Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
File: Nq6kWA8QexEmjJbqMYko1O11_5M.mft (raw, json)
Hash identifier: gVMJ/6/yWWqDJXlp2EfxIUx2kslYvr22YlHqTiUVtkY=
Subject key identifier: 3A:8D:8C:22:F8:B7:00:59:BB:AA:46:4B:84:DF:CA:7E:42:E1:58:48
Authority key identifier: 36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93
Certificate issuer: /CN=36aea4580f107b11268c96ea318928d4ed75ff93
Certificate serial: 01989600259D62D4D37DA9D019CBCE264F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
Manifest number: 04E0
Signing time: Sun 10 Aug 2025 22:00:48 +0000
Manifest this update: Sun 10 Aug 2025 22:00:48 +0000
Manifest next update: Mon 11 Aug 2025 22:00:48 +0000
Files and hashes: 1: Nq6kWA8QexEmjJbqMYko1O11_5M.crl (hash: uqkdicPX79O8wGjwYiPlPs3I2evCZGji74kiikh1TL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:25:9d:62:d4:d3:7d:a9:d0:19:cb:ce:26:4f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36aea4580f107b11268c96ea318928d4ed75ff93
Validity
Not Before: Aug 10 22:00:48 2025 GMT
Not After : Aug 11 22:00:48 2025 GMT
Subject: CN=3a8d8c22f8b70059bbaa464b84dfca7e42e15848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2d:21:33:6f:eb:7b:b9:47:08:6e:ff:0d:c7:
65:20:75:93:dc:8e:ec:3c:a2:e2:c2:72:e0:26:ed:
d5:d8:d5:6f:c1:1a:33:88:b3:ad:f8:4e:2a:c2:26:
96:27:8b:12:17:6d:59:45:79:81:4c:9f:c4:f0:28:
88:f4:73:90:76:66:ab:9a:ff:a7:47:94:55:f6:fc:
3d:ea:c9:47:a3:83:c7:c8:b5:eb:05:db:ea:8b:44:
d2:8b:f7:21:8e:e0:8f:d0:f4:60:26:41:82:e8:0f:
9c:52:bd:ff:61:73:8e:30:63:22:cb:83:13:40:28:
e6:58:a5:9b:aa:ce:56:94:f7:32:33:48:20:a6:cd:
8c:2f:b7:f7:75:1c:ac:8b:37:2d:a0:52:15:02:44:
ab:fd:72:51:f5:3a:7f:48:f2:48:2a:b3:ef:07:19:
35:06:48:59:bf:45:2a:ba:ff:5c:28:1b:5a:85:fd:
52:a9:7e:01:28:18:b4:f3:aa:c6:6b:9f:db:ea:20:
d8:20:61:a0:fb:e5:93:85:af:cc:52:b9:31:7a:3b:
aa:49:2e:8d:4c:5c:23:62:2f:ed:1b:57:ec:03:0f:
c7:a8:60:b6:1e:33:fe:1c:bd:7f:c6:67:1f:b8:38:
2e:f5:99:95:ac:92:7e:72:bc:db:cb:85:9a:22:81:
60:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8D:8C:22:F8:B7:00:59:BB:AA:46:4B:84:DF:CA:7E:42:E1:58:48
X509v3 Authority Key Identifier:
keyid:36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f9:d3:ec:4f:b8:71:1f:84:c7:5b:cd:80:9d:26:88:76:12:
84:f7:ed:1f:49:09:2e:ad:b1:fd:bd:93:3a:e8:ee:a9:8f:48:
80:57:b2:a5:65:1d:ce:35:61:58:d9:47:11:79:c4:e4:c7:81:
87:d3:d4:d1:9b:da:36:4f:98:01:ee:17:59:19:1e:2c:4d:d4:
bd:07:1f:90:ac:54:23:d2:a0:45:e6:aa:97:5b:ab:66:cb:d8:
3f:c5:7c:98:44:65:a5:7c:2c:9b:82:a3:29:3b:2e:3a:1a:07:
94:95:c5:3a:62:2e:7b:14:69:88:24:e3:03:62:45:d6:e4:20:
3a:02:70:2e:a1:a4:d0:4b:ba:26:a6:23:66:14:8b:e3:f5:71:
66:89:a8:18:c0:82:f1:5b:40:03:9d:b5:83:96:ed:37:ce:39:
a9:1a:18:eb:29:b3:d9:d0:af:c7:80:67:cb:91:30:b0:6f:e0:
94:95:f8:c4:44:d1:05:0c:2a:08:d9:8f:fb:a8:65:76:bf:67:
45:8f:08:7a:4b:d5:f5:6a:bf:15:14:c8:da:07:78:93:22:8e:
ba:02:fe:67:9d:dc:d2:3c:1f:2b:ce:d7:bf:d5:4d:84:fd:14:
c2:fb:7e:36:8f:a1:47:2f:32:14:ae:18:82:77:b4:87:16:4d:
5c:a9:c2:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWACWdYtTTfanQGcvOJk9gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YWVhNDU4MGYxMDdiMTEyNjhjOTZlYTMxODkyOGQ0ZWQ3
NWZmOTMwHhcNMjUwODEwMjIwMDQ4WhcNMjUwODExMjIwMDQ4WjAzMTEwLwYDVQQD
EygzYThkOGMyMmY4YjcwMDU5YmJhYTQ2NGI4NGRmY2E3ZTQyZTE1ODQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9S0hM2/re7lHCG7/DcdlIHWT3I7s
PKLiwnLgJu3V2NVvwRoziLOt+E4qwiaWJ4sSF21ZRXmBTJ/E8CiI9HOQdmarmv+n
R5RV9vw96slHo4PHyLXrBdvqi0TSi/chjuCP0PRgJkGC6A+cUr3/YXOOMGMiy4MT
QCjmWKWbqs5WlPcyM0ggps2ML7f3dRysizctoFIVAkSr/XJR9Tp/SPJIKrPvBxk1
BkhZv0Uquv9cKBtahf1SqX4BKBi086rGa5/b6iDYIGGg++WTha/MUrkxejuqSS6N
TFwjYi/tG1fsAw/HqGC2HjP+HL1/xmcfuDgu9ZmVrJJ+crzby4WaIoFgUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqNjCL4twBZu6pGS4Tfyn5C4VhIMB8GA1UdIwQY
MBaAFDaupFgPEHsRJoyW6jGJKNTtdf+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnE2a1dBOFFleEVtakpicU1Za28xTzExXzVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zMDU5ZGUtYmFmYy00YTRiLTg2YjYt
ZjI4ZDk3MmM4ODA4LzEvTnE2a1dBOFFleEVtakpicU1Za28xTzExXzVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zMDU5ZGUtYmFmYy00YTRiLTg2YjYtZjI4ZDk3MmM4ODA4
LzEvTnE2a1dBOFFleEVtakpicU1Za28xTzExXzVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPnT7E+4
cR+Ex1vNgJ0miHYShPftH0kJLq2x/b2TOujuqY9IgFeypWUdzjVhWNlHEXnE5MeB
h9PU0ZvaNk+YAe4XWRkeLE3UvQcfkKxUI9KgReaql1urZsvYP8V8mERlpXwsm4Kj
KTsuOhoHlJXFOmIuexRpiCTjA2JF1uQgOgJwLqGk0Eu6JqYjZhSL4/VxZomoGMCC
8VtAA521g5btN845qRoY6ymz2dCvx4Bny5EwsG/glJX4xETRBQwqCNmP+6hldr9n
RY8IekvV9Wq/FRTI2gd4kyKOugL+Z53c0jwfK87Xv9VNhP0Uwvt+No+hRy8yFK4Y
gne0hxZNXKnC4g==
-----END CERTIFICATE-----
Generated at Mon Aug 11 06:07:10 2025 by rpki-client