Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
File: N0862b8UbAabjYPW1a1UggRetw0.mft (raw, json)
Hash identifier: I4sR2AVvT1T4jR5pHqUA9gpVGoJzfYZf9noVnEuZtpE=
Subject key identifier: 74:9F:52:6D:E2:83:62:3D:B4:7A:09:DE:B5:43:C7:69:33:CC:DF:57
Authority key identifier: 37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D
Certificate issuer: /CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
Certificate serial: 0198D5BB8E4391D324D2A841F9791818331E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:35 +0000
Manifest this update: Sat 23 Aug 2025 07:01:35 +0000
Manifest next update: Sun 24 Aug 2025 07:01:35 +0000
Files and hashes: 1: N0862b8UbAabjYPW1a1UggRetw0.crl (hash: r9SVFn2Y9eK+02lgQXXIJgAu7GdxVEiLHQh2i2F8m2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:8e:43:91:d3:24:d2:a8:41:f9:79:18:18:33:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
Validity
Not Before: Aug 23 07:01:35 2025 GMT
Not After : Aug 24 07:01:35 2025 GMT
Subject: CN=749f526de283623db47a09deb543c76933ccdf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:76:af:5a:ea:3b:66:ad:14:c6:85:22:48:b8:
13:8a:9f:90:17:08:e3:b0:72:66:92:f0:9b:e8:4c:
0a:3b:e7:97:dc:99:d2:5e:d4:04:26:73:6d:5e:02:
38:ad:8a:72:71:9a:cc:13:dc:b8:92:6c:87:14:2b:
69:fb:59:6e:ef:d7:88:d1:95:4e:6f:e1:f5:4b:43:
7a:e2:05:a4:aa:fa:6d:75:6c:ef:95:3b:58:f5:c9:
52:4d:ee:3a:4b:d4:9c:64:28:00:a6:59:90:fd:50:
2a:9e:31:88:66:e3:de:56:fc:3f:f2:36:33:1f:b3:
d6:9c:99:69:09:b2:31:8b:fe:c4:af:31:4b:da:4f:
eb:5a:83:db:85:be:70:f1:6a:9e:1d:98:01:db:a1:
07:e1:e0:80:d0:b0:74:c4:31:5c:4a:8d:53:b4:91:
21:0f:53:89:5c:8f:05:ac:0c:f8:01:ea:db:c4:ae:
1c:62:98:90:79:09:e3:1a:c1:ac:0a:08:ec:f5:fd:
0f:96:3f:e5:c8:ac:aa:54:c8:2b:8e:cc:31:c7:bd:
2e:2e:5d:85:ac:ad:b5:28:52:4c:9f:5d:02:17:49:
14:40:24:28:d8:d5:64:21:fe:0c:10:19:c1:7b:d5:
17:b8:5a:c0:1a:28:7f:33:77:ef:62:95:f1:10:d3:
1e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9F:52:6D:E2:83:62:3D:B4:7A:09:DE:B5:43:C7:69:33:CC:DF:57
X509v3 Authority Key Identifier:
keyid:37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:3a:f5:18:c4:ed:01:ec:70:db:e6:8e:a1:13:a7:41:09:f4:
78:05:bb:70:1a:44:ed:9e:ec:4b:26:86:ef:37:5d:51:25:ae:
ae:3b:fb:ee:f9:92:33:5a:65:10:b1:53:d9:72:c8:db:5a:64:
2a:9a:4b:93:44:ad:78:1a:ec:84:48:59:a0:a4:ba:b3:b8:dd:
e6:49:73:c4:d8:ab:ed:b0:29:18:2e:6e:a9:45:97:c7:49:d4:
22:a1:62:85:ef:ca:26:5f:88:eb:d1:d3:03:7d:8d:1f:a2:8e:
e2:9a:94:95:d8:5a:52:8e:f3:1a:65:4f:ad:1c:a5:87:41:0c:
92:15:bd:e7:69:3d:1a:6c:fb:c8:45:23:00:d7:6c:6a:cc:8f:
40:4c:a3:cc:54:17:ba:bb:dd:a0:41:e1:a3:55:04:b5:8e:a3:
42:5f:40:ac:cd:0e:d9:83:72:68:70:d7:06:b9:37:69:80:6c:
40:39:9d:21:e1:34:4e:79:f8:7a:00:ec:f9:3b:ff:db:c6:77:
5d:67:91:37:8a:7a:a9:f8:d5:34:bb:e6:85:fb:cc:06:c4:c4:
b2:7b:ca:67:89:25:e2:f6:e0:32:71:77:84:25:e2:79:cb:5b:
a1:08:bc:a0:4e:61:9c:92:56:9c:0f:a0:b0:36:3e:b6:6e:41:
8f:c2:4b:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu45DkdMk0qhB+XkYGDMeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NGYzYWQ5YmYxNDZjMDY5YjhkODNkNmQ1YWQ1NDgyMDQ1
ZWI3MGQwHhcNMjUwODIzMDcwMTM1WhcNMjUwODI0MDcwMTM1WjAzMTEwLwYDVQQD
Eyg3NDlmNTI2ZGUyODM2MjNkYjQ3YTA5ZGViNTQzYzc2OTMzY2NkZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3avWuo7Zq0UxoUiSLgTip+QFwjj
sHJmkvCb6EwKO+eX3JnSXtQEJnNtXgI4rYpycZrME9y4kmyHFCtp+1lu79eI0ZVO
b+H1S0N64gWkqvptdWzvlTtY9clSTe46S9ScZCgAplmQ/VAqnjGIZuPeVvw/8jYz
H7PWnJlpCbIxi/7ErzFL2k/rWoPbhb5w8WqeHZgB26EH4eCA0LB0xDFcSo1TtJEh
D1OJXI8FrAz4AerbxK4cYpiQeQnjGsGsCgjs9f0Plj/lyKyqVMgrjswxx70uLl2F
rK21KFJMn10CF0kUQCQo2NVkIf4MEBnBe9UXuFrAGih/M3fvYpXxENMetQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSfUm3ig2I9tHoJ3rVDx2kzzN9XMB8GA1UdIwQY
MBaAFDdPOtm/FGwGm42D1tWtVIIEXrcNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjA4NjJiOFViQWFiallQVzFhMVVnZ1JldHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83M2JmYjItMDI4NS00ZjUzLTkyZjAt
ZmY4NzEzYThlMzE2LzEvTjA4NjJiOFViQWFiallQVzFhMVVnZ1JldHcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi83M2JmYjItMDI4NS00ZjUzLTkyZjAtZmY4NzEzYThlMzE2
LzEvTjA4NjJiOFViQWFiallQVzFhMVVnZ1JldHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTr1GMTt
Aexw2+aOoROnQQn0eAW7cBpE7Z7sSyaG7zddUSWurjv77vmSM1plELFT2XLI21pk
KppLk0SteBrshEhZoKS6s7jd5klzxNir7bApGC5uqUWXx0nUIqFihe/KJl+I69HT
A32NH6KO4pqUldhaUo7zGmVPrRylh0EMkhW952k9Gmz7yEUjANdsasyPQEyjzFQX
urvdoEHho1UEtY6jQl9ArM0O2YNyaHDXBrk3aYBsQDmdIeE0Tnn4egDs+Tv/28Z3
XWeRN4p6qfjVNLvmhfvMBsTEsnvKZ4kl4vbgMnF3hCXiectboQi8oE5hnJJWnA+g
sDY+tm5Bj8JL9g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:31 2025 by rpki-client