Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json)
Hash identifier: QrsRMrHyb1HYeoAtzDWmNpbR3Kn8AXsRmfmuaQBkJ98=
Subject key identifier: 67:E7:19:EF:F4:35:F6:E8:A1:FD:61:6A:A9:AB:16:C2:28:9C:2F:C8
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 0199FB0F281A1B82CAE6793D2B1EEBD71206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
Manifest number: 1145
Signing time: Sun 19 Oct 2025 06:01:38 +0000
Manifest this update: Sun 19 Oct 2025 06:01:38 +0000
Manifest next update: Mon 20 Oct 2025 06:01:38 +0000
Files and hashes: 1: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: 3AJgmiaEBGUqHINHM6lB6ZLE9PKvNa4hcgibQ6TBXv8=)
2: SgjnIjuq3AeuRbPMRDHnDCjAALI.roa (hash: Pfy5puiab8wDSE6eVbJ+tlKeXTAJeJMbBe/7aBk5Ysw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:28:1a:1b:82:ca:e6:79:3d:2b:1e:eb:d7:12:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Oct 19 06:01:38 2025 GMT
Not After : Oct 20 06:01:38 2025 GMT
Subject: CN=67e719eff435f6e8a1fd616aa9ab16c2289c2fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:78:bb:c0:f2:24:b7:31:b5:db:ca:f5:ac:3e:
cb:6d:da:f7:d4:8e:bc:fd:93:13:01:de:1a:c7:13:
19:80:83:7b:fe:f4:07:cb:19:0a:de:01:bf:29:d5:
0d:c1:ed:40:50:c6:41:50:8d:58:c6:36:65:a1:05:
c7:4e:3e:8c:57:b5:dc:39:fb:6e:52:c0:7b:f3:3d:
92:13:ac:1e:e2:a0:2b:7d:80:24:06:c4:c1:12:dc:
1b:f0:fc:20:94:a7:43:91:e3:38:78:2c:d3:b1:5d:
fc:67:a7:e3:c3:97:d0:be:28:62:51:ed:53:a9:7d:
5b:70:b4:64:29:8c:83:fa:24:8f:4e:27:85:a8:cb:
ea:74:1f:29:de:0f:23:a0:d4:8d:09:a8:ce:9c:93:
c1:83:73:e5:0f:41:f9:9e:d4:15:79:96:c1:bf:4f:
eb:dc:4e:2a:b3:b0:3f:5e:62:c8:1a:17:d5:d8:ec:
d5:5a:d1:c7:8e:8d:22:14:a5:43:9b:6e:a0:5a:f9:
7c:21:09:03:f0:0d:5f:d5:a5:b5:c6:3c:f3:05:35:
ca:3b:f4:ec:8e:4a:4e:f5:fd:9c:6a:0b:15:be:19:
dd:5e:5c:2b:c8:58:f5:26:db:2c:64:d9:a4:0f:69:
14:29:24:bd:0f:1c:9b:a4:d8:be:16:56:8e:c1:0a:
f1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E7:19:EF:F4:35:F6:E8:A1:FD:61:6A:A9:AB:16:C2:28:9C:2F:C8
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:72:df:82:6e:07:e2:89:18:cd:09:96:74:ab:9c:78:76:c2:
51:5a:15:b3:36:67:ea:42:8a:79:12:35:1c:82:36:2a:75:01:
8a:25:28:fb:34:8a:5f:5c:b3:c2:c1:b2:12:8e:28:c6:93:ce:
b4:16:5d:12:ef:72:1b:38:c2:4a:43:3a:81:ca:84:ed:90:06:
a2:91:6a:e8:0a:45:3e:0d:8a:68:3a:94:bc:72:dd:c4:77:72:
96:1d:7d:2a:50:11:4f:ac:7b:5f:67:43:d7:34:6e:c6:2a:31:
83:1f:b4:d7:32:ec:85:e0:de:db:57:c3:ab:6c:55:0c:55:bd:
88:c1:09:f2:40:e3:b8:c7:4b:f2:7e:13:e4:b0:7b:6b:73:4d:
eb:e4:cc:ca:f0:49:47:e0:2a:b1:a5:89:b4:98:2b:f8:3f:64:
d2:36:fa:d7:d2:d7:8d:ee:dd:30:03:cd:97:10:59:2e:c2:bd:
53:24:0b:e2:0d:e8:2f:2c:f5:33:3f:3b:80:01:68:e9:f4:04:
02:4e:1f:b8:f6:e0:2b:77:85:9a:6e:d1:17:8b:65:04:2a:10:
d2:6d:53:0c:42:f4:1e:22:da:21:35:99:4e:84:79:ba:12:92:
da:d7:54:98:27:78:33:3d:bb:3f:69:36:b2:dd:03:ed:45:f5:
1e:ea:59:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DygaG4LK5nk9Kx7r1xIGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MjE2YTM2MDI3Nzg3NmUzZTkzYjI5YmQ0YmI5YzkyMzFm
YWQyZjcwHhcNMjUxMDE5MDYwMTM4WhcNMjUxMDIwMDYwMTM4WjAzMTEwLwYDVQQD
Eyg2N2U3MTllZmY0MzVmNmU4YTFmZDYxNmFhOWFiMTZjMjI4OWMyZmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Hi7wPIktzG128r1rD7Lbdr31I68
/ZMTAd4axxMZgIN7/vQHyxkK3gG/KdUNwe1AUMZBUI1YxjZloQXHTj6MV7XcOftu
UsB78z2SE6we4qArfYAkBsTBEtwb8PwglKdDkeM4eCzTsV38Z6fjw5fQvihiUe1T
qX1bcLRkKYyD+iSPTieFqMvqdB8p3g8joNSNCajOnJPBg3PlD0H5ntQVeZbBv0/r
3E4qs7A/XmLIGhfV2OzVWtHHjo0iFKVDm26gWvl8IQkD8A1f1aW1xjzzBTXKO/Ts
jkpO9f2cagsVvhndXlwryFj1JtssZNmkD2kUKSS9DxybpNi+FlaOwQrxKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfnGe/0Nfboof1haqmrFsIonC/IMB8GA1UdIwQY
MBaAFDUhajYCd4duPpOym9S7nJIx+tL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mMjU1MDYtNmE2Yy00OTdkLWE0YWIt
MjQ4YzQ3YjNjN2Q4LzEvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9mMjU1MDYtNmE2Yy00OTdkLWE0YWItMjQ4YzQ3YjNjN2Q4
LzEvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXLfgm4H
4okYzQmWdKuceHbCUVoVszZn6kKKeRI1HII2KnUBiiUo+zSKX1yzwsGyEo4oxpPO
tBZdEu9yGzjCSkM6gcqE7ZAGopFq6ApFPg2KaDqUvHLdxHdylh19KlART6x7X2dD
1zRuxioxgx+01zLsheDe21fDq2xVDFW9iMEJ8kDjuMdL8n4T5LB7a3NN6+TMyvBJ
R+AqsaWJtJgr+D9k0jb619LXje7dMAPNlxBZLsK9UyQL4g3oLyz1Mz87gAFo6fQE
Ak4fuPbgK3eFmm7RF4tlBCoQ0m1TDEL0HiLaITWZToR5uhKS2tdUmCd4Mz27P2k2
st0D7UX1HupZPA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:18 2025 by rpki-client