Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
File: NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json)
Hash identifier: CC6iYmeohFUG3CesE+BQrt6qAmKulxPn3fD11pto6mw=
Subject key identifier: 59:9A:18:6B:BE:8C:AB:92:F6:0C:DA:69:B3:4A:53:78:3B:4A:92:3A
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 019749D620EA8ADACB65CA23BCABFD994113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
Manifest number: 054E
Signing time: Sat 07 Jun 2025 10:00:59 +0000
Manifest this update: Sat 07 Jun 2025 10:00:59 +0000
Manifest next update: Sun 08 Jun 2025 10:00:59 +0000
Files and hashes: 1: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: SLJK7M0iww2NmZGxBknHzz49bcUJuvFhQzUrjSGNgFo=)
2: hzr42e2R_h-LWwgBpSQZacNEqsc.roa (hash: 9mXipkAV76pHGL76kppNcnsru8YUceXMwinc9f3N1VQ=)
3: tL5-Keddv0icrOkLTgT8ryYM2Dk.roa (hash: oDOl9ZfQxy4MI0oXfGazHV5Kou2gL/nj4KWfMXDD32c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:20:ea:8a:da:cb:65:ca:23:bc:ab:fd:99:41:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Jun 7 10:00:59 2025 GMT
Not After : Jun 8 10:00:59 2025 GMT
Subject: CN=599a186bbe8cab92f60cda69b34a53783b4a923a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f7:5b:b3:2c:fd:74:aa:69:b8:fc:83:2f:ef:
4f:94:5a:dc:35:e9:1e:51:4b:0a:9e:9c:c9:a6:a8:
35:6e:26:77:65:dd:c3:49:82:45:6c:70:62:7e:c2:
31:df:cf:b3:49:b9:b5:a4:e0:3b:97:83:99:1c:5f:
d5:17:50:f9:a6:a6:fd:81:4d:a7:22:44:e9:91:03:
d9:14:19:7c:5c:ce:67:51:43:52:33:a3:3d:47:55:
48:e9:33:02:83:39:b6:55:4d:cb:db:fa:87:2d:2a:
05:66:b6:e7:ad:78:f9:be:4a:10:06:48:c6:cc:d3:
63:6d:42:78:1c:48:0f:04:05:cf:0f:86:e8:24:48:
56:ff:2b:05:4e:d9:5e:44:08:54:e9:d2:bd:c4:4e:
5b:52:3a:e0:a4:90:c0:7e:ac:42:e2:2c:b4:18:5f:
8c:58:7f:a4:83:ab:85:c2:7b:12:66:22:20:70:54:
d7:ff:a4:f4:b7:0a:4d:49:15:ed:0a:c4:54:55:a6:
a3:16:b1:0f:d9:e9:d4:a7:3b:b0:74:09:a8:b9:77:
5e:ce:74:1f:6c:0e:89:0f:4c:6d:8c:bc:0c:26:b8:
05:83:35:11:c2:08:3a:ee:65:d8:0a:c1:e9:dc:43:
76:63:79:98:ea:17:cf:8e:79:20:ae:ed:af:3a:88:
9b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9A:18:6B:BE:8C:AB:92:F6:0C:DA:69:B3:4A:53:78:3B:4A:92:3A
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e3:9c:19:a7:e8:ce:0b:17:0a:11:53:c7:57:a6:0b:27:b1:
de:47:b7:9b:30:47:f4:4d:e6:eb:0e:b7:fc:35:81:e0:f0:f8:
a1:d2:05:06:51:94:d3:6c:af:e1:99:2e:5d:90:6e:45:16:fd:
c2:95:76:a4:34:27:f3:ff:84:d0:04:64:ab:ed:10:4b:4e:8c:
c2:4e:f7:6d:11:01:82:6e:f3:4b:da:45:ac:6f:2c:42:56:12:
12:dc:75:0a:f0:92:db:71:27:63:ed:b9:32:79:26:70:1a:83:
88:b1:aa:41:21:f7:7d:7a:c6:6b:41:77:f3:6b:31:00:5a:1c:
b3:45:ae:9c:51:6e:e6:af:f1:e9:4a:68:26:f8:69:7a:d9:5e:
b7:f7:90:a6:b9:51:be:91:5c:1c:05:9b:a5:c2:5a:4d:3b:2b:
7f:ad:17:19:81:3f:e3:b6:0a:69:1f:5b:11:a2:ca:7d:71:c0:
54:83:3a:49:a6:16:30:1f:c1:e7:da:3e:6d:48:e0:bd:9b:6b:
43:fb:31:45:e8:c7:5a:6d:e6:64:aa:cc:a7:2c:cf:89:7a:e7:
ea:ef:e0:80:c1:e7:c2:2c:99:6c:9b:d9:c1:3e:86:6f:99:4a:
99:39:ef:48:de:25:b7:df:38:e0:a7:a0:12:f5:ef:26:09:2e:
dd:2a:86:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1iDqitrLZcojvKv9mUETMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTMwMjJkZWRjMWY4ZjAxM2FhNmUzOTBmYTIzYmQyMmYx
ZmUzOTIwHhcNMjUwNjA3MTAwMDU5WhcNMjUwNjA4MTAwMDU5WjAzMTEwLwYDVQQD
Eyg1OTlhMTg2YmJlOGNhYjkyZjYwY2RhNjliMzRhNTM3ODNiNGE5MjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Pdbsyz9dKppuPyDL+9PlFrcNeke
UUsKnpzJpqg1biZ3Zd3DSYJFbHBifsIx38+zSbm1pOA7l4OZHF/VF1D5pqb9gU2n
IkTpkQPZFBl8XM5nUUNSM6M9R1VI6TMCgzm2VU3L2/qHLSoFZrbnrXj5vkoQBkjG
zNNjbUJ4HEgPBAXPD4boJEhW/ysFTtleRAhU6dK9xE5bUjrgpJDAfqxC4iy0GF+M
WH+kg6uFwnsSZiIgcFTX/6T0twpNSRXtCsRUVaajFrEP2enUpzuwdAmouXdeznQf
bA6JD0xtjLwMJrgFgzURwgg67mXYCsHp3EN2Y3mY6hfPjnkgru2vOoibnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmaGGu+jKuS9gzaabNKU3g7SpI6MB8GA1UdIwQY
MBaAFDYTAi3twfjwE6puOQ+iO9IvH+OSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhNQ0xlM0ItUEFUcW00NUQ2STcwaThmNDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xZTdmOTYtZTkzNi00MmM4LWFjNjIt
NDA2NjlhZDE5ZmI5LzEvTmhNQ0xlM0ItUEFUcW00NUQ2STcwaThmNDVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8xZTdmOTYtZTkzNi00MmM4LWFjNjItNDA2NjlhZDE5ZmI5
LzEvTmhNQ0xlM0ItUEFUcW00NUQ2STcwaThmNDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtuOcGafo
zgsXChFTx1emCyex3ke3mzBH9E3m6w63/DWB4PD4odIFBlGU02yv4ZkuXZBuRRb9
wpV2pDQn8/+E0ARkq+0QS06Mwk73bREBgm7zS9pFrG8sQlYSEtx1CvCS23EnY+25
MnkmcBqDiLGqQSH3fXrGa0F382sxAFocs0WunFFu5q/x6UpoJvhpetlet/eQprlR
vpFcHAWbpcJaTTsrf60XGYE/47YKaR9bEaLKfXHAVIM6SaYWMB/B59o+bUjgvZtr
Q/sxRejHWm3mZKrMpyzPiXrn6u/ggMHnwiyZbJvZwT6Gb5lKmTnvSN4lt9844Keg
EvXvJgku3SqG0g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:27:28 2025 by rpki-client