Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File: NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier: CTq7FpOZMioPqRbvtysj8h999+hYhAqt53t4fssVZrg=
Subject key identifier: DF:59:CD:CD:FD:11:6D:45:6C:E4:F8:3C:3C:BE:2B:16:97:6F:E5:C4
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial: 0197496841A127B6DE5A7627D42025E39FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number: 0C5D
Signing time: Sat 07 Jun 2025 08:00:58 +0000
Manifest this update: Sat 07 Jun 2025 08:00:58 +0000
Manifest next update: Sun 08 Jun 2025 08:00:58 +0000
Files and hashes: 1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: wvnHPeNRk2ar3/m98fZ0lwma2H7ICjs0j0MCizqGgM4=)
2: apGrLeQXGFDnmjDGU5J1xhLa7ts.roa (hash: TvPWK0JX9FOtKwbjXZr2maaJZh4hwmSWvBJ0nfoejxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:41:a1:27:b6:de:5a:76:27:d4:20:25:e3:9f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Validity
Not Before: Jun 7 08:00:58 2025 GMT
Not After : Jun 8 08:00:58 2025 GMT
Subject: CN=df59cdcdfd116d456ce4f83c3cbe2b16976fe5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a7:98:a1:af:08:a6:7a:41:32:e7:35:4b:4e:
c9:b8:37:f3:24:ae:2f:cc:5d:81:73:99:7f:c7:b8:
d8:23:da:07:a6:98:2f:61:55:36:42:23:cb:a4:8b:
02:c0:18:44:2c:da:4d:33:1d:85:29:bf:29:0d:6c:
e7:ee:c7:04:bf:7f:42:cd:76:3d:3d:3c:4a:d9:7c:
5a:06:d7:4e:ed:cd:a7:5d:85:29:70:95:55:72:3d:
3d:8e:86:c9:37:05:55:b2:4b:3b:fb:a7:cb:db:05:
d6:fe:52:29:7d:59:38:d3:b7:27:8f:98:60:6e:87:
02:97:66:49:cc:a1:31:57:56:4f:0e:8b:b2:78:7d:
db:c4:37:f2:e2:22:ae:19:b2:1a:be:17:ea:b0:7a:
68:16:db:06:82:b9:f5:af:22:38:a2:fb:25:8b:c9:
5b:ca:05:f0:ab:4d:cb:45:15:ed:f7:a2:59:f2:ac:
23:01:04:76:dd:6c:f0:a7:0e:99:6a:a9:7a:86:c3:
89:3e:2a:b9:dd:17:df:ed:ec:22:c0:43:ae:e1:9c:
e3:0a:63:65:95:a4:5c:ed:f8:a9:2b:02:69:b3:c1:
46:4b:f4:0b:6d:69:e0:15:95:8c:c7:63:b9:02:11:
4f:f0:b4:e1:cb:80:55:57:1a:7f:36:60:15:f1:17:
75:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:59:CD:CD:FD:11:6D:45:6C:E4:F8:3C:3C:BE:2B:16:97:6F:E5:C4
X509v3 Authority Key Identifier:
keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e2:07:4e:0a:71:7f:b6:45:ce:cc:5b:f3:f8:1f:97:8f:a3:
24:b9:0d:b3:7a:e7:b1:34:f7:ab:b0:f5:77:87:f7:67:e3:47:
26:72:68:6a:48:07:a0:a4:c2:aa:bf:a5:9c:48:08:8b:35:3e:
08:98:e3:4c:be:49:70:d6:47:ad:5b:e9:b3:d9:a5:91:5c:81:
47:88:4c:fb:ce:03:c5:0f:89:70:2c:b8:c1:03:47:30:65:c9:
3d:a0:5c:e9:6b:ba:80:c8:2e:9a:d8:dd:2f:dc:bc:f5:23:e1:
70:f7:67:d8:03:87:74:ee:f2:dc:c5:ce:0c:4d:31:6a:21:9f:
85:c5:c7:df:f7:6d:40:35:bb:87:cd:fa:41:4e:9b:77:17:0f:
7e:c2:3b:fc:f4:40:f3:1e:fc:11:b1:7e:a7:9a:e9:3c:fb:d0:
53:aa:5b:ad:bd:6e:6f:c5:9c:56:d7:a7:15:11:f9:dd:7e:98:
b4:bd:63:fa:8d:ba:1c:78:65:2d:3a:31:90:a0:d9:9d:d3:bc:
a6:2f:42:eb:90:8e:10:63:b3:18:e6:b2:14:de:f2:83:e8:aa:
2c:b3:7a:60:66:eb:c1:2b:75:3b:bf:b0:8e:79:03:ab:ec:d8:
1c:02:0e:cf:41:71:75:30:2e:07:57:c6:7b:a5:27:9e:45:5a:
5a:54:bd:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaEGhJ7beWnYn1CAl45/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NzQ2NWZmZGJhM2MwNWMyMWJlNWIxNWYwZDkxNWVmY2Ni
MDY5ZTUwHhcNMjUwNjA3MDgwMDU4WhcNMjUwNjA4MDgwMDU4WjAzMTEwLwYDVQQD
EyhkZjU5Y2RjZGZkMTE2ZDQ1NmNlNGY4M2MzY2JlMmIxNjk3NmZlNWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qeYoa8IpnpBMuc1S07JuDfzJK4v
zF2Bc5l/x7jYI9oHppgvYVU2QiPLpIsCwBhELNpNMx2FKb8pDWzn7scEv39CzXY9
PTxK2XxaBtdO7c2nXYUpcJVVcj09jobJNwVVsks7+6fL2wXW/lIpfVk407cnj5hg
bocCl2ZJzKExV1ZPDouyeH3bxDfy4iKuGbIavhfqsHpoFtsGgrn1ryI4ovsli8lb
ygXwq03LRRXt96JZ8qwjAQR23Wzwpw6Zaql6hsOJPiq53Rff7ewiwEOu4ZzjCmNl
laRc7fipKwJps8FGS/QLbWngFZWMx2O5AhFP8LThy4BVVxp/NmAV8Rd1ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9Zzc39EW1FbOT4PDy+KxaXb+XEMB8GA1UdIwQY
MBaAFDZ0Zf/bo8BcIb5bFfDZFe/MsGnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NWNhMWEtNjgyOC00ZTZkLTlmZWEt
NWU0N2NmMTk5ZGZmLzEvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NWNhMWEtNjgyOC00ZTZkLTlmZWEtNWU0N2NmMTk5ZGZm
LzEvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+IHTgpx
f7ZFzsxb8/gfl4+jJLkNs3rnsTT3q7D1d4f3Z+NHJnJoakgHoKTCqr+lnEgIizU+
CJjjTL5JcNZHrVvps9mlkVyBR4hM+84DxQ+JcCy4wQNHMGXJPaBc6Wu6gMgumtjd
L9y89SPhcPdn2AOHdO7y3MXODE0xaiGfhcXH3/dtQDW7h836QU6bdxcPfsI7/PRA
8x78EbF+p5rpPPvQU6pbrb1ub8WcVtenFRH53X6YtL1j+o26HHhlLToxkKDZndO8
pi9C65COEGOzGOayFN7yg+iqLLN6YGbrwSt1O7+wjnkDq+zYHAIOz0FxdTAuB1fG
e6UnnkVaWlS9qg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:31:34 2025 by rpki-client