Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
File: nIMTOn4Fk7s5jq25J1jLySydZaU.mft (raw, json)
Hash identifier: +EDCLnl2Do7Z+RMi//aPDgkz9GZIEWy7Kfc4Ll3nAnc=
Subject key identifier: 0C:1F:97:46:18:00:E4:0D:67:70:12:AA:D9:B1:78:F0:08:2F:3C:1B
Authority key identifier: 9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
Certificate issuer: /CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Certificate serial: 01975EDD429048EAD302CFB97015E660B2B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
Manifest number: 10BC
Signing time: Wed 11 Jun 2025 12:00:47 +0000
Manifest this update: Wed 11 Jun 2025 12:00:47 +0000
Manifest next update: Thu 12 Jun 2025 12:00:47 +0000
Files and hashes: 1: ekhJmeQnAobhvtQLQDb4UB8M1mE.roa (hash: 6CiHXbuoqrzSCFBPUfq3RLFxMNDauAW0jWPQmmN8RFM=)
2: nIMTOn4Fk7s5jq25J1jLySydZaU.crl (hash: pTdekIaupB8mGQPRhFj8zMjwYtBXCFdWFqDBsi7GZTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:dd:42:90:48:ea:d3:02:cf:b9:70:15:e6:60:b2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Validity
Not Before: Jun 11 12:00:47 2025 GMT
Not After : Jun 12 12:00:47 2025 GMT
Subject: CN=0c1f97461800e40d677012aad9b178f0082f3c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4d:ab:ab:05:5b:ae:c8:49:4e:22:75:80:95:
fe:df:22:a7:dd:5f:29:af:1b:45:21:80:1a:18:bc:
61:9f:e1:44:ed:a1:37:ea:96:d6:eb:38:8b:c2:4c:
8d:26:51:97:e7:75:fd:1d:a2:ef:55:f1:24:79:8a:
e1:f2:f6:41:3e:03:1b:5f:c0:3c:b0:84:3d:ef:a6:
31:8f:4c:57:0f:33:b2:b8:f5:a2:6f:1f:b5:df:f3:
4e:ec:18:38:37:01:da:81:32:7a:76:9c:e6:0b:f7:
70:c4:99:ec:a1:2e:bb:69:37:5d:fe:e4:8f:66:4e:
2e:ec:03:68:7a:dd:01:22:0a:c9:42:37:95:27:f4:
4e:73:79:0e:60:a6:ce:12:e4:c4:37:95:f3:b5:73:
2b:12:cb:d6:10:4a:30:56:0a:c8:75:5e:94:31:25:
53:d6:58:94:fd:e4:57:79:8a:3d:51:e7:61:bd:72:
38:6f:e2:a8:1d:12:7e:5f:ad:a6:c0:a9:c2:4e:4b:
f4:12:8a:3a:98:8d:b2:aa:e4:09:51:f4:da:45:86:
bb:45:5c:d9:4b:11:55:b9:7c:1a:01:a5:ef:80:a9:
71:b8:55:0f:28:16:0d:63:3e:fd:d1:94:0a:fd:b7:
b3:c2:9a:68:80:15:37:f7:cf:1e:b3:af:6c:07:07:
3d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1F:97:46:18:00:E4:0D:67:70:12:AA:D9:B1:78:F0:08:2F:3C:1B
X509v3 Authority Key Identifier:
keyid:9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:34:4a:5d:e2:d5:88:46:f6:d2:38:c6:0d:c0:5e:a0:92:9d:
22:db:8b:bc:45:d7:9d:56:8b:26:64:c6:10:68:c2:05:09:91:
c4:6d:83:ba:75:f1:3b:52:4d:75:85:3a:16:5e:40:16:b4:f7:
95:fb:c9:bc:f2:36:d4:74:1a:d1:70:59:cb:45:de:b5:d8:74:
fc:70:ec:94:10:75:40:b8:2f:37:5f:a5:dc:32:ff:05:1f:3b:
d4:fb:bc:0e:4c:2e:6f:ed:18:eb:f0:ca:96:52:5b:15:e0:90:
07:16:e1:13:c9:62:d4:4f:17:a6:09:50:35:7e:0e:1a:ba:85:
d1:12:62:1f:c2:1e:67:73:bd:27:8a:78:15:a2:66:15:4c:5f:
af:39:34:40:37:4e:f2:ea:5e:c8:53:58:70:15:0a:4a:1a:ed:
5d:d7:21:f7:d1:43:84:b2:a0:c4:1f:b3:ab:c7:56:7e:9e:e9:
4a:36:0b:65:4f:08:c9:51:b8:f1:d5:18:74:77:ed:b4:ab:b5:
78:fd:e7:fc:01:18:10:7b:bd:ba:f7:f6:a3:13:c9:d2:a0:a1:
1b:89:2e:78:9d:b3:f1:f0:87:22:62:ac:34:1a:dd:25:c2:05:
59:3e:d2:86:86:33:df:b7:9e:3e:fb:9e:fc:1f:b2:4b:e2:55:
78:b1:00:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZde3UKQSOrTAs+5cBXmYLKyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljODMxMzNhN2UwNTkzYmIzOThlYWRiOTI3NThjYmM5MmM5
ZDY1YTUwHhcNMjUwNjExMTIwMDQ3WhcNMjUwNjEyMTIwMDQ3WjAzMTEwLwYDVQQD
EygwYzFmOTc0NjE4MDBlNDBkNjc3MDEyYWFkOWIxNzhmMDA4MmYzYzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk2rqwVbrshJTiJ1gJX+3yKn3V8p
rxtFIYAaGLxhn+FE7aE36pbW6ziLwkyNJlGX53X9HaLvVfEkeYrh8vZBPgMbX8A8
sIQ976Yxj0xXDzOyuPWibx+13/NO7Bg4NwHagTJ6dpzmC/dwxJnsoS67aTdd/uSP
Zk4u7ANoet0BIgrJQjeVJ/ROc3kOYKbOEuTEN5XztXMrEsvWEEowVgrIdV6UMSVT
1liU/eRXeYo9UedhvXI4b+KoHRJ+X62mwKnCTkv0Eoo6mI2yquQJUfTaRYa7RVzZ
SxFVuXwaAaXvgKlxuFUPKBYNYz790ZQK/bezwppogBU3988es69sBwc9vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwfl0YYAOQNZ3ASqtmxePAILzwbMB8GA1UdIwQY
MBaAFJyDEzp+BZO7OY6tuSdYy8ksnWWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbklNVE9uNEZrN3M1anEyNUoxakx5U3lkWmFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9lZGExNWEtMDQyMy00NmJkLWIzMmEt
NTIxNDdhYWUwZWI0LzEvbklNVE9uNEZrN3M1anEyNUoxakx5U3lkWmFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9lZGExNWEtMDQyMy00NmJkLWIzMmEtNTIxNDdhYWUwZWI0
LzEvbklNVE9uNEZrN3M1anEyNUoxakx5U3lkWmFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjRKXeLV
iEb20jjGDcBeoJKdItuLvEXXnVaLJmTGEGjCBQmRxG2DunXxO1JNdYU6Fl5AFrT3
lfvJvPI21HQa0XBZy0Xetdh0/HDslBB1QLgvN1+l3DL/BR871Pu8Dkwub+0Y6/DK
llJbFeCQBxbhE8li1E8XpglQNX4OGrqF0RJiH8IeZ3O9J4p4FaJmFUxfrzk0QDdO
8upeyFNYcBUKShrtXdch99FDhLKgxB+zq8dWfp7pSjYLZU8IyVG48dUYdHfttKu1
eP3n/AEYEHu9uvf2oxPJ0qChG4kueJ2z8fCHImKsNBrdJcIFWT7ShoYz37eePvue
/B+yS+JVeLEA9Q==
-----END CERTIFICATE-----
Generated at Wed Jun 11 21:28:58 2025 by rpki-client