Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
File: N0MfG-n9wkGQmEec3kV7v3lXF1k.mft (raw, json)
Hash identifier: 0cIPyjj9rhkK6xxxokvmOJS+OPITjLLtWFahy2ux+U8=
Subject key identifier: 9A:C2:2F:B8:52:83:28:20:48:F3:87:09:69:D5:AA:14:FD:46:F8:19
Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
Certificate issuer: /CN=37431f1be9fdc2419098479cde457bbf79571759
Certificate serial: 01974779A83F9F6CA8792B191A72D9075BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
Manifest number: 0803
Signing time: Fri 06 Jun 2025 23:00:44 +0000
Manifest this update: Fri 06 Jun 2025 23:00:44 +0000
Manifest next update: Sat 07 Jun 2025 23:00:44 +0000
Files and hashes: 1: A3ey_cAeMANwFWddA6tWalsb_HU.roa (hash: 1QzvBN6h57NIWttaQKkwiJVejIWg/N7/NzIPvbKh3sU=)
2: N0MfG-n9wkGQmEec3kV7v3lXF1k.crl (hash: L/JR1ekubANRhttr4oJ3rkFIwqJ35y34n8qpfcPfK7U=)
3: X2IBg-0ZoG3nzdbOUqoFpfNzTiM.roa (hash: I3L20uWKmG3AN70fPYDWHSKnKdL/hAFebOsi5YIWBck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:a8:3f:9f:6c:a8:79:2b:19:1a:72:d9:07:5b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759
Validity
Not Before: Jun 6 23:00:44 2025 GMT
Not After : Jun 7 23:00:44 2025 GMT
Subject: CN=9ac22fb85283282048f3870969d5aa14fd46f819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:f5:97:dc:25:c8:e4:29:30:b5:ff:51:7a:
1b:6d:dd:86:22:a4:51:94:6b:af:b4:09:f0:dc:cd:
15:fa:0b:5a:3a:e2:40:82:72:2e:b0:8a:4c:90:e3:
15:a4:89:ca:ad:fa:c7:59:7c:7d:31:ce:ac:44:e4:
af:24:7c:a7:1e:29:b3:b2:3a:6f:3b:fc:8b:dc:3d:
97:9b:b5:7b:a2:92:5b:57:69:a4:c2:62:de:37:07:
e7:02:96:ce:91:83:eb:fe:0f:af:5f:e3:a1:bf:d9:
3d:90:6d:fb:6e:a0:0d:e4:e6:c3:7d:b7:57:a5:d5:
5c:2a:88:1c:87:9a:8b:b0:f2:36:71:5b:38:5b:d7:
68:40:9d:93:42:19:73:8c:53:5e:af:57:46:51:95:
34:09:fb:42:4f:6c:78:35:a4:d5:84:03:bf:68:42:
3b:63:14:ad:03:10:84:10:7d:a1:84:46:42:2e:3e:
3b:ae:fe:c0:61:c2:e8:95:b0:86:a3:a7:7c:a4:87:
b5:b5:9b:c2:cc:c2:8a:97:fd:12:df:f7:b1:5e:40:
aa:c6:7d:8d:65:56:9f:64:46:3c:e4:26:fb:ea:21:
d1:db:1b:c5:70:74:09:07:05:cf:c2:8d:0a:57:64:
23:0f:be:03:8c:f3:46:e2:a4:c7:a4:cc:c9:cb:56:
4b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C2:2F:B8:52:83:28:20:48:F3:87:09:69:D5:AA:14:FD:46:F8:19
X509v3 Authority Key Identifier:
keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9c:36:d1:4c:22:0b:d7:e7:70:c4:43:73:7c:ca:38:0f:ca:
3e:72:fb:c7:55:65:4e:4d:a0:5a:7c:d9:07:4a:22:f5:8a:81:
c2:a6:eb:b5:91:26:a8:00:bc:16:0e:5a:d4:7f:c1:5c:c2:ef:
1c:c7:7b:85:bf:28:b3:57:1b:4c:f0:ce:2d:6d:ff:e7:67:5e:
ae:b5:a2:b9:34:47:f9:a0:24:20:92:47:9d:25:2b:dc:a2:53:
81:fa:33:ff:c0:01:48:dd:e3:e4:45:d7:8d:74:4a:fd:ff:a9:
ab:23:74:bb:57:34:c1:84:ec:f5:6e:e8:84:16:3b:5c:59:00:
e7:5d:e3:06:91:e1:0d:ed:c5:82:ef:79:0e:b0:08:8b:8f:68:
17:7e:57:02:be:f9:66:70:d0:d6:21:35:01:db:66:ae:fd:86:
7c:f1:dc:cc:d3:9b:42:bd:f7:25:2d:f1:1b:f8:52:2d:60:49:
f3:f7:4a:3a:57:95:a2:98:10:df:92:ed:19:e2:11:02:54:44:
76:02:39:ee:1d:ba:bb:d4:04:62:c8:cd:a4:fc:21:b2:33:e6:
8b:91:c2:bf:f7:fd:3a:b3:5f:a2:c4:92:42:03:ea:3e:ff:b1:
9d:48:cd:51:56:ad:77:0b:d0:88:a1:8f:9a:b5:c4:13:c9:43:
54:95:1d:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeag/n2yoeSsZGnLZB1vIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NDMxZjFiZTlmZGMyNDE5MDk4NDc5Y2RlNDU3YmJmNzk1
NzE3NTkwHhcNMjUwNjA2MjMwMDQ0WhcNMjUwNjA3MjMwMDQ0WjAzMTEwLwYDVQQD
Eyg5YWMyMmZiODUyODMyODIwNDhmMzg3MDk2OWQ1YWExNGZkNDZmODE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKD1l9wlyOQpMLX/UXobbd2GIqRR
lGuvtAnw3M0V+gtaOuJAgnIusIpMkOMVpInKrfrHWXx9Mc6sROSvJHynHimzsjpv
O/yL3D2Xm7V7opJbV2mkwmLeNwfnApbOkYPr/g+vX+Ohv9k9kG37bqAN5ObDfbdX
pdVcKogch5qLsPI2cVs4W9doQJ2TQhlzjFNer1dGUZU0CftCT2x4NaTVhAO/aEI7
YxStAxCEEH2hhEZCLj47rv7AYcLolbCGo6d8pIe1tZvCzMKKl/0S3/exXkCqxn2N
ZVafZEY85Cb76iHR2xvFcHQJBwXPwo0KV2QjD74DjPNG4qTHpMzJy1ZL1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrCL7hSgyggSPOHCWnVqhT9RvgZMB8GA1UdIwQY
MBaAFDdDHxvp/cJBkJhHnN5Fe795VxdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNTM1NDctZDM0MC00MzkyLWFmNDYt
NjE1OTYxMzEyYjUyLzEvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iNTM1NDctZDM0MC00MzkyLWFmNDYtNjE1OTYxMzEyYjUy
LzEvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5w20Uwi
C9fncMRDc3zKOA/KPnL7x1VlTk2gWnzZB0oi9YqBwqbrtZEmqAC8Fg5a1H/BXMLv
HMd7hb8os1cbTPDOLW3/52derrWiuTRH+aAkIJJHnSUr3KJTgfoz/8ABSN3j5EXX
jXRK/f+pqyN0u1c0wYTs9W7ohBY7XFkA513jBpHhDe3Fgu95DrAIi49oF35XAr75
ZnDQ1iE1Adtmrv2GfPHczNObQr33JS3xG/hSLWBJ8/dKOleVopgQ35LtGeIRAlRE
dgI57h26u9QEYsjNpPwhsjPmi5HCv/f9OrNfosSSQgPqPv+xnUjNUVatdwvQiKGP
mrXEE8lDVJUdVA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:01:04 2025 by rpki-client