Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: 8hvHvos8eyfkKjJhfV5sb2DSU4kwNNpm3OojIZm6+VI=
Subject key identifier: 6D:54:88:C5:70:79:0B:82:F0:A6:C3:D5:49:95:11:DB:ED:5B:83:4B
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 01974EC5F1F91F442EE9969F3003DAC215DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 09:01:24 +0000
Manifest this update: Sun 08 Jun 2025 09:01:24 +0000
Manifest next update: Mon 09 Jun 2025 09:01:24 +0000
Files and hashes: 1: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: iwfH98d3vokHFW7pFaNDR+jLAlmavR542iqkgdfVAiw=)
2: t18fV6YPwA2MAEndpMc8X0ToRWw.roa (hash: H0VTW6jFucioUCNK4Zk3Ys3jO7tUvJYmK3uUV0BFJlM=)
3: udb2liD_hmmSjMQHfxOs3ILFeak.roa (hash: I8Ss2wHMn10fRDENu7eQisoAjY4IBsPU1iECaxEl9xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:f1:f9:1f:44:2e:e9:96:9f:30:03:da:c2:15:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Jun 8 09:01:24 2025 GMT
Not After : Jun 9 09:01:24 2025 GMT
Subject: CN=6d5488c570790b82f0a6c3d5499511dbed5b834b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:19:a2:fa:1c:8a:3f:d2:31:96:9e:bf:ad:
f1:3e:cc:61:f0:d9:b4:d1:3b:03:aa:6f:b0:79:e7:
02:1c:9d:c9:26:50:78:b4:4e:d3:4d:5a:fb:b0:5e:
0e:18:e5:12:13:60:ae:ca:95:9c:8b:01:be:f6:68:
7e:3f:c6:9b:22:14:6b:c1:00:6b:4b:d4:19:d7:97:
3f:ab:53:b6:15:76:6a:09:af:20:b8:38:18:95:25:
b7:75:95:42:54:66:fc:18:31:a3:d7:f9:e8:f0:e2:
5b:9c:14:fc:15:ab:c5:aa:5f:e9:a5:42:6b:da:03:
33:7e:3d:7b:f4:68:9e:aa:40:4a:69:84:a1:aa:0d:
64:04:9e:01:e1:18:3a:e8:a4:3a:3d:d3:ec:6f:3b:
d7:d3:3d:b5:df:d5:a7:35:bf:1a:5e:c2:15:a8:06:
1c:fd:cd:20:db:aa:20:5c:4b:93:5f:26:06:41:9c:
fe:49:9c:e3:75:80:f9:9a:27:f8:f6:33:67:e7:ac:
94:28:75:1b:f4:55:32:6c:14:cc:9a:23:f2:0c:40:
53:69:1a:e4:9b:6a:00:29:58:93:b1:92:a6:cf:38:
bc:80:c9:e3:52:78:90:a4:fd:c7:93:1b:da:3b:75:
e0:5c:dd:e4:18:8b:15:24:0f:20:82:12:a1:80:33:
90:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:54:88:C5:70:79:0B:82:F0:A6:C3:D5:49:95:11:DB:ED:5B:83:4B
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:48:4e:09:a7:18:24:77:95:43:7a:c3:bc:9f:ac:bd:d5:f8:
df:f6:41:f5:d1:32:a8:3f:73:34:9d:2f:d1:51:4b:a5:af:42:
a0:e7:2a:70:50:e8:79:69:86:70:38:24:23:f5:99:a0:3f:14:
cc:b9:fa:27:14:6c:f5:5b:28:07:a0:7f:88:03:63:bb:5b:84:
a3:45:36:28:cf:f5:52:69:2a:b4:ec:da:c3:0e:a4:fb:e5:0f:
fb:a0:6d:6e:04:1b:14:1f:80:cb:d2:31:c3:ba:a5:b2:08:bf:
e4:43:5e:be:a9:ca:84:04:47:90:08:2e:f1:72:31:21:56:19:
23:05:04:b7:44:78:8d:b4:18:98:35:c6:bb:de:f7:7b:24:86:
b4:55:77:b5:bc:98:cb:b0:51:ce:a9:94:30:bf:a5:ff:ac:18:
5a:e1:f2:ed:eb:29:8c:4d:76:43:86:a8:c3:66:5c:f2:e1:45:
f5:b1:0d:df:ee:7e:c6:7d:1e:7d:54:f4:c3:31:45:d9:d3:3b:
84:fc:46:e3:d6:b0:ca:c0:cb:76:52:af:8b:e0:cd:9b:2e:98:
7d:28:ff:8c:97:d9:fb:16:e5:21:b7:a7:4c:7f:d2:f0:73:3c:
4f:83:df:14:48:48:ad:05:80:20:e5:be:e7:3a:9c:94:9c:3d:
3d:51:1e:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOxfH5H0Qu6ZafMAPawhXfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTM1MzQyOWU3MmViMjg2Y2MxOGVjYmViOGZhNzFhMzFj
MDgxOTAwHhcNMjUwNjA4MDkwMTI0WhcNMjUwNjA5MDkwMTI0WjAzMTEwLwYDVQQD
Eyg2ZDU0ODhjNTcwNzkwYjgyZjBhNmMzZDU0OTk1MTFkYmVkNWI4MzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWoZovocij/SMZaev63xPsxh8Nm0
0TsDqm+weecCHJ3JJlB4tE7TTVr7sF4OGOUSE2CuypWciwG+9mh+P8abIhRrwQBr
S9QZ15c/q1O2FXZqCa8guDgYlSW3dZVCVGb8GDGj1/no8OJbnBT8FavFql/ppUJr
2gMzfj179GieqkBKaYShqg1kBJ4B4Rg66KQ6PdPsbzvX0z2139WnNb8aXsIVqAYc
/c0g26ogXEuTXyYGQZz+SZzjdYD5mif49jNn56yUKHUb9FUybBTMmiPyDEBTaRrk
m2oAKViTsZKmzzi8gMnjUniQpP3HkxvaO3XgXN3kGIsVJA8gghKhgDOQOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1UiMVweQuC8KbD1UmVEdvtW4NLMB8GA1UdIwQY
MBaAFDUTU0KecusobMGOy+uPpxoxwIGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEt
MzkzNjk2ODlmMjdlLzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEtMzkzNjk2ODlmMjdl
LzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEhOCacY
JHeVQ3rDvJ+svdX43/ZB9dEyqD9zNJ0v0VFLpa9CoOcqcFDoeWmGcDgkI/WZoD8U
zLn6JxRs9VsoB6B/iANju1uEo0U2KM/1UmkqtOzaww6k++UP+6BtbgQbFB+Ay9Ix
w7qlsgi/5ENevqnKhARHkAgu8XIxIVYZIwUEt0R4jbQYmDXGu973eySGtFV3tbyY
y7BRzqmUML+l/6wYWuHy7espjE12Q4aow2Zc8uFF9bEN3+5+xn0efVT0wzFF2dM7
hPxG49awysDLdlKvi+DNmy6YfSj/jJfZ+xblIbenTH/S8HM8T4PfFEhIrQWAIOW+
5zqclJw9PVEeBg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 19:44:52 2025 by rpki-client