Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: 9WDHmth37Lx3c5AgsE7Dj0Od3LFyp93RVa42qpX7KKY=
Subject key identifier: CF:1D:EA:32:50:44:61:29:D1:97:5B:72:E6:22:DC:48:F7:74:F1:E3
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 0197B77CC97851A1838EA9FF208F2604871C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 15D3
Signing time: Sat 28 Jun 2025 17:01:37 +0000
Manifest this update: Sat 28 Jun 2025 17:01:37 +0000
Manifest next update: Sun 29 Jun 2025 17:01:37 +0000
Files and hashes: 1: 1eZC9enfXbKkbChbya2s-NBXR10.roa (hash: K8gL7gYOdUPnWfON7y82NF9djuzcQAO7yPjvMnV4HWA=)
2: 4C1hs3Awu1pUWnx11isTd7urO8g.roa (hash: NHlupIJQHDTwRScv0dlfz2lFTerJ3fgzUZ9KeBTbFHo=)
3: 4aaliOpCta1xxwdPdgm9XgmQVe4.roa (hash: 50PVROIOCSd7qW0XXvFqQMxjDosAhVmRwG7IVPmy7ik=)
4: LNJOsnr56BpDhx0zCSJoGF_8kg4.roa (hash: ipKdM/rgGFJqpM5XZ1watukNv4jI5z2rHAUKNiP8l9M=)
5: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: Bj05JhvPH6mRFmWL6gy5MuydqBAJZBOvtJ8Yl9UuNGA=)
6: P4RQICIsv2ynDFNy1pTdbhvIXok.roa (hash: 3BspGo/InWWElD0+8Z5QOqYWItS4j6gIXyuD2KZuZ58=)
7: ibQsYiMOU1D97Z6dBw2Z2nuJoA0.roa (hash: paBGRr0SKtx93/jOWaEGPMAan4qkVxtM/IYXrSHwl6Y=)
8: jBgv17Pl-Vh_L1PF3KmB8kI2bak.roa (hash: yIwLWwTP6qcl+lhvdLDbXrkIo53nDQZcaNGlgxGXrqE=)
9: xlTjepejuGlW3CGUnuf8jiI_Sb8.roa (hash: xnJVidZPq3qTfXPcYiZGHTVkjYmciZFHEO03/ve53hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:c9:78:51:a1:83:8e:a9:ff:20:8f:26:04:87:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jun 28 17:01:37 2025 GMT
Not After : Jun 29 17:01:37 2025 GMT
Subject: CN=cf1dea3250446129d1975b72e622dc48f774f1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:77:d5:65:68:08:75:b4:71:1d:22:1e:3a:8c:
c6:9b:f7:58:3d:b9:14:3f:3d:d7:ba:15:08:81:ba:
16:73:b4:2b:ab:8c:07:f2:9d:03:13:c8:0b:40:0c:
55:99:c2:c3:f1:7b:3b:db:a1:f0:49:33:b7:e1:c0:
20:0d:b4:10:ee:22:93:f8:cf:c3:18:4b:e8:2f:20:
4c:9e:81:00:52:ab:90:b5:bf:a3:a8:0d:36:fb:9a:
80:53:0e:d7:31:3d:08:2a:62:48:a5:a4:48:f4:76:
6e:10:17:24:31:da:07:43:16:e0:11:82:c8:13:13:
16:a3:07:e5:4e:fb:76:91:fa:3a:73:22:61:a0:b7:
04:25:7a:cd:51:11:14:8c:38:39:09:6a:82:24:6a:
8e:7d:85:f9:3a:d4:18:f3:e8:08:9c:c1:24:29:d3:
58:25:c8:dd:f2:db:cf:1c:8a:a4:63:82:72:33:99:
6c:5d:42:86:94:8c:bb:27:93:3d:dd:37:1a:6f:b0:
5c:59:e1:3b:b0:b1:bf:d1:56:2a:8c:9b:08:14:f9:
7f:1a:02:4c:5e:4c:fe:25:ed:55:91:a8:15:bf:a2:
ae:4e:96:92:ba:b2:d2:c9:e8:73:d7:8b:aa:b7:6b:
65:4c:f5:bf:e8:63:af:8d:e9:77:d1:7a:53:a1:50:
93:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1D:EA:32:50:44:61:29:D1:97:5B:72:E6:22:DC:48:F7:74:F1:E3
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:81:c9:13:3c:6f:6f:35:37:0a:7e:b1:51:3c:0b:52:4f:e4:
7b:2a:40:4a:18:00:55:df:bc:e1:43:c7:27:3b:28:68:3f:9b:
3e:97:a3:6c:38:8f:c8:ea:fb:1d:e2:09:35:7c:12:71:f8:30:
4b:6f:61:0d:35:d0:62:23:08:f7:c1:05:79:80:cd:6b:d0:78:
d0:46:68:b9:81:90:38:52:15:f9:fc:7c:30:e9:72:08:2a:26:
3f:82:6a:ea:a6:32:61:a0:03:fd:21:4e:43:b3:ca:f3:13:90:
b5:79:a3:25:ef:b5:5f:fd:68:35:e9:37:bd:cc:64:c5:fa:f5:
e8:fb:57:dc:cc:ad:4a:04:fa:0c:88:3c:65:37:7a:ec:a8:80:
60:c2:c2:82:75:28:78:86:cb:9e:a9:32:88:2d:c7:a9:19:35:
6c:66:ef:f9:16:21:01:55:33:53:9b:76:bb:99:4a:14:40:ab:
ad:86:2d:6a:c9:a3:71:a8:b3:09:8d:01:3a:aa:d8:50:00:de:
3c:a1:2d:1c:53:df:87:61:ea:bb:31:f2:bc:1c:8a:60:5a:c9:
7c:24:7a:66:5a:c3:b7:a7:03:74:91:62:c8:0b:ec:a3:c6:f6:
50:49:0a:6a:18:ce:ea:c2:ae:9b:41:31:f6:68:bd:6a:3a:1d:
8b:4b:a1:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fMl4UaGDjqn/II8mBIccMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTRmY2M2YmY2YTg3NDBmYTc4MTQ2NDFmZDlkNmVjOGQ4
NjJlNWYwHhcNMjUwNjI4MTcwMTM3WhcNMjUwNjI5MTcwMTM3WjAzMTEwLwYDVQQD
EyhjZjFkZWEzMjUwNDQ2MTI5ZDE5NzViNzJlNjIyZGM0OGY3NzRmMWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnfVZWgIdbRxHSIeOozGm/dYPbkU
Pz3XuhUIgboWc7Qrq4wH8p0DE8gLQAxVmcLD8Xs726HwSTO34cAgDbQQ7iKT+M/D
GEvoLyBMnoEAUquQtb+jqA02+5qAUw7XMT0IKmJIpaRI9HZuEBckMdoHQxbgEYLI
ExMWowflTvt2kfo6cyJhoLcEJXrNUREUjDg5CWqCJGqOfYX5OtQY8+gInMEkKdNY
Jcjd8tvPHIqkY4JyM5lsXUKGlIy7J5M93Tcab7BcWeE7sLG/0VYqjJsIFPl/GgJM
Xkz+Je1VkagVv6KuTpaSurLSyehz14uqt2tlTPW/6GOvjel30XpToVCT5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8d6jJQRGEp0ZdbcuYi3Ej3dPHjMB8GA1UdIwQY
MBaAFDaU/Ma/aodA+ngUZB/Z1uyNhi5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUt
MGQzZmNlNDI5YmRlLzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUtMGQzZmNlNDI5YmRl
LzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4HJEzxv
bzU3Cn6xUTwLUk/keypAShgAVd+84UPHJzsoaD+bPpejbDiPyOr7HeIJNXwScfgw
S29hDTXQYiMI98EFeYDNa9B40EZouYGQOFIV+fx8MOlyCComP4Jq6qYyYaAD/SFO
Q7PK8xOQtXmjJe+1X/1oNek3vcxkxfr16PtX3MytSgT6DIg8ZTd67KiAYMLCgnUo
eIbLnqkyiC3HqRk1bGbv+RYhAVUzU5t2u5lKFECrrYYtasmjcaizCY0BOqrYUADe
PKEtHFPfh2HquzHyvByKYFrJfCR6ZlrDt6cDdJFiyAvso8b2UEkKahjO6sKum0Ex
9mi9ajodi0uhAA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:41:32 2025 by rpki-client