Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
File: nU-b-Hr_AP1dshWFeBtG82-eNiY.mft (raw, json)
Hash identifier: siEX9xryNxgOUrCW8I7SC6EFAUXKt3NpydKysv5jcBU=
Subject key identifier: 11:85:BF:A5:4C:CB:75:26:BA:45:8C:5A:2A:76:02:9D:01:4B:F9:3C
Authority key identifier: 9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26
Certificate issuer: /CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
Certificate serial: 019753475644779AA6DD488E6D9041CCE264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
Manifest number: 021D
Signing time: Mon 09 Jun 2025 06:01:13 +0000
Manifest this update: Mon 09 Jun 2025 06:01:13 +0000
Manifest next update: Tue 10 Jun 2025 06:01:13 +0000
Files and hashes: 1: cThp0KEND3BT4KvCeUid-rjEug4.roa (hash: ImpSaegWwcNvwqQ9pHSgJ6wWRXJrvYa1vES4AMD51Qc=)
2: nU-b-Hr_AP1dshWFeBtG82-eNiY.crl (hash: 9ed8h4yGffKcmMzYRUNLO8xG1AOIsIq/08pZMw0R0v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:47:56:44:77:9a:a6:dd:48:8e:6d:90:41:cc:e2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
Validity
Not Before: Jun 9 06:01:13 2025 GMT
Not After : Jun 10 06:01:13 2025 GMT
Subject: CN=1185bfa54ccb7526ba458c5a2a76029d014bf93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:69:07:cf:5f:61:5f:fc:70:0e:94:9a:cd:95:
95:e7:6a:e4:e6:a9:8e:ad:ec:fd:28:b3:91:62:74:
5c:16:46:e9:f0:16:3c:f4:de:a9:50:03:b1:71:3a:
1f:19:2c:28:9e:d4:75:69:37:f0:61:42:8c:eb:17:
0f:67:a8:57:f9:2d:32:0b:f3:48:bc:97:e6:cc:7f:
8d:77:55:ff:4e:f9:6c:dd:ed:df:17:08:4d:19:1d:
34:16:41:11:9e:6a:d9:95:3d:35:16:ee:97:3f:b3:
f1:0c:05:28:e5:59:96:dc:5c:5e:97:96:26:87:0d:
46:9a:91:dd:46:14:bc:29:64:67:11:08:d1:67:f6:
b4:21:03:2e:15:07:fa:75:c4:94:0f:e4:46:c2:62:
39:10:61:30:f0:95:93:8b:12:f3:6d:bd:79:3c:8e:
f5:0d:bd:6b:1e:2e:88:e1:d9:b5:20:f7:ca:b2:b6:
52:08:5f:6b:2b:80:71:bf:a9:c5:69:0a:02:1d:f3:
4f:38:eb:64:cd:8e:99:34:41:a4:97:79:08:f6:79:
a1:ed:67:65:c8:2c:98:cc:50:83:dd:7f:62:32:ff:
2f:e1:4c:5d:48:fc:5a:1b:e6:ef:7c:a8:a7:11:8b:
9d:9c:8b:3b:93:80:7b:47:7c:d0:b7:20:f8:35:b1:
2b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:85:BF:A5:4C:CB:75:26:BA:45:8C:5A:2A:76:02:9D:01:4B:F9:3C
X509v3 Authority Key Identifier:
keyid:9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1f:2f:6f:da:ef:2a:41:af:9d:0d:30:b3:c5:0d:c5:1f:1a:
7f:f4:a4:16:ed:1e:50:bb:f7:a2:74:64:fa:62:53:f4:1d:9f:
22:ac:79:b8:0f:26:dd:1f:7f:fb:cd:8f:9b:c4:1b:5b:6e:9f:
53:da:25:35:f5:ef:1a:52:0f:f8:43:40:c7:24:5b:3f:53:59:
9e:03:e9:54:87:f9:fe:d8:dd:b7:df:76:e3:20:84:dc:f5:ad:
63:67:b4:a7:13:e8:28:b5:74:b9:a3:80:9c:f0:20:0e:0b:3f:
68:ff:a2:b0:66:e9:c9:db:8e:b1:16:fe:7e:84:30:66:0e:1d:
a9:f7:e9:5a:70:a2:e6:4c:3e:42:41:60:bb:45:30:39:4b:88:
1a:c0:f6:75:f6:0a:36:39:62:16:fd:a3:42:d8:e8:76:83:39:
e1:fc:ba:ee:41:45:49:09:39:f1:9d:29:cb:ba:79:33:b0:33:
f6:6c:f0:bf:ea:33:b1:78:b3:45:24:6d:42:0a:45:19:d4:02:
75:62:59:e0:af:bc:4d:e2:fd:41:ff:38:8c:99:f6:bb:c1:f7:
de:21:c8:86:f9:29:ab:dc:7a:16:5b:b7:7e:c9:4e:c5:29:a6:
bc:e3:31:73:d5:86:6c:73:c0:6e:38:60:6d:ee:a8:25:ba:53:
26:3a:cf:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTR1ZEd5qm3UiObZBBzOJkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNGY5YmY4N2FmZjAwZmQ1ZGIyMTU4NTc4MWI0NmYzNmY5
ZTM2MjYwHhcNMjUwNjA5MDYwMTEzWhcNMjUwNjEwMDYwMTEzWjAzMTEwLwYDVQQD
EygxMTg1YmZhNTRjY2I3NTI2YmE0NThjNWEyYTc2MDI5ZDAxNGJmOTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmkHz19hX/xwDpSazZWV52rk5qmO
rez9KLORYnRcFkbp8BY89N6pUAOxcTofGSwontR1aTfwYUKM6xcPZ6hX+S0yC/NI
vJfmzH+Nd1X/Tvls3e3fFwhNGR00FkERnmrZlT01Fu6XP7PxDAUo5VmW3Fxel5Ym
hw1GmpHdRhS8KWRnEQjRZ/a0IQMuFQf6dcSUD+RGwmI5EGEw8JWTixLzbb15PI71
Db1rHi6I4dm1IPfKsrZSCF9rK4Bxv6nFaQoCHfNPOOtkzY6ZNEGkl3kI9nmh7Wdl
yCyYzFCD3X9iMv8v4UxdSPxaG+bvfKinEYudnIs7k4B7R3zQtyD4NbErFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGFv6VMy3UmukWMWip2Ap0BS/k8MB8GA1UdIwQY
MBaAFJ1Pm/h6/wD9XbIVhXgbRvNvnjYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblUtYi1Icl9BUDFkc2hXRmVCdEc4Mi1lTmlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS83NDE4NzItYTQyNS00MzY3LTlhYzIt
ZGNkOTM3ZmQwN2E3LzEvblUtYi1Icl9BUDFkc2hXRmVCdEc4Mi1lTmlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS83NDE4NzItYTQyNS00MzY3LTlhYzItZGNkOTM3ZmQwN2E3
LzEvblUtYi1Icl9BUDFkc2hXRmVCdEc4Mi1lTmlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjB8vb9rv
KkGvnQ0ws8UNxR8af/SkFu0eULv3onRk+mJT9B2fIqx5uA8m3R9/+82Pm8QbW26f
U9olNfXvGlIP+ENAxyRbP1NZngPpVIf5/tjdt9924yCE3PWtY2e0pxPoKLV0uaOA
nPAgDgs/aP+isGbpyduOsRb+foQwZg4dqffpWnCi5kw+QkFgu0UwOUuIGsD2dfYK
NjliFv2jQtjodoM54fy67kFFSQk58Z0py7p5M7Az9mzwv+ozsXizRSRtQgpFGdQC
dWJZ4K+8TeL9Qf84jJn2u8H33iHIhvkpq9x6Flu3fslOxSmmvOMxc9WGbHPAbjhg
be6oJbpTJjrPVA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 08:51:23 2025 by rpki-client