Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
File: nsRI4bHg6-TpdrEg05j-dNXhNfg.mft (raw, json)
Hash identifier: KNbw7RG5TcUFnPsQ/ov7nzgk0tc/XbdyGGWz4vvKOWg=
Subject key identifier: F5:D6:20:B6:69:AB:1D:B1:16:D3:71:BB:44:40:12:34:01:B9:B8:C0
Authority key identifier: 9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
Certificate issuer: /CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Certificate serial: 01974B8DC14916B5ED5CE9B789A5532F79AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 18:01:10 +0000
Manifest this update: Sat 07 Jun 2025 18:01:10 +0000
Manifest next update: Sun 08 Jun 2025 18:01:10 +0000
Files and hashes: 1: aCQlUufyFAXyfrSRh5UlYee4hhI.roa (hash: mJv4/wvWUFjjUO0qLpunwhk4Tn4azGG1QzZvm0z7rC8=)
2: nsRI4bHg6-TpdrEg05j-dNXhNfg.crl (hash: hBBdMIl4Uk04pA49uHuIFZTIULgnTjymIhLiaJWFOsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:c1:49:16:b5:ed:5c:e9:b7:89:a5:53:2f:79:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Validity
Not Before: Jun 7 18:01:10 2025 GMT
Not After : Jun 8 18:01:10 2025 GMT
Subject: CN=f5d620b669ab1db116d371bb4440123401b9b8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:23:d5:4b:01:21:65:a8:95:61:93:08:3e:ee:
77:e7:c7:bb:36:7c:f0:d5:1e:ee:a9:49:00:f2:45:
c0:ac:c3:e5:66:c0:53:54:d2:c9:e3:45:ac:88:69:
21:73:da:2e:f3:45:ce:99:08:7e:a4:2f:a9:7b:98:
08:8d:15:91:c7:5a:5b:e2:4a:66:09:0d:e2:53:4a:
fb:f5:ca:7e:47:84:6b:d3:e6:05:f9:1d:7e:40:5e:
fb:42:fa:44:ba:00:82:62:ec:b1:12:69:54:09:22:
1f:4b:56:ec:99:07:2e:b0:d3:8d:0e:ef:a4:cd:e5:
3b:6b:52:1e:53:dc:be:4c:bb:49:ec:8d:1a:76:92:
af:1d:d2:6b:13:7c:ed:47:78:b5:34:aa:4d:ad:bd:
da:ba:cd:db:2d:e6:14:dd:17:fb:39:d2:56:f6:16:
87:15:bb:1d:e5:72:17:24:ba:a7:62:5c:f8:fd:34:
f0:02:01:64:45:2a:72:10:2b:01:ec:5e:7a:49:ce:
27:0c:49:29:d7:5b:3b:26:af:8c:3e:12:75:30:e3:
78:4f:53:24:c4:e1:69:82:4a:b7:87:47:20:45:e3:
8a:43:36:b3:f0:fd:af:d1:e7:e4:5d:7b:b1:09:01:
41:c4:93:b9:ed:15:23:83:f1:92:5e:cd:5c:43:65:
30:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D6:20:B6:69:AB:1D:B1:16:D3:71:BB:44:40:12:34:01:B9:B8:C0
X509v3 Authority Key Identifier:
keyid:9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f3:7c:36:c4:a1:b5:4c:9f:65:a3:4c:57:75:e0:3b:63:7d:
1c:ab:0f:68:02:f8:13:ad:e2:2c:8b:f2:21:80:ba:63:0b:1a:
5b:1f:83:a4:a0:68:f5:55:ea:56:dc:1d:de:43:1a:0f:47:a6:
e5:97:72:2a:88:50:9c:03:13:bf:b3:0c:c6:6a:3e:57:5d:b6:
35:b3:6d:f6:12:7a:0c:85:a6:3b:38:10:a7:97:ec:e1:69:a8:
f1:fc:79:ab:b4:44:4a:76:02:99:5c:2f:ff:38:b6:87:00:06:
4d:64:d5:40:e4:79:df:a2:e3:b3:ab:bb:f5:06:5d:d0:b6:f4:
e7:fc:65:82:1b:31:67:69:4f:6e:65:7e:1c:b5:68:3e:09:1d:
5b:1f:c6:87:26:46:72:f9:67:5a:04:39:42:9f:cc:15:32:31:
d7:0c:25:2c:5a:07:b5:16:41:5a:3d:6c:4c:0a:da:d1:7c:a2:
8a:fb:28:8f:64:64:8a:e3:0f:26:78:e8:19:70:66:07:a2:c3:
c6:7a:1f:ff:38:2e:b9:04:a8:5e:35:fd:56:1f:bf:fc:ed:51:
9f:65:16:92:18:a1:67:83:72:68:24:ae:ec:e2:e6:79:e0:fb:
0a:c9:86:47:7d:4f:64:9a:3f:d4:42:11:f5:b4:f0:a1:24:59:
6b:23:a0:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjcFJFrXtXOm3iaVTL3mtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYzQ0OGUxYjFlMGViZTRlOTc2YjEyMGQzOThmZTc0ZDVl
MTM1ZjgwHhcNMjUwNjA3MTgwMTEwWhcNMjUwNjA4MTgwMTEwWjAzMTEwLwYDVQQD
EyhmNWQ2MjBiNjY5YWIxZGIxMTZkMzcxYmI0NDQwMTIzNDAxYjliOGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSPVSwEhZaiVYZMIPu5358e7Nnzw
1R7uqUkA8kXArMPlZsBTVNLJ40WsiGkhc9ou80XOmQh+pC+pe5gIjRWRx1pb4kpm
CQ3iU0r79cp+R4Rr0+YF+R1+QF77QvpEugCCYuyxEmlUCSIfS1bsmQcusNONDu+k
zeU7a1IeU9y+TLtJ7I0adpKvHdJrE3ztR3i1NKpNrb3aus3bLeYU3Rf7OdJW9haH
Fbsd5XIXJLqnYlz4/TTwAgFkRSpyECsB7F56Sc4nDEkp11s7Jq+MPhJ1MON4T1Mk
xOFpgkq3h0cgReOKQzaz8P2v0efkXXuxCQFBxJO57RUjg/GSXs1cQ2UwhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXWILZpqx2xFtNxu0RAEjQBubjAMB8GA1UdIwQY
MBaAFJ7ESOGx4Ovk6XaxINOY/nTV4TX4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnNSSTRiSGc2LVRwZHJFZzA1ai1kTlhoTmZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mNGNhNzktMzg0Zi00N2YyLWFlZDgt
YThkMDAzODNiY2RkLzEvbnNSSTRiSGc2LVRwZHJFZzA1ai1kTlhoTmZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9mNGNhNzktMzg0Zi00N2YyLWFlZDgtYThkMDAzODNiY2Rk
LzEvbnNSSTRiSGc2LVRwZHJFZzA1ai1kTlhoTmZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPN8NsSh
tUyfZaNMV3XgO2N9HKsPaAL4E63iLIvyIYC6YwsaWx+DpKBo9VXqVtwd3kMaD0em
5ZdyKohQnAMTv7MMxmo+V122NbNt9hJ6DIWmOzgQp5fs4Wmo8fx5q7RESnYCmVwv
/zi2hwAGTWTVQOR536Ljs6u79QZd0Lb05/xlghsxZ2lPbmV+HLVoPgkdWx/GhyZG
cvlnWgQ5Qp/MFTIx1wwlLFoHtRZBWj1sTAra0Xyiivsoj2RkiuMPJnjoGXBmB6LD
xnof/zguuQSoXjX9Vh+//O1Rn2UWkhihZ4NyaCSu7OLmeeD7CsmGR31PZJo/1EIR
9bTwoSRZayOgRw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:04 2025 by rpki-client