Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
File: nE-xCAvPALb912uv2dUTPF4cPTI.mft (raw, json)
Hash identifier: vKF7VX7n4j62/iQ9gXPwofSc6ddOXLscIz6GFpLmJ2g=
Subject key identifier: 95:F8:B7:E2:C7:74:55:BC:B2:60:FD:62:EE:65:14:2D:ED:0C:2E:33
Authority key identifier: 9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32
Certificate issuer: /CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
Certificate serial: 0198D7A8EC502F68B58DA4F937D1ADB1BE65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
Manifest number: 0631
Signing time: Sat 23 Aug 2025 16:00:28 +0000
Manifest this update: Sat 23 Aug 2025 16:00:28 +0000
Manifest next update: Sun 24 Aug 2025 16:00:28 +0000
Files and hashes: 1: nE-xCAvPALb912uv2dUTPF4cPTI.crl (hash: 7StKAPHowHN0b74SUWJgzMPsyRca+hUl0ulJXTz7B4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:ec:50:2f:68:b5:8d:a4:f9:37:d1:ad:b1:be:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
Validity
Not Before: Aug 23 16:00:28 2025 GMT
Not After : Aug 24 16:00:28 2025 GMT
Subject: CN=95f8b7e2c77455bcb260fd62ee65142ded0c2e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:c5:ae:95:fb:87:69:b7:a8:c7:f0:49:89:
49:03:5c:da:8d:cb:66:01:c7:f9:b3:9c:32:4f:d7:
30:8c:0b:c1:9b:72:fa:99:9f:1c:ab:5c:54:17:e9:
c6:f5:3f:13:86:ee:51:62:53:2f:4f:bb:7d:62:df:
88:33:b1:03:26:c7:8c:5e:3f:a5:09:0e:ab:b3:d1:
ad:ea:93:bc:8e:94:24:1c:73:8f:b5:b5:e3:f9:c9:
85:17:1a:71:55:da:0e:a2:8e:74:31:ec:8c:03:19:
b7:98:e8:47:63:4d:df:5a:53:74:88:ac:a1:17:4d:
95:29:69:f2:f7:f5:02:8c:c0:fd:98:7f:e4:13:78:
14:bc:85:41:12:40:cf:5e:a4:11:09:49:2f:06:70:
5f:f1:48:67:0f:13:01:4a:c5:11:af:bd:54:f0:fc:
d7:5d:8c:ad:23:ad:1b:fa:47:9a:bc:10:fe:d7:b7:
ac:3d:3e:20:5a:6f:d9:4d:1b:eb:53:e5:a8:51:3e:
15:1a:21:31:01:d1:28:9e:a6:96:1c:87:0f:47:42:
31:87:95:79:96:53:38:5f:18:e3:ca:c4:18:a6:f2:
d4:10:29:bd:15:fd:91:08:7f:78:e9:bd:b0:b0:d8:
14:23:f9:2a:88:78:fb:d2:db:02:2f:d9:6e:0f:bb:
3a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F8:B7:E2:C7:74:55:BC:B2:60:FD:62:EE:65:14:2D:ED:0C:2E:33
X509v3 Authority Key Identifier:
keyid:9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9b:df:76:aa:3c:79:55:74:ca:72:6d:fe:44:3e:21:0d:4b:
b8:c7:9b:6a:ff:32:1f:38:ef:11:2d:5b:65:a9:6a:d3:13:f0:
71:05:53:3a:e3:00:ce:a7:3a:63:58:e9:8d:80:92:fa:87:af:
d4:3d:5c:21:a8:0b:70:33:f2:3e:02:49:43:58:f4:c8:3e:29:
30:36:fc:e2:de:4e:10:a7:75:fa:7e:26:75:f8:a3:81:58:8f:
8f:d7:97:71:d5:35:5b:f3:e9:44:d3:8b:9f:9f:65:14:a2:be:
3c:44:0a:d8:2d:fa:15:55:af:3c:ee:17:46:0c:e8:0d:63:5f:
5f:5c:3c:0b:46:50:c2:68:c6:ae:2b:48:73:9d:b7:9d:df:98:
12:90:eb:83:c2:44:f6:eb:42:bb:a8:e2:82:e3:69:a2:a1:0d:
df:4d:16:43:4f:11:c1:ae:97:3d:d3:dc:f6:64:39:7a:0f:30:
2f:f7:31:2b:59:24:02:29:3e:6e:44:62:80:b4:ae:34:19:d7:
45:38:40:59:99:4e:3f:48:fd:bb:dd:92:d3:20:dc:52:c2:43:
fc:b8:f2:27:17:d0:e4:de:b4:0d:6b:77:f5:3a:13:40:aa:4d:
85:aa:b6:ef:4d:bf:fc:3b:3e:fd:a6:7d:af:4b:90:d2:c6:58:
fd:91:4d:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqOxQL2i1jaT5N9Gtsb5lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNGZiMTA4MGJjZjAwYjZmZGQ3NmJhZmQ5ZDUxMzNjNWUx
YzNkMzIwHhcNMjUwODIzMTYwMDI4WhcNMjUwODI0MTYwMDI4WjAzMTEwLwYDVQQD
Eyg5NWY4YjdlMmM3NzQ1NWJjYjI2MGZkNjJlZTY1MTQyZGVkMGMyZTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCTFrpX7h2m3qMfwSYlJA1zajctm
Acf5s5wyT9cwjAvBm3L6mZ8cq1xUF+nG9T8Thu5RYlMvT7t9Yt+IM7EDJseMXj+l
CQ6rs9Gt6pO8jpQkHHOPtbXj+cmFFxpxVdoOoo50MeyMAxm3mOhHY03fWlN0iKyh
F02VKWny9/UCjMD9mH/kE3gUvIVBEkDPXqQRCUkvBnBf8UhnDxMBSsURr71U8PzX
XYytI60b+keavBD+17esPT4gWm/ZTRvrU+WoUT4VGiExAdEonqaWHIcPR0Ixh5V5
llM4XxjjysQYpvLUECm9Ff2RCH946b2wsNgUI/kqiHj70tsCL9luD7s6sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJX4t+LHdFW8smD9Yu5lFC3tDC4zMB8GA1UdIwQY
MBaAFJxPsQgLzwC2/ddrr9nVEzxeHD0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkUteENBdlBBTGI5MTJ1djJkVVRQRjRjUFRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85YTM1OWYtNGI3MC00OGMzLWEzOGYt
MjNiN2NlMzRlYmFjLzEvbkUteENBdlBBTGI5MTJ1djJkVVRQRjRjUFRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85YTM1OWYtNGI3MC00OGMzLWEzOGYtMjNiN2NlMzRlYmFj
LzEvbkUteENBdlBBTGI5MTJ1djJkVVRQRjRjUFRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJvfdqo8
eVV0ynJt/kQ+IQ1LuMebav8yHzjvES1bZalq0xPwcQVTOuMAzqc6Y1jpjYCS+oev
1D1cIagLcDPyPgJJQ1j0yD4pMDb84t5OEKd1+n4mdfijgViPj9eXcdU1W/PpRNOL
n59lFKK+PEQK2C36FVWvPO4XRgzoDWNfX1w8C0ZQwmjGritIc523nd+YEpDrg8JE
9utCu6jiguNpoqEN300WQ08Rwa6XPdPc9mQ5eg8wL/cxK1kkAik+bkRigLSuNBnX
RThAWZlOP0j9u92S0yDcUsJD/LjyJxfQ5N60DWt39ToTQKpNhaq2702//Ds+/aZ9
r0uQ0sZY/ZFNNQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:41:30 2025 by rpki-client