
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
File: nIMTOn4Fk7s5jq25J1jLySydZaU.mft (raw, json)
Hash identifier: RNTQFHu8I13GW/Zk9BPZ1d38sBWncN7WBM48luGP+Ew=
Subject key identifier: 84:CD:92:80:01:FD:5E:96:08:CA:06:B9:6C:6B:88:06:CF:E3:15:83
Authority key identifier: 9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
Certificate issuer: /CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Certificate serial: 01976E5083CFC51232B53600E05275782BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
Manifest number: 10C4
Signing time: Sat 14 Jun 2025 12:00:59 +0000
Manifest this update: Sat 14 Jun 2025 12:00:59 +0000
Manifest next update: Sun 15 Jun 2025 12:00:59 +0000
Files and hashes: 1: ekhJmeQnAobhvtQLQDb4UB8M1mE.roa (hash: 6CiHXbuoqrzSCFBPUfq3RLFxMNDauAW0jWPQmmN8RFM=)
2: nIMTOn4Fk7s5jq25J1jLySydZaU.crl (hash: 35YpKWCMgJHziW/duz2LTM/wum4vfgugbCJQpfI5FZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:83:cf:c5:12:32:b5:36:00:e0:52:75:78:2b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Validity
Not Before: Jun 14 12:00:59 2025 GMT
Not After : Jun 15 12:00:59 2025 GMT
Subject: CN=84cd928001fd5e9608ca06b96c6b8806cfe31583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bb:ee:03:bb:66:bd:9a:28:5c:8a:d0:19:34:
db:8d:1d:80:66:02:90:4e:f2:4f:03:3e:5c:10:2a:
ea:24:15:9a:32:9f:a1:6e:b1:18:cc:fe:85:60:e5:
4b:4b:83:90:24:49:79:99:64:db:d5:98:73:2a:37:
77:39:24:1a:db:95:51:f1:68:83:7e:e3:11:ff:c6:
f6:e7:b0:9f:fa:9e:55:f8:87:72:77:91:c0:ee:99:
b6:13:8d:eb:b1:6d:c1:db:a5:8d:e7:91:69:f5:55:
de:07:87:35:19:97:5e:24:da:5d:74:e5:74:14:a6:
c0:65:e8:7c:f3:14:68:0d:95:18:be:75:a5:59:41:
eb:61:97:da:85:d5:66:03:5f:01:80:e8:56:7b:45:
2b:dd:f1:27:e7:6c:fd:b7:21:9e:48:b7:01:fd:b1:
3e:d8:81:ca:03:54:66:1f:65:dd:0b:ac:83:a3:f6:
a0:bb:f1:dc:0c:33:b8:d2:a1:8e:ae:9d:27:d9:fb:
7b:4a:b5:b5:e7:aa:1e:17:c0:ce:8c:ff:7b:5b:4f:
cd:41:31:76:c8:b4:49:1b:f4:ab:34:c0:8c:db:d2:
7d:67:74:75:fc:5e:b2:d0:20:05:44:fd:bd:30:2f:
f9:25:f4:df:fd:a6:03:45:4f:3b:95:c2:2e:14:c1:
90:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CD:92:80:01:FD:5E:96:08:CA:06:B9:6C:6B:88:06:CF:E3:15:83
X509v3 Authority Key Identifier:
keyid:9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:dd:14:02:c2:bd:fd:f0:ed:03:0f:9a:d0:2d:11:9c:d2:7d:
94:df:66:65:30:82:55:26:09:4c:b3:8d:0b:47:4d:30:6c:f7:
dd:3f:77:e5:ec:94:43:4b:55:4d:f7:32:a8:12:59:c6:db:76:
60:29:ef:cc:37:30:ab:7e:26:6c:f3:5d:2b:6c:07:c4:5b:52:
8e:3e:ae:03:cc:9c:a5:0c:a4:73:6a:d6:7a:64:88:a4:fb:b5:
98:3e:02:18:c9:3b:9f:c7:27:5a:ba:04:a6:de:dd:23:d5:f9:
03:16:c6:d7:a7:c2:bf:8a:c1:b6:5e:a7:d2:9c:c4:2c:05:e3:
51:35:71:0a:a1:09:52:e6:63:b2:ca:56:24:a0:88:d6:6a:ca:
11:c0:ac:d6:0f:7b:4f:f7:95:22:f5:55:30:4e:1d:de:78:0b:
8d:a5:d9:34:79:29:bb:18:df:ba:e1:77:9a:ad:46:2c:e8:1b:
04:02:68:4a:d5:c6:07:41:ea:b2:f7:a3:91:6f:3a:78:c5:37:
d0:6e:86:a0:9e:f1:a6:e8:51:f1:ad:92:ad:c5:ee:5c:1e:a5:
24:4f:9d:76:46:4d:0b:d5:e2:61:4c:72:c3:8e:53:42:46:eb:
fe:8f:cb:93:5c:3a:b1:1b:d0:10:da:8e:85:9d:54:dd:44:93:
23:a3:42:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduUIPPxRIytTYA4FJ1eCvuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljODMxMzNhN2UwNTkzYmIzOThlYWRiOTI3NThjYmM5MmM5
ZDY1YTUwHhcNMjUwNjE0MTIwMDU5WhcNMjUwNjE1MTIwMDU5WjAzMTEwLwYDVQQD
Eyg4NGNkOTI4MDAxZmQ1ZTk2MDhjYTA2Yjk2YzZiODgwNmNmZTMxNTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rvuA7tmvZooXIrQGTTbjR2AZgKQ
TvJPAz5cECrqJBWaMp+hbrEYzP6FYOVLS4OQJEl5mWTb1ZhzKjd3OSQa25VR8WiD
fuMR/8b257Cf+p5V+Idyd5HA7pm2E43rsW3B26WN55Fp9VXeB4c1GZdeJNpddOV0
FKbAZeh88xRoDZUYvnWlWUHrYZfahdVmA18BgOhWe0Ur3fEn52z9tyGeSLcB/bE+
2IHKA1RmH2XdC6yDo/agu/HcDDO40qGOrp0n2ft7SrW156oeF8DOjP97W0/NQTF2
yLRJG/SrNMCM29J9Z3R1/F6y0CAFRP29MC/5JfTf/aYDRU87lcIuFMGQdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITNkoAB/V6WCMoGuWxriAbP4xWDMB8GA1UdIwQY
MBaAFJyDEzp+BZO7OY6tuSdYy8ksnWWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbklNVE9uNEZrN3M1anEyNUoxakx5U3lkWmFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9lZGExNWEtMDQyMy00NmJkLWIzMmEt
NTIxNDdhYWUwZWI0LzEvbklNVE9uNEZrN3M1anEyNUoxakx5U3lkWmFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9lZGExNWEtMDQyMy00NmJkLWIzMmEtNTIxNDdhYWUwZWI0
LzEvbklNVE9uNEZrN3M1anEyNUoxakx5U3lkWmFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAId0UAsK9
/fDtAw+a0C0RnNJ9lN9mZTCCVSYJTLONC0dNMGz33T935eyUQ0tVTfcyqBJZxtt2
YCnvzDcwq34mbPNdK2wHxFtSjj6uA8ycpQykc2rWemSIpPu1mD4CGMk7n8cnWroE
pt7dI9X5AxbG16fCv4rBtl6n0pzELAXjUTVxCqEJUuZjsspWJKCI1mrKEcCs1g97
T/eVIvVVME4d3ngLjaXZNHkpuxjfuuF3mq1GLOgbBAJoStXGB0HqsvejkW86eMU3
0G6GoJ7xpuhR8a2SrcXuXB6lJE+ddkZNC9XiYUxyw45TQkbr/o/Lk1w6sRvQENqO
hZ1U3USTI6NCOg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:28:45 2025 by rpki-client