Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
File: NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft (raw, json)
Hash identifier: H6EOSMnIeD1BkOdqgUcMYev9WoUBdjdgH9Ot4MZ1ZOw=
Subject key identifier: B0:F6:74:EF:91:B5:02:70:D9:6E:5C:5E:9D:C3:B1:A1:B7:4A:C2:D1
Authority key identifier: 36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3
Certificate issuer: /CN=36310a959489d1ac5b8796af626e07c3f1c171f3
Certificate serial: 019875D047B13A494555F62BD58F69F8ED08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
Manifest number: 15A8
Signing time: Mon 04 Aug 2025 16:00:40 +0000
Manifest this update: Mon 04 Aug 2025 16:00:40 +0000
Manifest next update: Tue 05 Aug 2025 16:00:40 +0000
Files and hashes: 1: NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl (hash: KWdU2btDJuRNcS042CbiuJqRIjvL2MxJzICWWiK6Ikc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:47:b1:3a:49:45:55:f6:2b:d5:8f:69:f8:ed:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36310a959489d1ac5b8796af626e07c3f1c171f3
Validity
Not Before: Aug 4 16:00:40 2025 GMT
Not After : Aug 5 16:00:40 2025 GMT
Subject: CN=b0f674ef91b50270d96e5c5e9dc3b1a1b74ac2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:87:e6:b8:7e:de:1a:ce:ca:76:a2:2a:4d:
15:33:56:f3:fe:b3:91:33:d7:34:89:63:c6:81:91:
6f:cd:a4:d5:46:38:22:42:bc:73:2b:86:14:d0:a6:
55:47:12:8c:03:97:d4:a5:5c:ff:a5:b5:c9:69:dd:
c2:c2:fd:b1:03:99:12:c8:23:ba:31:66:96:16:85:
14:b8:d2:6e:e3:da:a7:ad:67:1c:c3:a4:ce:1f:ae:
09:8d:25:0b:99:0a:75:ab:24:ff:9b:df:73:57:41:
41:b3:d8:9c:9a:74:27:d2:61:40:72:17:bd:3d:92:
c8:b5:b9:c4:66:0a:f3:df:2f:c9:23:9f:a6:07:1b:
19:30:ea:12:1d:38:4d:9e:b6:df:9a:f0:2b:df:ff:
e0:10:f3:9d:2c:8a:8d:ac:2c:c0:a1:b1:60:30:56:
07:94:06:11:6b:b1:13:12:cf:9b:80:9d:54:a1:b4:
8f:33:4a:8e:6d:c5:91:97:b7:08:8d:f3:fa:27:8b:
40:76:82:37:c5:53:85:61:26:54:76:d6:38:fc:74:
09:2a:28:b1:73:6a:5e:7e:7f:3d:4f:bc:05:1f:49:
01:f9:a6:77:a5:fc:a6:49:2d:ed:2f:02:f1:73:6f:
86:bd:33:03:5d:d6:ce:6c:41:22:97:c3:00:fa:6a:
08:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F6:74:EF:91:B5:02:70:D9:6E:5C:5E:9D:C3:B1:A1:B7:4A:C2:D1
X509v3 Authority Key Identifier:
keyid:36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:af:30:90:4c:d3:81:3d:d1:f3:59:ef:78:d9:40:d0:48:32:
8a:2f:19:58:6f:c7:ff:e5:df:d2:f0:a6:41:2d:7a:f0:59:2a:
a1:a3:38:3a:f9:e2:b7:57:9e:73:61:59:37:6e:48:88:22:1d:
40:92:c6:61:62:61:80:c9:fa:32:a7:98:fd:37:d9:7f:2e:b5:
27:a4:83:db:50:cf:0d:34:f8:b9:69:bb:96:ad:1c:47:68:f6:
08:4f:cf:d0:33:6b:1d:79:2c:21:d3:94:e3:af:fb:78:e2:4a:
51:73:04:c2:84:6e:fb:a7:d2:36:e6:64:ab:83:c8:a8:a2:24:
cb:e2:40:30:fc:cb:41:0c:f1:a1:65:bc:5e:18:81:26:de:be:
f6:83:59:a8:43:38:ec:bf:02:5b:49:f0:1f:c2:49:83:6b:0e:
f0:1b:a2:0e:0e:28:c4:58:e3:a9:6c:aa:1e:f2:cc:8a:2c:ea:
a3:54:f8:15:a6:8e:4a:84:89:26:65:ef:e3:57:9a:40:25:26:
b0:f1:a5:14:41:fa:59:86:9f:33:68:6e:b7:92:f3:2a:3f:98:
ac:4b:7f:19:d9:94:4f:06:bc:5e:b4:1a:28:aa:e4:28:eb:ed:
e4:d4:46:06:9a:a9:c7:b1:86:ab:ec:46:53:9a:47:b8:00:22:
b2:e4:70:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh10EexOklFVfYr1Y9p+O0IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MzEwYTk1OTQ4OWQxYWM1Yjg3OTZhZjYyNmUwN2MzZjFj
MTcxZjMwHhcNMjUwODA0MTYwMDQwWhcNMjUwODA1MTYwMDQwWjAzMTEwLwYDVQQD
EyhiMGY2NzRlZjkxYjUwMjcwZDk2ZTVjNWU5ZGMzYjFhMWI3NGFjMmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsaH5rh+3hrOynaiKk0VM1bz/rOR
M9c0iWPGgZFvzaTVRjgiQrxzK4YU0KZVRxKMA5fUpVz/pbXJad3Cwv2xA5kSyCO6
MWaWFoUUuNJu49qnrWccw6TOH64JjSULmQp1qyT/m99zV0FBs9icmnQn0mFAche9
PZLItbnEZgrz3y/JI5+mBxsZMOoSHThNnrbfmvAr3//gEPOdLIqNrCzAobFgMFYH
lAYRa7ETEs+bgJ1UobSPM0qObcWRl7cIjfP6J4tAdoI3xVOFYSZUdtY4/HQJKiix
c2pefn89T7wFH0kB+aZ3pfymSS3tLwLxc2+GvTMDXdbObEEil8MA+moIJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLD2dO+RtQJw2W5cXp3DsaG3SsLRMB8GA1UdIwQY
MBaAFDYxCpWUidGsW4eWr2JuB8PxwXHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmpFS2xaU0owYXhiaDVhdlltNEh3X0hCY2ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85M2Y2ZGYtYzNmNS00MDEzLWE3ZmMt
YmQ1YzNiYzExY2ZhLzEvTmpFS2xaU0owYXhiaDVhdlltNEh3X0hCY2ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi85M2Y2ZGYtYzNmNS00MDEzLWE3ZmMtYmQ1YzNiYzExY2Zh
LzEvTmpFS2xaU0owYXhiaDVhdlltNEh3X0hCY2ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADK8wkEzT
gT3R81nveNlA0Egyii8ZWG/H/+Xf0vCmQS168FkqoaM4Ovnit1eec2FZN25IiCId
QJLGYWJhgMn6MqeY/TfZfy61J6SD21DPDTT4uWm7lq0cR2j2CE/P0DNrHXksIdOU
46/7eOJKUXMEwoRu+6fSNuZkq4PIqKIky+JAMPzLQQzxoWW8XhiBJt6+9oNZqEM4
7L8CW0nwH8JJg2sO8BuiDg4oxFjjqWyqHvLMiizqo1T4FaaOSoSJJmXv41eaQCUm
sPGlFEH6WYafM2hut5LzKj+YrEt/GdmUTwa8XrQaKKrkKOvt5NRGBpqpx7GGq+xG
U5pHuAAisuRwPA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:15:29 2025 by rpki-client