Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: CfiqqNWMmsgsDWDYMUhATwdGLD223Gicy+smH5K3mIg=
Subject key identifier: 41:81:C8:06:A5:93:BF:0B:39:5D:5F:EE:51:99:6D:37:9E:2F:ED:69
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 0198D58397C7A654A3BD1268E2150F72FA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 0975
Signing time: Sat 23 Aug 2025 06:00:27 +0000
Manifest this update: Sat 23 Aug 2025 06:00:27 +0000
Manifest next update: Sun 24 Aug 2025 06:00:27 +0000
Files and hashes: 1: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: h+p4QrqTS9fHL2ZHPnRpHNwT9201mRC0iIXc3sGKug4=)
2: tONpcnjfR_-MsVEafiNaGJ4uDm4.roa (hash: SGzJp4OEszdVKR+f54x18hkn789cto3mWJ/E8xABEU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:97:c7:a6:54:a3:bd:12:68:e2:15:0f:72:fa:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Aug 23 06:00:27 2025 GMT
Not After : Aug 24 06:00:27 2025 GMT
Subject: CN=4181c806a593bf0b395d5fee51996d379e2fed69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:8d:4c:5e:da:71:c8:5d:11:3e:11:50:df:
29:38:5e:65:75:8f:2c:7d:8d:35:fb:6a:c5:33:29:
8c:b7:89:0c:57:14:4a:23:9b:7a:95:52:69:40:bd:
45:bd:78:6c:f0:e6:93:02:e8:0a:8e:85:b2:51:3b:
93:6b:f8:6e:c6:ce:2f:f4:5e:3c:72:af:05:d6:7f:
25:3c:de:99:57:63:ef:55:9a:fa:cd:e2:81:58:da:
5b:c9:fa:ac:54:a8:e0:60:e7:24:07:77:0e:99:eb:
31:21:6e:47:92:2e:d4:03:e1:ad:96:ec:36:05:13:
21:c9:47:ba:93:de:6e:18:8a:28:34:89:7a:f3:c5:
de:05:7e:5c:3d:6c:8a:31:83:da:eb:d1:c4:6d:33:
db:ab:5c:f8:82:92:99:33:26:e4:b9:a7:8b:c5:b1:
0c:1d:75:18:fa:c9:e0:54:cc:bf:21:83:a3:85:a2:
12:e8:1d:0f:94:1a:39:43:bb:0d:01:1a:de:08:93:
ed:34:3c:65:da:b0:e9:fc:42:d3:49:2b:34:19:25:
f7:a0:32:d2:42:8b:5c:6f:8a:67:54:44:96:4e:bf:
f8:37:ca:e7:ea:d5:93:d7:7e:25:df:d3:71:44:d7:
88:41:3a:57:86:ac:8e:7d:03:ee:f9:cb:ea:ff:a2:
28:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:81:C8:06:A5:93:BF:0B:39:5D:5F:EE:51:99:6D:37:9E:2F:ED:69
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:56:9b:5a:50:ae:40:9e:70:5f:da:a6:9e:c3:8d:e9:d5:c2:
bf:14:b3:38:75:85:85:b4:df:82:6c:39:b6:46:cf:3f:19:1d:
71:de:7b:10:7d:eb:eb:bb:d3:ac:41:50:05:b8:5e:95:c9:e8:
d7:b2:3a:10:d9:84:28:9c:a5:41:1d:7f:24:4d:35:41:c3:b8:
1f:a8:a9:a2:3a:66:f2:cd:6f:91:22:ce:8a:4c:9c:33:86:e6:
16:89:4b:d0:cb:05:c5:78:06:e8:80:cd:3d:d7:f2:37:82:e5:
61:97:99:98:99:d5:8a:9e:39:9b:64:27:a8:a4:12:6e:79:7d:
4f:30:89:80:33:e0:5b:f6:00:87:6a:b7:f0:49:43:97:c2:a6:
c4:51:63:40:ee:52:e0:2f:11:e8:06:7a:96:d3:b8:16:29:52:
a5:38:f0:75:05:39:c0:8e:0f:30:01:b8:7d:6d:99:d5:41:86:
e1:b9:6e:d2:b8:b9:14:c0:51:ff:f9:5c:06:f4:e5:22:0f:30:
25:64:18:05:60:8d:d2:8c:28:fe:33:7c:9d:be:18:f8:de:91:
87:21:d9:63:97:8d:01:1e:48:8b:9e:39:21:6e:e3:46:70:1e:
01:cf:31:4f:71:74:c8:78:56:a4:f6:a9:a5:e8:c0:64:67:57:
b9:1c:af:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg5fHplSjvRJo4hUPcvpoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllY2IyMjJiODEyNmEyMWRmMzJkMDE1ZTRjNDg1Mzk1N2Qx
ZDk3NDQwHhcNMjUwODIzMDYwMDI3WhcNMjUwODI0MDYwMDI3WjAzMTEwLwYDVQQD
Eyg0MTgxYzgwNmE1OTNiZjBiMzk1ZDVmZWU1MTk5NmQzNzllMmZlZDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO+NTF7acchdET4RUN8pOF5ldY8s
fY01+2rFMymMt4kMVxRKI5t6lVJpQL1FvXhs8OaTAugKjoWyUTuTa/huxs4v9F48
cq8F1n8lPN6ZV2PvVZr6zeKBWNpbyfqsVKjgYOckB3cOmesxIW5Hki7UA+Gtluw2
BRMhyUe6k95uGIooNIl688XeBX5cPWyKMYPa69HEbTPbq1z4gpKZMybkuaeLxbEM
HXUY+sngVMy/IYOjhaIS6B0PlBo5Q7sNARreCJPtNDxl2rDp/ELTSSs0GSX3oDLS
Qotcb4pnVESWTr/4N8rn6tWT134l39NxRNeIQTpXhqyOfQPu+cvq/6Io1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGByAalk78LOV1f7lGZbTeeL+1pMB8GA1UdIwQY
MBaAFJ7LIiuBJqId8y0BXkxIU5V9HZdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnNzaUs0RW1vaDN6TFFGZVRFaFRsWDBkbDBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNGYyOWEtYTcwOS00MmJhLTk2MzIt
NThlNGYyNGZhYmVhLzEvbnNzaUs0RW1vaDN6TFFGZVRFaFRsWDBkbDBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iNGYyOWEtYTcwOS00MmJhLTk2MzItNThlNGYyNGZhYmVh
LzEvbnNzaUs0RW1vaDN6TFFGZVRFaFRsWDBkbDBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVabWlCu
QJ5wX9qmnsON6dXCvxSzOHWFhbTfgmw5tkbPPxkdcd57EH3r67vTrEFQBbhelcno
17I6ENmEKJylQR1/JE01QcO4H6ipojpm8s1vkSLOikycM4bmFolL0MsFxXgG6IDN
PdfyN4LlYZeZmJnVip45m2QnqKQSbnl9TzCJgDPgW/YAh2q38ElDl8KmxFFjQO5S
4C8R6AZ6ltO4FilSpTjwdQU5wI4PMAG4fW2Z1UGG4blu0ri5FMBR//lcBvTlIg8w
JWQYBWCN0owo/jN8nb4Y+N6RhyHZY5eNAR5Ii545IW7jRnAeAc8xT3F0yHhWpPap
pejAZGdXuRyvig==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:52 2025 by rpki-client