Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
File: NssW5Ez78H6X9vXkSucYqlDQUpE.mft (raw, json)
Hash identifier: 07osDs3jCYiaAuPg8g+HKedmkvqFKFWY0qI8QqmnaWs=
Subject key identifier: 32:5E:3A:C6:5B:B5:17:5B:E5:99:D2:D8:21:F7:F2:17:EC:7B:D7:22
Authority key identifier: 36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
Certificate issuer: /CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Certificate serial: 0198733D72B99EE01D1B473FE2560D3DB6B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 04:01:03 +0000
Manifest this update: Mon 04 Aug 2025 04:01:03 +0000
Manifest next update: Tue 05 Aug 2025 04:01:03 +0000
Files and hashes: 1: L5MQK89fxZaRwM_CqURZbBomtGM.roa (hash: dfoa3Oa+GHxXVfHS0ZcfFlTwLP7no4RhSrEEs8sBD0U=)
2: NssW5Ez78H6X9vXkSucYqlDQUpE.crl (hash: aDy5hgsAYHSHn7MXT1UaJ8ha1CLBCL3C20WxyPiWyHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:72:b9:9e:e0:1d:1b:47:3f:e2:56:0d:3d:b6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Validity
Not Before: Aug 4 04:01:03 2025 GMT
Not After : Aug 5 04:01:03 2025 GMT
Subject: CN=325e3ac65bb5175be599d2d821f7f217ec7bd722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:17:d3:17:ea:ab:4f:b7:62:c4:6c:2b:a4:
a9:ee:03:d9:3b:ce:b0:70:ac:c1:75:48:d3:2f:a0:
65:d9:9c:fb:10:7f:c5:59:9b:60:5e:a6:ff:cf:ae:
c6:01:08:d2:27:fc:9f:9a:6c:cf:fb:3c:84:98:a9:
ed:4a:1e:4f:8b:7b:fa:9c:c8:a5:79:41:f2:27:42:
3e:ff:21:1e:37:fa:a6:d6:46:b4:2a:c7:95:79:2b:
49:df:76:d9:c5:0d:18:28:74:90:b5:54:76:b9:a8:
e5:4e:94:29:49:73:04:64:b3:58:16:84:dd:e1:64:
8e:da:50:a1:96:c2:9d:4a:66:63:55:70:9b:4d:8a:
0b:05:1a:8b:8e:7c:8d:d9:d9:ca:f5:4b:67:e4:a0:
01:8e:92:f8:c2:1e:1e:a4:99:8c:15:64:1a:ef:60:
5f:40:dc:be:2a:47:6f:d1:3a:d6:ba:5b:86:e5:08:
7c:42:e3:79:a4:b3:95:cc:03:c0:2c:ff:de:10:09:
1d:22:b0:be:45:3a:33:9b:11:a5:67:95:9b:5f:86:
fc:39:60:9d:bb:77:eb:f9:cf:0f:5f:1a:21:55:4e:
6e:74:91:d3:61:08:35:c1:68:36:05:9a:67:20:75:
8e:0b:91:0f:48:06:f6:55:fe:0d:fd:6b:e5:af:5b:
ad:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5E:3A:C6:5B:B5:17:5B:E5:99:D2:D8:21:F7:F2:17:EC:7B:D7:22
X509v3 Authority Key Identifier:
keyid:36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:cf:b0:a6:00:8f:bc:91:e1:51:64:7d:3c:15:e2:6c:ae:ee:
0d:08:ee:d0:a3:b8:ad:2c:d3:1f:fb:15:db:1b:6c:d6:b7:2d:
bd:b9:41:1b:2c:d6:19:99:c3:89:9c:c1:52:7f:09:33:70:4e:
b5:6a:34:59:59:a8:c7:e6:27:7f:2c:af:b3:16:15:8e:05:1e:
c4:58:63:4f:9c:84:ce:1a:3c:93:1e:f1:d5:f2:f9:03:9b:36:
52:53:fa:d2:1a:d1:b9:7c:66:c7:59:2b:49:22:18:9d:d9:1d:
7c:b3:7a:58:cd:9c:e3:ad:3d:c0:b6:dc:86:98:25:9d:2e:74:
c9:6b:1d:d6:96:d7:74:7e:89:fa:87:d6:91:e4:97:d5:64:4f:
20:f9:d2:23:ca:aa:d1:9d:ac:eb:32:16:39:b1:f9:3f:06:18:
69:00:1f:b4:59:2d:5e:de:4c:a2:8c:d1:ae:40:7f:6d:16:e2:
ed:89:15:9a:99:17:2f:8d:33:d2:4b:2c:d7:03:dd:f7:4e:fe:
5b:5f:d2:f4:b6:99:be:36:1a:19:aa:70:43:f3:9a:bc:af:d8:
bd:55:18:4e:2a:5e:17:26:4f:04:95:1e:00:cc:f2:4f:00:71:
52:46:fa:9a:d5:c5:f1:ae:b8:d0:52:fd:ad:bc:39:39:c1:8c:
47:5f:cc:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPXK5nuAdG0c/4lYNPbayMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Y2IxNmU0NGNmYmYwN2U5N2Y2ZjVlNDRhZTcxOGFhNTBk
MDUyOTEwHhcNMjUwODA0MDQwMTAzWhcNMjUwODA1MDQwMTAzWjAzMTEwLwYDVQQD
EygzMjVlM2FjNjViYjUxNzViZTU5OWQyZDgyMWY3ZjIxN2VjN2JkNzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc4X0xfqq0+3YsRsK6Sp7gPZO86w
cKzBdUjTL6Bl2Zz7EH/FWZtgXqb/z67GAQjSJ/yfmmzP+zyEmKntSh5Pi3v6nMil
eUHyJ0I+/yEeN/qm1ka0KseVeStJ33bZxQ0YKHSQtVR2uajlTpQpSXMEZLNYFoTd
4WSO2lChlsKdSmZjVXCbTYoLBRqLjnyN2dnK9Utn5KABjpL4wh4epJmMFWQa72Bf
QNy+Kkdv0TrWuluG5Qh8QuN5pLOVzAPALP/eEAkdIrC+RTozmxGlZ5WbX4b8OWCd
u3fr+c8PXxohVU5udJHTYQg1wWg2BZpnIHWOC5EPSAb2Vf4N/Wvlr1utlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJeOsZbtRdb5ZnS2CH38hfse9ciMB8GA1UdIwQY
MBaAFDbLFuRM+/B+l/b15ErnGKpQ0FKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNzVzVFejc4SDZYOXZYa1N1Y1lxbERRVXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jODA0M2UtZWE5NS00ODUxLWEyZmIt
MTBjYmM1OTdhNzFhLzEvTnNzVzVFejc4SDZYOXZYa1N1Y1lxbERRVXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jODA0M2UtZWE5NS00ODUxLWEyZmItMTBjYmM1OTdhNzFh
LzEvTnNzVzVFejc4SDZYOXZYa1N1Y1lxbERRVXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8+wpgCP
vJHhUWR9PBXibK7uDQju0KO4rSzTH/sV2xts1rctvblBGyzWGZnDiZzBUn8JM3BO
tWo0WVmox+YnfyyvsxYVjgUexFhjT5yEzho8kx7x1fL5A5s2UlP60hrRuXxmx1kr
SSIYndkdfLN6WM2c4609wLbchpglnS50yWsd1pbXdH6J+ofWkeSX1WRPIPnSI8qq
0Z2s6zIWObH5PwYYaQAftFktXt5MoozRrkB/bRbi7YkVmpkXL40z0kss1wPd907+
W1/S9LaZvjYaGapwQ/OavK/YvVUYTipeFyZPBJUeAMzyTwBxUkb6mtXF8a640FL9
rbw5OcGMR1/MSA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:02:20 2025 by rpki-client