Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.mft
File: NbdnbT6rzEXogFTIuEBH7ocyvHM.mft (raw, json)
Hash identifier: gvKRrewoRjCSyzf8VBRoqgO5xxJZGgQ2fF8qPWfMLeE=
Subject key identifier: 98:90:29:4C:6D:5F:8E:B8:4F:52:61:76:C2:5A:CA:AE:16:48:86:9C
Authority key identifier: 35:B7:67:6D:3E:AB:CC:45:E8:80:54:C8:B8:40:47:EE:87:32:BC:73
Certificate issuer: /CN=35b7676d3eabcc45e88054c8b84047ee8732bc73
Certificate serial: 01987CAE1C8342C7ECFEF661CCD675D62D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbdnbT6rzEXogFTIuEBH7ocyvHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.mft
Manifest number: 030F
Signing time: Wed 06 Aug 2025 00:00:42 +0000
Manifest this update: Wed 06 Aug 2025 00:00:42 +0000
Manifest next update: Thu 07 Aug 2025 00:00:42 +0000
Files and hashes: 1: NbdnbT6rzEXogFTIuEBH7ocyvHM.crl (hash: TJQOFmLeq3alDs36iDC46mttces1lFcC+lb6rVZoGhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbdnbT6rzEXogFTIuEBH7ocyvHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:1c:83:42:c7:ec:fe:f6:61:cc:d6:75:d6:2d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b7676d3eabcc45e88054c8b84047ee8732bc73
Validity
Not Before: Aug 6 00:00:42 2025 GMT
Not After : Aug 7 00:00:42 2025 GMT
Subject: CN=9890294c6d5f8eb84f526176c25acaae1648869c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a0:68:5d:e9:85:6f:39:20:a8:a6:f8:50:f9:
70:a7:45:ff:a8:27:61:84:58:96:34:c7:37:f7:51:
39:ca:05:33:5b:3c:d5:c0:19:4e:f2:d7:46:a8:8b:
ed:63:cd:ee:59:0e:78:9c:17:1a:ae:3a:b8:7f:51:
e2:ff:30:34:8c:c5:4b:ca:5e:81:be:02:59:52:a8:
47:52:59:a1:5b:7b:26:5b:4e:02:e2:73:cd:49:b3:
49:75:9a:06:a9:75:0b:b3:b7:91:95:2a:21:02:49:
fa:95:91:00:bc:fc:93:13:dd:19:7d:27:93:c8:ed:
36:ce:28:e0:e7:ae:a9:f0:16:a7:48:e3:8a:ed:8d:
72:01:a0:d3:4c:52:f3:6d:ef:38:9f:55:57:03:8a:
e9:2c:33:c3:b0:7a:55:9a:21:47:90:c3:69:94:25:
37:67:b8:1d:f1:0f:e4:35:f0:e5:93:d0:05:84:b5:
e3:90:66:7f:29:2e:e9:1a:ce:ad:d2:9f:4f:23:03:
08:7e:25:1d:a6:25:bf:31:65:87:60:c9:9d:74:09:
9c:88:2b:f1:9f:c5:10:49:bc:a3:eb:b4:37:1f:f5:
dc:6e:14:ef:ff:3f:2d:21:28:e0:0f:33:e2:8e:6d:
d3:08:ff:aa:a7:0d:24:ad:af:54:f4:32:be:40:bc:
ea:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:90:29:4C:6D:5F:8E:B8:4F:52:61:76:C2:5A:CA:AE:16:48:86:9C
X509v3 Authority Key Identifier:
keyid:35:B7:67:6D:3E:AB:CC:45:E8:80:54:C8:B8:40:47:EE:87:32:BC:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbdnbT6rzEXogFTIuEBH7ocyvHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5a:24:3e:ef:e6:d9:90:5c:1d:8d:51:93:a9:76:62:12:3f:
1b:c0:b0:5d:2e:52:27:db:00:00:f3:78:86:29:6c:41:cd:2e:
dc:d6:5c:c2:d4:c2:fb:45:aa:d7:e4:51:03:01:4d:c4:43:db:
0e:fd:8d:85:4d:99:51:56:0a:d9:5f:aa:48:af:f7:34:da:66:
05:cd:7a:10:19:1b:80:da:25:67:31:65:f5:0d:31:c7:39:15:
bd:9b:b1:ed:0c:f8:16:7b:52:a3:df:51:6c:00:fc:32:41:04:
33:77:a9:c8:41:f9:87:91:6d:8d:ae:35:b8:1c:7e:c7:04:99:
5b:b7:b6:32:6b:a8:42:e9:9a:3f:e7:6b:a4:72:91:ec:4c:18:
f6:f2:25:d9:4f:5d:7d:a5:24:17:12:01:54:8a:33:67:d5:2b:
2b:32:24:1f:20:d5:d8:e1:98:dd:82:d1:4d:d8:6d:ce:33:93:
2d:b9:16:fc:ac:16:70:1a:42:c8:6b:15:73:58:1d:f7:d8:6d:
2c:02:eb:f8:34:a3:92:9d:8c:9f:41:b1:c5:15:ae:a7:4c:0a:
69:25:ce:bc:2f:12:d7:d3:05:a9:a6:fe:d7:24:08:a4:97:ed:
27:1f:6f:cd:7b:ff:f0:e0:10:55:2b:f2:1f:f8:3a:2a:86:51:
93:08:ea:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8rhyDQsfs/vZhzNZ11i2LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1Yjc2NzZkM2VhYmNjNDVlODgwNTRjOGI4NDA0N2VlODcz
MmJjNzMwHhcNMjUwODA2MDAwMDQyWhcNMjUwODA3MDAwMDQyWjAzMTEwLwYDVQQD
Eyg5ODkwMjk0YzZkNWY4ZWI4NGY1MjYxNzZjMjVhY2FhZTE2NDg4NjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06BoXemFbzkgqKb4UPlwp0X/qCdh
hFiWNMc391E5ygUzWzzVwBlO8tdGqIvtY83uWQ54nBcarjq4f1Hi/zA0jMVLyl6B
vgJZUqhHUlmhW3smW04C4nPNSbNJdZoGqXULs7eRlSohAkn6lZEAvPyTE90ZfSeT
yO02zijg566p8BanSOOK7Y1yAaDTTFLzbe84n1VXA4rpLDPDsHpVmiFHkMNplCU3
Z7gd8Q/kNfDlk9AFhLXjkGZ/KS7pGs6t0p9PIwMIfiUdpiW/MWWHYMmddAmciCvx
n8UQSbyj67Q3H/XcbhTv/z8tISjgDzPijm3TCP+qpw0kra9U9DK+QLzq2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiQKUxtX464T1JhdsJayq4WSIacMB8GA1UdIwQY
MBaAFDW3Z20+q8xF6IBUyLhAR+6HMrxzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmJkbmJUNnJ6RVhvZ0ZUSXVFQkg3b2N5dkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wYzcxZTgtNmMwOS00ODUwLWE2YzUt
YmUyMDNmMDEzMDRkLzEvTmJkbmJUNnJ6RVhvZ0ZUSXVFQkg3b2N5dkhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8wYzcxZTgtNmMwOS00ODUwLWE2YzUtYmUyMDNmMDEzMDRk
LzEvTmJkbmJUNnJ6RVhvZ0ZUSXVFQkg3b2N5dkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFokPu/m
2ZBcHY1Rk6l2YhI/G8CwXS5SJ9sAAPN4hilsQc0u3NZcwtTC+0Wq1+RRAwFNxEPb
Dv2NhU2ZUVYK2V+qSK/3NNpmBc16EBkbgNolZzFl9Q0xxzkVvZux7Qz4FntSo99R
bAD8MkEEM3epyEH5h5Ftja41uBx+xwSZW7e2MmuoQumaP+drpHKR7EwY9vIl2U9d
faUkFxIBVIozZ9UrKzIkHyDV2OGY3YLRTdhtzjOTLbkW/KwWcBpCyGsVc1gd99ht
LALr+DSjkp2Mn0GxxRWup0wKaSXOvC8S19MFqab+1yQIpJftJx9vzXv/8OAQVSvy
H/g6KoZRkwjqrA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:01:59 2025 by rpki-client