Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
File: nuw0uvkiAow0Mvj48ivaavhrd7I.mft (raw, json)
Hash identifier: iEIbwVnQ8LYP1r5xRAau4SGahM6TCGrIOT45BiVvzwM=
Subject key identifier: 0F:A7:7E:ED:5C:90:4A:2C:81:E4:F5:5D:35:6C:F8:82:89:27:1E:B2
Authority key identifier: 9E:EC:34:BA:F9:22:02:8C:34:32:F8:F8:F2:2B:DA:6A:F8:6B:77:B2
Certificate issuer: /CN=9eec34baf922028c3432f8f8f22bda6af86b77b2
Certificate serial: 01974C69BE5025D51A80591305F3DECCB5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
Manifest number: 1586
Signing time: Sat 07 Jun 2025 22:01:27 +0000
Manifest this update: Sat 07 Jun 2025 22:01:27 +0000
Manifest next update: Sun 08 Jun 2025 22:01:27 +0000
Files and hashes: 1: nuw0uvkiAow0Mvj48ivaavhrd7I.crl (hash: D4EEZZYQeWW1swfhOMQIcnstJFZPW3pxmvVaNAag+xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:be:50:25:d5:1a:80:59:13:05:f3:de:cc:b5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eec34baf922028c3432f8f8f22bda6af86b77b2
Validity
Not Before: Jun 7 22:01:27 2025 GMT
Not After : Jun 8 22:01:27 2025 GMT
Subject: CN=0fa77eed5c904a2c81e4f55d356cf88289271eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:86:6d:57:d6:e3:c7:7c:23:6e:cc:a6:ac:
ba:e7:87:af:8d:0a:e6:71:4c:4c:3b:69:41:50:8c:
6e:73:4f:93:26:9c:04:81:ab:f7:5e:62:78:59:9c:
64:b3:0d:1d:ab:d4:30:89:ca:5c:d3:70:92:20:68:
25:8f:2c:25:22:7e:9e:04:92:be:a9:48:cf:ea:fa:
98:56:6e:35:8a:24:59:90:13:c8:72:4a:89:06:5b:
19:ed:e0:64:0a:50:72:81:31:aa:3b:b9:b7:76:a5:
e4:5b:73:a2:77:b1:30:24:50:25:03:07:a3:c5:df:
bd:d3:40:df:6b:ab:77:b6:e5:32:2f:b2:cb:9f:b6:
a3:ae:1a:f9:50:3c:d7:83:7a:28:ac:2d:8b:dd:3b:
79:84:02:2e:94:49:93:34:48:ff:ac:4b:63:42:fc:
2a:d0:72:c0:63:35:b6:cf:86:78:3b:4c:6a:26:1e:
dc:53:8e:9c:0b:79:74:39:7d:63:96:40:5b:d1:ae:
df:60:77:5c:b7:64:93:dc:92:d0:0a:e3:41:ff:f1:
72:42:bc:db:00:0b:3c:de:96:6d:16:ec:a6:43:0f:
9e:cf:46:69:f9:0e:31:ef:ee:7c:05:e3:d8:d0:ea:
17:ad:01:78:11:80:e4:64:a5:b9:d2:45:e1:6e:87:
6c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A7:7E:ED:5C:90:4A:2C:81:E4:F5:5D:35:6C:F8:82:89:27:1E:B2
X509v3 Authority Key Identifier:
keyid:9E:EC:34:BA:F9:22:02:8C:34:32:F8:F8:F2:2B:DA:6A:F8:6B:77:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:07:cc:24:49:08:d3:39:bc:10:28:81:e3:57:69:00:dc:e2:
39:b2:7f:ce:dc:cc:d1:e4:4a:a5:7f:23:54:0c:19:0f:41:f4:
aa:3e:82:fc:c6:34:62:80:7c:a4:1d:01:db:7a:51:00:a0:28:
30:21:ef:a5:fd:80:ef:b4:5b:92:ae:8e:2a:4c:e6:1b:be:41:
6d:f6:4f:4c:97:a0:00:43:01:dd:4d:e2:69:cb:05:b6:7d:8a:
ff:ff:99:dc:bb:b0:61:9c:ac:04:f9:88:6b:e4:d3:ae:85:74:
eb:2b:90:95:aa:db:bd:f1:36:17:12:f2:73:5e:65:0d:e1:f4:
8a:4f:7d:d3:b8:35:f0:aa:42:4a:fd:19:b0:9f:56:3f:7f:e0:
20:76:c0:11:79:da:30:41:2f:80:35:95:0d:ef:88:3c:0c:9c:
b9:ff:02:22:15:b3:01:f8:b4:12:af:be:91:99:03:3a:95:e6:
a7:dc:3f:3b:bd:16:b3:b3:3f:1a:d9:61:66:9c:2b:8f:26:58:
3d:0c:ae:a7:70:10:7b:51:c8:5e:3a:a5:bf:b3:64:4b:34:ee:
2e:6b:f5:fc:2b:ad:cc:b4:6a:0e:7f:50:2b:a6:a9:4d:0c:7a:
74:c9:55:fa:f9:7e:83:0d:76:d4:33:d0:7e:b6:8e:6f:a0:4a:
50:8f:b5:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMab5QJdUagFkTBfPezLW3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZWMzNGJhZjkyMjAyOGMzNDMyZjhmOGYyMmJkYTZhZjg2
Yjc3YjIwHhcNMjUwNjA3MjIwMTI3WhcNMjUwNjA4MjIwMTI3WjAzMTEwLwYDVQQD
EygwZmE3N2VlZDVjOTA0YTJjODFlNGY1NWQzNTZjZjg4Mjg5MjcxZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlyGbVfW48d8I27Mpqy654evjQrm
cUxMO2lBUIxuc0+TJpwEgav3XmJ4WZxksw0dq9Qwicpc03CSIGgljywlIn6eBJK+
qUjP6vqYVm41iiRZkBPIckqJBlsZ7eBkClBygTGqO7m3dqXkW3Oid7EwJFAlAwej
xd+900Dfa6t3tuUyL7LLn7ajrhr5UDzXg3oorC2L3Tt5hAIulEmTNEj/rEtjQvwq
0HLAYzW2z4Z4O0xqJh7cU46cC3l0OX1jlkBb0a7fYHdct2ST3JLQCuNB//FyQrzb
AAs83pZtFuymQw+ez0Zp+Q4x7+58BePY0OoXrQF4EYDkZKW50kXhbodsDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+nfu1ckEosgeT1XTVs+IKJJx6yMB8GA1UdIwQY
MBaAFJ7sNLr5IgKMNDL4+PIr2mr4a3eyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnV3MHV2a2lBb3cwTXZqNDhpdmFhdmhyZDdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82ZWE4ZjctY2I0YS00ZTRlLWFkNzkt
YWM4NzE3MWY0ZTVjLzEvbnV3MHV2a2lBb3cwTXZqNDhpdmFhdmhyZDdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82ZWE4ZjctY2I0YS00ZTRlLWFkNzktYWM4NzE3MWY0ZTVj
LzEvbnV3MHV2a2lBb3cwTXZqNDhpdmFhdmhyZDdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgfMJEkI
0zm8ECiB41dpANziObJ/ztzM0eRKpX8jVAwZD0H0qj6C/MY0YoB8pB0B23pRAKAo
MCHvpf2A77Rbkq6OKkzmG75BbfZPTJegAEMB3U3iacsFtn2K//+Z3LuwYZysBPmI
a+TTroV06yuQlarbvfE2FxLyc15lDeH0ik9907g18KpCSv0ZsJ9WP3/gIHbAEXna
MEEvgDWVDe+IPAycuf8CIhWzAfi0Eq++kZkDOpXmp9w/O70Ws7M/GtlhZpwrjyZY
PQyup3AQe1HIXjqlv7NkSzTuLmv1/CutzLRqDn9QK6apTQx6dMlV+vl+gw121DPQ
fraOb6BKUI+1hA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:06:41 2025 by rpki-client