Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
File: NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft (raw, json)
Hash identifier: FUn2FrEPgJO8I/asa8ct/wwyC/GgJBZSNVH7URQa7mw=
Subject key identifier: 1D:A4:9C:D3:87:12:F0:9B:9D:F6:32:A8:FB:43:F8:4C:52:46:C8:B1
Authority key identifier: 35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
Certificate issuer: /CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Certificate serial: 0198D583A1A3B9DCEC1C52EC42B322BD77C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
Manifest number: 0EC8
Signing time: Sat 23 Aug 2025 06:00:30 +0000
Manifest this update: Sat 23 Aug 2025 06:00:30 +0000
Manifest next update: Sun 24 Aug 2025 06:00:30 +0000
Files and hashes: 1: NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl (hash: xa9xC8Lh4zOqUIXw2PjQawHh3gs93XTAZnXh+kQ8bK8=)
2: ZIEntIvRdoyNG_9f7umqM8GaOP0.roa (hash: fyIclvXxfmafIM00Oljz1bkGgUIAKrrEkFW8CDlF9q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a1:a3:b9:dc:ec:1c:52:ec:42:b3:22:bd:77:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Validity
Not Before: Aug 23 06:00:30 2025 GMT
Not After : Aug 24 06:00:30 2025 GMT
Subject: CN=1da49cd38712f09b9df632a8fb43f84c5246c8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:0f:6a:3e:ba:62:ce:44:4f:c4:3d:f6:06:
67:ed:23:40:74:31:63:0b:0a:65:53:b4:f3:67:38:
33:02:fa:eb:8f:b0:4d:c8:25:b8:7e:84:0e:48:98:
ed:01:a7:79:11:cc:93:94:1c:30:6f:c4:c1:6e:53:
65:85:56:8f:e3:44:ea:0a:07:7b:e3:0c:b3:f8:ec:
97:a2:f9:80:e8:c3:a7:77:e6:4a:60:2e:d2:1d:a5:
e9:94:ff:c6:c4:0c:84:a9:33:80:ff:96:a1:c5:d1:
45:59:f3:91:e4:d1:c1:a0:7b:ca:d9:18:4c:15:a5:
33:28:58:6a:f2:43:e9:9f:61:7d:bb:1e:f5:9f:ba:
d3:3a:68:39:51:3e:d1:d1:53:7a:87:74:12:b4:7a:
79:82:b9:52:8a:17:0f:5d:cd:8f:d6:01:7f:94:6e:
7a:f9:30:60:75:19:aa:1d:58:57:7c:27:08:66:ec:
69:62:52:9a:37:38:71:c7:ac:46:43:55:13:c6:3e:
c6:f1:38:32:5d:95:a6:9b:98:ac:17:bf:9f:da:0b:
c4:45:4c:21:ef:11:5b:98:d1:c2:71:2a:f9:6a:a5:
91:27:b1:4b:13:90:9d:20:23:e1:d8:90:7b:ab:a8:
83:b6:82:8a:d3:ca:83:87:60:55:ce:c3:5e:54:0c:
29:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A4:9C:D3:87:12:F0:9B:9D:F6:32:A8:FB:43:F8:4C:52:46:C8:B1
X509v3 Authority Key Identifier:
keyid:35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a5:05:8f:3f:29:8e:52:a1:a4:98:cc:0c:c4:f0:89:49:a7:
d0:96:0e:aa:de:91:f4:a4:a6:ee:f2:6d:18:06:8e:18:88:fd:
93:d3:b3:82:35:c1:d8:8f:af:22:39:dd:a0:29:3e:6d:0b:ce:
52:f6:32:43:90:43:cf:a8:cf:42:a1:7f:c0:9e:f6:b1:36:c9:
77:92:92:93:c7:89:71:60:75:63:12:2e:32:2e:a9:bb:5f:70:
17:3d:f9:25:78:0b:96:33:53:4a:c5:1c:a7:ab:03:92:5e:b0:
a3:f6:b8:b1:50:b6:52:0c:02:93:81:a4:77:68:1f:1b:49:38:
df:dc:e3:49:66:5e:d3:fc:17:77:56:87:ae:05:f2:73:16:b9:
70:e2:06:96:82:9c:7c:3a:1f:71:20:c3:26:f7:74:c7:a7:67:
70:b5:92:08:2a:a6:c0:1e:42:8a:c9:02:2a:aa:7b:b4:3f:b6:
b7:b8:8d:c2:6d:b7:9b:e0:00:d4:95:f9:7b:01:bf:98:1f:51:
bd:71:69:f5:39:af:18:a1:fc:4f:65:14:2b:1a:a2:c3:df:f3:
27:04:0c:77:e7:a7:b1:11:19:9f:bf:4b:93:00:7b:9b:d4:9a:
ab:3e:73:86:dd:55:49:a6:39:47:7b:23:04:cc:49:97:a7:d3:
85:1d:0c:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg6GjudzsHFLsQrMivXfFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1M2YxN2Y0YmJiMTkzNDZkYzVhZmMwYzIzNTg3OWZiZTYz
NTdjNmQwHhcNMjUwODIzMDYwMDMwWhcNMjUwODI0MDYwMDMwWjAzMTEwLwYDVQQD
EygxZGE0OWNkMzg3MTJmMDliOWRmNjMyYThmYjQzZjg0YzUyNDZjOGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRAPaj66Ys5ET8Q99gZn7SNAdDFj
CwplU7TzZzgzAvrrj7BNyCW4foQOSJjtAad5EcyTlBwwb8TBblNlhVaP40TqCgd7
4wyz+OyXovmA6MOnd+ZKYC7SHaXplP/GxAyEqTOA/5ahxdFFWfOR5NHBoHvK2RhM
FaUzKFhq8kPpn2F9ux71n7rTOmg5UT7R0VN6h3QStHp5grlSihcPXc2P1gF/lG56
+TBgdRmqHVhXfCcIZuxpYlKaNzhxx6xGQ1UTxj7G8TgyXZWmm5isF7+f2gvERUwh
7xFbmNHCcSr5aqWRJ7FLE5CdICPh2JB7q6iDtoKK08qDh2BVzsNeVAwpbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2knNOHEvCbnfYyqPtD+ExSRsixMB8GA1UdIwQY
MBaAFDU/F/S7sZNG3Fr8DCNYefvmNXxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlQ4WDlMdXhrMGJjV3Z3TUkxaDUtLVkxZkcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wYTI0YjUtYjlhZC00OGE2LWFkZjct
OWZkODRjNzliMGVmLzEvTlQ4WDlMdXhrMGJjV3Z3TUkxaDUtLVkxZkcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wYTI0YjUtYjlhZC00OGE2LWFkZjctOWZkODRjNzliMGVm
LzEvTlQ4WDlMdXhrMGJjV3Z3TUkxaDUtLVkxZkcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApKUFjz8p
jlKhpJjMDMTwiUmn0JYOqt6R9KSm7vJtGAaOGIj9k9OzgjXB2I+vIjndoCk+bQvO
UvYyQ5BDz6jPQqF/wJ72sTbJd5KSk8eJcWB1YxIuMi6pu19wFz35JXgLljNTSsUc
p6sDkl6wo/a4sVC2UgwCk4Gkd2gfG0k439zjSWZe0/wXd1aHrgXycxa5cOIGloKc
fDofcSDDJvd0x6dncLWSCCqmwB5CiskCKqp7tD+2t7iNwm23m+AA1JX5ewG/mB9R
vXFp9TmvGKH8T2UUKxqiw9/zJwQMd+ensREZn79LkwB7m9Saqz5zht1VSaY5R3sj
BMxJl6fThR0Mpw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:08:23 2025 by rpki-client