
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft
File: Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft (raw, json)
Hash identifier: y4zYa4VVUD4Frj79nf1qO2j5fJoHz0f02ypycpaLtzg=
Subject key identifier: 7A:6D:E7:C6:1F:A2:FB:26:73:92:EB:10:85:68:13:41:8E:C6:2F:96
Authority key identifier: 36:3E:14:53:87:ED:A5:B0:8A:A3:00:D6:3B:4F:C3:5E:59:83:64:FD
Certificate issuer: /CN=363e145387eda5b08aa300d63b4fc35e598364fd
Certificate serial: 01974AE862B4CB97729240D924D1649BB09F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj4UU4ftpbCKowDWO0_DXlmDZP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft
Manifest number: 0AB5
Signing time: Sat 07 Jun 2025 15:00:32 +0000
Manifest this update: Sat 07 Jun 2025 15:00:32 +0000
Manifest next update: Sun 08 Jun 2025 15:00:32 +0000
Files and hashes: 1: Nj4UU4ftpbCKowDWO0_DXlmDZP0.crl (hash: DDuafjKAkup+Ok3aVo/vAVv2ImjA24996575WElLlJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj4UU4ftpbCKowDWO0_DXlmDZP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:62:b4:cb:97:72:92:40:d9:24:d1:64:9b:b0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363e145387eda5b08aa300d63b4fc35e598364fd
Validity
Not Before: Jun 7 15:00:32 2025 GMT
Not After : Jun 8 15:00:32 2025 GMT
Subject: CN=7a6de7c61fa2fb267392eb10856813418ec62f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dd:da:bc:9f:a1:ae:af:da:fd:e7:f5:e4:14:
c0:df:fa:aa:f3:ae:4b:54:29:03:56:37:de:0f:82:
a7:ea:6c:d6:0f:17:56:95:49:be:9b:7d:d5:01:61:
2c:49:01:04:74:9f:ef:49:c3:9d:08:e7:97:a6:fd:
bf:a7:d2:38:9e:d8:3b:af:89:7a:22:59:71:8a:8c:
5a:ae:82:b0:f7:d7:9c:2c:09:64:f9:50:89:9b:ec:
1a:05:f3:59:e8:a2:b7:8e:2b:ba:a4:79:ea:b9:c5:
7f:db:0f:db:32:9e:4a:3d:ee:f0:c8:e2:dc:33:32:
9f:99:f6:50:be:44:89:03:b1:32:49:8d:3d:4b:d9:
26:d9:5d:7d:2b:6b:3a:ed:11:5e:95:90:ae:07:f9:
4c:87:b7:22:96:45:cf:18:4b:ed:93:cb:9b:c5:e3:
d4:db:84:78:57:11:b3:e8:e6:14:44:df:18:85:c6:
ef:b8:21:ea:37:a0:1d:4b:d1:e2:04:4d:e2:36:39:
09:66:4c:98:4d:ff:13:98:65:6e:be:8e:a0:1a:af:
6a:7a:f5:54:34:14:3a:bd:02:68:41:68:f4:0c:d8:
53:57:ce:99:81:0b:08:54:a6:d4:27:ba:68:7a:2c:
1c:b8:24:28:b2:6f:27:ef:97:b6:df:54:38:fa:e1:
bf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6D:E7:C6:1F:A2:FB:26:73:92:EB:10:85:68:13:41:8E:C6:2F:96
X509v3 Authority Key Identifier:
keyid:36:3E:14:53:87:ED:A5:B0:8A:A3:00:D6:3B:4F:C3:5E:59:83:64:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj4UU4ftpbCKowDWO0_DXlmDZP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:dd:8c:97:f1:d7:1d:ab:d3:fd:d6:db:8d:65:4d:2f:c9:2b:
f0:cd:df:62:25:d3:1c:81:79:e3:c9:7e:0a:3c:79:36:ca:89:
bf:55:c3:a8:9f:69:ad:ff:63:8c:86:bc:ec:b0:42:2c:99:2f:
de:0f:f9:70:07:c6:bb:0b:f8:6f:b5:b2:97:f2:43:9c:85:b3:
5f:cd:99:f8:6e:32:f8:15:7d:fa:87:34:15:09:19:67:f5:7d:
72:36:12:f4:ed:75:11:99:c6:0f:89:38:7f:6a:4b:ec:64:06:
4e:e0:b0:92:eb:6c:9d:43:6d:be:83:12:35:87:0f:51:06:ef:
a5:de:52:2d:d6:5a:af:be:cb:e1:c9:f7:05:5d:8a:c6:a3:5d:
e9:af:68:f1:14:9f:af:2f:95:37:84:f3:44:bd:ce:57:0c:8f:
69:95:9d:9b:fe:95:6a:60:0f:e7:b1:92:7d:93:c9:de:38:2a:
ee:67:1d:92:e4:09:cb:a8:66:21:ab:17:0d:35:95:b8:d8:88:
e3:4e:0e:d3:7c:28:e7:88:36:11:57:5d:1a:04:b0:c9:1f:4a:
bb:95:8e:31:69:34:69:e5:61:c2:48:ec:5f:f6:fa:dc:37:d4:
58:e1:2a:c6:54:11:a1:6b:45:f7:49:d6:de:67:9c:78:33:01:
05:15:43:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6GK0y5dykkDZJNFkm7CfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2M2UxNDUzODdlZGE1YjA4YWEzMDBkNjNiNGZjMzVlNTk4
MzY0ZmQwHhcNMjUwNjA3MTUwMDMyWhcNMjUwNjA4MTUwMDMyWjAzMTEwLwYDVQQD
Eyg3YTZkZTdjNjFmYTJmYjI2NzM5MmViMTA4NTY4MTM0MThlYzYyZjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA093avJ+hrq/a/ef15BTA3/qq865L
VCkDVjfeD4Kn6mzWDxdWlUm+m33VAWEsSQEEdJ/vScOdCOeXpv2/p9I4ntg7r4l6
IllxioxaroKw99ecLAlk+VCJm+waBfNZ6KK3jiu6pHnqucV/2w/bMp5KPe7wyOLc
MzKfmfZQvkSJA7EySY09S9km2V19K2s67RFelZCuB/lMh7cilkXPGEvtk8ubxePU
24R4VxGz6OYURN8YhcbvuCHqN6AdS9HiBE3iNjkJZkyYTf8TmGVuvo6gGq9qevVU
NBQ6vQJoQWj0DNhTV86ZgQsIVKbUJ7poeiwcuCQosm8n75e231Q4+uG/HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpt58Yfovsmc5LrEIVoE0GOxi+WMB8GA1UdIwQY
MBaAFDY+FFOH7aWwiqMA1jtPw15Zg2T9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmo0VVU0ZnRwYkNLb3dEV08wX0RYbG1EWlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC84M2FmYTAtNjRkMi00YzFmLWFhMTgt
ZWMzZDAwZTMzYmNhLzEvTmo0VVU0ZnRwYkNLb3dEV08wX0RYbG1EWlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC84M2FmYTAtNjRkMi00YzFmLWFhMTgtZWMzZDAwZTMzYmNh
LzEvTmo0VVU0ZnRwYkNLb3dEV08wX0RYbG1EWlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAId2Ml/HX
HavT/dbbjWVNL8kr8M3fYiXTHIF548l+Cjx5NsqJv1XDqJ9prf9jjIa87LBCLJkv
3g/5cAfGuwv4b7Wyl/JDnIWzX82Z+G4y+BV9+oc0FQkZZ/V9cjYS9O11EZnGD4k4
f2pL7GQGTuCwkutsnUNtvoMSNYcPUQbvpd5SLdZar77L4cn3BV2KxqNd6a9o8RSf
ry+VN4TzRL3OVwyPaZWdm/6VamAP57GSfZPJ3jgq7mcdkuQJy6hmIasXDTWVuNiI
404O03wo54g2EVddGgSwyR9Ku5WOMWk0aeVhwkjsX/b63DfUWOEqxlQRoWtF90nW
3meceDMBBRVD1A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:28:46 2025 by rpki-client