Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft
File: NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft (raw, json)
Hash identifier: /mBr2X8ob7Nxa39Gp3NMb2U8wsIQUUMCFam9lZmYm/U=
Subject key identifier: 61:4E:0E:BE:95:9E:32:73:BF:A8:2F:A6:9D:43:BE:B1:5E:0B:39:15
Authority key identifier: 35:D7:DB:AA:75:EF:34:20:D8:D9:45:91:30:ED:01:DC:53:51:36:FB
Certificate issuer: /CN=35d7dbaa75ef3420d8d9459130ed01dc535136fb
Certificate serial: 0198D5F1471FE1D47E63342B6904DC0F402B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdfbqnXvNCDY2UWRMO0B3FNRNvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft
Manifest number: 041B
Signing time: Sat 23 Aug 2025 08:00:16 +0000
Manifest this update: Sat 23 Aug 2025 08:00:16 +0000
Manifest next update: Sun 24 Aug 2025 08:00:16 +0000
Files and hashes: 1: NdfbqnXvNCDY2UWRMO0B3FNRNvs.crl (hash: K1ASZlIoUPMlIopoX/lXhJs5OpaFBFg8Qur1mKky7Ok=)
2: okivhnQi7w6GWYPlNEAmkXkmxpY.roa (hash: k4R8rWTOlMy3O5fk1lka5CmGZaX0JQEHHbZQX1i51u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdfbqnXvNCDY2UWRMO0B3FNRNvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:47:1f:e1:d4:7e:63:34:2b:69:04:dc:0f:40:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d7dbaa75ef3420d8d9459130ed01dc535136fb
Validity
Not Before: Aug 23 08:00:16 2025 GMT
Not After : Aug 24 08:00:16 2025 GMT
Subject: CN=614e0ebe959e3273bfa82fa69d43beb15e0b3915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9c:f8:bc:e0:d9:02:6c:c6:6e:ae:c4:97:c8:
a5:6a:a0:1c:c0:97:dd:39:f4:92:6d:fe:19:98:32:
99:1b:20:5b:9d:24:72:00:b5:10:91:24:c4:f1:c3:
1b:f5:c7:74:0c:88:ef:77:d7:00:6e:9b:67:45:6c:
1e:48:f9:f6:f1:7f:1d:59:69:bc:54:49:1f:fe:c9:
12:ce:d3:eb:13:10:7d:7a:95:08:e4:d6:e7:85:49:
8f:fd:24:80:46:db:e2:88:aa:41:81:e5:5a:c9:ce:
02:81:60:c0:b6:46:47:bf:c5:62:88:99:f3:a6:b4:
2f:3a:5a:24:3f:ff:78:c8:7a:76:7b:73:9d:19:7d:
e4:02:bd:04:8a:71:64:db:8d:51:a0:8f:ee:2e:5a:
2c:5d:0a:ac:24:50:8d:bb:a4:59:52:fd:10:49:72:
cf:ec:6b:5c:6a:8f:28:20:45:69:62:20:70:cb:9a:
e2:76:7d:89:ae:49:d9:c2:48:1a:93:d7:30:ba:b9:
12:73:db:bd:15:00:c2:55:01:21:2e:94:17:6e:a6:
1b:f5:0d:c9:fd:a3:52:42:a9:27:61:54:e8:47:c7:
e2:01:9f:64:29:a6:7d:eb:50:00:b7:43:06:6d:83:
8a:45:a9:eb:72:2d:23:b9:82:3b:68:ef:df:e9:e3:
34:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4E:0E:BE:95:9E:32:73:BF:A8:2F:A6:9D:43:BE:B1:5E:0B:39:15
X509v3 Authority Key Identifier:
keyid:35:D7:DB:AA:75:EF:34:20:D8:D9:45:91:30:ED:01:DC:53:51:36:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdfbqnXvNCDY2UWRMO0B3FNRNvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:8e:a5:54:0e:85:17:24:b9:b9:5c:ed:5d:e4:1f:d6:dc:eb:
1b:b7:45:80:9b:91:75:6e:24:dd:ad:7d:9a:50:b0:61:da:bd:
84:60:19:10:ea:a9:4d:cd:1e:0d:ec:81:f0:b7:5e:0b:b8:18:
77:0d:85:5c:b0:62:3b:9a:de:67:40:24:94:64:8c:92:30:3a:
45:f2:0a:d1:38:dd:b2:36:b9:f4:26:0b:e1:cb:15:05:eb:c9:
36:97:ea:e5:e4:35:cb:cf:0a:32:a5:c9:60:20:b5:a5:14:7e:
bb:75:0f:9d:28:99:ec:be:93:07:1c:1b:79:93:ad:32:0c:21:
e1:45:1f:54:37:2e:57:52:d2:dd:72:55:cb:94:85:ba:70:66:
62:71:69:58:2a:05:5d:73:50:ef:a3:8f:3b:5f:61:5a:ae:d0:
2b:85:ac:c4:d1:75:31:0f:5c:e3:fd:98:72:74:4e:40:82:98:
8b:bd:f4:f2:57:7b:d2:57:e5:2d:0c:dd:47:4c:27:f5:b8:68:
24:c2:64:3e:34:f3:16:fc:7c:31:62:61:dd:5a:0b:9c:f4:e4:
02:23:db:5c:37:4a:ff:76:e5:8e:6f:3b:de:10:6f:c5:1d:df:
de:05:12:e4:4e:0a:92:7a:47:ad:d8:8f:39:ef:11:f3:ea:e3:
87:41:55:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8Ucf4dR+YzQraQTcD0ArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZDdkYmFhNzVlZjM0MjBkOGQ5NDU5MTMwZWQwMWRjNTM1
MTM2ZmIwHhcNMjUwODIzMDgwMDE2WhcNMjUwODI0MDgwMDE2WjAzMTEwLwYDVQQD
Eyg2MTRlMGViZTk1OWUzMjczYmZhODJmYTY5ZDQzYmViMTVlMGIzOTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZz4vODZAmzGbq7El8ilaqAcwJfd
OfSSbf4ZmDKZGyBbnSRyALUQkSTE8cMb9cd0DIjvd9cAbptnRWweSPn28X8dWWm8
VEkf/skSztPrExB9epUI5NbnhUmP/SSARtviiKpBgeVayc4CgWDAtkZHv8ViiJnz
prQvOlokP/94yHp2e3OdGX3kAr0EinFk241RoI/uLlosXQqsJFCNu6RZUv0QSXLP
7Gtcao8oIEVpYiBwy5ridn2JrknZwkgak9cwurkSc9u9FQDCVQEhLpQXbqYb9Q3J
/aNSQqknYVToR8fiAZ9kKaZ961AAt0MGbYOKRanrci0juYI7aO/f6eM0rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFODr6VnjJzv6gvpp1DvrFeCzkVMB8GA1UdIwQY
MBaAFDXX26p17zQg2NlFkTDtAdxTUTb7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmRmYnFuWHZOQ0RZMlVXUk1PMEIzRk5STnZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi85YThhM2ItOWI0NC00OWNhLWI2NzQt
ZDkyYzkzODBhZjMzLzEvTmRmYnFuWHZOQ0RZMlVXUk1PMEIzRk5STnZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi85YThhM2ItOWI0NC00OWNhLWI2NzQtZDkyYzkzODBhZjMz
LzEvTmRmYnFuWHZOQ0RZMlVXUk1PMEIzRk5STnZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqI6lVA6F
FyS5uVztXeQf1tzrG7dFgJuRdW4k3a19mlCwYdq9hGAZEOqpTc0eDeyB8LdeC7gY
dw2FXLBiO5reZ0AklGSMkjA6RfIK0Tjdsja59CYL4csVBevJNpfq5eQ1y88KMqXJ
YCC1pRR+u3UPnSiZ7L6TBxwbeZOtMgwh4UUfVDcuV1LS3XJVy5SFunBmYnFpWCoF
XXNQ76OPO19hWq7QK4WsxNF1MQ9c4/2YcnROQIKYi7308ld70lflLQzdR0wn9bho
JMJkPjTzFvx8MWJh3VoLnPTkAiPbXDdK/3bljm873hBvxR3f3gUS5E4KknpHrdiP
Oe8R8+rjh0FVsg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:54 2025 by rpki-client