6b:c3:2a:d4:ff:ec:
e9:92:52:7d:d8:1d:06:68:e9:f4:90:21:45:04:73:
8f:c7:24:67:74:e7:1e:3f:2c:24:1c:28:69:16:90:
7e:22:87:a1:13:ae:c1:9d:94:6b:a4:a0:3e:0f:06:
8e:1c:7a:08:23:d4:82:02:a3:8e:3c:6f:11:a7:2f:
5a:59:2a:3b:23:81:88:3d:be:3a:8b:b1:e9:59:e3:
7d:19:00:f3:5b:af:55:55:76:7d:4c:c3:72:c5:51:
c3:cd:8e:99:d7:87:1f:30:23:f3:65:2a:4a:7b:20:
95:af:92:c8:14:b3:46:5a:a1:2b:7d:2c:9f:09:2d:
12:3d:94:63:7b:4e:6b:38:7e:69:2e:d4:62:7b:5a:
b0:eb:7d:dc:b7:57:7a:7a:b2:d5:1c:ff:66:95:20:
6a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:99:BE:24:82:02:47:17:D7:5C:54:95:60:6A:55:A3:18:AD:6E:6B
X509v3 Authority Key Identifier:
keyid:34:79:15:38:85:78:E6:1D:88:68:49:A2:1D:70:BA:07:51:49:C1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHkVOIV45h2IaEmiHXC6B1FJwaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9a:6b:04:9c:67:1f:e5:86:ff:c6:bf:7d:91:a9:79:0f:f1:
ed:07:d2:54:4a:83:ba:36:69:fb:7a:d6:8b:8d:19:9a:93:42:
84:b7:56:c6:a5:2a:6b:a2:2b:69:51:e2:3f:4b:16:68:74:1e:
ee:54:75:e0:83:ff:05:5c:67:50:2c:d4:b4:3c:aa:65:a3:f5:
b2:14:48:15:d6:24:9f:69:94:ea:e8:1e:18:61:c9:fe:9e:3b:
3c:9d:59:04:32:65:94:cd:0e:11:52:2d:c1:b5:01:f5:cb:a6:
7a:11:a9:9b:5c:52:c8:36:70:bd:20:27:fc:63:70:b3:66:3d:
70:99:2d:b8:f0:ca:55:92:46:81:0a:be:5a:f8:98:88:bc:dc:
39:7a:2f:45:0c:c7:bf:81:ac:dd:be:55:ce:0a:a4:9e:11:d6:
7e:25:67:0c:fc:c8:33:e0:44:7e:5f:82:96:33:8a:2d:13:c1:
84:29:4c:41:19:9e:c6:30:90:b4:24:14:b8:c9:5a:eb:99:68:
bf:f9:0d:8d:62:68:b8:90:63:7e:7b:a7:8f:37:93:ca:5e:bd:
d6:15:42:55:ea:20:03:21:69:60:97:42:67:57:86:fc:58:1a:
a4:e7:2f:00:50:c0:0d:df:b9:2d:90:25:db:3a:9c:24:d2:37:
a4:5e:44:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddy1gti5xaGCrEwkUosLXaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NzkxNTM4ODU3OGU2MWQ4ODY4NDlhMjFkNzBiYTA3NTE0
OWMxYTEwHhcNMjUwNjExMDcwMTM2WhcNMjUwNjEyMDcwMTM2WjAzMTEwLwYDVQQD
Eyg3Mjk5YmUyNDgyMDI0NzE3ZDc1YzU0OTU2MDZhNTVhMzE4YWQ2ZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/2y9TwbrvL5THvHW3EFSp9XtrC/
KPx81a4Gcl95pGPQLo7kSCeC09+Fa3l15VP+oYXy79cktuyXfqzRAl5+SEtuqZQk
jkE8b7omH2q+Om86MSDasnL+xytj4kohymwVl8trwyrU/+zpklJ92B0GaOn0kCFF
BHOPxyRndOcePywkHChpFpB+IoehE67BnZRrpKA+DwaOHHoII9SCAqOOPG8Rpy9a
WSo7I4GIPb46i7HpWeN9GQDzW69VVXZ9TMNyxVHDzY6Z14cfMCPzZSpKeyCVr5LI
FLNGWqErfSyfCS0SPZRje05rOH5pLtRie1qw633ct1d6erLVHP9mlSBqHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKZviSCAkcX11xUlWBqVaMYrW5rMB8GA1UdIwQY
MBaAFDR5FTiFeOYdiGhJoh1wugdRScGhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkhrVk9JVjQ1aDJJYUVtaUhYQzZCMUZKd2FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80ZWY2OWUtOTk3OC00MzZkLTkwYzkt
ODJkOTdjMDY5NTY2LzEvTkhrVk9JVjQ1aDJJYUVtaUhYQzZCMUZKd2FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80ZWY2OWUtOTk3OC00MzZkLTkwYzktODJkOTdjMDY5NTY2
LzEvTkhrVk9JVjQ1aDJJYUVtaUhYQzZCMUZKd2FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpprBJxn
H+WG/8a/fZGpeQ/x7QfSVEqDujZp+3rWi40ZmpNChLdWxqUqa6IraVHiP0sWaHQe
7lR14IP/BVxnUCzUtDyqZaP1shRIFdYkn2mU6ugeGGHJ/p47PJ1ZBDJllM0OEVIt
wbUB9cumehGpm1xSyDZwvSAn/GNws2Y9cJktuPDKVZJGgQq+WviYiLzcOXovRQzH
v4Gs3b5VzgqknhHWfiVnDPzIM+BEfl+CljOKLRPBhClMQRmexjCQtCQUuMla65lo
v/kNjWJouJBjfnunjzeTyl691hVCVeogAyFpYJdCZ1eG/FgapOcvAFDADd+5LZAl
2zqcJNI3pF5EtA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 09:46:38 2025 by rpki-client