Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
File: nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft (raw, json)
Hash identifier: 5Pdy5VwmK5BW5mDogN4NtiA6zHmKZrtHOv/4OLu4vh0=
Subject key identifier: D2:2B:A3:70:79:B0:5B:9A:FE:5A:21:7C:CE:12:34:C9:A0:01:18:E0
Authority key identifier: 9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
Certificate issuer: /CN=9e3f1579ae176662d663a3834c0fef824cee033c
Certificate serial: 0198D7739AFDF39F37434DC4AB3F771C6C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
Manifest number: 0379
Signing time: Sat 23 Aug 2025 15:02:14 +0000
Manifest this update: Sat 23 Aug 2025 15:02:14 +0000
Manifest next update: Sun 24 Aug 2025 15:02:14 +0000
Files and hashes: 1: nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl (hash: ondg8hpZpMKgsggURpO29jOaqNHWlEsNkfnShfCQGsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:9a:fd:f3:9f:37:43:4d:c4:ab:3f:77:1c:6c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3f1579ae176662d663a3834c0fef824cee033c
Validity
Not Before: Aug 23 15:02:14 2025 GMT
Not After : Aug 24 15:02:14 2025 GMT
Subject: CN=d22ba37079b05b9afe5a217cce1234c9a00118e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:42:cf:5a:30:15:30:f3:bc:81:ad:d5:db:0b:
6a:6e:ad:fa:f5:eb:ee:0c:a5:a2:d6:c7:48:4c:f8:
88:76:68:42:63:82:b8:d4:b9:83:ef:04:72:0e:73:
f4:b1:6d:9a:5b:f6:8b:ee:59:ec:9d:66:a7:5a:89:
18:2c:8b:b8:d4:2b:00:b5:92:2a:a6:64:79:da:ed:
87:a7:6e:1c:f0:21:fd:41:a6:27:4c:d9:1e:d7:2b:
22:96:a8:0d:94:24:f0:1f:a1:c4:8b:28:3b:0e:16:
f0:07:e2:fd:f7:3e:58:68:ee:e9:79:da:1c:31:6a:
b6:9c:65:e5:82:81:15:d5:73:98:cb:e3:b9:e5:67:
c9:2d:7b:71:65:5f:c5:c8:69:59:b5:12:99:8e:9a:
c8:8a:fe:f8:1b:a6:41:68:75:c4:51:4f:fe:8e:c3:
85:a1:8e:e6:f0:55:90:11:6a:0c:c5:e8:0d:64:1f:
f5:db:b0:ce:57:ae:a3:13:9a:c8:98:2a:57:1b:35:
00:50:36:5a:11:30:d0:90:66:36:71:1e:69:2d:d4:
51:eb:7a:6b:52:6c:1a:f7:5a:52:94:77:32:fb:10:
13:4d:3a:bb:a1:d0:d0:a0:57:9b:b8:76:28:fc:1b:
12:37:1b:a2:b2:34:ce:d2:28:f8:a7:d8:d8:ed:d7:
b6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2B:A3:70:79:B0:5B:9A:FE:5A:21:7C:CE:12:34:C9:A0:01:18:E0
X509v3 Authority Key Identifier:
keyid:9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:af:0a:29:1c:3a:b3:cb:de:99:40:9b:99:af:26:83:aa:b0:
84:0a:49:a0:7f:17:5e:8b:3b:9f:98:35:16:3e:51:5a:96:c3:
de:cb:a6:ee:12:4f:10:99:71:14:ee:12:69:3e:27:d1:1f:72:
3d:94:09:5f:c8:94:97:34:00:66:bd:63:7c:0b:45:63:aa:e3:
32:d8:97:f8:f7:bb:e3:5d:22:91:96:96:ae:a4:7c:52:ea:a0:
85:e9:94:07:24:67:27:77:bf:73:b0:ab:34:fb:65:2a:92:54:
17:94:e9:3e:0a:83:bb:3b:73:f7:e9:ca:97:b6:6d:64:56:14:
87:4e:1f:50:3b:0d:65:81:8e:3c:24:ab:21:77:38:61:08:91:
d1:5b:54:f1:af:89:58:6e:e1:02:26:d0:f6:fb:95:4b:20:b1:
3b:f9:e9:bb:17:1b:1c:0d:10:56:70:32:8d:8a:c1:eb:a6:50:
79:f8:55:00:38:5c:6c:90:da:33:b4:74:d5:8c:a3:03:f3:9e:
e8:ab:1f:cc:b6:c7:65:77:c8:bd:13:b0:f5:1e:99:be:8a:ae:
30:e6:0a:b5:cf:49:64:b5:50:81:c4:41:68:60:e3:4d:15:41:
3b:83:02:e4:a4:89:88:4a:50:92:41:a0:ec:2e:fa:40:f0:a8:
81:41:2b:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXc5r98583Q03Eqz93HGyeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllM2YxNTc5YWUxNzY2NjJkNjYzYTM4MzRjMGZlZjgyNGNl
ZTAzM2MwHhcNMjUwODIzMTUwMjE0WhcNMjUwODI0MTUwMjE0WjAzMTEwLwYDVQQD
EyhkMjJiYTM3MDc5YjA1YjlhZmU1YTIxN2NjZTEyMzRjOWEwMDExOGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0LPWjAVMPO8ga3V2wtqbq369evu
DKWi1sdITPiIdmhCY4K41LmD7wRyDnP0sW2aW/aL7lnsnWanWokYLIu41CsAtZIq
pmR52u2Hp24c8CH9QaYnTNke1ysilqgNlCTwH6HEiyg7DhbwB+L99z5YaO7pedoc
MWq2nGXlgoEV1XOYy+O55WfJLXtxZV/FyGlZtRKZjprIiv74G6ZBaHXEUU/+jsOF
oY7m8FWQEWoMxegNZB/127DOV66jE5rImCpXGzUAUDZaETDQkGY2cR5pLdRR63pr
Umwa91pSlHcy+xATTTq7odDQoFebuHYo/BsSNxuisjTO0ij4p9jY7de2ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIro3B5sFua/lohfM4SNMmgARjgMB8GA1UdIwQY
MBaAFJ4/FXmuF2Zi1mOjg0wP74JM7gM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmo4VmVhNFhabUxXWTZPRFRBX3Zna3p1QXp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NjI4NDAtNTE2OS00ZmYzLTg5Zjkt
NDgwNzM0ZTM4ZGE4LzEvbmo4VmVhNFhabUxXWTZPRFRBX3Zna3p1QXp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS85NjI4NDAtNTE2OS00ZmYzLTg5ZjktNDgwNzM0ZTM4ZGE4
LzEvbmo4VmVhNFhabUxXWTZPRFRBX3Zna3p1QXp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB68KKRw6
s8vemUCbma8mg6qwhApJoH8XXos7n5g1Fj5RWpbD3sum7hJPEJlxFO4SaT4n0R9y
PZQJX8iUlzQAZr1jfAtFY6rjMtiX+Pe7410ikZaWrqR8UuqghemUByRnJ3e/c7Cr
NPtlKpJUF5TpPgqDuztz9+nKl7ZtZFYUh04fUDsNZYGOPCSrIXc4YQiR0VtU8a+J
WG7hAibQ9vuVSyCxO/npuxcbHA0QVnAyjYrB66ZQefhVADhcbJDaM7R01YyjA/Oe
6KsfzLbHZXfIvROw9R6ZvoquMOYKtc9JZLVQgcRBaGDjTRVBO4MC5KSJiEpQkkGg
7C76QPCogUErdg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:39:15 2025 by rpki-client