Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
File: _nzo-_uEec-5drRDzDx84vcDq34.mft (raw, json)
Hash identifier: lR25aEllsg5hhSwR/rc4xNVODXKteBJIfKncQSAabog=
Subject key identifier: 41:D9:FE:4E:B1:C6:22:3C:74:1E:FF:5B:FB:24:5C:A0:C3:5F:54:54
Authority key identifier: FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
Certificate issuer: /CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Certificate serial: 0197469EDD8009336E6718D2FA88EF9037AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
Manifest number: 0C5C
Signing time: Fri 06 Jun 2025 19:01:45 +0000
Manifest this update: Fri 06 Jun 2025 19:01:45 +0000
Manifest next update: Sat 07 Jun 2025 19:01:45 +0000
Files and hashes: 1: _nzo-_uEec-5drRDzDx84vcDq34.crl (hash: jwrN5GBYR/JHKEuhqlKhuuIaS7jiVjBArdJqfBBKI20=)
2: beiUjzIIFq8lUZEsjU5aHKjNnJA.roa (hash: mFm580c3qaH3SmCWZbvTiuZ0e3oedku3mVQP4lTuq5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:dd:80:09:33:6e:67:18:d2:fa:88:ef:90:37:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Validity
Not Before: Jun 6 19:01:45 2025 GMT
Not After : Jun 7 19:01:45 2025 GMT
Subject: CN=41d9fe4eb1c6223c741eff5bfb245ca0c35f5454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4b:25:db:b8:26:58:78:54:20:e3:70:4c:4e:
70:db:ed:23:f8:32:6e:a7:d3:38:ea:48:5a:dc:61:
35:97:5e:5d:53:04:46:e9:c4:04:28:ee:b8:0c:c2:
b2:23:59:93:d0:6e:64:bc:97:47:f1:ad:21:f7:33:
c0:d3:0c:08:01:08:0d:ee:0a:fb:70:42:bf:fa:02:
8f:4f:e6:68:39:db:05:ae:a8:d1:e7:bb:80:7a:64:
a1:d2:d2:47:10:3b:25:f0:98:f6:db:9b:8c:7d:6e:
d6:b7:9c:79:74:e8:61:c7:87:72:db:70:11:f8:36:
47:11:42:f7:ad:52:60:ac:94:64:2f:45:70:7d:7b:
05:74:07:11:6a:97:0b:42:4c:cf:2f:5e:41:fc:0d:
97:c4:da:5b:78:36:7a:43:c7:23:b2:a5:e6:8d:14:
90:27:d7:b3:7c:fe:90:12:d5:01:bc:dc:c9:c6:9a:
0c:1e:ca:12:41:4d:34:10:50:15:c9:90:b2:3a:28:
24:30:a3:86:cf:66:3a:c9:56:60:c6:65:dd:6e:cc:
12:ea:e0:3b:c2:fd:fb:5f:b4:1f:cd:9c:03:76:8b:
c8:68:41:c4:6c:c8:7e:a7:f2:18:91:f2:ef:10:04:
28:fc:68:58:2f:a3:24:b1:19:7b:89:b3:13:1e:28:
3f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D9:FE:4E:B1:C6:22:3C:74:1E:FF:5B:FB:24:5C:A0:C3:5F:54:54
X509v3 Authority Key Identifier:
keyid:FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:40:0c:c4:4e:a5:39:18:66:af:17:8f:14:64:be:da:e3:d4:
0a:23:bd:c3:99:0f:1e:34:eb:83:66:43:26:8e:a2:60:c4:9c:
d6:5c:bc:41:05:a7:7b:9f:c1:cd:c4:14:09:97:a4:bd:73:12:
88:a5:36:f3:f6:ad:ab:7d:47:ba:b0:20:cc:a4:4f:a0:ee:82:
7e:e0:4b:f0:7e:37:a3:4d:19:20:bb:26:ae:d4:63:e1:3f:3c:
bb:02:7a:01:4c:f5:fd:56:b1:7f:ec:79:21:cd:e2:05:99:91:
ac:b9:11:f3:ae:13:6d:93:5e:46:8b:14:a5:76:98:78:6b:df:
cc:3e:0b:dc:30:61:82:dc:18:16:d7:b6:49:ac:c8:8c:20:a6:
d6:70:9a:17:0f:01:fa:21:4f:46:99:dc:7a:28:67:ed:56:91:
8f:c2:fa:d4:1f:e1:ce:c8:f1:c6:a5:bf:6c:41:92:8e:d8:79:
a6:d0:0c:a6:2e:8e:76:78:7b:4b:1e:bb:4d:e9:02:36:e8:d1:
7c:af:09:33:55:45:12:83:ab:20:68:47:50:46:b6:bf:a2:e0:
37:a5:39:e7:f2:96:ea:b3:70:28:e5:b4:db:f6:82:d8:d8:f0:
ad:ea:31:68:62:fb:8e:20:d3:06:65:42:4b:e8:b0:70:61:e2:
cf:f8:74:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnt2ACTNuZxjS+ojvkDeuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlN2NlOGZiZmI4NDc5Y2ZiOTc2YjQ0M2NjM2M3Y2UyZjcw
M2FiN2UwHhcNMjUwNjA2MTkwMTQ1WhcNMjUwNjA3MTkwMTQ1WjAzMTEwLwYDVQQD
Eyg0MWQ5ZmU0ZWIxYzYyMjNjNzQxZWZmNWJmYjI0NWNhMGMzNWY1NDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEsl27gmWHhUIONwTE5w2+0j+DJu
p9M46kha3GE1l15dUwRG6cQEKO64DMKyI1mT0G5kvJdH8a0h9zPA0wwIAQgN7gr7
cEK/+gKPT+ZoOdsFrqjR57uAemSh0tJHEDsl8Jj225uMfW7Wt5x5dOhhx4dy23AR
+DZHEUL3rVJgrJRkL0VwfXsFdAcRapcLQkzPL15B/A2XxNpbeDZ6Q8cjsqXmjRSQ
J9ezfP6QEtUBvNzJxpoMHsoSQU00EFAVyZCyOigkMKOGz2Y6yVZgxmXdbswS6uA7
wv37X7QfzZwDdovIaEHEbMh+p/IYkfLvEAQo/GhYL6MksRl7ibMTHig/rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHZ/k6xxiI8dB7/W/skXKDDX1RUMB8GA1UdIwQY
MBaAFP586Pv7hHnPuXa0Q8w8fOL3A6t+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX256by1fdUVlYy01ZHJSRHpEeDg0dmNEcTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi85Mjc2MzgtZmQ0Ny00ZTU2LWJiOWUt
ZDc5MjBhZTQ0OTIwLzEvX256by1fdUVlYy01ZHJSRHpEeDg0dmNEcTM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi85Mjc2MzgtZmQ0Ny00ZTU2LWJiOWUtZDc5MjBhZTQ0OTIw
LzEvX256by1fdUVlYy01ZHJSRHpEeDg0dmNEcTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzEAMxE6l
ORhmrxePFGS+2uPUCiO9w5kPHjTrg2ZDJo6iYMSc1ly8QQWne5/BzcQUCZekvXMS
iKU28/atq31HurAgzKRPoO6CfuBL8H43o00ZILsmrtRj4T88uwJ6AUz1/Vaxf+x5
Ic3iBZmRrLkR864TbZNeRosUpXaYeGvfzD4L3DBhgtwYFte2SazIjCCm1nCaFw8B
+iFPRpnceihn7VaRj8L61B/hzsjxxqW/bEGSjth5ptAMpi6Odnh7Sx67TekCNujR
fK8JM1VFEoOrIGhHUEa2v6LgN6U55/KW6rNwKOW02/aC2NjwreoxaGL7jiDTBmVC
S+iwcGHiz/h0aQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:37 2025 by rpki-client