Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
File: Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft (raw, json)
Hash identifier: XzI3uUhviy6yj1ZEkkoc00I03/A1+NVbXeMIDB4UIU4=
Subject key identifier: 29:9D:DA:CA:84:9A:17:59:F2:B4:76:1F:E8:58:A8:43:9F:CE:21:88
Authority key identifier: 36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
Certificate issuer: /CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Certificate serial: 019753EBBDFDBFF7FA131759FCDE449690F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
Manifest number: 0462
Signing time: Mon 09 Jun 2025 09:00:47 +0000
Manifest this update: Mon 09 Jun 2025 09:00:47 +0000
Manifest next update: Tue 10 Jun 2025 09:00:47 +0000
Files and hashes: 1: Hl7hSFZEHZrA1_ugH1WvtUr7hTI.roa (hash: uywWwGCKWj+Fn6qNY8dmQ39B3/vU6rK6HYsO/2wacYs=)
2: Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl (hash: gG7gcokX/JiuzuqY89zScolXuMCtIg8I5qEWBm6WQlM=)
3: cekUNXzTWTu4gnxTXJJQQyW61Cg.roa (hash: ZDt6OkPV5Ex3Yi3FM3u0/RzjrLejRDKeTGQEGbNL8iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:eb:bd:fd:bf:f7:fa:13:17:59:fc:de:44:96:90:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Validity
Not Before: Jun 9 09:00:47 2025 GMT
Not After : Jun 10 09:00:47 2025 GMT
Subject: CN=299ddaca849a1759f2b4761fe858a8439fce2188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ce:7e:19:23:f1:ee:8c:a4:a4:23:f0:d8:2c:
2c:30:2b:35:ca:0b:ac:28:60:90:37:99:45:c4:32:
37:73:48:89:ed:73:17:c2:15:c5:c8:20:2f:db:2a:
e6:ac:1c:45:d5:0a:5b:d6:ff:55:24:dd:f1:4c:d7:
1d:52:a0:08:bd:4b:e9:a9:e1:70:b1:e1:ab:ec:d3:
c0:2f:9a:31:6c:28:de:98:23:08:f2:20:66:41:85:
bf:fb:32:7c:87:15:f4:47:5f:19:20:f7:10:43:e2:
48:7c:90:0d:70:13:25:65:8b:db:af:28:4d:b5:6c:
be:0d:fd:b8:00:4d:0c:bb:fe:44:5f:f0:b3:c6:ed:
b9:37:bb:e6:3b:64:01:aa:02:32:8c:01:76:ac:db:
a3:bb:e9:bb:86:63:94:cd:78:da:bf:e4:fa:6d:2b:
8c:87:b1:ce:a3:58:21:79:7e:57:00:d2:7a:01:ad:
bf:97:95:bb:d6:21:66:c1:f8:46:84:97:bd:81:79:
6a:32:af:9f:95:13:04:33:8f:51:0a:e3:cc:bd:9a:
0d:13:be:fa:b5:00:e7:99:5d:03:8d:1e:5a:32:1b:
6c:dc:72:14:27:23:61:71:c6:33:9f:45:7d:cd:bf:
65:56:6c:ea:08:78:e7:5f:af:da:2a:50:97:3d:9e:
51:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9D:DA:CA:84:9A:17:59:F2:B4:76:1F:E8:58:A8:43:9F:CE:21:88
X509v3 Authority Key Identifier:
keyid:36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:de:1e:d5:f7:7c:ec:51:f2:d0:6e:e8:62:03:79:31:53:43:
37:96:de:76:ec:0a:15:ee:0a:d2:16:93:63:97:4c:35:d1:13:
92:a5:3d:a9:6b:71:5d:52:ce:22:54:db:99:f0:52:55:2a:f0:
9d:25:39:78:b4:b9:28:d5:31:8e:0d:ef:e3:40:8a:1d:dd:2b:
08:09:a6:51:61:5e:26:8b:10:77:bb:b8:70:b1:40:02:93:7f:
3a:f4:bf:0a:64:cd:cc:d2:80:c3:65:6d:1d:2b:34:bf:17:fb:
c4:55:ed:79:ff:bd:d2:49:ce:25:53:20:7b:fc:c3:08:c3:3b:
f4:e2:09:43:79:68:a6:89:d1:0f:60:4f:51:68:b8:3f:22:62:
06:ba:34:73:7e:19:d9:dc:49:b2:62:e5:b1:b2:5d:4d:22:c5:
95:27:87:ff:40:bf:1c:09:70:b6:11:bf:cc:79:e0:01:4d:52:
ea:85:2a:a5:65:67:3f:c4:7d:64:46:ca:25:de:f1:bf:42:6b:
cd:eb:03:ea:5b:56:73:fa:a5:0a:7b:3b:82:92:00:80:88:9f:
ba:26:6a:c7:4c:e6:2a:ce:7e:f4:6f:ef:76:6b:d4:c5:af:2c:
54:a8:fd:90:97:a9:6c:ed:92:ab:8f:4a:e4:42:42:ec:79:8a:
65:ad:07:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdT6739v/f6ExdZ/N5ElpDwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Y2ZhZmZjOWM3ODY4NzA4ZjNjODFlZTVjMGQ2NGMzNWFj
MWJlZjEwHhcNMjUwNjA5MDkwMDQ3WhcNMjUwNjEwMDkwMDQ3WjAzMTEwLwYDVQQD
EygyOTlkZGFjYTg0OWExNzU5ZjJiNDc2MWZlODU4YTg0MzlmY2UyMTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5M5+GSPx7oykpCPw2CwsMCs1ygus
KGCQN5lFxDI3c0iJ7XMXwhXFyCAv2yrmrBxF1Qpb1v9VJN3xTNcdUqAIvUvpqeFw
seGr7NPAL5oxbCjemCMI8iBmQYW/+zJ8hxX0R18ZIPcQQ+JIfJANcBMlZYvbryhN
tWy+Df24AE0Mu/5EX/Czxu25N7vmO2QBqgIyjAF2rNuju+m7hmOUzXjav+T6bSuM
h7HOo1gheX5XANJ6Aa2/l5W71iFmwfhGhJe9gXlqMq+flRMEM49RCuPMvZoNE776
tQDnmV0DjR5aMhts3HIUJyNhccYzn0V9zb9lVmzqCHjnX6/aKlCXPZ5RuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmd2sqEmhdZ8rR2H+hYqEOfziGIMB8GA1UdIwQY
MBaAFDbPr/yceGhwjzyB7lwNZMNawb7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnMtdl9KeDRhSENQUElIdVhBMWt3MXJCdnZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kMDliNTYtNGZjYi00N2JmLTgwMjUt
OTk4NzhjYzliMTRjLzEvTnMtdl9KeDRhSENQUElIdVhBMWt3MXJCdnZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kMDliNTYtNGZjYi00N2JmLTgwMjUtOTk4NzhjYzliMTRj
LzEvTnMtdl9KeDRhSENQUElIdVhBMWt3MXJCdnZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABt4e1fd8
7FHy0G7oYgN5MVNDN5beduwKFe4K0haTY5dMNdETkqU9qWtxXVLOIlTbmfBSVSrw
nSU5eLS5KNUxjg3v40CKHd0rCAmmUWFeJosQd7u4cLFAApN/OvS/CmTNzNKAw2Vt
HSs0vxf7xFXtef+90knOJVMge/zDCMM79OIJQ3loponRD2BPUWi4PyJiBro0c34Z
2dxJsmLlsbJdTSLFlSeH/0C/HAlwthG/zHngAU1S6oUqpWVnP8R9ZEbKJd7xv0Jr
zesD6ltWc/qlCns7gpIAgIifuiZqx0zmKs5+9G/vdmvUxa8sVKj9kJepbO2Sq49K
5EJC7HmKZa0H1Q==
-----END CERTIFICATE-----
Generated at Mon Jun 9 13:38:00 2025 by rpki-client