Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft
File: NWlXUM1GUx3eil-yZyzcgw09DG4.mft (raw, json)
Hash identifier: 4/FMOs5OHhqskso27LCc2IJ04aUsLuFyTSDSGoR3o20=
Subject key identifier: 53:4F:FE:C4:F4:EA:4C:33:90:B0:65:1A:6C:8B:19:6C:46:57:CA:F8
Authority key identifier: 35:69:57:50:CD:46:53:1D:DE:8A:5F:B2:67:2C:DC:83:0D:3D:0C:6E
Certificate issuer: /CN=35695750cd46531dde8a5fb2672cdc830d3d0c6e
Certificate serial: 0197B7B32294542A04DE9C7C1DDFE145396A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWlXUM1GUx3eil-yZyzcgw09DG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft
Manifest number: 03D2
Signing time: Sat 28 Jun 2025 18:00:59 +0000
Manifest this update: Sat 28 Jun 2025 18:00:59 +0000
Manifest next update: Sun 29 Jun 2025 18:00:59 +0000
Files and hashes: 1: NWlXUM1GUx3eil-yZyzcgw09DG4.crl (hash: LRmI7wXbTgY5N0HcahX7GYAVQ6el2TllVvcviUCDm+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWlXUM1GUx3eil-yZyzcgw09DG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:22:94:54:2a:04:de:9c:7c:1d:df:e1:45:39:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35695750cd46531dde8a5fb2672cdc830d3d0c6e
Validity
Not Before: Jun 28 18:00:59 2025 GMT
Not After : Jun 29 18:00:59 2025 GMT
Subject: CN=534ffec4f4ea4c3390b0651a6c8b196c4657caf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c5:c3:69:e1:27:d5:50:45:6f:9f:0e:90:8d:
3f:62:69:58:2f:be:21:4f:bb:ef:a0:d5:7d:99:eb:
7b:3a:a4:03:7c:59:f7:fa:ca:71:2c:b5:a2:a6:4c:
3b:d1:54:ad:54:b6:82:3b:e3:4e:4c:82:1e:e7:04:
58:67:bd:4e:e0:8a:bd:7b:75:8c:70:bb:df:86:2d:
0f:c4:ad:5e:f9:ea:92:5b:9d:fa:25:c7:20:16:c6:
32:0a:4c:ea:7d:c7:08:79:a4:55:53:9c:c5:6a:c2:
85:37:f3:69:49:26:6e:95:af:1e:d9:f9:2f:04:c1:
39:ba:39:b7:b6:45:f5:3f:f7:fd:2e:32:52:73:e2:
7b:f1:6f:89:6f:98:04:1e:52:31:0f:50:08:74:34:
ad:66:f5:3b:5a:82:41:f0:3c:03:84:9e:dd:cd:51:
6b:42:52:95:64:46:27:13:77:b0:c6:bf:21:dc:75:
1e:d4:11:f9:4f:da:1c:0a:ef:6f:7e:6e:c1:11:79:
74:e4:a0:ed:d8:90:c2:c0:b0:3a:98:3d:79:d2:e3:
35:85:cf:20:62:19:32:90:5e:b4:3a:05:6f:35:7d:
ea:60:11:94:d4:83:f4:57:3f:f3:92:95:85:1b:af:
e3:c2:22:bf:5c:65:6f:63:ed:42:9d:d0:36:7c:53:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4F:FE:C4:F4:EA:4C:33:90:B0:65:1A:6C:8B:19:6C:46:57:CA:F8
X509v3 Authority Key Identifier:
keyid:35:69:57:50:CD:46:53:1D:DE:8A:5F:B2:67:2C:DC:83:0D:3D:0C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWlXUM1GUx3eil-yZyzcgw09DG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:cc:3d:c1:80:4a:54:c5:41:4a:81:6a:68:86:7c:14:0d:6e:
26:21:d4:68:5e:7a:31:73:62:f1:47:c6:01:fd:2c:f0:df:31:
62:a2:fb:ab:d1:f3:a7:70:a9:89:b1:69:15:ec:2f:71:ff:e7:
44:4c:bb:6c:33:1e:b4:93:12:8b:67:c2:34:14:62:b2:75:c0:
1a:b3:69:c6:be:05:2b:98:82:44:f0:cb:8b:ec:99:41:6a:9e:
3c:8c:4d:cf:c2:42:a0:f5:3c:f0:67:38:1d:70:2a:3d:0c:45:
e6:3a:32:df:18:2b:2d:66:25:c5:b1:8a:dc:db:47:ee:75:2d:
7a:3b:5e:d1:c0:2c:39:21:8e:48:11:d3:d1:9e:61:83:37:c8:
ee:1f:a8:ad:47:2f:f8:63:8d:52:f4:22:0d:8e:e2:96:f7:c2:
3a:16:b2:d6:a9:7e:ba:03:c3:1b:e2:81:c7:1e:5c:86:2e:59:
3b:b7:76:5e:49:2f:29:e2:3f:d2:98:6a:e2:f5:32:25:25:62:
f4:73:59:0a:60:7a:93:c9:cf:2d:2a:3e:f7:10:fc:34:d7:cc:
0d:8f:66:52:c8:52:ba:42:7f:c7:35:e2:e6:1c:12:cc:be:ce:
65:ad:1a:dc:61:00:56:93:ad:aa:e4:aa:71:d6:7e:ec:0c:e4:
6f:1f:6b:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3syKUVCoE3px8Hd/hRTlqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1Njk1NzUwY2Q0NjUzMWRkZThhNWZiMjY3MmNkYzgzMGQz
ZDBjNmUwHhcNMjUwNjI4MTgwMDU5WhcNMjUwNjI5MTgwMDU5WjAzMTEwLwYDVQQD
Eyg1MzRmZmVjNGY0ZWE0YzMzOTBiMDY1MWE2YzhiMTk2YzQ2NTdjYWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcXDaeEn1VBFb58OkI0/YmlYL74h
T7vvoNV9met7OqQDfFn3+spxLLWipkw70VStVLaCO+NOTIIe5wRYZ71O4Iq9e3WM
cLvfhi0PxK1e+eqSW536JccgFsYyCkzqfccIeaRVU5zFasKFN/NpSSZula8e2fkv
BME5ujm3tkX1P/f9LjJSc+J78W+Jb5gEHlIxD1AIdDStZvU7WoJB8DwDhJ7dzVFr
QlKVZEYnE3ewxr8h3HUe1BH5T9ocCu9vfm7BEXl05KDt2JDCwLA6mD150uM1hc8g
YhkykF60OgVvNX3qYBGU1IP0Vz/zkpWFG6/jwiK/XGVvY+1CndA2fFP47wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNP/sT06kwzkLBlGmyLGWxGV8r4MB8GA1UdIwQY
MBaAFDVpV1DNRlMd3opfsmcs3IMNPQxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldsWFVNMUdVeDNlaWwteVp5emNndzA5REc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy82MTU2MTctMDkyZC00MjI4LWE0MDct
NzdiZmEzN2ZhMDcxLzEvTldsWFVNMUdVeDNlaWwteVp5emNndzA5REc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy82MTU2MTctMDkyZC00MjI4LWE0MDctNzdiZmEzN2ZhMDcx
LzEvTldsWFVNMUdVeDNlaWwteVp5emNndzA5REc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8w9wYBK
VMVBSoFqaIZ8FA1uJiHUaF56MXNi8UfGAf0s8N8xYqL7q9Hzp3CpibFpFewvcf/n
REy7bDMetJMSi2fCNBRisnXAGrNpxr4FK5iCRPDLi+yZQWqePIxNz8JCoPU88Gc4
HXAqPQxF5joy3xgrLWYlxbGK3NtH7nUtejte0cAsOSGOSBHT0Z5hgzfI7h+orUcv
+GONUvQiDY7ilvfCOhay1ql+ugPDG+KBxx5chi5ZO7d2XkkvKeI/0phq4vUyJSVi
9HNZCmB6k8nPLSo+9xD8NNfMDY9mUshSukJ/xzXi5hwSzL7OZa0a3GEAVpOtquSq
cdZ+7Azkbx9rPQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:54 2025 by rpki-client