Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
File: ni6I9QfNLq27IyyGT3Htum7LXaA.mft (raw, json)
Hash identifier: SDH67K8ekbxNEAhJMU99xPTw3o6P7hbz5Ox5KM93jS0=
Subject key identifier: 5B:6E:E2:8E:16:C9:DA:FF:15:86:30:92:0A:AD:B5:C0:38:C0:56:F9
Authority key identifier: 9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
Certificate issuer: /CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Certificate serial: 019767A97193CDC24931F4E605A5DA04737C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
Manifest number: 0DE4
Signing time: Fri 13 Jun 2025 05:00:47 +0000
Manifest this update: Fri 13 Jun 2025 05:00:47 +0000
Manifest next update: Sat 14 Jun 2025 05:00:47 +0000
Files and hashes: 1: ni6I9QfNLq27IyyGT3Htum7LXaA.crl (hash: h2eiygTCHt2jaFbz0B8duu9QlRWCKl9Hl96eZpVlxsA=)
2: uweYkDCu-qqfi3ug1YgUgTCGT6M.roa (hash: /KpNT+Dkmz13bWhCJTvJ8D+AbxL/YrXSoux1HxprkcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:a9:71:93:cd:c2:49:31:f4:e6:05:a5:da:04:73:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Validity
Not Before: Jun 13 05:00:47 2025 GMT
Not After : Jun 14 05:00:47 2025 GMT
Subject: CN=5b6ee28e16c9daff158630920aadb5c038c056f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6a:4f:3c:a0:12:fb:bf:e9:c8:57:23:65:bc:
c7:59:2f:cc:6a:78:e7:1e:15:0f:9d:f6:3d:f2:6c:
3a:e3:0e:1a:28:47:3b:69:5f:35:fc:ca:6c:f0:e4:
a2:ec:0a:ba:07:88:06:18:4a:38:54:e8:d7:38:f9:
f7:c9:4e:d5:94:a0:72:bc:a4:a0:cf:e4:a2:20:ab:
ec:d8:6c:e6:d6:9d:33:dc:a3:8f:d5:3c:97:5d:ca:
ac:f8:5f:c6:f7:98:2f:db:6a:c6:91:12:e2:ce:b0:
4f:a2:7b:b0:25:15:26:a8:af:cc:a3:a5:69:36:11:
15:c0:6a:d2:70:f0:b5:73:9a:b0:ff:e4:39:8b:99:
ac:3b:08:f3:7b:51:4b:e7:67:67:16:64:9d:fc:22:
32:b1:46:a9:84:4d:eb:3d:18:ee:5b:46:10:63:d3:
c0:38:e2:1e:8e:19:78:35:96:e4:91:f7:1e:78:6f:
a2:6b:48:a3:17:5b:d3:40:45:30:5f:1c:fe:bb:5f:
e4:75:7e:26:7d:ff:70:fe:be:e6:b0:bc:71:ad:4b:
40:17:6a:e1:1a:46:0e:c9:9c:bb:61:39:34:51:51:
f8:59:5c:7f:7e:84:eb:c3:51:c7:bc:65:fb:ba:c6:
97:ba:f9:73:08:8f:fe:51:34:1a:24:51:5c:1c:36:
18:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6E:E2:8E:16:C9:DA:FF:15:86:30:92:0A:AD:B5:C0:38:C0:56:F9
X509v3 Authority Key Identifier:
keyid:9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1e:ab:19:43:67:71:d4:6b:da:0d:8f:67:ed:61:d6:23:24:
70:03:6b:53:50:33:5c:11:e6:ef:30:51:83:02:a1:41:d4:36:
f6:93:a0:59:38:1b:08:bf:59:71:b2:fb:c0:60:36:ca:4f:2d:
fb:8a:9b:f0:a1:2b:db:e4:46:b5:9e:17:9e:73:4f:cd:4a:bc:
f0:7f:93:28:60:68:f8:45:a0:fc:3f:91:ed:ca:3e:6a:79:ce:
a8:c3:ef:93:1c:94:cb:84:d6:5d:c1:68:df:36:d7:9d:9a:1b:
df:23:4f:ca:62:ff:3c:41:29:9d:d1:52:4d:c9:f4:89:28:00:
83:88:9c:52:5b:87:ee:f9:08:88:6b:f9:e7:21:62:14:e9:4d:
ba:b8:29:75:f5:d4:bc:4f:85:d0:ee:34:03:b1:8f:d1:a5:65:
b4:5b:f5:cb:d9:12:8a:df:00:59:a1:bf:97:79:49:0f:b3:6b:
24:99:e9:43:ca:db:b4:6f:b2:e9:2f:8e:c4:af:72:0b:ea:85:
63:4e:b8:e6:6e:dc:0a:3f:41:2a:94:44:ea:4f:45:8f:ed:e5:
0a:be:a2:54:ed:7e:94:8e:d8:99:cb:0b:a7:cd:0c:8a:27:a4:
e8:8d:15:70:0a:f6:d2:42:c7:ad:18:49:f1:76:70:b3:0e:e1:
5d:45:e3:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdnqXGTzcJJMfTmBaXaBHN8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMmU4OGY1MDdjZDJlYWRiYjIzMmM4NjRmNzFlZGJhNmVj
YjVkYTAwHhcNMjUwNjEzMDUwMDQ3WhcNMjUwNjE0MDUwMDQ3WjAzMTEwLwYDVQQD
Eyg1YjZlZTI4ZTE2YzlkYWZmMTU4NjMwOTIwYWFkYjVjMDM4YzA1NmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmpPPKAS+7/pyFcjZbzHWS/Manjn
HhUPnfY98mw64w4aKEc7aV81/Mps8OSi7Aq6B4gGGEo4VOjXOPn3yU7VlKByvKSg
z+SiIKvs2Gzm1p0z3KOP1TyXXcqs+F/G95gv22rGkRLizrBPonuwJRUmqK/Mo6Vp
NhEVwGrScPC1c5qw/+Q5i5msOwjze1FL52dnFmSd/CIysUaphE3rPRjuW0YQY9PA
OOIejhl4NZbkkfceeG+ia0ijF1vTQEUwXxz+u1/kdX4mff9w/r7msLxxrUtAF2rh
GkYOyZy7YTk0UVH4WVx/foTrw1HHvGX7usaXuvlzCI/+UTQaJFFcHDYYOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtu4o4Wydr/FYYwkgqttcA4wFb5MB8GA1UdIwQY
MBaAFJ4uiPUHzS6tuyMshk9x7bpuy12gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmk2STlRZk5McTI3SXl5R1QzSHR1bTdMWGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zMDc2NGUtNzk5Zi00NzM2LTk2ODYt
OTJkNWQzOTcwYTU5LzEvbmk2STlRZk5McTI3SXl5R1QzSHR1bTdMWGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zMDc2NGUtNzk5Zi00NzM2LTk2ODYtOTJkNWQzOTcwYTU5
LzEvbmk2STlRZk5McTI3SXl5R1QzSHR1bTdMWGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiR6rGUNn
cdRr2g2PZ+1h1iMkcANrU1AzXBHm7zBRgwKhQdQ29pOgWTgbCL9ZcbL7wGA2yk8t
+4qb8KEr2+RGtZ4XnnNPzUq88H+TKGBo+EWg/D+R7co+annOqMPvkxyUy4TWXcFo
3zbXnZob3yNPymL/PEEpndFSTcn0iSgAg4icUluH7vkIiGv55yFiFOlNurgpdfXU
vE+F0O40A7GP0aVltFv1y9kSit8AWaG/l3lJD7NrJJnpQ8rbtG+y6S+OxK9yC+qF
Y0645m7cCj9BKpRE6k9Fj+3lCr6iVO1+lI7YmcsLp80Miiek6I0VcAr20kLHrRhJ
8XZwsw7hXUXjSA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 15:31:54 2025 by rpki-client