Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
File: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json)
Hash identifier: ssZAYU76Y0JHsNDuIFjlJ6+c3aJhoTEETRqJOUzbuJs=
Subject key identifier: 5A:20:EB:47:77:E5:56:3E:16:03:6F:2A:8B:3D:F3:DA:28:43:96:AA
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 0198D65F640D75E925A3CEEB56A46C42DA7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 10:00:32 +0000
Manifest this update: Sat 23 Aug 2025 10:00:32 +0000
Manifest next update: Sun 24 Aug 2025 10:00:32 +0000
Files and hashes: 1: 8s1U0KmUYb897VvjMdVaiCCBr8Y.roa (hash: 5qEC8e4y3KYPBzPpD5dv/300fB0lSnNjSuXLoow+Q8w=)
2: LaYkRMNeto2OFZ9VBnU48w_HGgs.roa (hash: 16B1JfqcXDvmz5pVWUS+KsHYpQRrCgD9R9Tg6uXacIA=)
3: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: K/3fCKjowWyPd9MES0aizcgunDdboJZehuy6VgDDf2k=)
4: W8oJrry2382XyDpwYu9d1fRM57k.roa (hash: vgOtreWyL8SSvp1wiImWd0ZzLXQJtP4n+ctgbIbJd6I=)
5: ZPnSp5toQpthOZvn7vrTi1PIJ0A.roa (hash: 2xJoiopsp/aP4IfMiv71h2CCh2maxmce9cHqGdAd1jM=)
6: hDuQO-2O-6Lo8qgrhYqNM0G4P24.roa (hash: WUDxmKQLeVQHlfqkPeKYvZqVqvTuBp11Xfwh/S2zHnQ=)
7: rJESdqv17knzJ4wNzfBk8WWWnw0.roa (hash: BdHgAA5eA1A53dV1mMcPmgdF0S7eP4oFR6WHvpTEZ/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:64:0d:75:e9:25:a3:ce:eb:56:a4:6c:42:da:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Aug 23 10:00:32 2025 GMT
Not After : Aug 24 10:00:32 2025 GMT
Subject: CN=5a20eb4777e5563e16036f2a8b3df3da284396aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fa:3f:d0:f6:68:94:57:a1:87:30:0c:31:c2:
a5:ec:e7:aa:4c:21:01:26:d0:5f:7f:97:5d:33:4c:
14:7b:03:c3:ae:f2:a9:34:f6:a2:bd:03:9c:fa:0c:
39:37:2d:52:bc:ae:53:7a:07:09:86:d7:52:ed:60:
3e:ec:a2:04:06:5e:8c:82:84:31:99:5a:e2:cf:17:
39:a5:38:6f:c5:13:d7:c6:3b:66:bd:2f:86:c0:cc:
4a:5d:84:b3:51:0c:ee:9e:3f:a0:8a:a9:d4:f0:73:
ff:ec:e5:c8:52:88:4c:ac:36:2d:35:ee:66:0a:ba:
7f:30:90:4f:5b:69:3b:6b:c5:2e:a5:2e:4f:04:3d:
a5:ff:a1:d9:ea:d0:ce:e4:c5:5e:02:20:ed:a6:26:
dc:4b:88:e6:bd:a0:1b:af:2a:89:51:48:b0:90:71:
c8:0f:63:79:9c:43:9b:40:5c:0e:ce:b3:c7:29:80:
f5:01:6e:86:a2:78:5b:00:64:04:33:7c:56:72:e7:
19:25:50:58:b3:e2:7d:f7:d6:f1:c7:40:0a:f1:a4:
53:b8:74:28:4f:b7:65:89:52:99:4e:2f:df:56:cd:
2a:ed:ca:7a:07:1c:e8:07:3a:65:44:16:15:cf:30:
35:72:97:ee:68:8d:88:ae:f3:bd:9c:3c:c2:42:f1:
6d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:20:EB:47:77:E5:56:3E:16:03:6F:2A:8B:3D:F3:DA:28:43:96:AA
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:dc:4f:8d:6a:4e:ab:83:82:0b:fa:44:0c:23:48:56:e8:63:
fc:38:f8:ca:be:a3:69:7a:07:35:a9:5b:17:3c:3e:71:69:ca:
3b:e0:8b:17:38:96:2b:d5:d2:dc:5b:89:88:06:96:22:0a:2d:
c2:1a:9b:5e:17:34:8c:5e:a4:4f:ff:ae:5c:51:a5:e7:55:94:
8e:fa:ac:eb:58:c9:2e:e1:17:b0:1d:e9:26:bb:be:e5:e5:97:
a6:9e:d1:3b:4a:d0:86:b1:b3:0d:6f:f2:5d:17:3d:54:b4:b1:
3c:05:db:0e:c3:7b:a9:79:d3:cc:55:0d:0e:3a:69:61:a6:55:
54:8e:19:a5:dc:9a:04:c4:4e:bf:79:8a:64:40:9a:a3:1e:f9:
3b:10:b0:6a:ca:a1:46:99:7d:a0:b3:ed:42:c7:2d:44:5a:7d:
bd:11:fe:65:ba:63:15:54:15:8d:d4:98:c4:d3:0c:9d:49:6e:
b6:0e:6f:1f:e6:b7:81:83:19:8b:ca:97:f3:39:96:29:bf:53:
3b:05:82:01:bd:93:4a:a8:86:4d:59:ed:25:12:fe:5c:e1:90:
0b:2b:1c:50:e1:8f:e4:1f:00:33:b6:cf:0c:47:93:8c:e9:e7:
39:8f:8f:3f:a3:01:7a:bf:f9:c8:17:0c:10:0e:9d:43:83:be:
29:ae:2c:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX2QNdeklo87rVqRsQtp/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NDVhNzIwMDE2NDkxMjA0MWJiOTMxZWZiMWZlYWMxMjNi
NDNhMTgwHhcNMjUwODIzMTAwMDMyWhcNMjUwODI0MTAwMDMyWjAzMTEwLwYDVQQD
Eyg1YTIwZWI0Nzc3ZTU1NjNlMTYwMzZmMmE4YjNkZjNkYTI4NDM5NmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/o/0PZolFehhzAMMcKl7OeqTCEB
JtBff5ddM0wUewPDrvKpNPaivQOc+gw5Ny1SvK5TegcJhtdS7WA+7KIEBl6MgoQx
mVrizxc5pThvxRPXxjtmvS+GwMxKXYSzUQzunj+giqnU8HP/7OXIUohMrDYtNe5m
Crp/MJBPW2k7a8UupS5PBD2l/6HZ6tDO5MVeAiDtpibcS4jmvaAbryqJUUiwkHHI
D2N5nEObQFwOzrPHKYD1AW6GonhbAGQEM3xWcucZJVBYs+J999bxx0AK8aRTuHQo
T7dliVKZTi/fVs0q7cp6BxzoBzplRBYVzzA1cpfuaI2IrvO9nDzCQvFtTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFog60d35VY+FgNvKos989ooQ5aqMB8GA1UdIwQY
MBaAFDVFpyABZJEgQbuTHvsf6sEjtDoYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDkt
YWFiYjA2MmU0MGRiLzEvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDktYWFiYjA2MmU0MGRi
LzEvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9xPjWpO
q4OCC/pEDCNIVuhj/Dj4yr6jaXoHNalbFzw+cWnKO+CLFziWK9XS3FuJiAaWIgot
whqbXhc0jF6kT/+uXFGl51WUjvqs61jJLuEXsB3pJru+5eWXpp7RO0rQhrGzDW/y
XRc9VLSxPAXbDsN7qXnTzFUNDjppYaZVVI4ZpdyaBMROv3mKZECaox75OxCwasqh
Rpl9oLPtQsctRFp9vRH+ZbpjFVQVjdSYxNMMnUlutg5vH+a3gYMZi8qX8zmWKb9T
OwWCAb2TSqiGTVntJRL+XOGQCyscUOGP5B8AM7bPDEeTjOnnOY+PP6MBer/5yBcM
EA6dQ4O+Ka4sDg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:18:59 2025 by rpki-client