Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
File: NHi9VqAesq4wdvaW0B1P_NFAGp8.mft (raw, json)
Hash identifier: 4iSQpwuxYVw9h57jpcGFKbVSCbm9Yb0BVuvQ6ZejJAs=
Subject key identifier: 8E:A7:C4:E8:2D:A0:6E:39:9F:EF:73:0B:D1:76:C0:61:8C:0C:7A:D8
Authority key identifier: 34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F
Certificate issuer: /CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f
Certificate serial: 0199FDD944D4514CD6D231434CE3E1AD01E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:01:38 +0000
Manifest this update: Sun 19 Oct 2025 19:01:38 +0000
Manifest next update: Mon 20 Oct 2025 19:01:38 +0000
Files and hashes: 1: NHi9VqAesq4wdvaW0B1P_NFAGp8.crl (hash: mH219exHO7bxpBL/v62/2D58nCeAB7o/rVM7wIPjkh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:44:d4:51:4c:d6:d2:31:43:4c:e3:e1:ad:01:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f
Validity
Not Before: Oct 19 19:01:38 2025 GMT
Not After : Oct 20 19:01:38 2025 GMT
Subject: CN=8ea7c4e82da06e399fef730bd176c0618c0c7ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:16:a6:bd:b6:19:7c:58:25:6b:22:9a:c4:
f7:a8:85:2a:8a:9c:90:be:a8:87:db:18:a9:34:cc:
76:23:8b:32:5a:13:23:85:6a:51:93:80:20:5d:d5:
00:cc:d2:4f:3f:03:49:4c:ed:ee:b3:ac:b9:ca:a0:
6d:97:b4:9a:28:56:f2:1c:a3:49:7c:65:f9:04:f7:
93:c1:1e:0d:19:8a:23:8a:ac:77:af:3d:35:44:dc:
9c:06:70:e1:b0:ed:4c:e3:0f:4e:8d:74:6e:d5:0e:
c0:31:12:32:98:65:16:e8:ad:a7:a8:03:a1:7e:e4:
56:0e:34:9c:36:f6:e2:38:23:4e:a3:22:2a:d0:27:
99:f3:5f:83:1d:86:86:3d:8e:ca:94:5a:61:96:fc:
b6:26:bf:29:44:1d:87:8f:27:fa:e8:46:92:30:68:
28:38:ea:bc:83:cc:cc:d0:23:0e:a8:90:82:19:97:
d2:43:2b:26:27:66:dd:bb:2d:5d:83:7a:d1:25:bf:
09:1e:2d:b1:af:7d:61:1b:e6:1a:69:2b:d1:5f:9b:
79:e9:5e:e1:6a:5b:7a:17:36:87:4c:5b:0c:be:e4:
39:c5:34:b6:51:94:a7:61:c5:72:46:02:e7:1d:1e:
81:81:86:4c:cc:15:13:c3:d4:77:e5:7a:e2:c3:09:
1b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A7:C4:E8:2D:A0:6E:39:9F:EF:73:0B:D1:76:C0:61:8C:0C:7A:D8
X509v3 Authority Key Identifier:
keyid:34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4d:3d:cf:59:0c:c9:88:51:76:8e:de:ef:48:92:b9:f9:60:
eb:d9:9f:01:68:1d:f3:b1:66:27:f5:fb:5c:c6:3b:72:69:d7:
cb:f7:ad:08:f0:57:10:5f:8c:16:1e:23:30:73:33:57:91:c9:
e6:18:49:71:84:54:0f:85:84:a7:9b:33:bb:d7:c8:c6:1e:a3:
44:9a:9d:85:0e:a7:08:04:ba:a5:0d:a9:71:0c:b3:58:c5:ff:
00:a7:4e:8c:d5:bc:15:4a:57:ad:bf:8a:8c:a7:a0:a8:28:e8:
fc:fa:c9:81:32:43:18:b5:9b:43:2a:3c:d6:27:38:ab:bc:3c:
cc:50:84:9b:7a:ec:8a:bb:99:67:15:da:b1:10:56:8d:fc:0b:
29:69:e1:37:fb:6d:7d:44:27:22:cd:2a:df:c4:9f:e4:35:5d:
aa:52:af:0d:e5:22:83:38:11:29:9f:72:a5:2e:49:0f:9a:c5:
5e:74:b4:fc:ef:99:f6:76:4b:22:d5:43:d1:2f:26:45:28:6b:
74:e7:64:98:bf:16:35:da:50:fa:59:8a:3a:93:4f:ab:02:fc:
39:7a:ee:4b:7a:0c:e8:46:ee:4e:a0:4f:ae:f4:6a:86:1d:69:
3b:e6:f4:10:91:6a:63:5e:9c:d8:3f:75:be:cf:e3:51:01:e8:
d6:ee:7e:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92UTUUUzW0jFDTOPhrQHkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NzhiZDU2YTAxZWIyYWUzMDc2ZjY5NmQwMWQ0ZmZjZDE0
MDFhOWYwHhcNMjUxMDE5MTkwMTM4WhcNMjUxMDIwMTkwMTM4WjAzMTEwLwYDVQQD
Eyg4ZWE3YzRlODJkYTA2ZTM5OWZlZjczMGJkMTc2YzA2MThjMGM3YWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriAWpr22GXxYJWsimsT3qIUqipyQ
vqiH2xipNMx2I4syWhMjhWpRk4AgXdUAzNJPPwNJTO3us6y5yqBtl7SaKFbyHKNJ
fGX5BPeTwR4NGYojiqx3rz01RNycBnDhsO1M4w9OjXRu1Q7AMRIymGUW6K2nqAOh
fuRWDjScNvbiOCNOoyIq0CeZ81+DHYaGPY7KlFphlvy2Jr8pRB2Hjyf66EaSMGgo
OOq8g8zM0CMOqJCCGZfSQysmJ2bduy1dg3rRJb8JHi2xr31hG+YaaSvRX5t56V7h
alt6FzaHTFsMvuQ5xTS2UZSnYcVyRgLnHR6BgYZMzBUTw9R35XriwwkbeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6nxOgtoG45n+9zC9F2wGGMDHrYMB8GA1UdIwQY
MBaAFDR4vVagHrKuMHb2ltAdT/zRQBqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wZmM3ZDgtMmE1Zi00YjM4LWEyMzAt
ODM5NmY4YzYyNTVhLzEvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wZmM3ZDgtMmE1Zi00YjM4LWEyMzAtODM5NmY4YzYyNTVh
LzEvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARU09z1kM
yYhRdo7e70iSuflg69mfAWgd87FmJ/X7XMY7cmnXy/etCPBXEF+MFh4jMHMzV5HJ
5hhJcYRUD4WEp5szu9fIxh6jRJqdhQ6nCAS6pQ2pcQyzWMX/AKdOjNW8FUpXrb+K
jKegqCjo/PrJgTJDGLWbQyo81ic4q7w8zFCEm3rsiruZZxXasRBWjfwLKWnhN/tt
fUQnIs0q38Sf5DVdqlKvDeUigzgRKZ9ypS5JD5rFXnS0/O+Z9nZLItVD0S8mRShr
dOdkmL8WNdpQ+lmKOpNPqwL8OXruS3oM6EbuTqBPrvRqhh1pO+b0EJFqY16c2D91
vs/jUQHo1u5+vg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:27 2025 by rpki-client