Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
File: nD_Ua11gbBzKtVixc24mIaS8BAM.mft (raw, json)
Hash identifier: 50yf/AO8MnoTpqWNlUEEnGcLoaveC1me5uGHoPOtRDY=
Subject key identifier: 75:93:32:00:6E:0F:E4:1F:18:F8:4D:63:75:FC:E5:E1:4C:56:F5:DD
Authority key identifier: 9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03
Certificate issuer: /CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403
Certificate serial: 0198D69870CFB5C04146AD2E3BB35CD8766D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
Manifest number: 08D7
Signing time: Sat 23 Aug 2025 11:02:51 +0000
Manifest this update: Sat 23 Aug 2025 11:02:51 +0000
Manifest next update: Sun 24 Aug 2025 11:02:51 +0000
Files and hashes: 1: nD_Ua11gbBzKtVixc24mIaS8BAM.crl (hash: 2cMFh59+fFSLkG2WJe6eyL+GeUt28sEY5ivf8GoFTt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:70:cf:b5:c0:41:46:ad:2e:3b:b3:5c:d8:76:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403
Validity
Not Before: Aug 23 11:02:51 2025 GMT
Not After : Aug 24 11:02:51 2025 GMT
Subject: CN=759332006e0fe41f18f84d6375fce5e14c56f5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:2c:16:a7:e7:7c:68:45:cf:e8:81:d9:65:
e4:69:04:5d:c5:00:e1:49:ab:28:41:11:7d:f6:8e:
29:f0:78:95:af:8b:4f:4f:0d:ba:f8:47:fc:28:c4:
35:e6:c2:e3:32:8b:17:78:9f:3c:51:d7:68:d4:77:
77:83:e6:7c:4c:bd:39:9c:d5:aa:9f:1a:13:06:a3:
fa:ec:d1:8d:18:bc:05:f9:f7:6a:1e:78:df:b4:4f:
2b:9c:d2:a5:b7:76:f1:9b:14:87:2c:d1:2e:3a:61:
37:90:3d:5e:27:1b:1e:8d:31:3f:4d:11:f4:75:90:
cb:ff:2a:c5:84:0a:82:28:ca:43:72:49:4b:c1:22:
ce:18:3a:e8:de:93:a4:1b:65:41:5d:f0:4b:db:01:
c1:d5:18:43:61:85:1b:57:d6:e7:3b:09:4a:8c:4f:
20:74:57:2a:3c:a2:93:f9:af:86:c3:6d:f4:39:b8:
71:31:a9:df:83:3f:77:f2:ea:7a:09:88:0d:7f:24:
57:4b:e8:c3:65:3c:a5:c1:91:cb:da:74:e3:25:29:
54:f7:45:bb:a5:9f:0a:40:a5:04:eb:2d:4a:bd:30:
9f:c9:b8:e6:ab:15:01:fe:22:d1:4c:12:4e:4a:09:
ed:65:71:03:cf:d6:7e:9b:d0:7e:98:da:76:cc:e7:
c5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:93:32:00:6E:0F:E4:1F:18:F8:4D:63:75:FC:E5:E1:4C:56:F5:DD
X509v3 Authority Key Identifier:
keyid:9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b1:57:2d:e1:58:22:66:90:33:8e:fb:e0:41:01:f4:30:74:
95:9f:82:30:48:d9:33:bb:7c:5c:26:72:97:05:27:53:56:29:
66:ae:ef:b2:36:ea:16:97:e6:df:d9:1f:21:0c:ee:9e:89:dd:
b8:fd:a3:be:a8:cd:7f:94:82:37:52:3d:11:9e:86:c9:87:d3:
79:1d:22:6b:bc:0d:a0:03:ea:b3:fc:18:73:8c:8d:67:17:5b:
de:25:23:3f:8b:09:ca:b3:c5:81:16:97:56:4e:fe:f2:e5:7a:
46:1c:6e:28:7d:26:49:fe:4a:07:3a:87:0e:50:ab:67:72:7c:
ca:01:2f:69:73:77:30:59:ff:cd:02:55:1c:d6:0a:53:8f:c7:
db:44:31:7e:50:2d:db:bc:4d:f4:b4:47:22:10:48:9e:5e:20:
95:c5:7c:31:85:d7:cf:e3:6d:84:af:75:f2:a8:36:f8:84:8b:
a0:0a:88:6a:8f:1d:a9:39:43:4b:28:80:2b:f7:29:ff:d6:3f:
c5:e2:f4:52:9f:f4:f0:89:fb:fa:dc:66:af:07:c6:af:7b:08:
8d:b3:c4:f6:0c:bb:b4:a4:54:ec:fa:5a:5f:12:41:e6:51:86:
a0:e5:35:69:39:05:1e:1b:7b:90:bb:cc:8c:1a:ee:57:3d:20:
45:b7:e6:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmHDPtcBBRq0uO7Nc2HZtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljM2ZkNDZiNWQ2MDZjMWNjYWI1NThiMTczNmUyNjIxYTRi
YzA0MDMwHhcNMjUwODIzMTEwMjUxWhcNMjUwODI0MTEwMjUxWjAzMTEwLwYDVQQD
Eyg3NTkzMzIwMDZlMGZlNDFmMThmODRkNjM3NWZjZTVlMTRjNTZmNWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMEsFqfnfGhFz+iB2WXkaQRdxQDh
SasoQRF99o4p8HiVr4tPTw26+Ef8KMQ15sLjMosXeJ88Uddo1Hd3g+Z8TL05nNWq
nxoTBqP67NGNGLwF+fdqHnjftE8rnNKlt3bxmxSHLNEuOmE3kD1eJxsejTE/TRH0
dZDL/yrFhAqCKMpDcklLwSLOGDro3pOkG2VBXfBL2wHB1RhDYYUbV9bnOwlKjE8g
dFcqPKKT+a+Gw230ObhxManfgz938up6CYgNfyRXS+jDZTylwZHL2nTjJSlU90W7
pZ8KQKUE6y1KvTCfybjmqxUB/iLRTBJOSgntZXEDz9Z+m9B+mNp2zOfFKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWTMgBuD+QfGPhNY3X85eFMVvXdMB8GA1UdIwQY
MBaAFJw/1GtdYGwcyrVYsXNuJiGkvAQDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81Y2VkMjUtOTA5Ni00NzUwLTgyMTkt
MGIzMWMzMzJkNTBkLzEvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi81Y2VkMjUtOTA5Ni00NzUwLTgyMTktMGIzMWMzMzJkNTBk
LzEvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLFXLeFY
ImaQM4774EEB9DB0lZ+CMEjZM7t8XCZylwUnU1YpZq7vsjbqFpfm39kfIQzunond
uP2jvqjNf5SCN1I9EZ6GyYfTeR0ia7wNoAPqs/wYc4yNZxdb3iUjP4sJyrPFgRaX
Vk7+8uV6RhxuKH0mSf5KBzqHDlCrZ3J8ygEvaXN3MFn/zQJVHNYKU4/H20QxflAt
27xN9LRHIhBInl4glcV8MYXXz+NthK918qg2+ISLoAqIao8dqTlDSyiAK/cp/9Y/
xeL0Up/08In7+txmrwfGr3sIjbPE9gy7tKRU7PpaXxJB5lGGoOU1aTkFHht7kLvM
jBruVz0gRbfmSA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:14:00 2025 by rpki-client