Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
File: nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft (raw, json)
Hash identifier: IVKHPBanEOYoGEYxr/tBXGvlJVySohgcB+R5oKYdlEA=
Subject key identifier: 8D:D3:F4:90:0C:01:7F:D1:A6:A2:68:B3:8B:B3:19:4D:BA:14:72:41
Authority key identifier: 9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
Certificate issuer: /CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Certificate serial: 0197B6A117765F76D7DDC70BE398F59E9163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
Manifest number: 06B3
Signing time: Sat 28 Jun 2025 13:01:40 +0000
Manifest this update: Sat 28 Jun 2025 13:01:40 +0000
Manifest next update: Sun 29 Jun 2025 13:01:40 +0000
Files and hashes: 1: nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl (hash: qxeK1CQBi2izobPBlB9svAGA8icxoeJ9NXcZK0h1oxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:17:76:5f:76:d7:dd:c7:0b:e3:98:f5:9e:91:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Validity
Not Before: Jun 28 13:01:40 2025 GMT
Not After : Jun 29 13:01:40 2025 GMT
Subject: CN=8dd3f4900c017fd1a6a268b38bb3194dba147241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4a:0d:d6:4a:7b:47:d3:fc:85:92:05:8b:19:
b1:fd:81:24:7a:b9:23:c1:6f:66:26:4d:23:57:a3:
1c:6c:13:72:b3:44:e2:83:97:38:54:d6:ac:58:eb:
3e:a6:c3:c6:1b:3d:c7:25:29:cc:99:bf:53:eb:20:
1e:82:f6:d9:cd:c0:4c:75:cb:03:49:28:e3:3e:42:
f7:f9:3d:65:de:ce:85:9d:8e:dd:51:c4:49:91:13:
2f:29:f9:b5:60:00:d6:7b:69:7c:c2:e2:8e:41:0a:
14:bb:ce:3d:9c:c2:ea:a6:7a:03:00:d3:5e:6e:f6:
15:26:cd:07:41:c7:e7:d2:40:5d:13:19:11:ba:ff:
ed:78:9c:c9:ba:9a:eb:bd:0e:b0:5d:28:b2:ef:98:
b0:70:b3:5c:c8:b1:c4:4e:6d:7c:c7:4f:22:41:93:
6a:00:61:21:8d:d8:95:a5:c8:67:be:2e:d9:43:70:
dd:ba:b6:a9:cd:94:4e:83:90:f5:6f:0c:56:a4:64:
65:bd:3b:1d:3d:43:66:2d:36:8c:1b:2c:a8:42:6c:
13:0f:af:e3:87:1b:8d:8b:be:37:0f:f9:3e:52:73:
66:fd:d3:c6:95:c5:d9:c9:ed:4f:1c:c9:81:34:0f:
cb:73:4d:b0:58:b8:62:4d:1b:9d:43:e5:e2:7b:79:
72:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D3:F4:90:0C:01:7F:D1:A6:A2:68:B3:8B:B3:19:4D:BA:14:72:41
X509v3 Authority Key Identifier:
keyid:9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:92:3f:34:bc:fb:fa:6e:df:c1:4e:9b:64:bb:ce:c9:7c:07:
53:8e:c5:b1:23:e5:e0:e6:89:dd:9b:21:7a:88:4f:ea:5f:f5:
22:23:9a:56:02:c1:0e:99:c4:fc:7b:d5:c6:9a:8f:d2:9a:38:
20:13:93:2a:5b:f0:65:ce:9f:7d:12:b4:85:d4:18:b7:1e:4b:
4b:fb:98:8f:74:a2:e5:31:a0:aa:e9:97:73:6d:2c:ab:b7:43:
28:67:8c:30:48:5c:02:38:6d:44:34:17:4d:83:2e:4a:cc:9b:
aa:ab:d3:d1:1e:62:f2:03:36:f7:3a:3f:64:4b:3f:1b:6f:d1:
58:d7:c0:8d:ca:70:bc:ad:a3:9b:1c:22:0f:3c:af:ce:fe:a9:
4e:ed:ee:17:18:ec:fa:2b:28:d9:98:4f:86:17:dd:50:af:08:
5a:4a:00:02:4a:f3:72:7d:62:26:b9:3c:a4:c8:88:74:f6:2f:
77:a6:db:87:11:a2:29:5b:39:69:3f:aa:0a:03:47:86:70:dd:
87:22:4e:45:a3:55:f8:53:f8:01:a5:1f:7e:2b:b1:27:f0:7a:
04:49:3d:2f:e4:5c:74:a2:57:4e:c4:aa:72:28:c4:d7:b6:58:
1a:4b:a0:81:0a:18:91:ce:cd:89:49:22:f5:57:52:de:4d:ca:
68:9f:e1:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oRd2X3bX3ccL45j1npFjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMDU1NGIzYTY5MDc3Y2IyNjI5ZGE0ODA3YzNlMDJhNTYx
YWQ5NGEwHhcNMjUwNjI4MTMwMTQwWhcNMjUwNjI5MTMwMTQwWjAzMTEwLwYDVQQD
Eyg4ZGQzZjQ5MDBjMDE3ZmQxYTZhMjY4YjM4YmIzMTk0ZGJhMTQ3MjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EoN1kp7R9P8hZIFixmx/YEkerkj
wW9mJk0jV6McbBNys0Tig5c4VNasWOs+psPGGz3HJSnMmb9T6yAegvbZzcBMdcsD
SSjjPkL3+T1l3s6FnY7dUcRJkRMvKfm1YADWe2l8wuKOQQoUu849nMLqpnoDANNe
bvYVJs0HQcfn0kBdExkRuv/teJzJuprrvQ6wXSiy75iwcLNcyLHETm18x08iQZNq
AGEhjdiVpchnvi7ZQ3DdurapzZROg5D1bwxWpGRlvTsdPUNmLTaMGyyoQmwTD6/j
hxuNi743D/k+UnNm/dPGlcXZye1PHMmBNA/Lc02wWLhiTRudQ+Xie3lyAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3T9JAMAX/RpqJos4uzGU26FHJBMB8GA1UdIwQY
MBaAFJwFVLOmkHfLJinaSAfD4CpWGtlKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkFWVXM2YVFkOHNtS2RwSUI4UGdLbFlhMlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81ZjI4YjYtNjA4Mi00YTM1LWEzMjgt
NDA4MjBjODQyNmI0LzEvbkFWVXM2YVFkOHNtS2RwSUI4UGdLbFlhMlVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS81ZjI4YjYtNjA4Mi00YTM1LWEzMjgtNDA4MjBjODQyNmI0
LzEvbkFWVXM2YVFkOHNtS2RwSUI4UGdLbFlhMlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5I/NLz7
+m7fwU6bZLvOyXwHU47FsSPl4OaJ3ZsheohP6l/1IiOaVgLBDpnE/HvVxpqP0po4
IBOTKlvwZc6ffRK0hdQYtx5LS/uYj3Si5TGgqumXc20sq7dDKGeMMEhcAjhtRDQX
TYMuSsybqqvT0R5i8gM29zo/ZEs/G2/RWNfAjcpwvK2jmxwiDzyvzv6pTu3uFxjs
+iso2ZhPhhfdUK8IWkoAAkrzcn1iJrk8pMiIdPYvd6bbhxGiKVs5aT+qCgNHhnDd
hyJORaNV+FP4AaUffiuxJ/B6BEk9L+RcdKJXTsSqcijE17ZYGkuggQoYkc7NiUki
9VdS3k3KaJ/hUg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:10 2025 by rpki-client