Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft
File: NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft (raw, json)
Hash identifier: GmfmCPcmqvZQ74CvdlS0OLs8EqakExazPwd2KTp2vGs=
Subject key identifier: DB:62:F4:56:9D:23:2D:6F:A7:86:0A:F7:E7:8C:FE:F9:FA:DF:41:88
Authority key identifier: 35:F4:9B:5D:50:50:00:B9:09:93:2C:6B:4F:44:3E:7E:F8:1D:78:0D
Certificate issuer: /CN=35f49b5d505000b909932c6b4f443e7ef81d780d
Certificate serial: 0198D4DFF1A82BB197044DC8603D86C80B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfSbXVBQALkJkyxrT0Q-fvgdeA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 03:01:42 +0000
Manifest this update: Sat 23 Aug 2025 03:01:42 +0000
Manifest next update: Sun 24 Aug 2025 03:01:42 +0000
Files and hashes: 1: NfSbXVBQALkJkyxrT0Q-fvgdeA0.crl (hash: EB0gqI0a74XL8V7Vn/YMAk4HDPthaVq9uK3lHcU08Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfSbXVBQALkJkyxrT0Q-fvgdeA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f1:a8:2b:b1:97:04:4d:c8:60:3d:86:c8:0b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f49b5d505000b909932c6b4f443e7ef81d780d
Validity
Not Before: Aug 23 03:01:42 2025 GMT
Not After : Aug 24 03:01:42 2025 GMT
Subject: CN=db62f4569d232d6fa7860af7e78cfef9fadf4188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d9:a5:f1:21:e3:78:e8:ce:29:c4:43:c9:5b:
24:3e:1e:ab:1b:47:51:65:a9:d0:e3:dc:de:03:eb:
c6:85:af:15:27:8b:f6:ac:1e:9a:5d:f8:70:5f:b2:
74:78:0d:b1:f8:91:e6:45:1f:3d:7f:59:f6:3a:26:
dc:db:1e:06:f5:21:1f:20:8a:bc:be:26:d4:01:98:
b4:92:1e:74:60:3f:8a:d1:e5:7f:73:0d:78:a8:47:
d8:93:90:83:f7:f3:44:df:d9:00:6c:23:df:11:58:
cd:f1:08:d6:d2:dd:93:07:2b:12:35:1b:a4:0c:e8:
5a:32:70:4c:51:42:10:9d:14:c4:e4:14:58:4b:af:
5a:32:2c:8b:30:79:18:44:8a:95:3c:9d:2f:40:a6:
fd:78:b9:c8:21:4d:7b:38:d7:3d:4f:69:f5:cd:9f:
6a:6d:8b:fb:51:be:c5:3a:5d:52:ab:e0:ef:52:34:
1d:2e:9d:93:27:00:62:dd:f5:a9:d1:a5:24:c6:ea:
38:72:e6:49:38:50:ee:5e:f6:87:3c:3f:9c:9b:de:
5a:d9:d9:dd:6c:b3:12:fc:bc:77:a0:ce:65:5e:13:
ab:08:03:56:9f:3f:86:23:49:b1:fd:4a:94:20:0c:
e1:6a:d5:45:74:a6:a8:30:b9:4b:10:08:15:53:2d:
4c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:62:F4:56:9D:23:2D:6F:A7:86:0A:F7:E7:8C:FE:F9:FA:DF:41:88
X509v3 Authority Key Identifier:
keyid:35:F4:9B:5D:50:50:00:B9:09:93:2C:6B:4F:44:3E:7E:F8:1D:78:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfSbXVBQALkJkyxrT0Q-fvgdeA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f4:1a:3d:97:47:ed:ef:94:1e:3f:a2:d9:ed:c0:cc:1b:a0:
b2:28:a1:03:27:3f:1f:73:92:c8:4a:44:4d:67:cf:3e:f1:51:
35:49:77:d9:73:bf:7a:a6:16:48:76:33:18:52:ae:cb:30:09:
a4:3d:22:49:f9:2e:c2:d3:dc:b1:78:10:2d:43:45:d1:e3:90:
95:9f:be:ab:6b:3b:10:ba:7d:70:ec:3b:45:9d:ae:35:7e:19:
46:df:35:06:cc:74:05:eb:68:44:b0:b8:b0:73:09:78:a5:b5:
f0:fe:40:c2:e9:72:f6:57:43:9d:b9:df:3e:14:ed:41:16:c0:
18:b8:d4:b0:a6:e2:1a:28:e9:55:a4:d0:9d:bf:fe:c7:27:ec:
c5:3d:ce:b0:85:65:19:2d:6d:a4:fb:52:eb:be:bd:49:c4:6e:
04:7c:14:30:5b:3c:1a:69:3c:0a:73:d2:08:0f:0f:e9:07:97:
38:b2:8c:f1:93:7a:9d:b2:c9:38:8e:a2:71:1f:ce:a2:46:e8:
06:d4:4a:ac:2b:a9:bb:d1:8b:7f:39:87:af:21:4f:87:d4:87:
c3:91:5a:c7:fb:3e:71:94:49:1c:c1:11:79:24:81:91:80:67:
8f:2c:e9:51:7c:44:eb:b2:e2:40:c4:a4:11:c7:15:93:12:c9:
52:d8:95:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3/GoK7GXBE3IYD2GyAtLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZjQ5YjVkNTA1MDAwYjkwOTkzMmM2YjRmNDQzZTdlZjgx
ZDc4MGQwHhcNMjUwODIzMDMwMTQyWhcNMjUwODI0MDMwMTQyWjAzMTEwLwYDVQQD
EyhkYjYyZjQ1NjlkMjMyZDZmYTc4NjBhZjdlNzhjZmVmOWZhZGY0MTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Nml8SHjeOjOKcRDyVskPh6rG0dR
ZanQ49zeA+vGha8VJ4v2rB6aXfhwX7J0eA2x+JHmRR89f1n2Oibc2x4G9SEfIIq8
vibUAZi0kh50YD+K0eV/cw14qEfYk5CD9/NE39kAbCPfEVjN8QjW0t2TBysSNRuk
DOhaMnBMUUIQnRTE5BRYS69aMiyLMHkYRIqVPJ0vQKb9eLnIIU17ONc9T2n1zZ9q
bYv7Ub7FOl1Sq+DvUjQdLp2TJwBi3fWp0aUkxuo4cuZJOFDuXvaHPD+cm95a2dnd
bLMS/Lx3oM5lXhOrCANWnz+GI0mx/UqUIAzhatVFdKaoMLlLEAgVUy1MxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNti9FadIy1vp4YK9+eM/vn630GIMB8GA1UdIwQY
MBaAFDX0m11QUAC5CZMsa09EPn74HXgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmZTYlhWQlFBTGtKa3l4clQwUS1mdmdkZUEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iMzkyMTctMjVkMy00MDFkLWExZDEt
MDJiM2RlODM0YmY0LzEvTmZTYlhWQlFBTGtKa3l4clQwUS1mdmdkZUEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9iMzkyMTctMjVkMy00MDFkLWExZDEtMDJiM2RlODM0YmY0
LzEvTmZTYlhWQlFBTGtKa3l4clQwUS1mdmdkZUEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPQaPZdH
7e+UHj+i2e3AzBugsiihAyc/H3OSyEpETWfPPvFRNUl32XO/eqYWSHYzGFKuyzAJ
pD0iSfkuwtPcsXgQLUNF0eOQlZ++q2s7ELp9cOw7RZ2uNX4ZRt81Bsx0BetoRLC4
sHMJeKW18P5Awuly9ldDnbnfPhTtQRbAGLjUsKbiGijpVaTQnb/+xyfsxT3OsIVl
GS1tpPtS6769ScRuBHwUMFs8Gmk8CnPSCA8P6QeXOLKM8ZN6nbLJOI6icR/Ookbo
BtRKrCupu9GLfzmHryFPh9SHw5Fax/s+cZRJHMEReSSBkYBnjyzpUXxE67LiQMSk
EccVkxLJUtiVCA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:55 2025 by rpki-client