Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
File: b-NJEELvMdzG4K2OVcvhSd0MMYI.mft (raw, json)
Hash identifier: iR1nt/tEbrP3sgczP+R0QvYRiuHcz/vMXhjiVG2El/c=
Subject key identifier: 37:3C:92:00:A1:09:5C:56:B3:6F:44:B7:2B:9C:89:01:FD:FE:07:B1
Authority key identifier: 6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
Certificate issuer: /CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Certificate serial: 01993312473CBC6DC1D3208AB4D9D52AF44C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
Manifest number: 0E41
Signing time: Wed 10 Sep 2025 10:00:59 +0000
Manifest this update: Wed 10 Sep 2025 10:00:59 +0000
Manifest next update: Thu 11 Sep 2025 10:00:59 +0000
Files and hashes: 1: ZIja49CzE0s2C9AlBaxxTa5EnBc.roa (hash: Mwwwh5zbLqqLKLq4mDwCxjzrltfztiX/y2yTkp5xrGs=)
2: b-NJEELvMdzG4K2OVcvhSd0MMYI.crl (hash: CpQ8/cCXr0N8HqX3KktAAUhwV+XKMhmtJv2NKx9Xh7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:12:47:3c:bc:6d:c1:d3:20:8a:b4:d9:d5:2a:f4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Validity
Not Before: Sep 10 10:00:59 2025 GMT
Not After : Sep 11 10:00:59 2025 GMT
Subject: CN=373c9200a1095c56b36f44b72b9c8901fdfe07b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:2d:25:b0:06:73:42:81:b2:cc:2b:5b:ff:
47:5b:5a:97:7f:4b:ac:74:83:c9:1f:71:8a:b9:79:
5d:ff:16:cf:89:07:4c:a3:3e:e8:c1:0d:ce:df:2b:
3d:b9:9b:ae:bd:f3:b3:0f:81:77:b2:a7:4b:ee:30:
79:8f:ff:58:5c:f2:d3:5b:ee:af:4c:3c:24:54:06:
70:95:21:c6:53:53:9d:33:d6:08:60:f7:40:c8:00:
4b:e3:16:c4:0f:c0:51:a1:78:df:5c:3b:25:14:51:
bf:50:98:ec:f3:50:1a:36:0a:db:1e:fa:df:1b:ab:
b0:fd:5b:14:18:8e:e9:ad:ba:9b:57:02:a5:7c:33:
b9:8e:f1:ed:c1:1f:be:21:fd:13:ae:01:63:02:1f:
e4:5b:eb:5a:9e:d7:f7:17:26:b4:b4:f0:71:72:d1:
43:7b:e1:af:a3:fa:67:65:f3:f4:e5:a0:e3:c2:40:
d6:d0:d1:2f:b1:d9:cf:49:91:95:2a:c1:5c:d3:67:
fb:97:fd:a6:cf:8a:1a:9f:a2:71:72:3a:7e:57:75:
c1:d6:2b:7d:bd:bc:a9:34:5c:0a:2b:d2:d0:3d:6a:
48:9c:9d:3c:fd:92:48:24:66:9e:52:51:4f:8c:0a:
55:94:c9:83:1f:33:d5:60:da:8f:2e:9e:78:15:ea:
88:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3C:92:00:A1:09:5C:56:B3:6F:44:B7:2B:9C:89:01:FD:FE:07:B1
X509v3 Authority Key Identifier:
keyid:6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ff:ac:7b:50:11:41:47:0f:b4:62:0a:27:42:84:23:1b:22:
bb:c6:60:84:34:4f:9a:2d:d6:17:85:97:5b:dd:1d:d5:fc:49:
75:96:db:45:55:e0:bb:4e:d1:a8:8f:fb:91:19:96:ad:a4:ad:
36:e4:98:d9:f5:6c:31:b4:a2:d8:b6:0d:b1:26:15:a1:16:89:
9f:f6:b1:23:7c:67:71:d7:6a:5f:8a:7d:f9:08:cb:5c:a4:5a:
7b:8e:58:3d:92:c9:71:ba:39:c4:08:8f:88:0a:0a:56:16:18:
54:55:0f:7a:24:a0:4f:cd:d2:8b:f2:be:17:19:d1:4d:7f:09:
ca:a0:16:64:f4:fd:52:c6:38:fd:ab:6c:57:85:bd:e7:52:10:
24:11:c0:59:d9:23:94:65:7a:91:35:c5:1c:c6:30:b8:a0:66:
72:b3:ea:79:02:b1:7c:c4:49:50:32:7a:0d:69:c4:d5:d7:06:
da:44:44:e5:44:59:ff:22:35:42:39:c6:77:1e:6c:0d:55:5e:
fb:68:8a:14:31:04:c6:a1:39:6f:8e:7b:62:12:b3:99:1d:19:
df:79:fd:4f:08:75:e6:a3:35:87:f0:f8:46:a7:62:32:58:ae:
77:c8:c7:ec:d5:57:25:0c:84:a4:f1:ab:35:ea:c3:ce:41:4c:
b7:74:70:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzEkc8vG3B0yCKtNnVKvRMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZTM0OTEwNDJlZjMxZGNjNmUwYWQ4ZTU1Y2JlMTQ5ZGQw
YzMxODIwHhcNMjUwOTEwMTAwMDU5WhcNMjUwOTExMTAwMDU5WjAzMTEwLwYDVQQD
EygzNzNjOTIwMGExMDk1YzU2YjM2ZjQ0YjcyYjljODkwMWZkZmUwN2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6EtJbAGc0KBsswrW/9HW1qXf0us
dIPJH3GKuXld/xbPiQdMoz7owQ3O3ys9uZuuvfOzD4F3sqdL7jB5j/9YXPLTW+6v
TDwkVAZwlSHGU1OdM9YIYPdAyABL4xbED8BRoXjfXDslFFG/UJjs81AaNgrbHvrf
G6uw/VsUGI7prbqbVwKlfDO5jvHtwR++If0TrgFjAh/kW+tantf3Fya0tPBxctFD
e+Gvo/pnZfP05aDjwkDW0NEvsdnPSZGVKsFc02f7l/2mz4oan6Jxcjp+V3XB1it9
vbypNFwKK9LQPWpInJ08/ZJIJGaeUlFPjApVlMmDHzPVYNqPLp54FeqIywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDc8kgChCVxWs29EtyuciQH9/gexMB8GA1UdIwQY
MBaAFG/jSRBC7zHcxuCtjlXL4UndDDGCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mODliZjAtM2Q2Zi00YjRkLWJmNDIt
Yzc4YmQyMjhhOTFkLzEvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9mODliZjAtM2Q2Zi00YjRkLWJmNDItYzc4YmQyMjhhOTFk
LzEvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/+se1AR
QUcPtGIKJ0KEIxsiu8ZghDRPmi3WF4WXW90d1fxJdZbbRVXgu07RqI/7kRmWraSt
NuSY2fVsMbSi2LYNsSYVoRaJn/axI3xncddqX4p9+QjLXKRae45YPZLJcbo5xAiP
iAoKVhYYVFUPeiSgT83Si/K+FxnRTX8JyqAWZPT9UsY4/atsV4W951IQJBHAWdkj
lGV6kTXFHMYwuKBmcrPqeQKxfMRJUDJ6DWnE1dcG2kRE5URZ/yI1QjnGdx5sDVVe
+2iKFDEExqE5b457YhKzmR0Z33n9Twh15qM1h/D4RqdiMliud8jH7NVXJQyEpPGr
NerDzkFMt3Rwaw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 13:54:39 2025 by rpki-client