Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
File: NvHVZ2vdcEM0sts0ypBNd83Suso.mft (raw, json)
Hash identifier: QooR0T27qKy96FZmjZNrlqr1kIxkHnJbwhkuWK0n0V8=
Subject key identifier: 27:1B:16:B5:A6:E1:C6:77:1A:3F:59:2E:6C:13:94:63:AB:BE:1A:4F
Authority key identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
Certificate issuer: /CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Certificate serial: 0198D515B43F2DF840C452FA64559AF3B810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
Manifest number: 01A8
Signing time: Sat 23 Aug 2025 04:00:26 +0000
Manifest this update: Sat 23 Aug 2025 04:00:26 +0000
Manifest next update: Sun 24 Aug 2025 04:00:26 +0000
Files and hashes: 1: NvHVZ2vdcEM0sts0ypBNd83Suso.crl (hash: oFIPeF219IWl+vflaATozzKqQJYrXRsEF5iqFRviIEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:b4:3f:2d:f8:40:c4:52:fa:64:55:9a:f3:b8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Validity
Not Before: Aug 23 04:00:26 2025 GMT
Not After : Aug 24 04:00:26 2025 GMT
Subject: CN=271b16b5a6e1c6771a3f592e6c139463abbe1a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:33:ed:1d:10:d0:dc:a9:94:59:da:5d:0d:91:
27:ca:27:64:3b:88:68:cd:d9:b8:e2:b4:e5:28:b1:
81:b1:44:e5:75:e2:9c:a7:cf:f1:e4:ed:bb:2d:31:
b6:b3:f8:81:7c:c4:f9:71:d0:c1:a6:3e:e8:0f:91:
c2:be:19:d3:ae:e2:f3:b7:84:b9:0b:e4:cc:98:18:
f6:7c:de:cb:e5:0c:fa:ad:ca:33:aa:fe:fb:45:4e:
0c:6d:64:32:0e:2a:93:c6:9d:be:2b:99:46:08:44:
c5:f8:8c:d4:a1:23:01:b1:79:95:37:ca:51:22:3d:
71:98:b5:54:e9:f9:0a:fc:2d:ac:6d:af:ac:11:5d:
ed:da:83:d0:d3:9c:0a:d3:1e:0a:e1:d8:9e:ec:51:
d4:f7:4d:52:ce:24:3a:a4:a6:c4:60:3e:66:36:80:
71:bc:7a:ea:b4:50:fa:b2:ce:13:e4:1e:46:2b:50:
4d:fb:cc:aa:66:18:ef:a8:d0:cb:0c:26:3b:f5:3e:
2b:50:8f:e4:d2:5c:cc:30:57:e5:df:7f:d4:a4:bd:
f8:43:30:23:ae:8a:0b:56:12:92:eb:24:d4:92:0e:
22:f2:b4:d6:f5:53:4a:9e:22:32:81:8d:c7:71:d8:
2a:d4:2e:52:1f:35:75:79:75:8a:a3:99:34:98:48:
c9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1B:16:B5:A6:E1:C6:77:1A:3F:59:2E:6C:13:94:63:AB:BE:1A:4F
X509v3 Authority Key Identifier:
keyid:36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:dc:56:d3:64:b9:5d:13:d2:2a:6c:29:c9:38:d3:6d:e4:8a:
96:4d:d0:08:d6:43:ee:78:d2:e4:dc:5b:24:15:d3:c8:02:45:
6b:ff:35:f1:cb:e6:b5:6b:81:cb:e0:aa:d4:07:ca:d2:74:b8:
b0:5f:c3:ef:d3:58:06:0c:71:84:8d:09:ee:2b:b6:2c:d7:8d:
e4:bc:72:a8:75:52:d2:83:66:d8:51:ea:0e:ed:49:24:c7:02:
fd:51:b4:22:bc:e8:56:67:ff:ad:9f:24:4b:0d:dc:52:18:cd:
aa:bc:6e:46:1f:f2:e2:7c:3a:5a:14:85:9a:f7:c7:0b:07:66:
6f:0a:5c:81:65:a6:91:8b:95:16:b0:f4:8f:71:ba:a4:f3:e0:
fb:c0:b1:0e:72:31:cd:3a:38:ca:c3:2b:0a:07:9e:6c:55:56:
46:89:20:88:2d:36:56:15:1a:20:fb:0e:41:20:17:67:70:9b:
8a:49:58:b0:31:33:4e:81:1f:80:57:bc:1f:48:63:a7:3a:08:
77:fe:81:17:a3:38:03:8e:0e:eb:e4:ff:1e:8b:a9:38:ed:44:
47:62:b2:c4:60:f3:e9:77:c3:d6:12:c1:41:b0:d5:d2:74:13:
6d:59:af:28:27:37:2e:db:d0:22:b4:6e:c3:7c:15:69:86:08:
8c:55:51:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFbQ/LfhAxFL6ZFWa87gQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZjFkNTY3NmJkZDcwNDMzNGIyZGIzNGNhOTA0ZDc3Y2Rk
MmJhY2EwHhcNMjUwODIzMDQwMDI2WhcNMjUwODI0MDQwMDI2WjAzMTEwLwYDVQQD
EygyNzFiMTZiNWE2ZTFjNjc3MWEzZjU5MmU2YzEzOTQ2M2FiYmUxYTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTPtHRDQ3KmUWdpdDZEnyidkO4ho
zdm44rTlKLGBsUTldeKcp8/x5O27LTG2s/iBfMT5cdDBpj7oD5HCvhnTruLzt4S5
C+TMmBj2fN7L5Qz6rcozqv77RU4MbWQyDiqTxp2+K5lGCETF+IzUoSMBsXmVN8pR
Ij1xmLVU6fkK/C2sba+sEV3t2oPQ05wK0x4K4die7FHU901SziQ6pKbEYD5mNoBx
vHrqtFD6ss4T5B5GK1BN+8yqZhjvqNDLDCY79T4rUI/k0lzMMFfl33/UpL34QzAj
rooLVhKS6yTUkg4i8rTW9VNKniIygY3Hcdgq1C5SHzV1eXWKo5k0mEjJNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcbFrWm4cZ3Gj9ZLmwTlGOrvhpPMB8GA1UdIwQY
MBaAFDbx1Wdr3XBDNLLbNMqQTXfN0rrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnZIVloydmRjRU0wc3RzMHlwQk5kODNTdXNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS80ZDg2NWMtNzBmNS00NGI5LTg4YTYt
ZWE4YWZlNjc4OTcwLzEvTnZIVloydmRjRU0wc3RzMHlwQk5kODNTdXNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS80ZDg2NWMtNzBmNS00NGI5LTg4YTYtZWE4YWZlNjc4OTcw
LzEvTnZIVloydmRjRU0wc3RzMHlwQk5kODNTdXNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATdxW02S5
XRPSKmwpyTjTbeSKlk3QCNZD7njS5NxbJBXTyAJFa/818cvmtWuBy+Cq1AfK0nS4
sF/D79NYBgxxhI0J7iu2LNeN5LxyqHVS0oNm2FHqDu1JJMcC/VG0IrzoVmf/rZ8k
Sw3cUhjNqrxuRh/y4nw6WhSFmvfHCwdmbwpcgWWmkYuVFrD0j3G6pPPg+8CxDnIx
zTo4ysMrCgeebFVWRokgiC02VhUaIPsOQSAXZ3CbiklYsDEzToEfgFe8H0hjpzoI
d/6BF6M4A44O6+T/HoupOO1ER2KyxGDz6XfD1hLBQbDV0nQTbVmvKCc3LtvQIrRu
w3wVaYYIjFVRsA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:17 2025 by rpki-client