Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: f44vsWUo2N+mlpYUJoid+TCMZKKag4NVU1ZfVA9lKIE=
Subject key identifier: 11:AF:E1:CE:93:7F:56:7B:D2:E8:F0:26:7A:F7:FD:43:42:86:3D:61
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 019759802183ED322466F9223AA066151F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 1584
Signing time: Tue 10 Jun 2025 11:00:58 +0000
Manifest this update: Tue 10 Jun 2025 11:00:58 +0000
Manifest next update: Wed 11 Jun 2025 11:00:58 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: a9GXVMnVmtbIWPrI5TFC99bu+DPjfxUcvqrpWN5Op68=)
2: Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa (hash: vg1TLVE75nnwqoL/egav334PmpcLAh17CAvdGO24png=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:80:21:83:ed:32:24:66:f9:22:3a:a0:66:15:1f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Jun 10 11:00:58 2025 GMT
Not After : Jun 11 11:00:58 2025 GMT
Subject: CN=11afe1ce937f567bd2e8f0267af7fd4342863d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a8:0e:45:66:aa:96:d0:d0:85:78:47:f7:82:
8d:d9:02:01:c3:81:60:ec:28:03:17:8d:27:48:fa:
8c:ba:76:a2:bf:36:a8:96:3b:91:4a:11:13:29:46:
3a:71:7c:67:59:07:da:ed:51:b1:2d:51:33:c1:54:
83:5a:9d:b9:d0:81:bc:38:7b:f9:b1:46:4a:e4:2a:
cd:9d:0f:00:b3:0c:b4:f4:75:f0:b7:15:ee:44:ab:
fe:0b:6d:bb:b7:a3:c0:7d:31:77:81:b5:04:9c:f3:
94:c8:10:7c:98:20:51:5c:dc:c4:01:95:4d:aa:3e:
c1:40:c1:de:80:88:28:9a:92:0d:2d:a5:f9:5a:d8:
df:2c:d7:44:35:d0:50:0e:e5:98:94:ea:9d:04:80:
fc:96:ed:be:7e:c9:73:93:56:fd:e2:b1:b8:26:68:
fc:b9:f4:6c:4a:24:55:59:9e:29:af:c9:1e:cc:18:
ad:f4:21:f2:24:04:23:ba:58:df:e4:f9:f9:79:8f:
02:64:7d:4c:42:df:a4:ed:40:69:eb:6e:f2:26:e9:
2d:dc:ed:03:a8:28:6a:34:39:a9:69:a8:44:49:a5:
c7:19:2a:38:47:7a:7c:20:f7:1c:4c:65:99:82:2f:
83:87:b4:e7:8e:a1:22:d0:12:a1:83:ce:05:9e:c2:
85:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AF:E1:CE:93:7F:56:7B:D2:E8:F0:26:7A:F7:FD:43:42:86:3D:61
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a9:8c:ba:1d:c7:bd:ff:45:e6:5a:2a:eb:ca:bc:e8:01:24:
8a:9d:b9:00:16:a9:1e:0e:1c:d5:3c:24:65:80:df:7c:1f:8e:
2c:6e:04:30:2f:f4:81:1c:b6:4a:2f:32:57:50:a3:34:b9:c2:
6d:66:29:1d:2e:70:5a:c5:13:04:89:4e:c8:9b:f7:9e:e0:14:
aa:3e:3d:a6:23:bb:24:13:8a:fb:10:04:5c:fa:00:07:df:c4:
1a:5f:68:a0:07:2e:a5:d6:bc:7f:3e:b2:7a:db:83:ff:82:1c:
f7:e8:04:05:b3:ec:81:ac:75:8b:88:cc:ab:37:bf:d3:eb:e8:
cd:d1:91:50:de:69:6f:6f:96:de:79:05:76:f1:73:98:a4:3b:
b4:ae:d4:3a:82:01:51:09:f0:ee:82:f3:98:ad:9e:a1:74:01:
ca:07:34:08:c5:13:20:ae:bd:01:26:f2:6b:67:29:95:d2:65:
59:25:24:07:21:93:20:b3:cf:17:78:70:67:e0:05:69:61:c0:
dc:12:23:63:35:30:00:b3:8e:1c:9a:fc:bd:6d:04:ee:e8:c0:
10:3b:7b:0b:59:ee:1b:1c:66:cb:21:54:92:5b:77:a4:72:7c:
f4:cc:b0:e7:fb:d5:67:95:d3:ef:b4:70:42:11:7e:98:d7:e1:
30:89:1a:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZgCGD7TIkZvkiOqBmFR9xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZDQ1ZjJhYzViY2UxNTY5ZGY2YjJhZDgwZDE2ZjFiOTJm
YmQ4NWMwHhcNMjUwNjEwMTEwMDU4WhcNMjUwNjExMTEwMDU4WjAzMTEwLwYDVQQD
EygxMWFmZTFjZTkzN2Y1NjdiZDJlOGYwMjY3YWY3ZmQ0MzQyODYzZDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzagORWaqltDQhXhH94KN2QIBw4Fg
7CgDF40nSPqMunaivzaoljuRShETKUY6cXxnWQfa7VGxLVEzwVSDWp250IG8OHv5
sUZK5CrNnQ8Aswy09HXwtxXuRKv+C227t6PAfTF3gbUEnPOUyBB8mCBRXNzEAZVN
qj7BQMHegIgompINLaX5WtjfLNdENdBQDuWYlOqdBID8lu2+fslzk1b94rG4Jmj8
ufRsSiRVWZ4pr8kezBit9CHyJAQjuljf5Pn5eY8CZH1MQt+k7UBp627yJukt3O0D
qChqNDmpaahESaXHGSo4R3p8IPccTGWZgi+Dh7TnjqEi0BKhg84FnsKFjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGv4c6Tf1Z70ujwJnr3/UNChj1hMB8GA1UdIwQY
MBaAFDXUXyrFvOFWnfayrYDRbxuS+9hcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUt
NmI3ZDdlNGVkNzAxLzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUtNmI3ZDdlNGVkNzAx
LzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE6mMuh3H
vf9F5loq68q86AEkip25ABapHg4c1TwkZYDffB+OLG4EMC/0gRy2Si8yV1CjNLnC
bWYpHS5wWsUTBIlOyJv3nuAUqj49piO7JBOK+xAEXPoAB9/EGl9ooAcupda8fz6y
etuD/4Ic9+gEBbPsgax1i4jMqze/0+vozdGRUN5pb2+W3nkFdvFzmKQ7tK7UOoIB
UQnw7oLzmK2eoXQBygc0CMUTIK69ASbya2cpldJlWSUkByGTILPPF3hwZ+AFaWHA
3BIjYzUwALOOHJr8vW0E7ujAEDt7C1nuGxxmyyFUklt3pHJ89Myw5/vVZ5XT77Rw
QhF+mNfhMIkaAA==
-----END CERTIFICATE-----
Generated at Tue Jun 10 14:26:34 2025 by rpki-client