Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
File: NW5HRHMdpE8I-l6SxesqR01JqJI.mft (raw, json)
Hash identifier: D303SzSXIpIi6Ua9cDwEfBrHzVZOCNl/VgixBcbis/g=
Subject key identifier: D2:00:E6:85:68:D2:00:FA:01:6A:4A:F0:15:4A:49:92:4D:E2:92:BD
Authority key identifier: 35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
Certificate issuer: /CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Certificate serial: 01974AB177DC8C005CD8043E1D76B945EFFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 14:00:33 +0000
Manifest this update: Sat 07 Jun 2025 14:00:33 +0000
Manifest next update: Sun 08 Jun 2025 14:00:33 +0000
Files and hashes: 1: NW5HRHMdpE8I-l6SxesqR01JqJI.crl (hash: /U8sgpFT1v66LkrRcmkg2DlIZDmasoODvcZYPfXuu5o=)
2: sWXWz9KHFQhAxmDZ0n63KNEzRYA.roa (hash: VInHBflevKh8uKrJkW73psQEtmEHrPxva/qTjQRvp1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:77:dc:8c:00:5c:d8:04:3e:1d:76:b9:45:ef:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Validity
Not Before: Jun 7 14:00:33 2025 GMT
Not After : Jun 8 14:00:33 2025 GMT
Subject: CN=d200e68568d200fa016a4af0154a49924de292bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e9:06:b1:05:f6:37:3f:27:d9:a4:d3:bc:3b:
9a:b1:ba:32:e3:63:22:7b:11:f4:b4:4b:28:75:1f:
f3:54:22:db:15:bd:44:90:67:2c:36:2f:cb:c5:eb:
95:3d:9b:9c:b5:c0:c9:94:43:96:59:6e:89:be:f9:
e0:0d:39:c0:4a:77:84:55:b7:5f:31:61:35:0b:7e:
01:b6:fb:54:14:6b:b3:f3:03:4c:8d:ef:45:2a:09:
19:8f:66:44:15:d5:c6:4c:de:54:65:33:e5:ae:8a:
27:4e:1e:d5:19:c0:5b:bc:2c:fe:d6:7f:e2:82:3c:
76:1b:7e:e5:72:f4:bd:55:36:ff:7c:98:ac:c5:7c:
17:af:7b:ab:b7:5c:c5:01:89:bb:a2:63:00:67:3c:
d3:69:5f:a6:e9:19:54:56:38:ec:fd:6b:d1:2c:1f:
de:c8:7a:f1:cd:cb:a9:9b:13:db:94:45:ae:f8:0c:
70:66:f3:0f:4e:3d:58:6a:ac:40:12:b6:c7:58:79:
a5:e8:42:73:4a:59:61:8e:84:5d:bc:e3:e1:b2:90:
2c:3e:a7:81:cb:e8:56:9b:f8:96:d6:98:e5:99:a4:
7b:61:dd:d2:0d:8a:f9:02:b5:42:01:29:f0:fa:a4:
48:2e:7a:42:8c:52:10:7c:34:29:ca:ea:60:5f:41:
48:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:00:E6:85:68:D2:00:FA:01:6A:4A:F0:15:4A:49:92:4D:E2:92:BD
X509v3 Authority Key Identifier:
keyid:35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a0:17:05:54:30:d5:d1:89:13:41:66:64:27:54:d4:28:a0:
2b:2e:f5:6c:9c:14:d0:9d:fe:6d:97:01:68:4b:89:be:04:ce:
dc:27:22:ea:ef:08:4f:3b:65:ad:ed:9a:67:a2:ec:ff:c5:c2:
89:e1:33:e2:27:85:e2:d5:96:31:23:5d:9e:23:e1:99:9f:4c:
90:03:db:41:88:67:05:3c:bf:3d:6b:b7:1c:f7:b6:d8:1c:4b:
07:93:fb:c3:9b:fc:11:c7:4b:83:2e:97:7c:72:76:92:92:bc:
75:7d:a5:da:3a:1c:69:3b:5b:eb:55:7e:63:50:9d:df:b1:a1:
d3:c8:fb:ad:92:64:32:af:4d:98:f8:3c:5b:25:a8:8d:65:5e:
5e:46:70:39:93:49:1f:47:6f:d9:c3:d8:ab:c3:6b:85:02:a4:
4e:f8:f7:2b:18:7f:63:29:74:bf:58:d8:df:2c:0f:e6:df:6f:
6a:11:f7:07:73:6e:08:4d:cd:49:67:41:16:3c:e0:36:b7:75:
4a:a7:ac:a4:5e:b5:1c:37:60:c5:59:d6:03:92:54:f5:ca:7a:
41:bb:9a:81:cc:67:2c:8a:52:d4:45:20:84:18:91:e5:a7:46:
ea:84:25:4b:70:d1:c2:38:23:d2:f2:1a:6f:09:ed:2a:54:d9:
b0:a8:32:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKsXfcjABc2AQ+HXa5Re/6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NmU0NzQ0NzMxZGE0NGYwOGZhNWU5MmM1ZWIyYTQ3NGQ0
OWE4OTIwHhcNMjUwNjA3MTQwMDMzWhcNMjUwNjA4MTQwMDMzWjAzMTEwLwYDVQQD
EyhkMjAwZTY4NTY4ZDIwMGZhMDE2YTRhZjAxNTRhNDk5MjRkZTI5MmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OkGsQX2Nz8n2aTTvDuasboy42Mi
exH0tEsodR/zVCLbFb1EkGcsNi/LxeuVPZuctcDJlEOWWW6JvvngDTnASneEVbdf
MWE1C34BtvtUFGuz8wNMje9FKgkZj2ZEFdXGTN5UZTPlroonTh7VGcBbvCz+1n/i
gjx2G37lcvS9VTb/fJisxXwXr3urt1zFAYm7omMAZzzTaV+m6RlUVjjs/WvRLB/e
yHrxzcupmxPblEWu+AxwZvMPTj1YaqxAErbHWHml6EJzSllhjoRdvOPhspAsPqeB
y+hWm/iW1pjlmaR7Yd3SDYr5ArVCASnw+qRILnpCjFIQfDQpyupgX0FIKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIA5oVo0gD6AWpK8BVKSZJN4pK9MB8GA1UdIwQY
MBaAFDVuR0RzHaRPCPpeksXrKkdNSaiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlc1SFJITWRwRThJLWw2U3hlc3FSMDFKcUpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84ZjQ3ODktOTYzYS00YzY5LWIxNjUt
MGM1MDFkNjg5NzVhLzEvTlc1SFJITWRwRThJLWw2U3hlc3FSMDFKcUpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84ZjQ3ODktOTYzYS00YzY5LWIxNjUtMGM1MDFkNjg5NzVh
LzEvTlc1SFJITWRwRThJLWw2U3hlc3FSMDFKcUpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXaAXBVQw
1dGJE0FmZCdU1CigKy71bJwU0J3+bZcBaEuJvgTO3Cci6u8ITztlre2aZ6Ls/8XC
ieEz4ieF4tWWMSNdniPhmZ9MkAPbQYhnBTy/PWu3HPe22BxLB5P7w5v8EcdLgy6X
fHJ2kpK8dX2l2jocaTtb61V+Y1Cd37Gh08j7rZJkMq9NmPg8WyWojWVeXkZwOZNJ
H0dv2cPYq8NrhQKkTvj3Kxh/Yyl0v1jY3ywP5t9vahH3B3NuCE3NSWdBFjzgNrd1
SqespF61HDdgxVnWA5JU9cp6QbuagcxnLIpS1EUghBiR5adG6oQlS3DRwjgj0vIa
bwntKlTZsKgyNw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 20:47:45 2025 by rpki-client