Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
File: nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft (raw, json)
Hash identifier: 7+ybvQaYQTdzNbaAzuQim0bnvmzMECNvDvkThMUSEuE=
Subject key identifier: 02:50:93:8B:61:E5:90:C2:48:92:3E:E2:09:AE:3F:A6:F1:A3:C4:D5
Authority key identifier: 9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
Certificate issuer: /CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Certificate serial: 01974C31D41BB1BFBFD88D87FABBDA741AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
Manifest number: 0EDE
Signing time: Sat 07 Jun 2025 21:00:23 +0000
Manifest this update: Sat 07 Jun 2025 21:00:23 +0000
Manifest next update: Sun 08 Jun 2025 21:00:23 +0000
Files and hashes: 1: mcodiKTX1slSmfc3nZ7DZKGNYFk.roa (hash: 8YfkV+577aVFpH3FgiABnIRQh7w2LYtBhi55zdviFSU=)
2: nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl (hash: TkfiUzvosbmTfQXWK59tR4ftqCVW7U7+JMIZSMsPM7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:31:d4:1b:b1:bf:bf:d8:8d:87:fa:bb:da:74:1a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Validity
Not Before: Jun 7 21:00:23 2025 GMT
Not After : Jun 8 21:00:23 2025 GMT
Subject: CN=0250938b61e590c248923ee209ae3fa6f1a3c4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ab:3d:e4:4a:eb:3e:2f:8e:0d:6f:b0:09:ff:
9d:84:12:64:d0:2c:fb:4b:dd:73:87:1f:25:56:63:
f2:4f:32:f0:fb:29:90:7e:fd:3c:a3:8d:e3:ca:3f:
9a:92:56:a1:08:eb:99:55:e9:3d:6b:db:e1:96:6c:
de:6d:c5:c7:72:b1:82:a1:5f:cb:ca:4b:59:41:48:
f9:35:00:a8:96:ad:bc:25:fa:65:42:f0:24:09:02:
04:34:fe:16:1f:8a:96:22:65:33:00:6c:a9:3f:0f:
74:c8:32:be:a5:61:02:d0:83:7a:9a:05:e0:e8:2a:
de:33:dc:94:02:bd:65:50:ff:2a:ee:0a:af:ce:fd:
ea:fd:8d:63:e6:83:7f:99:f3:b8:01:a8:92:bd:3f:
79:53:1e:18:83:d0:e0:c7:5e:94:da:72:1b:e9:01:
3d:c7:cb:d3:04:c4:9d:05:45:7d:77:f4:b6:1a:af:
85:36:e2:f4:52:f6:da:fb:ea:64:64:7d:f5:7f:2d:
22:fa:24:92:23:aa:11:89:79:f0:63:d5:c8:0b:c3:
bb:e2:ae:51:95:59:3a:89:51:c2:18:d4:1d:02:2b:
56:20:e5:11:62:6a:97:70:e6:13:d6:08:43:ce:fd:
c8:b6:9f:0c:69:04:11:43:3d:1e:e6:bc:7c:79:91:
cb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:50:93:8B:61:E5:90:C2:48:92:3E:E2:09:AE:3F:A6:F1:A3:C4:D5
X509v3 Authority Key Identifier:
keyid:9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:99:26:98:78:e3:53:56:72:3a:ec:c9:c4:3d:81:74:35:4c:
7b:7e:4c:6a:9a:35:c8:70:d3:f9:8a:5c:5a:e3:58:34:17:dc:
02:c3:ef:38:00:5d:b9:0f:55:3b:e9:5a:a0:cd:9a:f5:60:18:
02:0e:13:6f:d0:eb:92:24:87:cf:d9:71:ce:f1:fc:1d:d1:a9:
42:fb:23:a8:54:9d:80:fd:47:b8:7a:23:4e:e2:fe:cd:23:5f:
2e:fa:be:e2:f7:15:dc:a4:b8:d9:3c:08:a3:96:d1:fc:79:da:
4b:c5:0a:fb:04:a6:05:f7:82:5a:9c:5c:22:bb:43:6b:5f:02:
65:08:30:8d:39:24:ed:bc:c0:2d:86:5f:80:99:39:52:47:07:
27:3c:43:72:51:44:6b:c0:ba:6b:f6:8e:b7:ae:31:61:3a:c6:
1b:4d:2c:de:27:01:e3:f5:65:40:84:80:ed:2b:a1:51:4f:9b:
ff:a4:08:36:5c:b4:cc:38:1b:c9:8a:32:b2:5e:97:06:f6:96:
f9:86:05:07:94:a2:41:41:b2:58:2a:ab:be:78:e5:99:99:76:
0d:a5:fa:29:a6:2d:08:24:d8:73:4c:86:4e:e0:71:23:9c:fb:
61:f8:01:cd:98:ba:61:7a:30:f5:44:43:3f:12:a2:2d:59:33:
c3:b5:f2:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMMdQbsb+/2I2H+rvadBrjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZjE5ODcxYjE3NTlmMzIzNzAxMmU0YjZkYmI2YzJmZDJi
ZThiNGIwHhcNMjUwNjA3MjEwMDIzWhcNMjUwNjA4MjEwMDIzWjAzMTEwLwYDVQQD
EygwMjUwOTM4YjYxZTU5MGMyNDg5MjNlZTIwOWFlM2ZhNmYxYTNjNGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56s95ErrPi+ODW+wCf+dhBJk0Cz7
S91zhx8lVmPyTzLw+ymQfv08o43jyj+aklahCOuZVek9a9vhlmzebcXHcrGCoV/L
yktZQUj5NQColq28JfplQvAkCQIENP4WH4qWImUzAGypPw90yDK+pWEC0IN6mgXg
6CreM9yUAr1lUP8q7gqvzv3q/Y1j5oN/mfO4AaiSvT95Ux4Yg9Dgx16U2nIb6QE9
x8vTBMSdBUV9d/S2Gq+FNuL0Uvba++pkZH31fy0i+iSSI6oRiXnwY9XIC8O74q5R
lVk6iVHCGNQdAitWIOURYmqXcOYT1ghDzv3Itp8MaQQRQz0e5rx8eZHL9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJQk4th5ZDCSJI+4gmuP6bxo8TVMB8GA1UdIwQY
MBaAFJ7xmHGxdZ8yNwEuS227bC/SvotLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnZHWWNiRjFuekkzQVM1TGJidHNMOUstaTBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hMzZkYmItNjAyNy00M2M0LTgxOTQt
NGEwY2IyNTVkNzNhLzEvbnZHWWNiRjFuekkzQVM1TGJidHNMOUstaTBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9hMzZkYmItNjAyNy00M2M0LTgxOTQtNGEwY2IyNTVkNzNh
LzEvbnZHWWNiRjFuekkzQVM1TGJidHNMOUstaTBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpkmmHjj
U1ZyOuzJxD2BdDVMe35Mapo1yHDT+YpcWuNYNBfcAsPvOABduQ9VO+laoM2a9WAY
Ag4Tb9DrkiSHz9lxzvH8HdGpQvsjqFSdgP1HuHojTuL+zSNfLvq+4vcV3KS42TwI
o5bR/HnaS8UK+wSmBfeCWpxcIrtDa18CZQgwjTkk7bzALYZfgJk5UkcHJzxDclFE
a8C6a/aOt64xYTrGG00s3icB4/VlQISA7SuhUU+b/6QINly0zDgbyYoysl6XBvaW
+YYFB5SiQUGyWCqrvnjlmZl2DaX6KaYtCCTYc0yGTuBxI5z7YfgBzZi6YXow9URD
PxKiLVkzw7XyVw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:36:00 2025 by rpki-client