Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft
File: nTW9eP7OI2XlsT9SOIfS2NakU_k.mft (raw, json)
Hash identifier: EDTZeE4mBW+O4juJp1pXUGwj/YypNPsxZA6ckJkTbX4=
Subject key identifier: 73:6E:F8:D6:99:A3:C0:BA:55:62:A8:09:63:0B:A8:0B:96:E0:BA:91
Authority key identifier: 9D:35:BD:78:FE:CE:23:65:E5:B1:3F:52:38:87:D2:D8:D6:A4:53:F9
Certificate issuer: /CN=9d35bd78fece2365e5b13f523887d2d8d6a453f9
Certificate serial: 0198D7E1A9C9989A018C4DB1FFEA6AFBC01F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTW9eP7OI2XlsT9SOIfS2NakU_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft
Manifest number: 6D
Signing time: Sat 23 Aug 2025 17:02:27 +0000
Manifest this update: Sat 23 Aug 2025 17:02:27 +0000
Manifest next update: Sun 24 Aug 2025 17:02:27 +0000
Files and hashes: 1: nTW9eP7OI2XlsT9SOIfS2NakU_k.crl (hash: 1PaTFjC0dnmDL57a30GvRq+OxWPXyBumHOmy/XeSbbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTW9eP7OI2XlsT9SOIfS2NakU_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:a9:c9:98:9a:01:8c:4d:b1:ff:ea:6a:fb:c0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d35bd78fece2365e5b13f523887d2d8d6a453f9
Validity
Not Before: Aug 23 17:02:27 2025 GMT
Not After : Aug 24 17:02:27 2025 GMT
Subject: CN=736ef8d699a3c0ba5562a809630ba80b96e0ba91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cb:ac:e4:db:af:f7:24:ff:15:cf:74:09:8b:
63:82:ab:cc:0a:84:ea:59:e6:12:0e:91:be:c9:e3:
3f:7c:e9:da:a2:2b:c9:c6:7f:5b:e0:af:04:df:50:
46:98:33:f4:80:b2:b1:b3:01:33:b8:83:28:44:58:
73:cb:19:d3:c1:a4:c9:ab:f8:40:d0:03:2a:7c:3c:
c6:73:44:23:8a:0f:29:4c:c6:d4:82:c9:da:92:4c:
4c:fa:af:d0:3d:f5:0d:a3:c0:fd:f5:be:c4:cd:e8:
91:19:c9:70:72:20:42:ae:ac:ed:c7:43:ab:95:0d:
7c:38:2c:9b:32:3c:1c:ee:8b:e5:e4:5c:b4:9e:84:
99:ff:d2:6c:e4:ca:6e:f2:79:e1:da:34:26:51:e7:
79:55:44:17:9d:ee:99:48:ff:7d:22:0c:a4:12:44:
27:36:2b:57:9a:d2:79:6f:de:84:58:98:51:20:fb:
c9:40:bc:d4:f4:1d:95:29:cf:8b:d1:d7:c7:89:5a:
fc:27:41:ca:be:eb:7d:d7:3b:24:1f:50:e9:b8:50:
07:bf:83:fd:19:c9:a5:09:32:d2:32:6e:e0:59:80:
51:ac:7a:c3:33:1b:a1:4b:c2:ed:80:5c:6b:13:65:
cb:64:ad:5e:84:a0:58:60:fc:16:d6:a9:94:5a:8e:
d2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6E:F8:D6:99:A3:C0:BA:55:62:A8:09:63:0B:A8:0B:96:E0:BA:91
X509v3 Authority Key Identifier:
keyid:9D:35:BD:78:FE:CE:23:65:E5:B1:3F:52:38:87:D2:D8:D6:A4:53:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTW9eP7OI2XlsT9SOIfS2NakU_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a3:6b:f1:90:1f:80:ec:15:28:17:a3:bd:f3:02:0a:7d:df:
5d:37:2c:ad:89:d8:f8:b5:76:9b:0e:aa:95:a6:36:da:bb:16:
36:7d:e9:f0:4e:a2:db:e9:6d:15:77:d9:5e:2b:de:65:6b:62:
a9:93:6d:96:4b:d9:e5:e0:dc:64:97:fb:b8:53:ea:86:dd:13:
ac:b3:9c:a6:ca:88:6f:f6:6f:e5:66:24:aa:5a:32:dd:da:16:
19:3d:a5:73:00:70:3c:80:98:09:06:09:1e:25:fa:da:2f:f9:
6d:5d:24:92:72:d4:b5:b2:9a:c7:0d:e2:f3:14:df:f5:59:59:
d2:a0:c1:5b:4f:9e:ff:4d:1d:b0:5d:af:6a:41:48:ea:c7:8f:
cd:57:d4:cb:75:f1:90:93:fe:cf:0a:33:2a:25:89:34:41:0f:
b1:54:a3:8a:8a:3e:73:12:50:37:89:88:8c:9f:12:3f:81:bd:
5e:d8:f5:1b:99:d5:77:5b:44:bb:c4:08:10:4a:1c:77:41:8d:
8b:ed:b9:4c:d5:49:82:17:8b:46:15:09:07:28:51:d1:4e:c2:
83:c2:01:83:df:e4:2b:be:e3:17:7e:f0:6a:84:9c:73:50:e4:
f6:f2:5c:dc:c8:f9:39:37:b2:82:73:14:ee:91:84:e5:1e:67:
c6:23:36:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjX4anJmJoBjE2x/+pq+8AfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMzViZDc4ZmVjZTIzNjVlNWIxM2Y1MjM4ODdkMmQ4ZDZh
NDUzZjkwHhcNMjUwODIzMTcwMjI3WhcNMjUwODI0MTcwMjI3WjAzMTEwLwYDVQQD
Eyg3MzZlZjhkNjk5YTNjMGJhNTU2MmE4MDk2MzBiYTgwYjk2ZTBiYTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cus5Nuv9yT/Fc90CYtjgqvMCoTq
WeYSDpG+yeM/fOnaoivJxn9b4K8E31BGmDP0gLKxswEzuIMoRFhzyxnTwaTJq/hA
0AMqfDzGc0Qjig8pTMbUgsnakkxM+q/QPfUNo8D99b7EzeiRGclwciBCrqztx0Or
lQ18OCybMjwc7ovl5Fy0noSZ/9Js5Mpu8nnh2jQmUed5VUQXne6ZSP99IgykEkQn
NitXmtJ5b96EWJhRIPvJQLzU9B2VKc+L0dfHiVr8J0HKvut91zskH1DpuFAHv4P9
GcmlCTLSMm7gWYBRrHrDMxuhS8LtgFxrE2XLZK1ehKBYYPwW1qmUWo7SeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNu+NaZo8C6VWKoCWMLqAuW4LqRMB8GA1UdIwQY
MBaAFJ01vXj+ziNl5bE/UjiH0tjWpFP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblRXOWVQN09JMlhsc1Q5U09JZlMyTmFrVV9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS81ZWUxNTMtMjFhOS00MWU5LWE1OTkt
NmM0NDIzMjRjYTNjLzEvblRXOWVQN09JMlhsc1Q5U09JZlMyTmFrVV9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS81ZWUxNTMtMjFhOS00MWU5LWE1OTktNmM0NDIzMjRjYTNj
LzEvblRXOWVQN09JMlhsc1Q5U09JZlMyTmFrVV9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKNr8ZAf
gOwVKBejvfMCCn3fXTcsrYnY+LV2mw6qlaY22rsWNn3p8E6i2+ltFXfZXiveZWti
qZNtlkvZ5eDcZJf7uFPqht0TrLOcpsqIb/Zv5WYkqloy3doWGT2lcwBwPICYCQYJ
HiX62i/5bV0kknLUtbKaxw3i8xTf9VlZ0qDBW0+e/00dsF2vakFI6sePzVfUy3Xx
kJP+zwozKiWJNEEPsVSjioo+cxJQN4mIjJ8SP4G9Xtj1G5nVd1tEu8QIEEocd0GN
i+25TNVJgheLRhUJByhR0U7Cg8IBg9/kK77jF37waoScc1Dk9vJc3Mj5OTeygnMU
7pGE5R5nxiM24A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:55 2025 by rpki-client