Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
File: Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft (raw, json)
Hash identifier: 5+NmgCy/QO+eMG0DPOOEExBHpVYZ7Fn9+ISWXiZ6Vto=
Subject key identifier: DE:42:9C:25:EE:2A:EF:2F:17:7D:2D:BC:97:61:2E:C9:E5:80:23:14
Authority key identifier: 36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
Certificate issuer: /CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Certificate serial: 0198D4735A36E8A252FD377E20EF224692F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
Manifest number: 0529
Signing time: Sat 23 Aug 2025 01:03:06 +0000
Manifest this update: Sat 23 Aug 2025 01:03:06 +0000
Manifest next update: Sun 24 Aug 2025 01:03:06 +0000
Files and hashes: 1: Hl7hSFZEHZrA1_ugH1WvtUr7hTI.roa (hash: uywWwGCKWj+Fn6qNY8dmQ39B3/vU6rK6HYsO/2wacYs=)
2: Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl (hash: gqQ772GjiQJKHoD47xC2rarke6grF3UFL+aKrJ/oOzQ=)
3: cekUNXzTWTu4gnxTXJJQQyW61Cg.roa (hash: ZDt6OkPV5Ex3Yi3FM3u0/RzjrLejRDKeTGQEGbNL8iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:5a:36:e8:a2:52:fd:37:7e:20:ef:22:46:92:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Validity
Not Before: Aug 23 01:03:06 2025 GMT
Not After : Aug 24 01:03:06 2025 GMT
Subject: CN=de429c25ee2aef2f177d2dbc97612ec9e5802314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:e2:f1:c8:54:ac:07:f5:0f:f8:b9:13:36:
3b:86:6a:7d:22:ad:02:30:ab:4f:77:15:ca:f4:75:
24:4b:8a:49:e6:65:5a:47:47:3c:73:b6:10:63:21:
6f:8d:74:f1:34:23:28:5c:2f:a6:16:80:bb:2f:31:
83:f9:d8:67:6a:85:5d:9d:5b:01:47:d3:66:c2:2d:
09:43:56:36:1f:fa:67:95:fb:29:a6:0f:e0:7e:bc:
22:b9:f6:30:8c:7f:3f:b9:0f:76:38:df:90:3b:d2:
2d:0e:79:4e:c4:59:b2:60:95:35:d4:a7:57:d4:ee:
85:eb:47:d9:5a:fe:fa:42:14:e5:9e:63:c8:f9:f7:
7e:08:7f:1c:4f:9d:b9:d5:7f:6a:38:21:51:ac:7c:
85:91:de:20:40:c3:34:50:fd:ec:a7:b3:58:ad:5f:
0f:81:d2:4c:f1:50:10:b1:54:01:be:c1:c3:15:b9:
55:1f:92:be:6e:7e:39:64:fe:a2:7f:95:03:61:10:
f2:2c:b0:14:6c:d6:18:97:62:67:9e:07:39:91:95:
2d:1c:4c:b9:97:6a:a3:0d:41:7c:d2:92:24:de:c6:
a5:0b:58:48:a9:8b:23:4b:88:16:ef:66:2b:80:c8:
29:56:e3:7b:e5:d9:d5:b1:13:69:73:89:cf:4a:aa:
87:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:42:9C:25:EE:2A:EF:2F:17:7D:2D:BC:97:61:2E:C9:E5:80:23:14
X509v3 Authority Key Identifier:
keyid:36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:51:dc:d2:69:0d:8b:d3:92:5d:a5:b4:2c:05:dc:82:e6:3d:
fd:72:19:3d:e4:46:04:d2:4e:4b:45:4e:98:c2:21:e9:65:a6:
cf:d5:8e:36:98:9d:d3:6b:81:cf:cd:70:98:67:2a:65:c4:a8:
e5:a2:4c:77:94:4e:03:fe:f3:a3:d2:fd:63:77:8c:8c:db:0b:
83:3d:6e:a6:c4:37:6c:3e:e0:56:1c:a1:cf:92:a5:e4:64:cb:
27:ad:0d:65:7f:2b:83:cf:e4:5a:dc:4d:b1:2f:13:64:79:7e:
dc:88:e5:26:f2:5b:f2:ba:d1:a1:2c:20:7d:85:94:0d:44:02:
a1:27:4c:1a:29:77:76:06:ad:5b:29:26:0f:1b:af:38:3c:60:
48:c7:c7:16:d7:5b:5c:97:e1:0c:4e:e6:10:15:ca:0c:93:f9:
63:2a:7c:8a:39:ae:a5:22:a7:7f:82:3b:83:c8:d8:fc:cc:e8:
87:93:e0:18:28:a5:de:a0:4b:27:25:25:69:e9:c7:30:1c:ea:
12:bf:5c:ef:00:91:55:89:cc:60:ee:07:66:1b:dd:6a:de:49:
6b:c7:89:4d:c9:2f:3e:3d:47:8f:01:d8:2d:f2:aa:07:c1:c8:
ae:9b:fa:41:dd:27:84:bf:4b:b7:c7:05:d7:1a:d0:e3:b3:1b:
20:4c:b0:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc1o26KJS/Td+IO8iRpL4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Y2ZhZmZjOWM3ODY4NzA4ZjNjODFlZTVjMGQ2NGMzNWFj
MWJlZjEwHhcNMjUwODIzMDEwMzA2WhcNMjUwODI0MDEwMzA2WjAzMTEwLwYDVQQD
EyhkZTQyOWMyNWVlMmFlZjJmMTc3ZDJkYmM5NzYxMmVjOWU1ODAyMzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoELi8chUrAf1D/i5EzY7hmp9Iq0C
MKtPdxXK9HUkS4pJ5mVaR0c8c7YQYyFvjXTxNCMoXC+mFoC7LzGD+dhnaoVdnVsB
R9Nmwi0JQ1Y2H/pnlfsppg/gfrwiufYwjH8/uQ92ON+QO9ItDnlOxFmyYJU11KdX
1O6F60fZWv76QhTlnmPI+fd+CH8cT5251X9qOCFRrHyFkd4gQMM0UP3sp7NYrV8P
gdJM8VAQsVQBvsHDFblVH5K+bn45ZP6if5UDYRDyLLAUbNYYl2Jnngc5kZUtHEy5
l2qjDUF80pIk3salC1hIqYsjS4gW72YrgMgpVuN75dnVsRNpc4nPSqqHHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5CnCXuKu8vF30tvJdhLsnlgCMUMB8GA1UdIwQY
MBaAFDbPr/yceGhwjzyB7lwNZMNawb7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnMtdl9KeDRhSENQUElIdVhBMWt3MXJCdnZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kMDliNTYtNGZjYi00N2JmLTgwMjUt
OTk4NzhjYzliMTRjLzEvTnMtdl9KeDRhSENQUElIdVhBMWt3MXJCdnZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kMDliNTYtNGZjYi00N2JmLTgwMjUtOTk4NzhjYzliMTRj
LzEvTnMtdl9KeDRhSENQUElIdVhBMWt3MXJCdnZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlHc0mkN
i9OSXaW0LAXcguY9/XIZPeRGBNJOS0VOmMIh6WWmz9WONpid02uBz81wmGcqZcSo
5aJMd5ROA/7zo9L9Y3eMjNsLgz1upsQ3bD7gVhyhz5Kl5GTLJ60NZX8rg8/kWtxN
sS8TZHl+3IjlJvJb8rrRoSwgfYWUDUQCoSdMGil3dgatWykmDxuvODxgSMfHFtdb
XJfhDE7mEBXKDJP5Yyp8ijmupSKnf4I7g8jY/Mzoh5PgGCil3qBLJyUlaenHMBzq
Er9c7wCRVYnMYO4HZhvdat5Ja8eJTckvPj1HjwHYLfKqB8HIrpv6Qd0nhL9Lt8cF
1xrQ47MbIEywYQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:22 2025 by rpki-client