Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
File: NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft (raw, json)
Hash identifier: f/NAN8qXI4ZDZsI+5fwNplXHn/h7nBGVVYBsa3taax0=
Subject key identifier: 8F:63:BD:A4:EA:0E:AE:43:7E:25:F7:45:D4:39:77:C6:F0:A4:F6:88
Authority key identifier: 34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
Certificate issuer: /CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Certificate serial: 0197462FC653E2B26400BBDD1C99C4221214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
Manifest number: 157E
Signing time: Fri 06 Jun 2025 17:00:25 +0000
Manifest this update: Fri 06 Jun 2025 17:00:25 +0000
Manifest next update: Sat 07 Jun 2025 17:00:25 +0000
Files and hashes: 1: NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl (hash: 27jhjuA8cB1dBhhQhrPmzXpkMR4ecuEAdA05snyIcKY=)
2: aDRwFZp3Ye9nOga6oqU2-HxOi5Q.roa (hash: 55fN/khKAT7BHMTfK9zjOz/iWjkXrLDgvWhFUwURpbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:c6:53:e2:b2:64:00:bb:dd:1c:99:c4:22:12:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Validity
Not Before: Jun 6 17:00:25 2025 GMT
Not After : Jun 7 17:00:25 2025 GMT
Subject: CN=8f63bda4ea0eae437e25f745d43977c6f0a4f688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1d:f5:f6:ad:86:16:55:5d:47:7b:4c:1a:57:
2b:cc:c5:9e:52:8e:d0:32:54:82:a4:7f:89:00:c0:
d8:a7:8c:a0:ac:00:9e:1e:9d:85:71:87:82:aa:6b:
5f:c3:73:c8:19:aa:7a:67:af:32:7d:0a:9b:9c:ae:
6d:66:2c:f3:14:42:47:a6:97:bb:57:d6:56:af:db:
87:03:d3:3e:a3:23:db:f7:a2:2e:b0:20:e7:0b:c9:
e6:a4:b4:97:d4:12:9d:ec:0d:d1:19:68:07:be:44:
68:eb:2a:db:93:e5:34:d6:f0:a1:ec:e8:86:44:a3:
10:2e:18:ab:2b:c8:07:72:17:34:5d:36:9a:6f:27:
aa:31:d6:a4:c9:57:50:9c:8c:91:41:30:ad:24:c2:
42:97:3c:95:90:c8:e0:6d:e9:71:f1:0c:0d:9d:08:
77:b9:0f:3e:3a:27:2f:56:f3:34:dd:71:50:b0:cb:
be:06:1f:8d:b9:ff:2c:74:86:8c:93:d6:8a:87:ac:
df:45:f0:5f:69:eb:84:13:cd:60:7a:cb:93:7b:96:
23:4f:47:07:c0:bc:c4:43:47:e0:30:4b:d3:9a:46:
13:4e:78:25:c2:b4:8c:7c:8f:6c:64:3b:25:0a:c3:
a4:4a:1d:4d:08:de:89:c7:98:68:07:9a:6c:b5:ef:
2d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:63:BD:A4:EA:0E:AE:43:7E:25:F7:45:D4:39:77:C6:F0:A4:F6:88
X509v3 Authority Key Identifier:
keyid:34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4a:29:fa:fc:41:da:ae:78:a4:73:97:e0:1d:7e:18:eb:d3:
5e:26:93:ca:4d:cb:73:8b:70:b0:a7:f8:45:a2:a9:95:3b:53:
2b:15:70:c2:47:91:02:50:0b:fe:56:02:ff:74:f1:38:ed:d3:
67:9a:2b:e6:29:53:c7:7e:c0:ae:d7:a3:2e:23:cc:63:28:81:
ec:8f:80:b0:4f:7e:3c:63:e4:32:42:07:2f:8f:67:ea:52:68:
42:5f:8a:52:c2:36:a8:22:0f:30:dc:fc:1d:7a:ed:6f:66:de:
bb:b6:63:2d:a9:8a:cf:9a:d7:13:d5:f8:44:0c:cc:1a:42:7d:
88:bf:22:ed:0e:e3:69:42:c7:b4:15:1a:27:ef:95:e4:8e:78:
79:8d:b6:82:c6:94:0e:4f:d3:66:60:3f:c3:56:d6:c9:7c:23:
85:26:9a:26:c3:d2:a5:b0:c1:25:7d:57:9d:55:bd:80:e0:c1:
1a:b9:a4:ab:74:09:f2:6b:7d:0b:49:9f:1d:58:28:49:60:db:
d5:8e:d3:1e:a2:5e:22:87:b7:78:64:ea:bb:98:e3:df:7e:db:
23:43:02:9b:2b:db:f3:3e:d1:be:d0:89:c1:22:bb:38:04:f3:
2b:8c:f3:2f:8a:30:3b:29:36:0d:12:96:a2:d1:06:d4:3a:4a:
0b:c9:d9:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGL8ZT4rJkALvdHJnEIhIUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MzJiYTFjNmQwYjAyYmVmZTY4Y2M5NGFlOWQyZGUzMTA3
YTYwNDYwHhcNMjUwNjA2MTcwMDI1WhcNMjUwNjA3MTcwMDI1WjAzMTEwLwYDVQQD
Eyg4ZjYzYmRhNGVhMGVhZTQzN2UyNWY3NDVkNDM5NzdjNmYwYTRmNjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx319q2GFlVdR3tMGlcrzMWeUo7Q
MlSCpH+JAMDYp4ygrACeHp2FcYeCqmtfw3PIGap6Z68yfQqbnK5tZizzFEJHppe7
V9ZWr9uHA9M+oyPb96IusCDnC8nmpLSX1BKd7A3RGWgHvkRo6yrbk+U01vCh7OiG
RKMQLhirK8gHchc0XTaabyeqMdakyVdQnIyRQTCtJMJClzyVkMjgbelx8QwNnQh3
uQ8+OicvVvM03XFQsMu+Bh+Nuf8sdIaMk9aKh6zfRfBfaeuEE81gesuTe5YjT0cH
wLzEQ0fgMEvTmkYTTnglwrSMfI9sZDslCsOkSh1NCN6Jx5hoB5pste8trwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9jvaTqDq5DfiX3RdQ5d8bwpPaIMB8GA1UdIwQY
MBaAFDQyuhxtCwK+/mjMlK6dLeMQemBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkRLNkhHMExBcjctYU15VXJwMHQ0eEI2WUVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yNWUxN2ItODI0ZS00ZTdkLWIzZTgt
MjdiODdiZmJlZTdiLzEvTkRLNkhHMExBcjctYU15VXJwMHQ0eEI2WUVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8yNWUxN2ItODI0ZS00ZTdkLWIzZTgtMjdiODdiZmJlZTdi
LzEvTkRLNkhHMExBcjctYU15VXJwMHQ0eEI2WUVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEop+vxB
2q54pHOX4B1+GOvTXiaTyk3Lc4twsKf4RaKplTtTKxVwwkeRAlAL/lYC/3TxOO3T
Z5or5ilTx37ArtejLiPMYyiB7I+AsE9+PGPkMkIHL49n6lJoQl+KUsI2qCIPMNz8
HXrtb2beu7ZjLamKz5rXE9X4RAzMGkJ9iL8i7Q7jaULHtBUaJ++V5I54eY22gsaU
Dk/TZmA/w1bWyXwjhSaaJsPSpbDBJX1XnVW9gODBGrmkq3QJ8mt9C0mfHVgoSWDb
1Y7THqJeIoe3eGTqu5jj337bI0MCmyvb8z7RvtCJwSK7OATzK4zzL4owOyk2DRKW
otEG1DpKC8nZkw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:15 2025 by rpki-client