Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
File: NIWdiibI6Ih3f06AGyC3hd7mVM8.mft (raw, json)
Hash identifier: +WtDhO9k6v5SL0aPujVz5OWJuggt+qideW+FJHZxhn4=
Subject key identifier: C3:2E:19:3F:57:94:CD:C3:25:D5:13:A3:38:B8:D3:DF:29:99:BF:20
Authority key identifier: 34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF
Certificate issuer: /CN=34859d8a26c8e888777f4e801b20b785dee654cf
Certificate serial: 0198D7E1A2A4ABF431D30E5E1FB49EED6A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
Manifest number: 1359
Signing time: Sat 23 Aug 2025 17:02:25 +0000
Manifest this update: Sat 23 Aug 2025 17:02:25 +0000
Manifest next update: Sun 24 Aug 2025 17:02:25 +0000
Files and hashes: 1: KBPaX26T74rF_b98D5vbCS4Nuz0.roa (hash: nU2QowOmWztQQgJHXXYPFT8tIem+quPQmedvSFuZH+I=)
2: NIWdiibI6Ih3f06AGyC3hd7mVM8.crl (hash: ATVdY/c+ngTsI6mMyie2pVoaQJoJD0bPQ51Fv7yY+pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:a2:a4:ab:f4:31:d3:0e:5e:1f:b4:9e:ed:6a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34859d8a26c8e888777f4e801b20b785dee654cf
Validity
Not Before: Aug 23 17:02:25 2025 GMT
Not After : Aug 24 17:02:25 2025 GMT
Subject: CN=c32e193f5794cdc325d513a338b8d3df2999bf20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a9:e9:c0:3f:51:30:b4:51:3b:36:4e:f6:b2:
8a:05:19:5c:ae:91:4d:8e:f1:e5:83:af:4e:30:c1:
5f:26:c9:a5:c9:31:f3:c5:71:80:d8:b6:e7:1c:ea:
e9:4c:cc:14:a5:a3:bc:f2:5c:22:98:38:6b:40:ca:
37:c8:e8:14:24:d0:b2:d1:e4:36:f9:7a:9e:86:b8:
ae:fe:3a:dc:af:14:b2:0b:29:8a:50:58:83:9c:b8:
06:64:f0:b4:46:ba:4a:a8:ae:1e:71:fb:77:37:2c:
92:99:13:b7:00:30:39:8a:cf:d9:0c:80:8a:1c:dc:
02:1c:20:4c:a1:df:9d:97:ab:bc:ef:11:3f:1b:99:
df:8b:eb:5b:38:f7:75:af:7f:7f:c3:f2:0e:27:07:
60:76:dc:7f:1c:e5:dc:f2:fa:0c:a7:ae:47:1f:e5:
22:07:a9:01:c4:19:e1:3f:3a:cd:c1:16:00:f9:d8:
6c:bf:53:47:7c:f0:32:ed:dc:82:00:c1:35:0c:ec:
80:a5:cc:60:b3:42:69:2d:56:27:39:64:5c:1c:ce:
fd:02:03:05:f1:13:b7:75:fc:7c:7f:7d:a2:86:e8:
9b:28:3c:86:fc:21:35:40:ef:d7:53:46:1f:5c:8b:
51:16:b3:f4:e2:e7:9b:cd:b6:c2:b0:f3:91:25:2f:
bf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2E:19:3F:57:94:CD:C3:25:D5:13:A3:38:B8:D3:DF:29:99:BF:20
X509v3 Authority Key Identifier:
keyid:34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fd:95:80:59:11:6c:21:9a:f5:d4:bf:5b:9a:be:d5:c7:e8:
03:68:10:e9:bf:59:86:4e:12:d4:7b:73:44:f7:98:ee:97:48:
41:89:23:e0:41:fc:5e:d8:0b:d2:2f:68:12:29:61:e9:7e:f6:
d6:d9:65:de:18:86:3b:86:4d:2e:af:22:d8:9b:25:4e:bc:cb:
6b:8c:59:04:64:67:3a:75:16:1f:7d:d2:df:d2:9f:14:b6:a5:
20:0e:38:87:b9:87:86:b4:a7:46:89:eb:05:07:c2:78:ce:44:
22:bb:bd:0f:fc:ef:af:52:60:b6:f9:0f:16:0b:6d:9c:aa:5a:
82:b8:38:05:12:8e:c2:9d:92:f5:f5:45:44:f0:4e:ed:e2:59:
7a:81:3b:12:14:ee:25:03:bd:bd:11:8e:3b:dc:0d:b7:f3:7e:
ba:f5:27:da:54:8b:44:c0:f7:1f:8c:d6:02:6d:d2:4c:b9:71:
64:51:b0:8b:37:ae:09:a1:16:69:14:c7:c9:1d:4a:46:8a:0e:
4f:bb:57:d1:72:6f:29:7d:cb:39:b4:2c:8d:87:30:c4:6d:a3:
eb:38:72:15:92:35:f2:df:88:d9:ea:29:b5:ae:53:07:d8:d1:
27:0e:e3:a9:00:6b:00:71:28:d8:93:58:f7:a3:d1:1f:04:a6:
ae:43:5a:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjX4aKkq/Qx0w5eH7Se7WoCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ODU5ZDhhMjZjOGU4ODg3NzdmNGU4MDFiMjBiNzg1ZGVl
NjU0Y2YwHhcNMjUwODIzMTcwMjI1WhcNMjUwODI0MTcwMjI1WjAzMTEwLwYDVQQD
EyhjMzJlMTkzZjU3OTRjZGMzMjVkNTEzYTMzOGI4ZDNkZjI5OTliZjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KnpwD9RMLRROzZO9rKKBRlcrpFN
jvHlg69OMMFfJsmlyTHzxXGA2LbnHOrpTMwUpaO88lwimDhrQMo3yOgUJNCy0eQ2
+Xqehriu/jrcrxSyCymKUFiDnLgGZPC0RrpKqK4ecft3NyySmRO3ADA5is/ZDICK
HNwCHCBMod+dl6u87xE/G5nfi+tbOPd1r39/w/IOJwdgdtx/HOXc8voMp65HH+Ui
B6kBxBnhPzrNwRYA+dhsv1NHfPAy7dyCAME1DOyApcxgs0JpLVYnOWRcHM79AgMF
8RO3dfx8f32ihuibKDyG/CE1QO/XU0YfXItRFrP04uebzbbCsPORJS+/zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMuGT9XlM3DJdUTozi4098pmb8gMB8GA1UdIwQY
MBaAFDSFnYomyOiId39OgBsgt4Xe5lTPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTklXZGlpYkk2SWgzZjA2QUd5QzNoZDdtVk04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83OGZlZmMtZTljNS00YzZiLTllY2Qt
MTg3MjNjODQxMTIxLzEvTklXZGlpYkk2SWgzZjA2QUd5QzNoZDdtVk04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83OGZlZmMtZTljNS00YzZiLTllY2QtMTg3MjNjODQxMTIx
LzEvTklXZGlpYkk2SWgzZjA2QUd5QzNoZDdtVk04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASv2VgFkR
bCGa9dS/W5q+1cfoA2gQ6b9Zhk4S1HtzRPeY7pdIQYkj4EH8XtgL0i9oEilh6X72
1tll3hiGO4ZNLq8i2JslTrzLa4xZBGRnOnUWH33S39KfFLalIA44h7mHhrSnRonr
BQfCeM5EIru9D/zvr1JgtvkPFgttnKpagrg4BRKOwp2S9fVFRPBO7eJZeoE7EhTu
JQO9vRGOO9wNt/N+uvUn2lSLRMD3H4zWAm3STLlxZFGwizeuCaEWaRTHyR1KRooO
T7tX0XJvKX3LObQsjYcwxG2j6zhyFZI18t+I2eopta5TB9jRJw7jqQBrAHEo2JNY
96PRHwSmrkNafQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:33:02 2025 by rpki-client