Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
File: NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft (raw, json)
Hash identifier: 0rCgDwB0+9O2wxXn3RenWau/O+LCjkhCAOEsdYEDIxQ=
Subject key identifier: 43:F4:BF:EF:81:9D:7B:82:74:3F:BB:CD:14:89:BB:C5:52:32:3B:2A
Authority key identifier: 36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5
Certificate issuer: /CN=36319bcd4747ed5b202bb578acb390d16fc411a5
Certificate serial: 0198D583E891CACCB3554AFA978A8DCAE4E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
Manifest number: 12DC
Signing time: Sat 23 Aug 2025 06:00:48 +0000
Manifest this update: Sat 23 Aug 2025 06:00:48 +0000
Manifest next update: Sun 24 Aug 2025 06:00:48 +0000
Files and hashes: 1: 1-nnyIMUn3fhhCGC-D-gP0F3cqEo.roa (hash: nfA7AP7Kn3mops0IdhqDXV8NM9fBW2I0VcSnl9x1rKI=)
2: NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl (hash: jrf3hotc5L+/vtzaynM+uGD+oIN8jd6cshpaG5xvA+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e8:91:ca:cc:b3:55:4a:fa:97:8a:8d:ca:e4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36319bcd4747ed5b202bb578acb390d16fc411a5
Validity
Not Before: Aug 23 06:00:48 2025 GMT
Not After : Aug 24 06:00:48 2025 GMT
Subject: CN=43f4bfef819d7b82743fbbcd1489bbc552323b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:3a:bd:08:54:af:8d:3c:77:e2:43:41:ca:
a5:f6:5a:9d:27:86:ab:8d:f4:5b:63:a5:3d:8c:f4:
6d:3b:d0:2d:ae:89:0c:75:ec:48:f9:50:b7:28:7d:
0a:bb:94:aa:50:86:53:08:00:53:3e:33:20:b0:84:
42:2d:02:d3:6b:c8:20:17:58:61:0c:09:d7:57:8a:
0b:ab:fd:9a:a2:e6:50:27:de:5d:1b:d8:97:b2:f5:
a1:5b:0e:61:12:b4:39:23:7e:62:c6:7c:b5:4c:f5:
01:29:11:0b:30:8b:65:96:3d:34:6c:0a:86:94:8f:
81:e4:15:75:f4:2c:76:9d:63:37:97:51:b3:96:10:
81:50:45:b9:e1:56:55:b6:84:39:ea:60:ad:d6:77:
10:1b:74:d3:dc:58:21:fe:09:ef:0a:8a:22:6a:a3:
11:bd:07:87:86:02:d7:d1:2a:6c:2e:0d:d3:27:5c:
eb:2e:94:e2:55:cf:3e:79:4c:9e:17:d9:c5:e4:44:
4f:32:d6:4b:d0:17:da:83:e6:c8:ad:dd:e4:80:8b:
50:4d:41:8e:6c:c8:46:8b:18:7f:1e:25:99:ea:01:
43:06:bf:0c:e2:7d:48:d2:cf:21:e7:b2:e6:d0:c2:
20:50:ef:4e:29:c5:c1:96:f1:9b:92:85:c6:08:61:
9e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F4:BF:EF:81:9D:7B:82:74:3F:BB:CD:14:89:BB:C5:52:32:3B:2A
X509v3 Authority Key Identifier:
keyid:36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:80:2b:aa:4f:e0:6e:80:b0:fe:e1:60:1a:f9:61:dc:e1:22:
31:d7:7e:0a:3b:1a:f9:f9:2a:1d:88:27:b9:95:d8:05:7b:0e:
69:32:75:6f:7f:71:6e:70:05:2b:93:31:c0:2d:9e:77:3c:29:
fa:20:7f:59:1e:f5:8a:a3:e4:d4:5c:fa:93:90:d0:9a:83:4e:
1f:48:00:7b:89:17:ab:36:6d:32:b7:fe:22:b5:28:e1:25:63:
cd:f2:19:e3:9f:1b:d7:40:35:ae:8a:55:76:ec:7a:23:e0:5e:
b6:d1:d6:a3:f5:47:68:aa:2f:fe:9c:4b:ac:d4:f6:d0:11:b4:
e6:9e:7b:53:ff:0f:4e:27:d9:d8:b3:35:d7:27:30:4c:c3:76:
f7:fe:81:df:3d:e7:9f:c2:de:03:b2:88:03:05:3b:21:80:82:
18:62:f3:74:0d:69:f2:b3:b2:eb:7e:26:9f:81:22:de:00:4b:
5b:0d:3a:a2:96:05:4e:83:43:49:cb:20:66:32:ff:c2:f3:a8:
84:ca:22:60:4e:0a:62:90:ef:98:3e:5f:cc:fd:7f:5c:80:cc:
9b:e8:66:b8:ce:ff:7b:1a:e6:89:cf:af:61:8d:47:e0:e2:65:
51:ed:5c:35:ab:ce:61:af:9c:9a:c8:fc:ae:97:a7:be:7d:04:
c6:c1:f3:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg+iRysyzVUr6l4qNyuTjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MzE5YmNkNDc0N2VkNWIyMDJiYjU3OGFjYjM5MGQxNmZj
NDExYTUwHhcNMjUwODIzMDYwMDQ4WhcNMjUwODI0MDYwMDQ4WjAzMTEwLwYDVQQD
Eyg0M2Y0YmZlZjgxOWQ3YjgyNzQzZmJiY2QxNDg5YmJjNTUyMzIzYjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4k6vQhUr408d+JDQcql9lqdJ4ar
jfRbY6U9jPRtO9AtrokMdexI+VC3KH0Ku5SqUIZTCABTPjMgsIRCLQLTa8ggF1hh
DAnXV4oLq/2aouZQJ95dG9iXsvWhWw5hErQ5I35ixny1TPUBKRELMItllj00bAqG
lI+B5BV19Cx2nWM3l1GzlhCBUEW54VZVtoQ56mCt1ncQG3TT3Fgh/gnvCooiaqMR
vQeHhgLX0SpsLg3TJ1zrLpTiVc8+eUyeF9nF5ERPMtZL0Bfag+bIrd3kgItQTUGO
bMhGixh/HiWZ6gFDBr8M4n1I0s8h57Lm0MIgUO9OKcXBlvGbkoXGCGGeMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEP0v++BnXuCdD+7zRSJu8VSMjsqMB8GA1UdIwQY
MBaAFDYxm81HR+1bICu1eKyzkNFvxBGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmpHYnpVZEg3VnNnSzdWNHJMT1EwV19FRWFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iYTI0ZDgtZDQ4NC00ZTliLTg3YmEt
MjQ1NWY5ZjUyMTZmLzEvTmpHYnpVZEg3VnNnSzdWNHJMT1EwV19FRWFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iYTI0ZDgtZDQ4NC00ZTliLTg3YmEtMjQ1NWY5ZjUyMTZm
LzEvTmpHYnpVZEg3VnNnSzdWNHJMT1EwV19FRWFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4Arqk/g
boCw/uFgGvlh3OEiMdd+Cjsa+fkqHYgnuZXYBXsOaTJ1b39xbnAFK5MxwC2edzwp
+iB/WR71iqPk1Fz6k5DQmoNOH0gAe4kXqzZtMrf+IrUo4SVjzfIZ458b10A1ropV
dux6I+BettHWo/VHaKov/pxLrNT20BG05p57U/8PTifZ2LM11ycwTMN29/6B3z3n
n8LeA7KIAwU7IYCCGGLzdA1p8rOy634mn4Ei3gBLWw06opYFToNDScsgZjL/wvOo
hMoiYE4KYpDvmD5fzP1/XIDMm+hmuM7/exrmic+vYY1H4OJlUe1cNavOYa+cmsj8
rpenvn0ExsHzjw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:22 2025 by rpki-client