Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
File: NNDsesTDkeTsup0KN0kZGxjr-TQ.mft (raw, json)
Hash identifier: fqad7c6QW9ul1LSnS+j0xOPAVtqthJSJ8L+70WV8Uuk=
Subject key identifier: 31:39:64:4A:DF:22:12:38:04:AE:4A:30:57:AC:0E:B3:47:56:D2:F0
Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Certificate serial: 01989E95D468CC5DAF8AD15C0D6560A9BA24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
Manifest number: 0EAF
Signing time: Tue 12 Aug 2025 14:01:15 +0000
Manifest this update: Tue 12 Aug 2025 14:01:15 +0000
Manifest next update: Wed 13 Aug 2025 14:01:15 +0000
Files and hashes: 1: IhSZr0Z9WAryW3beq7rPy6X_4sU.roa (hash: 14IyrHQZmrwmRvkqbCvXFLBTUIcbof5P325HFm3nQa8=)
2: NNDsesTDkeTsup0KN0kZGxjr-TQ.crl (hash: fh8o+lkCMKtFVvbq1bChc9tB2e3iCZjlCkN4YFGFHgE=)
3: Yzl-TsBruLbp6clu7Q2IexOaQIA.roa (hash: h8cj0MpyodNclAF4X/OllC8+HNKuBQ3B2EFgEqM9+5A=)
4: Z_1dKKg5j_ZVIIzCoIHjWYwlm20.roa (hash: jvis9yjIVYHSkVBmx62d0kYrYZu0QAElVmLUpHW0GZM=)
5: fSqRfFQj3Q__dsTUhVMBI1HPSHg.roa (hash: Y+WWgHfgxkTIhIEndSO+xaSkFkDz1wgH6w0m5aWvWfU=)
6: pI3W8C1ZxuPusTptKHP1u0YPtbM.roa (hash: CThv60vq5lrTC7BFI5QFq4GFsEIpVjwpFNsuFKoLpYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:95:d4:68:cc:5d:af:8a:d1:5c:0d:65:60:a9:ba:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Validity
Not Before: Aug 12 14:01:15 2025 GMT
Not After : Aug 13 14:01:15 2025 GMT
Subject: CN=3139644adf22123804ae4a3057ac0eb34756d2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:17:80:03:84:a2:d1:95:a6:8e:3a:bc:0c:
b1:38:55:f3:cf:dd:35:3b:b6:35:10:b7:e1:8f:db:
5f:e0:52:60:90:df:d0:fc:67:ed:af:eb:e8:9f:aa:
32:c6:eb:ee:80:7e:06:ca:b7:40:56:5f:29:52:56:
b3:d1:77:49:7e:ad:88:de:73:23:cd:4e:82:3a:93:
4d:bd:73:34:fa:38:81:94:ef:3e:7b:4f:45:d7:63:
b5:9e:b5:83:a0:f1:63:30:17:d0:52:26:25:38:e5:
6b:ed:6b:78:a0:03:3b:02:d7:6e:73:48:c1:2b:bd:
d4:c7:9e:c3:fc:8d:2d:1f:c9:9d:3e:09:69:b4:3f:
00:b3:8c:54:97:28:ea:cf:ca:36:7b:d6:a7:84:35:
f7:f1:de:ee:3a:21:b0:8e:38:e1:1e:a5:d4:8e:ba:
e2:59:2d:9b:d1:52:13:c6:95:e0:d4:85:e0:56:3e:
ca:64:47:6e:70:24:49:fb:6a:c8:b4:7d:a9:c7:0e:
5e:dd:56:54:ec:15:1a:b6:44:12:62:5e:eb:15:15:
d5:fc:64:85:3c:db:be:bc:e1:9f:38:3a:b8:67:09:
4a:09:e2:f0:37:c8:f2:f7:5f:2b:1f:39:07:7d:42:
04:4d:0a:f8:ea:4f:5e:c8:aa:78:fa:af:55:24:0e:
59:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:39:64:4A:DF:22:12:38:04:AE:4A:30:57:AC:0E:B3:47:56:D2:F0
X509v3 Authority Key Identifier:
keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:45:9f:d1:cb:8d:2d:3e:17:6e:1e:f1:bb:6c:3f:3f:80:ef:
5f:f2:5a:16:23:cd:d4:5c:82:83:41:1b:fe:96:d1:e9:6d:55:
67:ad:87:f5:0d:d8:d1:cf:43:59:ed:70:fc:71:80:7a:df:ec:
7a:d0:5c:b5:a2:f9:3a:ec:4a:11:39:d2:83:0f:b1:53:d0:fa:
14:97:56:96:d2:a0:ff:23:c2:fe:6e:d9:f4:9c:78:c4:b1:a3:
38:b2:c8:20:4e:32:40:2e:2e:98:67:b5:3a:5c:10:0e:55:43:
63:f7:c6:b9:3d:87:a1:a0:96:b3:f5:85:f6:ac:23:8a:f1:64:
ad:df:db:6e:d9:ba:b2:09:12:c4:4e:16:b6:5d:94:eb:6f:98:
7d:fa:44:ea:75:87:2a:72:11:24:5d:96:12:e3:a4:cb:f9:54:
4d:e6:9a:ee:58:bd:ff:47:cf:30:47:b4:18:2f:00:63:04:31:
a9:a0:7d:37:5e:2e:43:90:9b:b3:71:0b:ec:76:49:8e:ed:6d:
08:01:9f:a9:01:d1:72:76:3a:82:fd:ef:9f:ca:77:7d:61:40:
8b:df:86:03:cb:83:91:8b:b6:41:17:d2:03:b5:66:ad:4e:30:
59:dd:a7:18:de:50:b3:b6:64:d4:6d:02:e5:8e:0b:95:89:23:
d2:f7:a0:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZieldRozF2vitFcDWVgqbokMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZDBlYzdhYzRjMzkxZTRlY2JhOWQwYTM3NDkxOTFiMThl
YmY5MzQwHhcNMjUwODEyMTQwMTE1WhcNMjUwODEzMTQwMTE1WjAzMTEwLwYDVQQD
EygzMTM5NjQ0YWRmMjIxMjM4MDRhZTRhMzA1N2FjMGViMzQ3NTZkMmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOwXgAOEotGVpo46vAyxOFXzz901
O7Y1ELfhj9tf4FJgkN/Q/Gftr+von6oyxuvugH4GyrdAVl8pUlaz0XdJfq2I3nMj
zU6COpNNvXM0+jiBlO8+e09F12O1nrWDoPFjMBfQUiYlOOVr7Wt4oAM7Atduc0jB
K73Ux57D/I0tH8mdPglptD8As4xUlyjqz8o2e9anhDX38d7uOiGwjjjhHqXUjrri
WS2b0VITxpXg1IXgVj7KZEducCRJ+2rItH2pxw5e3VZU7BUatkQSYl7rFRXV/GSF
PNu+vOGfODq4ZwlKCeLwN8jy918rHzkHfUIETQr46k9eyKp4+q9VJA5ZpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDE5ZErfIhI4BK5KMFesDrNHVtLwMB8GA1UdIwQY
MBaAFDTQ7HrEw5Hk7LqdCjdJGRsY6/k0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUt
YjdjMjY5NmJhZTUwLzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUtYjdjMjY5NmJhZTUw
LzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEWf0cuN
LT4Xbh7xu2w/P4DvX/JaFiPN1FyCg0Eb/pbR6W1VZ62H9Q3Y0c9DWe1w/HGAet/s
etBctaL5OuxKETnSgw+xU9D6FJdWltKg/yPC/m7Z9Jx4xLGjOLLIIE4yQC4umGe1
OlwQDlVDY/fGuT2HoaCWs/WF9qwjivFkrd/bbtm6sgkSxE4Wtl2U62+YffpE6nWH
KnIRJF2WEuOky/lUTeaa7li9/0fPMEe0GC8AYwQxqaB9N14uQ5Cbs3EL7HZJju1t
CAGfqQHRcnY6gv3vn8p3fWFAi9+GA8uDkYu2QRfSA7VmrU4wWd2nGN5Qs7Zk1G0C
5Y4LlYkj0vegUQ==
-----END CERTIFICATE-----
Generated at Tue Aug 12 22:39:58 2025 by rpki-client