Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
File: n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft (raw, json)
Hash identifier: /5FyINi936CsURFdKyckF7S17VKH5/Tv0uStbnG73ks=
Subject key identifier: 14:5F:97:F4:DF:CE:6F:42:CE:1F:DC:96:A0:13:CC:8F:1E:5D:72:3A
Authority key identifier: 9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
Certificate issuer: /CN=9f87521f15e0457288a9f196a8c8865c36922150
Certificate serial: 01974FA1223C0E6CD3471CE0A5A80AF76D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 13:00:49 +0000
Manifest this update: Sun 08 Jun 2025 13:00:49 +0000
Manifest next update: Mon 09 Jun 2025 13:00:49 +0000
Files and hashes: 1: ItUfI_e5TZV8Ja35X57TtR81NmA.roa (hash: IR3NcH60QSQHq12hzjVbCSbj+J8hOMovAsbbfhH0qaA=)
2: n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl (hash: SSKjJKKS034HGVI0ZV/GH3v2IH8xa2uTUetpZP/QD0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:22:3c:0e:6c:d3:47:1c:e0:a5:a8:0a:f7:6d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f87521f15e0457288a9f196a8c8865c36922150
Validity
Not Before: Jun 8 13:00:49 2025 GMT
Not After : Jun 9 13:00:49 2025 GMT
Subject: CN=145f97f4dfce6f42ce1fdc96a013cc8f1e5d723a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b4:5f:49:9f:7b:9d:26:ef:ff:9b:7a:26:a3:
fc:66:97:fd:36:3d:de:b7:b7:f8:fe:14:c0:60:14:
be:50:a9:54:a8:e4:20:2d:3d:4f:7b:77:f6:19:c3:
0d:07:02:65:29:54:f7:12:4a:f4:e8:c3:62:4a:4e:
d0:71:e5:aa:fa:dd:86:bd:65:c5:b9:12:83:0a:77:
f2:cf:cc:06:f5:ce:2a:b9:e7:7e:48:a8:f5:ce:0e:
83:2e:74:77:d0:55:75:77:e8:f4:53:53:64:03:14:
2e:69:93:72:18:f7:d8:67:6d:36:86:36:e8:ef:de:
49:bf:e0:37:76:2c:6f:df:25:04:4b:a7:9a:7d:b0:
45:ea:45:52:a6:19:c2:cc:3a:4a:92:7b:22:3d:10:
07:5f:0e:19:bd:0e:10:9a:06:49:71:8d:d9:5b:2c:
62:ad:0c:93:03:3f:d2:9d:6c:74:95:92:3c:72:b3:
b8:01:79:db:ca:ec:0e:d6:1d:b0:27:b3:e8:0e:6e:
52:bc:e5:ac:99:d5:5e:23:48:8c:b9:c8:0e:79:85:
a1:f2:d2:86:94:1f:17:f5:d3:c0:64:d3:25:61:b2:
55:c5:72:5a:cf:ea:b1:cb:2f:e0:c9:83:60:ac:96:
66:6f:95:ae:34:81:80:d9:24:d5:f5:66:31:3b:20:
3f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5F:97:F4:DF:CE:6F:42:CE:1F:DC:96:A0:13:CC:8F:1E:5D:72:3A
X509v3 Authority Key Identifier:
keyid:9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6e:a2:f7:e7:5e:1a:c7:08:e1:3f:8e:28:e5:57:ec:4d:bd:
b6:d4:a7:86:54:58:a1:53:63:b0:36:39:c7:cc:69:ae:9d:e3:
d0:be:3d:b5:b6:99:75:91:71:b9:46:79:8f:58:09:6f:9e:be:
60:3e:93:ff:f2:7d:87:d4:17:89:f3:ea:f7:c6:ae:a9:d9:cf:
4d:62:96:98:a6:ca:62:0c:3b:76:aa:41:7f:a7:f6:4e:3b:ab:
fc:5b:d3:4f:3e:d6:e4:c2:ed:f0:ac:17:8b:41:6a:c5:72:48:
f3:a8:4f:17:73:b3:24:9a:bb:74:c4:61:21:54:dd:b0:e5:5b:
58:0f:14:0e:fb:61:25:fb:79:c5:12:60:a4:99:3a:77:0f:3b:
8b:fc:87:37:4c:5f:05:b6:ef:90:57:b3:89:2c:ff:d5:f5:6d:
6e:5e:d7:11:a2:4a:5c:e4:0d:38:1d:6c:89:f5:38:8d:99:c3:
9f:8c:f6:22:9e:3d:ef:95:c9:f6:4f:2c:fc:1e:fc:47:05:b2:
47:2c:3b:de:7d:78:d1:7e:4b:f4:dc:2e:a9:da:95:34:1f:d7:
51:9e:f5:9a:80:de:95:88:0a:64:c4:2e:2b:cc:ed:df:1f:67:
78:7f:94:8a:56:93:05:29:ad:b2:58:41:e0:45:77:54:72:9f:
e0:6a:64:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPoSI8DmzTRxzgpagK920aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODc1MjFmMTVlMDQ1NzI4OGE5ZjE5NmE4Yzg4NjVjMzY5
MjIxNTAwHhcNMjUwNjA4MTMwMDQ5WhcNMjUwNjA5MTMwMDQ5WjAzMTEwLwYDVQQD
EygxNDVmOTdmNGRmY2U2ZjQyY2UxZmRjOTZhMDEzY2M4ZjFlNWQ3MjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirRfSZ97nSbv/5t6JqP8Zpf9Nj3e
t7f4/hTAYBS+UKlUqOQgLT1Pe3f2GcMNBwJlKVT3Ekr06MNiSk7QceWq+t2GvWXF
uRKDCnfyz8wG9c4qued+SKj1zg6DLnR30FV1d+j0U1NkAxQuaZNyGPfYZ202hjbo
795Jv+A3dixv3yUES6eafbBF6kVSphnCzDpKknsiPRAHXw4ZvQ4QmgZJcY3ZWyxi
rQyTAz/SnWx0lZI8crO4AXnbyuwO1h2wJ7PoDm5SvOWsmdVeI0iMucgOeYWh8tKG
lB8X9dPAZNMlYbJVxXJaz+qxyy/gyYNgrJZmb5WuNIGA2STV9WYxOyA/JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRfl/Tfzm9Czh/clqATzI8eXXI6MB8GA1UdIwQY
MBaAFJ+HUh8V4EVyiKnxlqjIhlw2kiFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRkU0h4WGdSWEtJcWZHV3FNaUdYRGFTSVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82ODA1ODktODQ3Mi00M2ViLWIwMzQt
MjE3NjlkZTRhMWE4LzEvbjRkU0h4WGdSWEtJcWZHV3FNaUdYRGFTSVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS82ODA1ODktODQ3Mi00M2ViLWIwMzQtMjE3NjlkZTRhMWE4
LzEvbjRkU0h4WGdSWEtJcWZHV3FNaUdYRGFTSVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABG6i9+de
GscI4T+OKOVX7E29ttSnhlRYoVNjsDY5x8xprp3j0L49tbaZdZFxuUZ5j1gJb56+
YD6T//J9h9QXifPq98auqdnPTWKWmKbKYgw7dqpBf6f2Tjur/FvTTz7W5MLt8KwX
i0FqxXJI86hPF3OzJJq7dMRhIVTdsOVbWA8UDvthJft5xRJgpJk6dw87i/yHN0xf
BbbvkFeziSz/1fVtbl7XEaJKXOQNOB1sifU4jZnDn4z2Ip4975XJ9k8s/B78RwWy
Ryw73n140X5L9NwuqdqVNB/XUZ71moDelYgKZMQuK8zt3x9neH+UilaTBSmtslhB
4EV3VHKf4Gpkzw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 20:53:39 2025 by rpki-client