Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
File: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft (raw, json)
Hash identifier: 9K7ytRyPvCT04UkjJbYZF7xMGYgYHXc4KYISGb5Juz8=
Subject key identifier: B4:37:72:9E:74:1A:17:5E:3D:7F:A9:E7:CD:31:12:F6:E7:ED:54:85
Authority key identifier: 36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA
Certificate issuer: /CN=363bd1b29c89edb944e28710d193874c94323eaa
Certificate serial: 0198D47363260A73B20A5D35DBAC88E03B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
Manifest number: 032C
Signing time: Sat 23 Aug 2025 01:03:08 +0000
Manifest this update: Sat 23 Aug 2025 01:03:08 +0000
Manifest next update: Sun 24 Aug 2025 01:03:08 +0000
Files and hashes: 1: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl (hash: Xqv3lBmMjw5NNPONVIg6HmLFT6GO9CkQo5uDv62Wm3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:63:26:0a:73:b2:0a:5d:35:db:ac:88:e0:3b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363bd1b29c89edb944e28710d193874c94323eaa
Validity
Not Before: Aug 23 01:03:08 2025 GMT
Not After : Aug 24 01:03:08 2025 GMT
Subject: CN=b437729e741a175e3d7fa9e7cd3112f6e7ed5485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b4:b4:68:cf:99:55:61:b8:09:22:85:60:1b:
8c:96:57:54:14:08:cb:42:27:96:c1:58:5b:de:3c:
0b:90:3e:6f:2a:36:2e:b6:7f:d0:a3:81:ae:23:c1:
ac:46:13:d1:30:9a:de:75:55:27:5b:5e:85:c9:df:
62:62:b0:85:01:b6:32:8d:26:6a:05:22:98:0c:1e:
22:40:c2:69:d1:59:7b:db:f0:ca:45:18:c8:c9:03:
91:b4:9c:e3:98:00:8c:76:19:56:e3:ce:e7:96:a1:
06:c7:37:e6:22:67:99:d7:55:3b:25:1b:a5:54:48:
80:35:ca:6a:7f:15:b5:25:04:2a:fd:e1:c0:74:d5:
03:63:40:7a:b0:29:ff:cc:09:a5:20:10:a8:31:3f:
b1:f8:23:41:3f:1b:c7:19:d7:6a:c6:be:24:fa:63:
68:21:c8:1d:a9:1b:5f:a1:b6:eb:e1:5b:1f:75:61:
2b:74:c9:84:b9:2f:a5:16:45:4e:55:43:f1:c4:97:
8f:ff:5b:b1:7a:9d:e5:2e:2c:de:36:da:3d:99:99:
7c:f7:fc:4d:9c:8d:ba:95:71:0d:59:b7:05:91:15:
d2:a2:dc:d7:d4:4e:75:3b:12:05:82:38:e5:1e:03:
77:7d:b1:d7:8f:b1:a7:38:96:c3:1d:28:af:a0:c0:
f7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:37:72:9E:74:1A:17:5E:3D:7F:A9:E7:CD:31:12:F6:E7:ED:54:85
X509v3 Authority Key Identifier:
keyid:36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:04:05:51:2a:8f:9b:42:a9:8c:6e:85:ed:37:fa:da:07:4e:
66:2f:33:b5:97:08:03:16:d6:81:b0:2c:23:06:46:e7:8b:0e:
63:d9:98:7c:34:96:08:b2:7b:76:63:08:cf:da:7a:21:3b:46:
96:55:ad:08:70:6f:c5:08:26:4c:ed:ed:b2:cb:1a:38:e3:bf:
07:0e:2b:a2:16:56:b3:a5:2d:b3:8d:b1:d9:84:94:18:fa:88:
96:14:68:78:d4:f9:7a:b3:53:99:a7:e5:23:1b:43:aa:b1:18:
3e:44:ef:34:fd:44:76:8e:7d:b2:f7:63:8e:59:11:88:5c:1c:
9f:51:af:d2:00:c1:c2:e0:4c:b8:1d:09:2a:77:e2:5d:ce:b6:
86:d2:f7:46:a5:46:77:8b:c7:2a:39:df:56:ce:76:e0:20:81:
c7:79:d9:71:4c:49:70:b4:69:eb:79:e0:c9:0d:93:38:cc:3c:
3f:a4:25:f6:c4:5c:3d:bb:f1:cd:4a:cb:3a:93:c0:5a:d6:8e:
f1:7f:4d:b1:2f:3c:52:45:87:0d:63:a9:a6:a3:25:92:97:49:
f3:fc:9d:a2:03:38:fb:de:49:74:9d:21:86:bc:ad:a7:42:43:
d5:da:cd:0f:2f:5f:4e:85:b6:5e:5b:b7:d0:ab:e4:bd:e9:f9:
66:a6:b5:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc2MmCnOyCl0126yI4DuYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2M2JkMWIyOWM4OWVkYjk0NGUyODcxMGQxOTM4NzRjOTQz
MjNlYWEwHhcNMjUwODIzMDEwMzA4WhcNMjUwODI0MDEwMzA4WjAzMTEwLwYDVQQD
EyhiNDM3NzI5ZTc0MWExNzVlM2Q3ZmE5ZTdjZDMxMTJmNmU3ZWQ1NDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27S0aM+ZVWG4CSKFYBuMlldUFAjL
QieWwVhb3jwLkD5vKjYutn/Qo4GuI8GsRhPRMJredVUnW16Fyd9iYrCFAbYyjSZq
BSKYDB4iQMJp0Vl72/DKRRjIyQORtJzjmACMdhlW487nlqEGxzfmImeZ11U7JRul
VEiANcpqfxW1JQQq/eHAdNUDY0B6sCn/zAmlIBCoMT+x+CNBPxvHGddqxr4k+mNo
IcgdqRtfobbr4VsfdWErdMmEuS+lFkVOVUPxxJeP/1uxep3lLizeNto9mZl89/xN
nI26lXENWbcFkRXSotzX1E51OxIFgjjlHgN3fbHXj7GnOJbDHSivoMD3sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQ3cp50GhdePX+p580xEvbn7VSFMB8GA1UdIwQY
MBaAFDY70bKcie25ROKHENGTh0yUMj6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmp2UnNweUo3YmxFNG9jUTBaT0hUSlF5UHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jOTYxYTQtYzZhNi00MmNhLWExOGYt
MTI0NjU4YjM2ZGZkLzEvTmp2UnNweUo3YmxFNG9jUTBaT0hUSlF5UHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jOTYxYTQtYzZhNi00MmNhLWExOGYtMTI0NjU4YjM2ZGZk
LzEvTmp2UnNweUo3YmxFNG9jUTBaT0hUSlF5UHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgQFUSqP
m0KpjG6F7Tf62gdOZi8ztZcIAxbWgbAsIwZG54sOY9mYfDSWCLJ7dmMIz9p6ITtG
llWtCHBvxQgmTO3tsssaOOO/Bw4rohZWs6Uts42x2YSUGPqIlhRoeNT5erNTmafl
IxtDqrEYPkTvNP1Edo59svdjjlkRiFwcn1Gv0gDBwuBMuB0JKnfiXc62htL3RqVG
d4vHKjnfVs524CCBx3nZcUxJcLRp63ngyQ2TOMw8P6Ql9sRcPbvxzUrLOpPAWtaO
8X9NsS88UkWHDWOppqMlkpdJ8/ydogM4+95JdJ0hhrytp0JD1drNDy9fToW2Xlu3
0Kvkven5Zqa1yw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:27:10 2025 by rpki-client