Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
File: NscJXgRZhgU7mz6HiQNnJoN90fU.mft (raw, json)
Hash identifier: L+l0+rCVAPQW092NteNeJNX+4oy0nEPFkwNRncbem/U=
Subject key identifier: 64:F8:C8:8B:99:AF:0A:68:53:FB:D6:35:68:03:B5:4C:E1:11:37:49
Authority key identifier: 36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
Certificate issuer: /CN=36c7095e045986053b9b3e8789036726837dd1f5
Certificate serial: 0198D51631A74B0E4A203C989C6226A57E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
Manifest number: 0572
Signing time: Sat 23 Aug 2025 04:00:58 +0000
Manifest this update: Sat 23 Aug 2025 04:00:58 +0000
Manifest next update: Sun 24 Aug 2025 04:00:58 +0000
Files and hashes: 1: 13YuQXcDJbnIYp9Q74L-JDcuLVM.roa (hash: xxqrr3XwSKukvs1NGhAPXhNBgDJT5zDVkc5duMlGjfY=)
2: NscJXgRZhgU7mz6HiQNnJoN90fU.crl (hash: SZ47YGHA2roPl16YfLazo1zzHel8kTupw8MRFJwzGno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:31:a7:4b:0e:4a:20:3c:98:9c:62:26:a5:7e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7095e045986053b9b3e8789036726837dd1f5
Validity
Not Before: Aug 23 04:00:58 2025 GMT
Not After : Aug 24 04:00:58 2025 GMT
Subject: CN=64f8c88b99af0a6853fbd6356803b54ce1113749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:c7:cb:26:f4:e6:70:4b:74:d0:b7:8e:e7:
bc:20:9c:c0:f1:15:84:44:0e:a4:c5:e0:71:b6:a0:
da:fa:65:22:a3:4e:ed:92:a9:86:d9:1e:56:08:7d:
89:5f:e6:81:ce:b6:1c:ac:8a:b1:5c:66:8a:a3:fb:
a5:af:6e:89:9f:d6:6e:e4:5c:05:e3:3c:47:78:5f:
4c:89:32:b6:e4:d5:4f:cd:da:b2:bd:f2:8f:c2:0d:
c4:4f:71:40:e0:05:fc:52:17:74:1d:f7:b1:b2:f0:
1f:72:49:46:fe:78:36:4e:f4:3a:25:82:15:f6:a2:
c0:d4:8d:fd:8c:32:22:52:c2:17:77:1b:e2:e6:2d:
d0:d8:c3:f8:96:aa:db:c7:77:44:53:cb:8f:a3:a7:
97:3b:64:ed:b7:ca:80:fa:e0:6c:7a:82:79:2f:ac:
4e:cb:5f:a2:90:7f:00:50:85:77:05:11:76:d5:63:
fc:37:23:4e:4e:d0:f0:3d:c9:ee:77:f4:76:60:5c:
c6:13:29:1c:7f:b8:9d:89:fc:4a:7c:64:4b:7e:aa:
79:42:f0:21:c1:5d:c2:2e:18:28:68:e7:91:df:8a:
fa:7b:5f:3b:74:a4:e6:0f:d9:13:fa:af:29:c5:49:
47:be:f0:6e:48:53:bf:95:20:d0:ca:34:b1:0b:07:
56:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F8:C8:8B:99:AF:0A:68:53:FB:D6:35:68:03:B5:4C:E1:11:37:49
X509v3 Authority Key Identifier:
keyid:36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:57:16:df:8a:d1:24:61:b2:5a:44:39:ba:f5:e3:cc:c0:bb:
05:21:e1:7e:b9:27:ae:96:35:34:10:18:08:74:b0:2f:f5:2e:
20:20:26:78:55:79:0f:4f:b0:e5:2e:97:45:c3:8d:0c:b7:b6:
a3:85:c1:46:03:02:2f:3e:6f:1d:51:6d:ef:69:84:1f:7d:63:
e4:07:3a:0c:84:e2:42:6b:07:fd:69:f7:d8:4e:45:51:3a:d9:
f4:8b:f4:4a:d9:8c:62:73:e1:b9:75:cc:42:bc:db:18:28:c4:
0c:85:20:f8:cd:e7:bc:42:05:8a:09:d1:63:a0:29:69:f0:8f:
97:d9:20:3f:51:50:24:1c:59:08:7e:95:2f:6e:50:bf:55:8c:
ee:4b:4d:94:a7:db:0a:bd:e3:89:de:f3:dc:81:9b:00:ac:74:
4f:dd:c0:75:61:f8:3b:6a:80:7d:86:db:b3:4f:3b:82:ee:67:
ae:b9:5c:6a:2b:de:a5:78:da:85:b4:d6:0e:b5:0f:45:08:7b:
30:dd:bc:a4:09:9d:ef:36:ac:32:8e:37:3f:d5:43:9d:91:6b:
2f:01:82:3a:26:34:90:1c:91:c9:85:24:e5:c2:78:e1:56:ed:
40:11:02:5a:83:79:5d:b4:7d:d7:f7:05:8c:ca:69:8c:0f:57:
5f:26:1b:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFjGnSw5KIDyYnGImpX4iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzcwOTVlMDQ1OTg2MDUzYjliM2U4Nzg5MDM2NzI2ODM3
ZGQxZjUwHhcNMjUwODIzMDQwMDU4WhcNMjUwODI0MDQwMDU4WjAzMTEwLwYDVQQD
Eyg2NGY4Yzg4Yjk5YWYwYTY4NTNmYmQ2MzU2ODAzYjU0Y2UxMTEzNzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPHHyyb05nBLdNC3jue8IJzA8RWE
RA6kxeBxtqDa+mUio07tkqmG2R5WCH2JX+aBzrYcrIqxXGaKo/ulr26Jn9Zu5FwF
4zxHeF9MiTK25NVPzdqyvfKPwg3ET3FA4AX8Uhd0HfexsvAfcklG/ng2TvQ6JYIV
9qLA1I39jDIiUsIXdxvi5i3Q2MP4lqrbx3dEU8uPo6eXO2Ttt8qA+uBseoJ5L6xO
y1+ikH8AUIV3BRF21WP8NyNOTtDwPcnud/R2YFzGEykcf7idifxKfGRLfqp5QvAh
wV3CLhgoaOeR34r6e187dKTmD9kT+q8pxUlHvvBuSFO/lSDQyjSxCwdWiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGT4yIuZrwpoU/vWNWgDtUzhETdJMB8GA1UdIwQY
MBaAFDbHCV4EWYYFO5s+h4kDZyaDfdH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNjSlhnUlpoZ1U3bXo2SGlRTm5Kb045MGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80ZDU4ZjUtNWMzZi00YWNhLTk3Yjgt
NmQ4YTY5YTBhZDQzLzEvTnNjSlhnUlpoZ1U3bXo2SGlRTm5Kb045MGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy80ZDU4ZjUtNWMzZi00YWNhLTk3YjgtNmQ4YTY5YTBhZDQz
LzEvTnNjSlhnUlpoZ1U3bXo2SGlRTm5Kb045MGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1cW34rR
JGGyWkQ5uvXjzMC7BSHhfrknrpY1NBAYCHSwL/UuICAmeFV5D0+w5S6XRcONDLe2
o4XBRgMCLz5vHVFt72mEH31j5Ac6DITiQmsH/Wn32E5FUTrZ9Iv0StmMYnPhuXXM
QrzbGCjEDIUg+M3nvEIFignRY6ApafCPl9kgP1FQJBxZCH6VL25Qv1WM7ktNlKfb
Cr3jid7z3IGbAKx0T93AdWH4O2qAfYbbs087gu5nrrlcaivepXjahbTWDrUPRQh7
MN28pAmd7zasMo43P9VDnZFrLwGCOiY0kByRyYUk5cJ44VbtQBECWoN5XbR91/cF
jMppjA9XXyYbtA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:15 2025 by rpki-client