Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
File: NhF6aBWpGEeNP4wA1nGlcWa_7so.mft (raw, json)
Hash identifier: VbYZnIytEpEAIoOO7Vefd4zyiuPsabpWHaeoh1MHgJE=
Subject key identifier: 38:09:B1:44:1A:4A:55:D1:46:CC:AC:86:22:C9:4A:B8:2A:33:63:4F
Authority key identifier: 36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
Certificate issuer: /CN=36117a6815a918478d3f8c00d671a57166bfeeca
Certificate serial: 0199FD6AFAEA824BF7705D560AB7086061C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
Manifest number: 077C
Signing time: Sun 19 Oct 2025 17:01:10 +0000
Manifest this update: Sun 19 Oct 2025 17:01:10 +0000
Manifest next update: Mon 20 Oct 2025 17:01:10 +0000
Files and hashes: 1: NhF6aBWpGEeNP4wA1nGlcWa_7so.crl (hash: eZbp6IikAZoOwn6U7lwSHBGXtpsNQNETEnMJKc0VFkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:fa:ea:82:4b:f7:70:5d:56:0a:b7:08:60:61:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36117a6815a918478d3f8c00d671a57166bfeeca
Validity
Not Before: Oct 19 17:01:10 2025 GMT
Not After : Oct 20 17:01:10 2025 GMT
Subject: CN=3809b1441a4a55d146ccac8622c94ab82a33634f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b0:a9:a6:55:f0:95:35:22:71:6a:9e:e7:c9:
88:b0:e6:ed:c4:cf:66:b4:44:a0:31:f5:82:41:6a:
e9:49:c1:4d:ae:1c:e6:22:3f:5c:c9:a6:73:c1:1d:
3c:d0:6e:40:41:e2:e3:fb:42:b3:99:e2:ff:43:a6:
b0:2d:03:1d:be:ec:bc:cc:32:3d:dd:d8:fb:e9:19:
a6:50:2f:04:c1:ca:4f:1d:cf:77:57:cd:0d:51:b4:
e5:42:54:93:c8:4a:df:f3:9a:b9:a4:b1:23:e5:90:
62:bc:31:65:d9:23:d3:78:bf:28:2d:72:b4:a5:bd:
be:54:df:e5:ac:1e:40:f2:82:eb:ef:7d:97:d9:e2:
ca:dc:b8:d3:f7:1d:d9:ab:42:9d:73:8f:0f:20:4a:
0b:09:33:e8:e2:ce:4a:36:f9:b8:42:0e:b3:31:c1:
a6:c3:b5:ef:ca:a3:ab:c1:5e:49:b0:51:00:3c:ca:
72:89:e1:ce:91:ad:ae:1a:fc:ee:71:bd:c7:b5:cd:
22:b4:2f:fa:ac:fd:51:d7:a7:51:c7:fd:72:da:3e:
62:0b:be:d6:22:d9:92:95:e4:9d:5b:3f:40:7a:d6:
ff:c6:15:a2:8e:d8:3f:cb:3a:75:3e:e9:93:7f:ed:
44:51:a5:8c:68:ea:54:77:78:03:45:77:d2:94:cb:
ff:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:09:B1:44:1A:4A:55:D1:46:CC:AC:86:22:C9:4A:B8:2A:33:63:4F
X509v3 Authority Key Identifier:
keyid:36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d1:54:7e:e5:7f:26:f6:0d:53:35:9f:78:2a:bb:b3:19:5e:
22:9f:73:c8:13:dc:a0:2f:8c:b8:a5:6b:56:e0:44:b5:7a:f9:
28:2d:7b:f2:97:1b:51:9a:b4:36:b8:ef:0b:3f:f4:ae:02:a5:
7c:d7:6f:8a:8c:11:43:f4:eb:34:4e:45:83:34:03:44:75:a3:
96:64:fa:f3:24:06:a8:3c:fc:8c:0e:23:74:7b:32:ff:c4:56:
ed:bc:29:c8:eb:2a:88:88:3b:6e:c9:d4:25:ed:25:70:ce:95:
ad:7f:c5:cb:ee:87:69:24:51:d3:74:7a:bb:a1:ab:19:51:bb:
3a:b4:08:a4:bc:bb:00:dc:51:91:a8:db:24:43:ac:75:96:fd:
a2:c4:72:e6:c4:05:41:69:61:a7:3f:3f:5e:fa:4a:ec:1a:c7:
d6:1b:51:1b:4d:19:4e:5b:36:9c:7e:5a:10:9a:5b:75:1a:63:
c5:d2:4b:ca:b4:04:b9:17:06:80:59:a4:d9:f0:49:ee:18:51:
a5:44:cf:d5:82:ad:80:a3:ba:26:be:35:20:d9:16:6b:6a:85:
03:94:30:b7:89:16:79:fa:fc:51:e3:db:c6:37:ae:f3:41:ab:
a7:9e:84:95:48:3d:c5:b2:bd:9a:19:27:63:80:ad:de:18:e9:
31:c4:ef:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9avrqgkv3cF1WCrcIYGHCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTE3YTY4MTVhOTE4NDc4ZDNmOGMwMGQ2NzFhNTcxNjZi
ZmVlY2EwHhcNMjUxMDE5MTcwMTEwWhcNMjUxMDIwMTcwMTEwWjAzMTEwLwYDVQQD
EygzODA5YjE0NDFhNGE1NWQxNDZjY2FjODYyMmM5NGFiODJhMzM2MzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbCpplXwlTUicWqe58mIsObtxM9m
tESgMfWCQWrpScFNrhzmIj9cyaZzwR080G5AQeLj+0KzmeL/Q6awLQMdvuy8zDI9
3dj76RmmUC8EwcpPHc93V80NUbTlQlSTyErf85q5pLEj5ZBivDFl2SPTeL8oLXK0
pb2+VN/lrB5A8oLr732X2eLK3LjT9x3Zq0Kdc48PIEoLCTPo4s5KNvm4Qg6zMcGm
w7XvyqOrwV5JsFEAPMpyieHOka2uGvzucb3Htc0itC/6rP1R16dRx/1y2j5iC77W
ItmSleSdWz9Aetb/xhWijtg/yzp1PumTf+1EUaWMaOpUd3gDRXfSlMv/RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgJsUQaSlXRRsyshiLJSrgqM2NPMB8GA1UdIwQY
MBaAFDYRemgVqRhHjT+MANZxpXFmv+7KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhGNmFCV3BHRWVOUDR3QTFuR2xjV2FfN3NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jYmI3NDEtYjY5Mi00ZjA5LThjYmEt
YzZhZWM2OGFiMzY0LzEvTmhGNmFCV3BHRWVOUDR3QTFuR2xjV2FfN3NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jYmI3NDEtYjY5Mi00ZjA5LThjYmEtYzZhZWM2OGFiMzY0
LzEvTmhGNmFCV3BHRWVOUDR3QTFuR2xjV2FfN3NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALdFUfuV/
JvYNUzWfeCq7sxleIp9zyBPcoC+MuKVrVuBEtXr5KC178pcbUZq0NrjvCz/0rgKl
fNdviowRQ/TrNE5FgzQDRHWjlmT68yQGqDz8jA4jdHsy/8RW7bwpyOsqiIg7bsnU
Je0lcM6VrX/Fy+6HaSRR03R6u6GrGVG7OrQIpLy7ANxRkajbJEOsdZb9osRy5sQF
QWlhpz8/XvpK7BrH1htRG00ZTls2nH5aEJpbdRpjxdJLyrQEuRcGgFmk2fBJ7hhR
pUTP1YKtgKO6Jr41INkWa2qFA5Qwt4kWefr8UePbxjeu80Grp56ElUg9xbK9mhkn
Y4Ct3hjpMcTviQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:36 2025 by rpki-client