Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
File: NXMLuLJiPn9lphY2BNHIX5EGKI8.mft (raw, json)
Hash identifier: Vzrkk2Wbuq5v4oDWZBDCEoH3hcVhOo6lh2eOZZXY6KU=
Subject key identifier: FB:C3:08:F1:A5:9C:74:94:CE:62:E2:2D:8C:6B:5F:CE:AF:53:D6:0B
Authority key identifier: 35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
Certificate issuer: /CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Certificate serial: 019745C24DD00E767D4E89C2EC5A6448B689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
Manifest number: 157E
Signing time: Fri 06 Jun 2025 15:00:51 +0000
Manifest this update: Fri 06 Jun 2025 15:00:51 +0000
Manifest next update: Sat 07 Jun 2025 15:00:51 +0000
Files and hashes: 1: 3u_UTWM5MnsnNlqUobIqKDYLwKo.roa (hash: veRRLy9ZMKOvJkYp1WIUbOdpjqnYEIFrYe5fkHyfQnc=)
2: NXMLuLJiPn9lphY2BNHIX5EGKI8.crl (hash: WxbgjYrC5egrX0MhvbHLykBRcTEmHJZImyqblOxkLLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:4d:d0:0e:76:7d:4e:89:c2:ec:5a:64:48:b6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Validity
Not Before: Jun 6 15:00:51 2025 GMT
Not After : Jun 7 15:00:51 2025 GMT
Subject: CN=fbc308f1a59c7494ce62e22d8c6b5fceaf53d60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:a9:7b:63:ea:c8:f0:b1:65:56:fa:81:94:
d2:96:f1:ef:48:8a:eb:fd:21:fd:88:b1:c3:cb:b7:
4e:f3:a2:5e:83:2e:41:c8:f2:b3:61:c3:7d:e4:e9:
b3:2a:68:ae:02:0d:3c:fc:1e:64:b4:9b:95:00:ab:
10:09:d8:93:43:2d:15:a9:10:b1:5e:51:1a:99:ba:
ec:a4:b4:ea:10:ff:d2:46:eb:1f:7e:4c:a1:3a:34:
bf:ed:3b:e0:ea:7e:88:1e:a2:92:73:9a:94:f5:53:
88:fb:ec:28:7e:10:48:92:ba:44:ca:86:2f:f7:0e:
80:ca:3a:41:15:e4:93:33:a4:b6:4d:2c:32:4f:47:
c4:85:88:4c:96:c4:4b:bc:00:e1:9a:24:22:bf:41:
0e:01:6f:38:ac:7a:7a:5d:00:e3:0b:4f:02:78:0d:
11:a3:53:63:dd:2e:41:dd:29:fb:18:bf:0c:11:40:
2d:aa:60:4d:15:b7:ae:d8:c9:4d:7c:a4:3b:55:91:
2b:08:89:e9:3d:9e:b6:5c:7e:d8:27:87:33:3d:f6:
ad:e4:08:0a:5e:b0:7b:f2:91:b5:11:fb:77:38:49:
4b:ff:f1:7e:92:ce:2c:c4:85:ed:2c:1d:57:72:e3:
e4:e7:41:19:bf:04:6c:19:0a:8e:b1:9e:07:f7:72:
2f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C3:08:F1:A5:9C:74:94:CE:62:E2:2D:8C:6B:5F:CE:AF:53:D6:0B
X509v3 Authority Key Identifier:
keyid:35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:68:14:1d:9b:2b:d3:94:4a:dd:24:73:bd:d2:fc:26:6d:c3:
8a:8c:23:fa:9e:1c:18:1a:de:e1:c3:e3:b8:38:40:2d:f3:9c:
0f:2d:52:3e:63:d8:fb:32:78:c1:09:3b:25:11:0d:47:66:05:
cb:94:59:4a:1b:0a:44:34:03:06:b1:e6:8b:6b:ea:8a:40:2b:
ca:e2:69:74:7d:99:28:65:14:0d:46:fc:f2:92:df:25:a0:73:
fa:9d:ab:1d:dc:c5:81:e9:7f:e6:82:61:b5:ce:7e:e4:e8:52:
44:46:51:8b:aa:38:1f:a4:a3:6f:00:1f:d2:fa:68:c2:60:0f:
70:4e:cf:1c:0d:41:b5:6a:21:b0:d4:e7:51:81:46:81:b5:d0:
59:a5:54:8a:2d:a4:52:cc:90:3e:5e:a3:69:d2:e7:43:b5:18:
89:20:aa:9a:93:00:5c:43:e0:33:c2:c3:53:80:41:a5:23:10:
fb:3a:a7:79:42:da:57:36:b2:f5:f2:83:66:01:52:b6:21:54:
3e:be:40:59:e8:94:f4:75:68:35:13:6d:3b:23:87:11:a3:79:
d0:66:f6:45:58:ca:f7:a2:de:ac:ca:43:67:33:92:02:7c:4d:
38:61:14:ab:c1:b7:0e:6f:41:f5:96:83:4e:f1:a0:37:b8:c9:
45:17:62:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdFwk3QDnZ9TonC7FpkSLaJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NzMwYmI4YjI2MjNlN2Y2NWE2MTYzNjA0ZDFjODVmOTEw
NjI4OGYwHhcNMjUwNjA2MTUwMDUxWhcNMjUwNjA3MTUwMDUxWjAzMTEwLwYDVQQD
EyhmYmMzMDhmMWE1OWM3NDk0Y2U2MmUyMmQ4YzZiNWZjZWFmNTNkNjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQKpe2PqyPCxZVb6gZTSlvHvSIrr
/SH9iLHDy7dO86Jegy5ByPKzYcN95OmzKmiuAg08/B5ktJuVAKsQCdiTQy0VqRCx
XlEambrspLTqEP/SRusffkyhOjS/7Tvg6n6IHqKSc5qU9VOI++wofhBIkrpEyoYv
9w6AyjpBFeSTM6S2TSwyT0fEhYhMlsRLvADhmiQiv0EOAW84rHp6XQDjC08CeA0R
o1Nj3S5B3Sn7GL8MEUAtqmBNFbeu2MlNfKQ7VZErCInpPZ62XH7YJ4czPfat5AgK
XrB78pG1Eft3OElL//F+ks4sxIXtLB1XcuPk50EZvwRsGQqOsZ4H93IvfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvDCPGlnHSUzmLiLYxrX86vU9YLMB8GA1UdIwQY
MBaAFDVzC7iyYj5/ZaYWNgTRyF+RBiiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlhNTHVMSmlQbjlscGhZMkJOSElYNUVHS0k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC81YzUxMzgtYWVlNC00ODJjLTkxM2Mt
M2E0ZGZmOGU4ZGVkLzEvTlhNTHVMSmlQbjlscGhZMkJOSElYNUVHS0k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC81YzUxMzgtYWVlNC00ODJjLTkxM2MtM2E0ZGZmOGU4ZGVk
LzEvTlhNTHVMSmlQbjlscGhZMkJOSElYNUVHS0k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2gUHZsr
05RK3SRzvdL8Jm3Diowj+p4cGBre4cPjuDhALfOcDy1SPmPY+zJ4wQk7JRENR2YF
y5RZShsKRDQDBrHmi2vqikAryuJpdH2ZKGUUDUb88pLfJaBz+p2rHdzFgel/5oJh
tc5+5OhSREZRi6o4H6SjbwAf0vpowmAPcE7PHA1BtWohsNTnUYFGgbXQWaVUii2k
UsyQPl6jadLnQ7UYiSCqmpMAXEPgM8LDU4BBpSMQ+zqneULaVzay9fKDZgFStiFU
Pr5AWeiU9HVoNRNtOyOHEaN50Gb2RVjK96LerMpDZzOSAnxNOGEUq8G3Dm9B9ZaD
TvGgN7jJRRdi6Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:16 2025 by rpki-client