Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
File: NharGOa87eCFC8quvZWZk-hAhus.mft (raw, json)
Hash identifier: SmmG6N5LEEREXWeNcTc1gfW1vwN7JUJX/QC3IxDzxhc=
Subject key identifier: 53:71:AC:F6:C9:A8:FA:A9:CF:43:4F:2D:79:26:70:A8:3F:67:B3:1B
Authority key identifier: 36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
Certificate issuer: /CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Certificate serial: 0198D472398207985FAC6B766369912E3E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 01:01:52 +0000
Manifest this update: Sat 23 Aug 2025 01:01:52 +0000
Manifest next update: Sun 24 Aug 2025 01:01:52 +0000
Files and hashes: 1: NharGOa87eCFC8quvZWZk-hAhus.crl (hash: F0D9n4QxCr05GHJkB6pjB4EmI61tRT+gGJAtE2pAeaQ=)
2: a86URqUjdV6NGR4_Rkuxzk9nvOQ.roa (hash: QkDObpBQb/2gqaSVK2qoFjm69vfVIidcXe/y1fY7jKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:39:82:07:98:5f:ac:6b:76:63:69:91:2e:3e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Validity
Not Before: Aug 23 01:01:52 2025 GMT
Not After : Aug 24 01:01:52 2025 GMT
Subject: CN=5371acf6c9a8faa9cf434f2d792670a83f67b31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:87:29:ce:28:1a:c3:28:ed:0d:a5:27:09:b9:
f1:e0:be:f1:38:7d:9c:69:cd:f3:4f:e4:63:e6:ec:
33:f5:a9:4a:5d:00:69:fc:c3:d4:cd:a7:14:0f:98:
a8:7f:9e:02:91:b1:79:5d:f9:47:c1:a9:13:d6:e5:
59:60:6f:ab:62:6f:95:8a:a0:28:c5:cd:52:bc:d4:
60:3d:e4:25:22:30:e2:96:d2:b6:a2:c6:0d:a7:f1:
66:f4:cf:a6:a3:63:6b:6c:ff:75:67:24:9c:ad:38:
74:f7:93:57:2c:96:18:55:bd:d9:6f:b0:ed:23:26:
17:6a:3f:98:db:00:58:5f:70:93:e2:07:cf:8b:59:
21:46:78:dd:30:45:0f:09:60:48:7d:0c:0a:1b:84:
ca:06:f4:cc:c0:8b:fc:51:09:8a:81:97:de:3c:7c:
c6:e5:90:ae:dd:b9:73:01:7e:a0:8f:11:ee:7a:dc:
80:e8:a7:5a:d9:d6:97:38:ec:67:f0:f0:df:a8:25:
21:02:1f:0c:2e:c3:42:9b:54:59:ed:d1:f9:79:40:
c0:63:25:7f:5c:4d:ae:19:0a:a6:94:d2:dc:c7:37:
d0:17:c7:f8:b4:40:7a:41:1e:bb:af:d0:b7:50:ad:
65:ae:72:ea:98:2a:d7:e8:d8:97:b9:4b:7f:ca:64:
2d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:71:AC:F6:C9:A8:FA:A9:CF:43:4F:2D:79:26:70:A8:3F:67:B3:1B
X509v3 Authority Key Identifier:
keyid:36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f8:c7:fc:56:dd:97:bd:2b:8f:94:06:0c:f1:1e:07:4b:9a:
a5:80:32:55:aa:4d:87:69:80:aa:51:3a:2a:ea:a8:1e:60:3f:
13:f1:43:53:9f:31:52:3f:e0:14:11:b3:15:34:f9:3a:2b:f3:
32:2c:32:15:2c:24:0e:57:37:98:40:5b:5c:a3:c2:a2:20:10:
2c:07:7b:13:c1:96:9f:e1:4d:fb:b4:30:f1:23:61:77:55:e6:
55:97:6b:fe:d2:58:83:42:c2:5b:74:e9:3e:56:0a:1d:f0:35:
58:15:37:79:d8:81:c4:31:0e:80:08:b2:ad:c1:2e:90:8c:09:
10:83:da:6d:17:7a:4e:37:e8:6d:6a:2c:b3:c4:75:63:1f:8a:
8f:c4:ca:07:d5:85:52:34:cd:30:49:1b:fd:50:e7:e7:e1:69:
3b:b3:a2:4a:7c:d0:46:7b:a0:c9:92:7a:4a:96:be:d1:5e:da:
49:da:93:e1:f0:dd:5d:50:2b:c6:63:7b:42:7e:c9:e2:be:b6:
4b:87:05:af:59:36:92:9d:b4:00:fb:24:bd:9a:41:18:a9:cf:
ca:40:36:f7:09:f2:32:ce:e7:ab:a7:2b:9c:1d:cc:48:f9:87:
43:d1:a1:38:16:2d:68:9b:12:19:dd:6d:3f:92:c8:00:67:02:
c3:7a:4a:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcjmCB5hfrGt2Y2mRLj4GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTZhYjE4ZTZiY2VkZTA4NTBiY2FhZWJkOTU5OTkzZTg0
MDg2ZWIwHhcNMjUwODIzMDEwMTUyWhcNMjUwODI0MDEwMTUyWjAzMTEwLwYDVQQD
Eyg1MzcxYWNmNmM5YThmYWE5Y2Y0MzRmMmQ3OTI2NzBhODNmNjdiMzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YcpzigawyjtDaUnCbnx4L7xOH2c
ac3zT+Rj5uwz9alKXQBp/MPUzacUD5iof54CkbF5XflHwakT1uVZYG+rYm+ViqAo
xc1SvNRgPeQlIjDiltK2osYNp/Fm9M+mo2NrbP91ZyScrTh095NXLJYYVb3Zb7Dt
IyYXaj+Y2wBYX3CT4gfPi1khRnjdMEUPCWBIfQwKG4TKBvTMwIv8UQmKgZfePHzG
5ZCu3blzAX6gjxHuetyA6Kda2daXOOxn8PDfqCUhAh8MLsNCm1RZ7dH5eUDAYyV/
XE2uGQqmlNLcxzfQF8f4tEB6QR67r9C3UK1lrnLqmCrX6NiXuUt/ymQtKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNxrPbJqPqpz0NPLXkmcKg/Z7MbMB8GA1UdIwQY
MBaAFDYWqxjmvO3ghQvKrr2VmZPoQIbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhhckdPYTg3ZUNGQzhxdXZaV1prLWhBaHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83ZDJmMzQtYWZmZC00ZDFjLWI0MTYt
YWFjMmViY2JmNWQ0LzEvTmhhckdPYTg3ZUNGQzhxdXZaV1prLWhBaHVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83ZDJmMzQtYWZmZC00ZDFjLWI0MTYtYWFjMmViY2JmNWQ0
LzEvTmhhckdPYTg3ZUNGQzhxdXZaV1prLWhBaHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfjH/Fbd
l70rj5QGDPEeB0uapYAyVapNh2mAqlE6KuqoHmA/E/FDU58xUj/gFBGzFTT5Oivz
MiwyFSwkDlc3mEBbXKPCoiAQLAd7E8GWn+FN+7Qw8SNhd1XmVZdr/tJYg0LCW3Tp
PlYKHfA1WBU3ediBxDEOgAiyrcEukIwJEIPabRd6TjfobWoss8R1Yx+Kj8TKB9WF
UjTNMEkb/VDn5+FpO7OiSnzQRnugyZJ6Spa+0V7aSdqT4fDdXVArxmN7Qn7J4r62
S4cFr1k2kp20APskvZpBGKnPykA29wnyMs7nq6crnB3MSPmHQ9GhOBYtaJsSGd1t
P5LIAGcCw3pKXg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:55 2025 by rpki-client