Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
File: nPMilEsEi3BX5F7SyzQbVg4KxsM.mft (raw, json)
Hash identifier: D+yIH469gz7mAuKi9rQ1jskFK9RgBcYqyflBTKz+lLE=
Subject key identifier: F5:7F:96:8E:69:0F:31:21:9D:41:F0:B7:BD:FD:41:C6:6E:F1:8F:4F
Authority key identifier: 9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
Certificate issuer: /CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Certificate serial: 019765F1A451EA13D8B71377961E06FD2915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
Manifest number: 1587
Signing time: Thu 12 Jun 2025 21:00:24 +0000
Manifest this update: Thu 12 Jun 2025 21:00:24 +0000
Manifest next update: Fri 13 Jun 2025 21:00:24 +0000
Files and hashes: 1: nPMilEsEi3BX5F7SyzQbVg4KxsM.crl (hash: 1oPLXKDH9TjY9mZUpvVGPYCmEc+kR8vhhsqYwULmN+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:f1:a4:51:ea:13:d8:b7:13:77:96:1e:06:fd:29:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Validity
Not Before: Jun 12 21:00:24 2025 GMT
Not After : Jun 13 21:00:24 2025 GMT
Subject: CN=f57f968e690f31219d41f0b7bdfd41c66ef18f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:f7:37:a4:5a:d2:94:3f:59:af:52:95:29:
42:04:36:d6:d6:f0:57:4a:b8:4d:18:a3:e2:01:57:
a4:68:10:69:d2:82:21:4e:fd:23:cf:92:71:ca:6a:
8d:27:5f:03:53:69:45:a3:e6:4e:ad:d7:c8:71:94:
34:e7:3d:4c:60:28:dc:32:e1:0e:0d:31:0f:40:c5:
78:99:0a:59:7c:d3:f1:82:1c:24:bf:4b:57:8f:2c:
3f:cf:f0:a0:bc:2a:c4:cc:a5:ba:bf:17:19:a9:09:
cf:54:73:37:dc:fc:1c:47:94:07:67:cc:df:4d:a0:
92:f6:b9:df:7b:60:87:04:41:15:b5:ec:77:ba:15:
ed:49:b2:de:3c:1a:40:e0:05:46:a4:e6:4d:6a:45:
76:b6:1a:79:1a:63:0b:da:d6:46:d2:96:c2:a1:a5:
d7:3d:b7:f9:d9:c5:6a:41:83:9f:0d:16:82:1a:c9:
e6:b6:be:67:2d:17:f9:61:4f:e3:0c:7b:8d:32:26:
0c:1f:90:a3:be:9d:b0:97:d5:c1:8b:e7:72:22:d1:
73:d6:90:96:3d:74:e8:ea:b8:3d:96:62:08:70:40:
75:51:24:ea:b2:54:05:29:5d:26:1a:b9:64:7e:36:
53:72:1b:0f:01:2e:64:5a:c1:3d:58:f0:a5:b1:da:
98:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7F:96:8E:69:0F:31:21:9D:41:F0:B7:BD:FD:41:C6:6E:F1:8F:4F
X509v3 Authority Key Identifier:
keyid:9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e9:bb:fe:8f:9d:ff:06:a8:0f:16:1b:1f:b7:8a:0e:b2:ab:
b7:31:d8:2f:92:66:d2:58:40:12:c1:92:45:84:a2:67:37:ec:
d8:5f:8f:e6:df:77:dc:5f:7a:35:8e:20:3c:65:c4:7b:8a:99:
cc:ed:6a:f8:1e:c1:03:e3:0c:cd:3b:17:6f:42:8c:4d:2c:e0:
4b:d4:e3:4e:5e:f8:b7:e5:34:bd:67:7f:2e:21:7b:9f:8e:a9:
5c:7a:0f:b0:47:6c:51:8f:f1:0e:af:f1:77:d2:de:8d:fa:e9:
3f:19:ce:69:47:e6:6d:66:44:59:3e:95:81:25:32:dd:c4:ab:
cf:6f:37:97:55:98:a7:89:88:fa:61:83:c3:17:98:ce:c1:75:
7c:87:95:ec:08:a4:a4:b6:0c:39:1a:27:94:3b:18:2e:4d:94:
67:ee:27:fb:6b:25:3e:f4:1f:15:8f:23:80:44:4a:74:8e:1a:
16:f6:cc:0d:e2:45:3d:22:03:bd:f5:90:20:ba:d3:7c:76:fc:
d4:45:6d:4b:c2:ff:03:bb:fa:81:c6:f9:26:f0:fa:01:29:21:
39:d3:18:3e:42:6e:3a:6c:e4:bc:44:ce:5f:05:c4:be:73:af:
c5:0e:98:77:8e:90:22:60:c6:82:3b:6c:a8:a6:d4:4c:f0:10:
c4:4b:06:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdl8aRR6hPYtxN3lh4G/SkVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZjMyMjk0NGIwNDhiNzA1N2U0NWVkMmNiMzQxYjU2MGUw
YWM2YzMwHhcNMjUwNjEyMjEwMDI0WhcNMjUwNjEzMjEwMDI0WjAzMTEwLwYDVQQD
EyhmNTdmOTY4ZTY5MGYzMTIxOWQ0MWYwYjdiZGZkNDFjNjZlZjE4ZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquT3N6Ra0pQ/Wa9SlSlCBDbW1vBX
SrhNGKPiAVekaBBp0oIhTv0jz5JxymqNJ18DU2lFo+ZOrdfIcZQ05z1MYCjcMuEO
DTEPQMV4mQpZfNPxghwkv0tXjyw/z/CgvCrEzKW6vxcZqQnPVHM33PwcR5QHZ8zf
TaCS9rnfe2CHBEEVtex3uhXtSbLePBpA4AVGpOZNakV2thp5GmML2tZG0pbCoaXX
Pbf52cVqQYOfDRaCGsnmtr5nLRf5YU/jDHuNMiYMH5Cjvp2wl9XBi+dyItFz1pCW
PXTo6rg9lmIIcEB1USTqslQFKV0mGrlkfjZTchsPAS5kWsE9WPClsdqYJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPV/lo5pDzEhnUHwt739QcZu8Y9PMB8GA1UdIwQY
MBaAFJzzIpRLBItwV+Re0ss0G1YOCsbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblBNaWxFc0VpM0JYNUY3U3l6UWJWZzRLeHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mYWQwNmMtZjM2OC00NmFiLWFlNzkt
YjNjNWMwOTMzZDk3LzEvblBNaWxFc0VpM0JYNUY3U3l6UWJWZzRLeHNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9mYWQwNmMtZjM2OC00NmFiLWFlNzktYjNjNWMwOTMzZDk3
LzEvblBNaWxFc0VpM0JYNUY3U3l6UWJWZzRLeHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGum7/o+d
/waoDxYbH7eKDrKrtzHYL5Jm0lhAEsGSRYSiZzfs2F+P5t933F96NY4gPGXEe4qZ
zO1q+B7BA+MMzTsXb0KMTSzgS9TjTl74t+U0vWd/LiF7n46pXHoPsEdsUY/xDq/x
d9LejfrpPxnOaUfmbWZEWT6VgSUy3cSrz283l1WYp4mI+mGDwxeYzsF1fIeV7Aik
pLYMORonlDsYLk2UZ+4n+2slPvQfFY8jgERKdI4aFvbMDeJFPSIDvfWQILrTfHb8
1EVtS8L/A7v6gcb5JvD6ASkhOdMYPkJuOmzkvETOXwXEvnOvxQ6Yd46QImDGgjts
qKbUTPAQxEsGVA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 07:12:42 2025 by rpki-client