Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
File: nPmIlqiK6PNUCut37KHxqUu9aXg.mft (raw, json)
Hash identifier: 9DoyOuU8ygEOAm0BmoZqqIa8Aq1i1XD/pKAno8TLmHg=
Subject key identifier: 67:A4:D7:7A:7A:63:30:07:67:68:2C:99:C9:56:0B:25:89:84:DE:32
Authority key identifier: 9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78
Certificate issuer: /CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978
Certificate serial: 0198D65F81847D0D938C26452DEF0C86F436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
Manifest number: 07E0
Signing time: Sat 23 Aug 2025 10:00:39 +0000
Manifest this update: Sat 23 Aug 2025 10:00:39 +0000
Manifest next update: Sun 24 Aug 2025 10:00:39 +0000
Files and hashes: 1: nPmIlqiK6PNUCut37KHxqUu9aXg.crl (hash: hsdHScv1fCYBG5BoM1qrSlTBhJCvOFVYod4jprdQ9Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:81:84:7d:0d:93:8c:26:45:2d:ef:0c:86:f4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978
Validity
Not Before: Aug 23 10:00:39 2025 GMT
Not After : Aug 24 10:00:39 2025 GMT
Subject: CN=67a4d77a7a63300767682c99c9560b258984de32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:13:fb:35:23:76:b2:26:7a:a9:eb:6f:e5:50:
72:e3:ec:39:f9:85:bb:c7:16:6f:29:4c:dc:51:8f:
40:63:bf:da:76:84:27:f6:4b:ac:8e:dd:b6:95:3c:
bd:04:ea:8a:2e:f0:ea:cc:17:6a:42:0c:c1:f2:21:
df:93:6a:ba:89:a1:bd:d0:3e:94:76:5c:0a:f3:26:
f3:24:50:37:53:b1:9e:17:2f:21:de:e7:5d:77:3b:
59:56:f4:31:33:95:38:9e:75:11:d5:89:50:b4:47:
27:8d:11:56:63:14:c3:cb:52:ee:59:03:c5:47:27:
07:30:aa:b6:f4:67:eb:45:07:9b:0c:c7:65:24:ae:
a4:a8:bd:02:d7:e1:5b:aa:90:30:e3:d8:23:72:6e:
a9:6c:b6:f4:92:22:32:0c:8a:88:ed:54:67:82:19:
11:39:b6:7b:e7:0d:11:ee:83:f3:64:0f:1d:6a:81:
c6:c2:6d:43:03:8a:ac:d5:69:41:95:6e:88:1f:25:
ff:e8:0d:43:d4:ea:5e:40:4a:d2:c6:dd:3e:76:81:
9f:92:4c:3b:ab:59:67:a8:14:ed:9c:05:b8:79:fd:
fc:a5:fa:fb:2d:e7:db:5a:7f:15:60:fd:8b:6d:fc:
5b:79:a7:b8:fc:db:f9:49:f6:bc:e1:fb:ae:80:b0:
c6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A4:D7:7A:7A:63:30:07:67:68:2C:99:C9:56:0B:25:89:84:DE:32
X509v3 Authority Key Identifier:
keyid:9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:da:17:2d:02:f1:f0:4c:ce:2c:a8:a9:38:df:f8:57:18:2f:
47:75:2a:f7:bb:a1:b2:82:31:61:66:18:75:6a:d7:3b:e9:c0:
2f:20:f9:84:ab:57:0d:77:c6:f2:2e:f8:a6:49:af:7c:bb:23:
d9:23:6f:90:56:70:fb:fb:61:05:46:f2:07:94:d6:2f:74:61:
60:63:71:f1:53:ae:94:47:1f:94:07:3b:77:96:4f:4c:b0:23:
a1:10:13:3f:cd:70:3d:7a:15:d0:2e:12:1f:e9:11:19:ff:78:
70:11:06:3f:9e:90:89:37:7f:d2:f5:e8:72:76:b9:ab:1f:c0:
37:6b:ea:14:59:61:06:92:9a:32:12:2a:61:07:32:24:ad:33:
58:58:0a:d9:1d:ed:64:26:5c:91:1f:ab:74:35:03:c2:5c:73:
70:46:48:f5:2c:bc:0f:62:3e:03:a6:0b:d2:22:14:02:57:0e:
c6:08:aa:fc:90:40:ee:56:81:02:4c:1c:18:82:17:e3:f0:0c:
52:2e:d0:55:56:29:cc:11:0b:4c:6c:3a:af:1b:78:ab:b6:cc:
ff:ab:8d:ad:8a:b8:96:74:dc:d1:73:03:c6:15:27:99:5d:73:
96:72:82:d1:cf:b9:66:f1:32:f1:f8:86:31:75:a5:87:ae:22:
28:d1:0d:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX4GEfQ2TjCZFLe8MhvQ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZjk4ODk2YTg4YWU4ZjM1NDBhZWI3N2VjYTFmMWE5NGJi
ZDY5NzgwHhcNMjUwODIzMTAwMDM5WhcNMjUwODI0MTAwMDM5WjAzMTEwLwYDVQQD
Eyg2N2E0ZDc3YTdhNjMzMDA3Njc2ODJjOTljOTU2MGIyNTg5ODRkZTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixP7NSN2siZ6qetv5VBy4+w5+YW7
xxZvKUzcUY9AY7/adoQn9kusjt22lTy9BOqKLvDqzBdqQgzB8iHfk2q6iaG90D6U
dlwK8ybzJFA3U7GeFy8h3udddztZVvQxM5U4nnUR1YlQtEcnjRFWYxTDy1LuWQPF
RycHMKq29GfrRQebDMdlJK6kqL0C1+FbqpAw49gjcm6pbLb0kiIyDIqI7VRnghkR
ObZ75w0R7oPzZA8daoHGwm1DA4qs1WlBlW6IHyX/6A1D1OpeQErSxt0+doGfkkw7
q1lnqBTtnAW4ef38pfr7LefbWn8VYP2Lbfxbeae4/Nv5Sfa84fuugLDGjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGek13p6YzAHZ2gsmclWCyWJhN4yMB8GA1UdIwQY
MBaAFJz5iJaoiujzVArrd+yh8alLvWl4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblBtSWxxaUs2UE5VQ3V0MzdLSHhxVXU5YVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZWIxMDItNDIzZi00ZTkyLWI3YzUt
NzNkMDE0ZTgzNDliLzEvblBtSWxxaUs2UE5VQ3V0MzdLSHhxVXU5YVhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZWIxMDItNDIzZi00ZTkyLWI3YzUtNzNkMDE0ZTgzNDli
LzEvblBtSWxxaUs2UE5VQ3V0MzdLSHhxVXU5YVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9oXLQLx
8EzOLKipON/4VxgvR3Uq97uhsoIxYWYYdWrXO+nALyD5hKtXDXfG8i74pkmvfLsj
2SNvkFZw+/thBUbyB5TWL3RhYGNx8VOulEcflAc7d5ZPTLAjoRATP81wPXoV0C4S
H+kRGf94cBEGP56QiTd/0vXocna5qx/AN2vqFFlhBpKaMhIqYQcyJK0zWFgK2R3t
ZCZckR+rdDUDwlxzcEZI9Sy8D2I+A6YL0iIUAlcOxgiq/JBA7laBAkwcGIIX4/AM
Ui7QVVYpzBELTGw6rxt4q7bM/6uNrYq4lnTc0XMDxhUnmV1zlnKC0c+5ZvEy8fiG
MXWlh64iKNENNA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:23 2025 by rpki-client