Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft
File: nTXgMBWeVx-qvTebUsHZoa77FEQ.mft (raw, json)
Hash identifier: Ks9vuBGN2IGBtTC81zL2lGgND9GnwksEcrsoy7ARw1Q=
Subject key identifier: DF:D7:97:52:49:44:46:D6:B3:BC:C9:F7:51:9D:E2:78:BD:83:62:C8
Authority key identifier: 9D:35:E0:30:15:9E:57:1F:AA:BD:37:9B:52:C1:D9:A1:AE:FB:14:44
Certificate issuer: /CN=9d35e030159e571faabd379b52c1d9a1aefb1444
Certificate serial: 019893A3F8033A037124492A3B683BF2C8B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTXgMBWeVx-qvTebUsHZoa77FEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft
Manifest number: B0
Signing time: Sun 10 Aug 2025 11:00:53 +0000
Manifest this update: Sun 10 Aug 2025 11:00:53 +0000
Manifest next update: Mon 11 Aug 2025 11:00:53 +0000
Files and hashes: 1: nTXgMBWeVx-qvTebUsHZoa77FEQ.crl (hash: dBQyAyMATypYUUNKXJtVljLPLsyl4oFff3lCERbTYZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTXgMBWeVx-qvTebUsHZoa77FEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:f8:03:3a:03:71:24:49:2a:3b:68:3b:f2:c8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d35e030159e571faabd379b52c1d9a1aefb1444
Validity
Not Before: Aug 10 11:00:53 2025 GMT
Not After : Aug 11 11:00:53 2025 GMT
Subject: CN=dfd79752494446d6b3bcc9f7519de278bd8362c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:1f:06:a3:85:56:64:23:66:a2:bc:14:37:
33:a3:9d:b6:e1:5a:9c:e4:68:81:4e:f5:78:60:00:
82:5b:e5:62:21:a7:67:7e:46:a5:38:1e:25:df:f3:
83:ac:60:a0:2e:4d:a5:18:00:7b:a5:59:b7:3d:be:
9d:ba:f9:57:37:72:d6:da:b9:5e:fd:90:ab:74:74:
9b:fb:43:4d:62:0b:5d:fd:52:a0:0f:3c:34:a9:d7:
3e:eb:c1:c1:73:9f:46:9b:d3:29:cf:cb:3b:ec:c1:
97:4c:33:8c:ba:e1:2a:af:7b:71:1c:f0:fc:a2:c8:
86:c0:07:10:ec:aa:34:49:8d:8f:e6:de:e6:e6:db:
58:b4:fb:dd:5b:02:02:7c:53:07:9c:69:e8:95:f1:
d2:29:75:0a:8a:c3:31:33:f0:98:39:2a:0b:c2:99:
b7:ab:5a:db:e6:6f:c7:bb:73:5d:73:ad:ae:02:6b:
77:63:c8:78:ae:f3:89:f4:5c:fc:ad:bc:33:69:c6:
e3:44:82:c5:43:f4:2b:96:0f:2b:7a:77:c5:57:4e:
e8:6c:b8:a3:b2:dc:68:79:45:3b:3c:9c:91:39:f1:
e8:e2:8f:11:f9:68:cd:6d:9a:d1:d1:71:7f:e0:a5:
cb:3d:5a:fd:67:62:d5:3b:b1:42:1f:10:85:a8:07:
15:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D7:97:52:49:44:46:D6:B3:BC:C9:F7:51:9D:E2:78:BD:83:62:C8
X509v3 Authority Key Identifier:
keyid:9D:35:E0:30:15:9E:57:1F:AA:BD:37:9B:52:C1:D9:A1:AE:FB:14:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTXgMBWeVx-qvTebUsHZoa77FEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4e:17:60:13:b3:2a:4c:90:cc:93:f2:0d:3f:63:5a:cc:6d:
3a:a6:67:a5:69:71:1b:f4:49:29:1f:2a:f5:10:71:8a:e1:ee:
00:ec:2c:9b:a2:db:6d:bf:d0:2e:ed:a0:ed:c2:27:8c:87:79:
1f:fe:ea:cd:b5:64:4e:0a:58:18:5c:09:1c:cb:50:43:69:eb:
58:fe:78:10:34:12:db:92:c5:ab:90:8f:af:46:43:37:a2:48:
cd:97:f9:a4:64:6e:be:86:79:a0:1e:78:0e:cd:8b:0f:98:c7:
ee:9f:52:13:1e:55:ab:68:5c:ab:3d:31:d0:8f:31:12:d2:8f:
0f:8e:e3:7d:32:5f:92:17:35:97:19:82:15:48:02:be:5b:f8:
5c:b6:8e:bc:08:70:f2:34:6c:58:78:bb:60:01:95:50:6e:0a:
9c:5f:30:1b:7c:60:0a:ca:0e:e0:ac:47:ba:de:2a:ec:ca:ca:
73:b6:bc:c7:48:cf:24:03:1f:02:a9:34:5d:cb:87:af:00:af:
a4:4d:90:25:84:6b:6e:56:37:3c:c8:e0:d7:64:74:0b:8e:3a:
7f:50:9f:72:42:19:38:84:b2:aa:6e:8b:87:8f:2b:fc:1e:9e:
1a:03:1d:d1:da:9d:ca:5b:14:52:f9:66:b3:39:5c:e8:09:28:
ea:b3:7c:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTo/gDOgNxJEkqO2g78si5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMzVlMDMwMTU5ZTU3MWZhYWJkMzc5YjUyYzFkOWExYWVm
YjE0NDQwHhcNMjUwODEwMTEwMDUzWhcNMjUwODExMTEwMDUzWjAzMTEwLwYDVQQD
EyhkZmQ3OTc1MjQ5NDQ0NmQ2YjNiY2M5Zjc1MTlkZTI3OGJkODM2MmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTgfBqOFVmQjZqK8FDczo5224Vqc
5GiBTvV4YACCW+ViIadnfkalOB4l3/ODrGCgLk2lGAB7pVm3Pb6duvlXN3LW2rle
/ZCrdHSb+0NNYgtd/VKgDzw0qdc+68HBc59Gm9Mpz8s77MGXTDOMuuEqr3txHPD8
osiGwAcQ7Ko0SY2P5t7m5ttYtPvdWwICfFMHnGnolfHSKXUKisMxM/CYOSoLwpm3
q1rb5m/Hu3Ndc62uAmt3Y8h4rvOJ9Fz8rbwzacbjRILFQ/Qrlg8renfFV07obLij
stxoeUU7PJyROfHo4o8R+WjNbZrR0XF/4KXLPVr9Z2LVO7FCHxCFqAcVVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/Xl1JJREbWs7zJ91Gd4ni9g2LIMB8GA1UdIwQY
MBaAFJ014DAVnlcfqr03m1LB2aGu+xREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblRYZ01CV2VWeC1xdlRlYlVzSFpvYTc3RkVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83ZDczMjMtOWU4NC00Zjg3LWI1Zjkt
Mjg2YTgyOGRkN2Q1LzEvblRYZ01CV2VWeC1xdlRlYlVzSFpvYTc3RkVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83ZDczMjMtOWU4NC00Zjg3LWI1ZjktMjg2YTgyOGRkN2Q1
LzEvblRYZ01CV2VWeC1xdlRlYlVzSFpvYTc3RkVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA04XYBOz
KkyQzJPyDT9jWsxtOqZnpWlxG/RJKR8q9RBxiuHuAOwsm6Lbbb/QLu2g7cInjId5
H/7qzbVkTgpYGFwJHMtQQ2nrWP54EDQS25LFq5CPr0ZDN6JIzZf5pGRuvoZ5oB54
Ds2LD5jH7p9SEx5Vq2hcqz0x0I8xEtKPD47jfTJfkhc1lxmCFUgCvlv4XLaOvAhw
8jRsWHi7YAGVUG4KnF8wG3xgCsoO4KxHut4q7MrKc7a8x0jPJAMfAqk0XcuHrwCv
pE2QJYRrblY3PMjg12R0C446f1CfckIZOISyqm6Lh48r/B6eGgMd0dqdylsUUvlm
szlc6Ako6rN8jQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:10:36 2025 by rpki-client