Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
File: NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft (raw, json)
Hash identifier: VtNz3eCZAm5ltb/rQpndrqEIlj92zMNFJx+RkeSVZFY=
Subject key identifier: 8D:93:D3:13:CD:92:ED:8C:AD:80:65:9F:6F:8D:11:EB:69:B6:5D:1B
Authority key identifier: 34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
Certificate issuer: /CN=34f78361a077b0d789135ccd68b1261db138f950
Certificate serial: 0198D47284ACCD90305CC7A7D40AB96C9074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
Manifest number: 1044
Signing time: Sat 23 Aug 2025 01:02:11 +0000
Manifest this update: Sat 23 Aug 2025 01:02:11 +0000
Manifest next update: Sun 24 Aug 2025 01:02:11 +0000
Files and hashes: 1: BT-QKLCE4MZ0YtWA2nAk6qpxv6g.roa (hash: t+OljMW5uOHxrHIlucZj5mZPbb09wnIuaUx+FWzOywc=)
2: NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl (hash: cpVxSaYbJuYWZkEER+3O7ggF7y0Wf7Pqf4+HQV5Vgkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:84:ac:cd:90:30:5c:c7:a7:d4:0a:b9:6c:90:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f78361a077b0d789135ccd68b1261db138f950
Validity
Not Before: Aug 23 01:02:11 2025 GMT
Not After : Aug 24 01:02:11 2025 GMT
Subject: CN=8d93d313cd92ed8cad80659f6f8d11eb69b65d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e4:55:1c:4f:c6:23:27:00:d4:40:79:47:6f:
ff:66:3b:c6:78:7c:87:bb:05:b8:83:4d:ec:84:af:
8b:7e:05:af:81:1c:ae:f4:20:c7:38:76:64:73:0d:
ba:4e:d1:58:ff:0c:d2:2f:95:4e:63:df:19:a8:e3:
2a:3a:cc:7e:c8:65:08:8e:dd:17:51:fe:17:9e:df:
6c:06:e2:36:56:e7:45:62:d1:cf:9c:1d:6e:97:5a:
9f:6f:0f:87:45:95:21:8b:22:56:30:9b:74:a1:d8:
b4:00:44:8e:ff:51:49:b5:60:4e:48:3f:e0:07:d7:
ae:b4:c2:f6:f1:5a:f8:1c:18:4b:cf:f0:31:f7:c8:
f6:23:4d:72:86:09:73:59:9d:38:89:89:b7:d1:a4:
17:ce:1a:b9:f9:cb:88:8a:49:e2:c7:f1:51:41:86:
14:7b:e0:19:98:b4:77:4e:df:9a:d6:9c:75:5a:2c:
0c:ed:a9:42:8b:f2:06:8c:df:d1:57:76:11:9e:f5:
0e:17:21:9c:ea:ee:1e:6b:bc:89:06:cf:e7:bb:00:
a0:7e:66:16:c5:dd:ca:5a:ad:c4:e6:50:d5:60:50:
80:98:a9:1d:2a:13:a6:34:b7:1b:5c:57:c3:24:b3:
30:f0:e8:b3:ed:3a:d5:13:22:39:5b:b4:1a:f4:7c:
8d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:93:D3:13:CD:92:ED:8C:AD:80:65:9F:6F:8D:11:EB:69:B6:5D:1B
X509v3 Authority Key Identifier:
keyid:34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:2b:54:c1:7c:bb:4a:41:0d:f2:d8:48:01:18:49:d7:ab:a5:
b8:f7:3a:71:18:c4:9c:64:98:ac:4b:f4:f4:31:10:e2:8b:ad:
64:45:2a:26:d7:83:5c:16:7d:d1:26:5e:7d:0e:cc:26:99:ad:
3c:2d:8d:1b:c5:d3:90:74:59:74:13:43:f5:dd:19:1c:1f:7d:
cf:ef:07:a5:b9:95:15:64:58:62:2e:b4:86:7f:91:db:68:14:
1e:2e:2f:4c:ce:35:99:85:d7:4d:25:f2:64:05:7c:97:84:7a:
71:b2:83:17:59:35:ef:c6:95:25:7d:dc:57:a8:33:f5:f4:46:
c6:65:2c:fe:6d:0a:c8:c0:34:15:43:70:03:24:9b:76:d3:06:
80:f2:2f:99:9e:79:8f:f2:3c:42:15:c0:78:b4:8f:11:60:7c:
67:17:f1:f2:f2:48:c5:e9:43:c8:36:0e:85:78:c5:07:84:fd:
a0:e7:df:f4:91:df:b8:97:5a:e0:ac:fe:43:85:31:8d:24:3e:
be:a1:ca:4d:44:d5:38:12:50:b9:ef:ce:3c:fc:b0:96:fd:36:
a6:a3:3e:2c:87:99:c8:ee:ae:c6:19:dd:40:92:68:2b:2d:53:
2d:7d:fd:aa:d4:13:23:09:9b:17:00:1d:37:e3:37:24:e6:6b:
40:0b:eb:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcoSszZAwXMen1Aq5bJB0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0Zjc4MzYxYTA3N2IwZDc4OTEzNWNjZDY4YjEyNjFkYjEz
OGY5NTAwHhcNMjUwODIzMDEwMjExWhcNMjUwODI0MDEwMjExWjAzMTEwLwYDVQQD
Eyg4ZDkzZDMxM2NkOTJlZDhjYWQ4MDY1OWY2ZjhkMTFlYjY5YjY1ZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8uRVHE/GIycA1EB5R2//ZjvGeHyH
uwW4g03shK+LfgWvgRyu9CDHOHZkcw26TtFY/wzSL5VOY98ZqOMqOsx+yGUIjt0X
Uf4Xnt9sBuI2VudFYtHPnB1ul1qfbw+HRZUhiyJWMJt0odi0AESO/1FJtWBOSD/g
B9eutML28Vr4HBhLz/Ax98j2I01yhglzWZ04iYm30aQXzhq5+cuIiknix/FRQYYU
e+AZmLR3Tt+a1px1WiwM7alCi/IGjN/RV3YRnvUOFyGc6u4ea7yJBs/nuwCgfmYW
xd3KWq3E5lDVYFCAmKkdKhOmNLcbXFfDJLMw8Oiz7TrVEyI5W7Qa9HyNJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2T0xPNku2MrYBln2+NEetptl0bMB8GA1UdIwQY
MBaAFDT3g2Ggd7DXiRNczWixJh2xOPlQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlBlRFlhQjNzTmVKRTF6TmFMRW1IYkU0LVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85ZGY5ZjItYTIwYS00MjljLTgyZTgt
YTU3MTY4NjVmZDM1LzEvTlBlRFlhQjNzTmVKRTF6TmFMRW1IYkU0LVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85ZGY5ZjItYTIwYS00MjljLTgyZTgtYTU3MTY4NjVmZDM1
LzEvTlBlRFlhQjNzTmVKRTF6TmFMRW1IYkU0LVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCtUwXy7
SkEN8thIARhJ16uluPc6cRjEnGSYrEv09DEQ4outZEUqJteDXBZ90SZefQ7MJpmt
PC2NG8XTkHRZdBND9d0ZHB99z+8HpbmVFWRYYi60hn+R22gUHi4vTM41mYXXTSXy
ZAV8l4R6cbKDF1k178aVJX3cV6gz9fRGxmUs/m0KyMA0FUNwAySbdtMGgPIvmZ55
j/I8QhXAeLSPEWB8Zxfx8vJIxelDyDYOhXjFB4T9oOff9JHfuJda4Kz+Q4UxjSQ+
vqHKTUTVOBJQue/OPPywlv02pqM+LIeZyO6uxhndQJJoKy1TLX39qtQTIwmbFwAd
N+M3JOZrQAvrMw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:27 2025 by rpki-client