Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
File: Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft (raw, json)
Hash identifier: Lz+Xd94WKzKdS1b+SinYc7BCKPjyY0XVo8jpKmtx3/4=
Subject key identifier: E7:AF:C8:0C:27:C8:BF:C3:1E:D8:4C:DE:F6:0D:76:53:6D:50:6C:12
Authority key identifier: 36:CF:B3:97:5B:BD:5E:F8:7B:29:C3:DC:4A:4B:98:EA:5C:25:C4:44
Certificate issuer: /CN=36cfb3975bbd5ef87b29c3dc4a4b98ea5c25c444
Certificate serial: 0198D4A7CC9845F2B459B765589396D5B1FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
Manifest number: 0D31
Signing time: Sat 23 Aug 2025 02:00:23 +0000
Manifest this update: Sat 23 Aug 2025 02:00:23 +0000
Manifest next update: Sun 24 Aug 2025 02:00:23 +0000
Files and hashes: 1: 84tG8i7AzsbcSC45wc7jZshEjRw.roa (hash: WTaqS+mbYOTiyd8Z/4uN3P2O0v0Yj8od2qxY4V4ByWg=)
2: Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.crl (hash: ZIgDURryiG3eZM1glsup1C2u+3ViYyYNMJcXofkcFP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:cc:98:45:f2:b4:59:b7:65:58:93:96:d5:b1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cfb3975bbd5ef87b29c3dc4a4b98ea5c25c444
Validity
Not Before: Aug 23 02:00:23 2025 GMT
Not After : Aug 24 02:00:23 2025 GMT
Subject: CN=e7afc80c27c8bfc31ed84cdef60d76536d506c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:83:b3:03:30:04:55:ca:28:44:a7:bd:16:
cc:91:77:d2:bd:c0:91:62:75:8b:ac:a8:7d:76:d8:
96:df:fe:2b:1d:0b:23:24:81:0e:33:40:e6:f3:4b:
20:f5:09:01:3f:5c:3c:6f:5d:92:15:98:70:50:36:
25:cd:0e:38:28:25:5a:43:3f:25:66:41:15:45:ec:
62:a7:ac:36:27:81:fa:04:9f:25:a3:49:c4:82:e6:
78:ca:57:dd:0a:31:71:6e:e7:0c:64:ef:4b:52:74:
bb:77:1e:71:01:e5:02:e4:78:f7:59:43:41:93:3c:
ba:19:e9:eb:76:49:f2:6a:ca:cd:00:be:3e:bb:7c:
95:38:d9:b1:39:30:64:7c:6b:bc:65:69:70:3c:d8:
df:62:4e:f0:fe:11:6e:fd:f6:26:dc:87:7e:1d:a9:
98:ee:27:90:75:7a:2a:73:40:4d:d7:34:5d:88:09:
f9:3f:4f:5a:aa:f0:19:54:54:cd:21:ec:58:08:7d:
67:e9:19:7f:e9:aa:1c:ad:3c:0e:7e:40:11:ba:15:
d7:c6:5b:8f:e2:9b:26:6e:f6:9f:53:f7:bb:ca:3d:
88:9b:09:6f:f9:c0:ab:7e:1a:07:d0:ca:c2:0c:7c:
da:a1:90:b8:30:0c:c2:db:a0:fa:92:fc:73:61:8e:
ca:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AF:C8:0C:27:C8:BF:C3:1E:D8:4C:DE:F6:0D:76:53:6D:50:6C:12
X509v3 Authority Key Identifier:
keyid:36:CF:B3:97:5B:BD:5E:F8:7B:29:C3:DC:4A:4B:98:EA:5C:25:C4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e8:45:3b:09:0f:8b:b4:99:0b:6f:b3:d7:2e:c7:0e:7c:5e:
b5:51:f3:12:07:b1:90:5d:ff:4b:98:0e:a5:b0:b6:0a:f3:60:
07:e8:ae:ec:21:1d:df:4c:fa:cc:4b:dd:89:6b:02:86:56:fc:
68:f4:12:95:8d:58:76:71:7f:78:61:7d:8b:3c:b2:23:eb:c5:
4a:fb:91:5f:17:a9:65:61:50:95:49:b8:28:10:0b:cc:01:50:
dc:74:2e:16:49:9c:47:b1:0d:82:79:84:72:d1:8c:f1:2b:64:
cc:00:5f:7c:8c:be:00:34:50:c9:1c:60:00:14:05:15:f6:b1:
30:80:17:35:7b:2b:93:39:7a:58:62:87:b2:85:d0:ed:dd:98:
72:c5:2f:c1:58:05:3c:ab:68:95:19:3f:4a:d1:a1:de:a5:47:
8f:08:9c:50:c9:9b:1c:7b:73:74:57:57:14:c7:63:3c:87:85:
4b:f8:50:f2:e0:b1:c9:c1:99:78:1c:af:7b:51:35:9b:52:3d:
15:2f:b1:1f:fe:80:7f:da:66:cc:b6:6a:0a:1a:f7:4f:d3:d2:
27:7e:61:c3:1c:cc:60:ec:2b:1a:06:0e:04:ac:7e:0b:b4:9f:
37:05:e1:63:28:93:91:71:11:dc:87:eb:4f:b7:ed:a4:46:ef:
64:9e:26:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp8yYRfK0WbdlWJOW1bH6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Y2ZiMzk3NWJiZDVlZjg3YjI5YzNkYzRhNGI5OGVhNWMy
NWM0NDQwHhcNMjUwODIzMDIwMDIzWhcNMjUwODI0MDIwMDIzWjAzMTEwLwYDVQQD
EyhlN2FmYzgwYzI3YzhiZmMzMWVkODRjZGVmNjBkNzY1MzZkNTA2YzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr36DswMwBFXKKESnvRbMkXfSvcCR
YnWLrKh9dtiW3/4rHQsjJIEOM0Dm80sg9QkBP1w8b12SFZhwUDYlzQ44KCVaQz8l
ZkEVRexip6w2J4H6BJ8lo0nEguZ4ylfdCjFxbucMZO9LUnS7dx5xAeUC5Hj3WUNB
kzy6GenrdknyasrNAL4+u3yVONmxOTBkfGu8ZWlwPNjfYk7w/hFu/fYm3Id+HamY
7ieQdXoqc0BN1zRdiAn5P09aqvAZVFTNIexYCH1n6Rl/6aocrTwOfkARuhXXxluP
4psmbvafU/e7yj2Imwlv+cCrfhoH0MrCDHzaoZC4MAzC26D6kvxzYY7KlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOevyAwnyL/DHthM3vYNdlNtUGwSMB8GA1UdIwQY
MBaAFDbPs5dbvV74eynD3EpLmOpcJcREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnMtemwxdTlYdmg3S2NQY1NrdVk2bHdseEVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yYzEwNjEtZGIyNS00NGJkLTgwNGMt
YTE0ZGNlZTU3ZTc0LzEvTnMtemwxdTlYdmg3S2NQY1NrdVk2bHdseEVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8yYzEwNjEtZGIyNS00NGJkLTgwNGMtYTE0ZGNlZTU3ZTc0
LzEvTnMtemwxdTlYdmg3S2NQY1NrdVk2bHdseEVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXuhFOwkP
i7SZC2+z1y7HDnxetVHzEgexkF3/S5gOpbC2CvNgB+iu7CEd30z6zEvdiWsChlb8
aPQSlY1YdnF/eGF9izyyI+vFSvuRXxepZWFQlUm4KBALzAFQ3HQuFkmcR7ENgnmE
ctGM8StkzABffIy+ADRQyRxgABQFFfaxMIAXNXsrkzl6WGKHsoXQ7d2YcsUvwVgF
PKtolRk/StGh3qVHjwicUMmbHHtzdFdXFMdjPIeFS/hQ8uCxycGZeByve1E1m1I9
FS+xH/6Af9pmzLZqChr3T9PSJ35hwxzMYOwrGgYOBKx+C7SfNwXhYyiTkXER3Ifr
T7ftpEbvZJ4mAA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 06:07:30 2025 by rpki-client