Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
File: NW5HRHMdpE8I-l6SxesqR01JqJI.mft (raw, json)
Hash identifier: GCA//yqigv6NNCOsueMoUTgaQqahecBI3kVU34wF0mg=
Subject key identifier: 4F:9A:93:0E:38:9D:CC:CB:FC:C0:B6:96:AB:88:8B:BF:81:C3:EA:FE
Authority key identifier: 35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
Certificate issuer: /CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Certificate serial: 0198D6983C22A86B69136C09CE36860A7484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 11:02:37 +0000
Manifest this update: Sat 23 Aug 2025 11:02:37 +0000
Manifest next update: Sun 24 Aug 2025 11:02:37 +0000
Files and hashes: 1: NW5HRHMdpE8I-l6SxesqR01JqJI.crl (hash: wKRzm9jk+Qhpl+sX/ThknONzCGXly706Dvg7VUXDnGo=)
2: sWXWz9KHFQhAxmDZ0n63KNEzRYA.roa (hash: VInHBflevKh8uKrJkW73psQEtmEHrPxva/qTjQRvp1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:3c:22:a8:6b:69:13:6c:09:ce:36:86:0a:74:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Validity
Not Before: Aug 23 11:02:37 2025 GMT
Not After : Aug 24 11:02:37 2025 GMT
Subject: CN=4f9a930e389dcccbfcc0b696ab888bbf81c3eafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:52:46:05:4a:5c:54:56:82:25:ab:39:42:75:
4e:52:22:96:a9:a0:3f:c9:bb:d6:30:90:14:d4:6b:
c8:1d:19:6a:52:fe:dd:4a:93:35:97:32:d5:23:1e:
a8:1f:f1:3d:fc:9f:a4:7f:01:40:22:b1:ec:cb:c6:
75:c3:21:97:70:33:25:75:27:d9:a6:48:b3:32:81:
27:ae:40:d4:f4:79:8f:13:b5:80:3f:e9:fc:b2:c6:
27:67:b8:c4:07:4e:2f:33:c2:83:4a:8c:cd:4d:ec:
41:0c:e7:a6:6e:b8:21:96:1f:3c:4e:16:07:10:15:
03:8b:c6:44:1a:2d:61:6d:4b:d7:d3:04:ee:ca:46:
b8:1e:b0:98:d3:c5:09:38:d5:9c:32:ea:e0:89:f5:
ff:f4:ff:f6:4e:6f:76:4d:e5:59:13:4f:10:ea:a6:
fc:73:74:fe:92:19:56:a8:a2:f8:9b:05:c8:96:d4:
e8:2c:2e:69:2c:53:99:13:70:03:0c:dc:30:88:47:
0e:65:c0:37:ad:5f:34:ef:54:21:ef:ac:b0:81:25:
0a:3b:e7:44:fc:c6:44:e7:0a:4c:20:e6:1c:61:be:
19:10:e1:25:8e:7d:14:2f:5b:fc:9a:c8:df:45:f9:
2b:b4:b9:bb:96:55:47:39:72:65:10:1f:0f:25:4c:
fa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9A:93:0E:38:9D:CC:CB:FC:C0:B6:96:AB:88:8B:BF:81:C3:EA:FE
X509v3 Authority Key Identifier:
keyid:35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:2d:43:9e:e1:bc:13:25:d9:35:73:58:f0:97:af:e8:21:2b:
40:ce:19:4c:80:56:f3:70:d2:62:99:23:b2:3d:3c:28:1f:6f:
44:30:9b:69:b5:42:a4:8a:5d:d1:48:03:46:20:a6:69:17:fb:
ca:5b:c5:c5:9d:e3:d2:76:ac:08:5b:58:cc:34:93:0c:ed:96:
de:75:13:7f:23:0d:e7:0d:06:c7:96:a2:42:57:a0:4a:63:22:
a4:1e:c3:78:9f:31:84:57:c6:6c:f8:f5:c6:0e:d7:05:b0:e5:
49:54:60:75:29:6d:9a:a4:ec:a7:c6:08:fc:43:f3:e2:a4:06:
09:55:6b:6e:0d:70:7f:09:d4:32:3f:1f:2d:b9:b4:f2:de:62:
28:a2:cf:46:b7:ee:2a:d8:e6:75:51:8e:d6:13:d2:22:08:c7:
b1:ed:4e:a9:e8:fa:17:ff:0b:21:ba:f8:a7:d0:a3:ff:08:9b:
bf:0f:45:87:a1:9a:d7:36:87:02:29:e2:ed:f8:6d:7a:f1:e3:
1b:ac:27:18:20:8a:08:6f:2a:b8:09:68:02:f2:06:d2:f6:a1:
4c:38:99:19:7a:ab:16:95:7e:80:7f:8c:d7:0a:db:70:dc:82:
a1:4b:7f:3c:de:ce:77:fb:9c:e8:ab:79:cd:75:26:3b:58:e1:
97:dd:d9:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmDwiqGtpE2wJzjaGCnSEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NmU0NzQ0NzMxZGE0NGYwOGZhNWU5MmM1ZWIyYTQ3NGQ0
OWE4OTIwHhcNMjUwODIzMTEwMjM3WhcNMjUwODI0MTEwMjM3WjAzMTEwLwYDVQQD
Eyg0ZjlhOTMwZTM4OWRjY2NiZmNjMGI2OTZhYjg4OGJiZjgxYzNlYWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVJGBUpcVFaCJas5QnVOUiKWqaA/
ybvWMJAU1GvIHRlqUv7dSpM1lzLVIx6oH/E9/J+kfwFAIrHsy8Z1wyGXcDMldSfZ
pkizMoEnrkDU9HmPE7WAP+n8ssYnZ7jEB04vM8KDSozNTexBDOembrghlh88ThYH
EBUDi8ZEGi1hbUvX0wTuyka4HrCY08UJONWcMurgifX/9P/2Tm92TeVZE08Q6qb8
c3T+khlWqKL4mwXIltToLC5pLFOZE3ADDNwwiEcOZcA3rV8071Qh76ywgSUKO+dE
/MZE5wpMIOYcYb4ZEOEljn0UL1v8msjfRfkrtLm7llVHOXJlEB8PJUz6GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+akw44nczL/MC2lquIi7+Bw+r+MB8GA1UdIwQY
MBaAFDVuR0RzHaRPCPpeksXrKkdNSaiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlc1SFJITWRwRThJLWw2U3hlc3FSMDFKcUpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84ZjQ3ODktOTYzYS00YzY5LWIxNjUt
MGM1MDFkNjg5NzVhLzEvTlc1SFJITWRwRThJLWw2U3hlc3FSMDFKcUpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84ZjQ3ODktOTYzYS00YzY5LWIxNjUtMGM1MDFkNjg5NzVh
LzEvTlc1SFJITWRwRThJLWw2U3hlc3FSMDFKcUpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAky1DnuG8
EyXZNXNY8Jev6CErQM4ZTIBW83DSYpkjsj08KB9vRDCbabVCpIpd0UgDRiCmaRf7
ylvFxZ3j0nasCFtYzDSTDO2W3nUTfyMN5w0Gx5aiQlegSmMipB7DeJ8xhFfGbPj1
xg7XBbDlSVRgdSltmqTsp8YI/EPz4qQGCVVrbg1wfwnUMj8fLbm08t5iKKLPRrfu
KtjmdVGO1hPSIgjHse1Oqej6F/8LIbr4p9Cj/wibvw9Fh6Ga1zaHAini7fhtevHj
G6wnGCCKCG8quAloAvIG0vahTDiZGXqrFpV+gH+M1wrbcNyCoUt/PN7Od/uc6Kt5
zXUmO1jhl93ZWw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:30:11 2025 by rpki-client