Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
File: nbtiWqVb2O81QQr93Sorw1iiXtE.mft (raw, json)
Hash identifier: Vs6sxp2jgXH2nfKqeOJ9vop3GlMft3EvritRO7oqu5o=
Subject key identifier: 0B:85:31:16:1F:1B:C5:E1:F1:DB:E2:1D:65:D8:17:62:ED:EC:63:94
Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
Certificate issuer: /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Certificate serial: 01987A51BFA797956AFE22D0D7A64A3D15D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
Manifest number: 0323
Signing time: Tue 05 Aug 2025 13:00:34 +0000
Manifest this update: Tue 05 Aug 2025 13:00:34 +0000
Manifest next update: Wed 06 Aug 2025 13:00:34 +0000
Files and hashes: 1: F_kIbrNoezU2xST1IGJ7znM97So.roa (hash: SL4bD3bCY+6YeKuV14y0PigmsFs9RgYCxYhDjlPIAW4=)
2: nbtiWqVb2O81QQr93Sorw1iiXtE.crl (hash: xtqiU8lNe1bAvPbC2nzy9bvpOeTyQMij+J04UZ3+nzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:51:bf:a7:97:95:6a:fe:22:d0:d7:a6:4a:3d:15:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Validity
Not Before: Aug 5 13:00:34 2025 GMT
Not After : Aug 6 13:00:34 2025 GMT
Subject: CN=0b8531161f1bc5e1f1dbe21d65d81762edec6394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f3:e9:8e:1f:89:0c:a8:39:e4:13:83:e5:18:
ce:f7:61:51:84:73:e5:02:1b:cd:fe:9f:2d:11:52:
08:d4:f5:42:65:2f:19:18:79:36:76:05:cd:ab:a9:
22:45:c3:40:e3:46:a1:68:6e:2d:df:0c:cd:ad:f1:
e7:69:b9:42:a1:63:56:71:be:3f:56:70:99:e6:d3:
85:9f:fa:69:5d:8d:84:3d:fe:b4:dc:d9:5c:08:f0:
e8:ea:9b:52:b2:df:2d:23:3d:8b:f7:95:27:fa:bd:
53:2e:95:b5:c2:49:3d:ea:b2:2c:c9:d8:26:82:2d:
38:e3:1e:43:fa:a8:32:85:e4:fa:cf:11:b8:1f:38:
d2:b1:db:d2:63:16:54:27:b2:c7:b2:13:bd:2b:f6:
f5:d5:92:e9:6f:02:12:03:34:bf:22:01:78:f2:82:
37:15:3b:82:69:51:93:2e:ef:78:57:84:bf:d8:4c:
35:62:89:fb:e9:95:20:5b:21:bb:9d:ad:93:ee:c7:
c4:20:a8:93:9c:94:17:b5:33:fb:2e:c6:90:7d:f8:
5e:e3:83:62:aa:dc:9c:6f:3c:d3:06:da:84:07:b6:
01:3b:9e:a4:0a:8c:b8:a7:ee:60:e5:50:00:13:7a:
26:25:77:a4:a8:d4:30:ff:e3:5d:f0:d2:bc:20:c2:
eb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:85:31:16:1F:1B:C5:E1:F1:DB:E2:1D:65:D8:17:62:ED:EC:63:94
X509v3 Authority Key Identifier:
keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:8b:26:97:25:9b:31:f1:ff:0f:0c:8f:10:e8:43:c4:32:7f:
21:5d:49:25:db:9e:74:cd:9b:c2:74:1b:e5:c6:ff:05:c6:48:
9c:b9:4e:14:e7:fb:8e:66:8b:f8:26:18:b3:78:cb:46:12:9c:
50:38:46:30:de:dd:1c:44:22:0c:ed:24:b1:ae:00:73:e0:3d:
2d:26:7b:f1:58:00:89:e2:03:57:23:eb:da:b3:ac:35:0e:04:
7d:21:86:54:a2:2a:f5:20:ff:40:16:45:2b:33:7d:83:43:b0:
4c:00:63:ba:53:d1:1c:96:d2:5a:69:53:0a:83:92:d0:bd:87:
15:57:e2:67:7b:4c:b9:82:78:f3:4a:2c:86:f1:6e:a4:59:78:
6e:0f:5e:e4:97:62:48:8a:06:37:f3:50:81:89:a9:b0:ae:62:
2b:51:10:e6:11:fe:de:98:ca:df:8a:f9:1a:0d:db:6d:5b:76:
b7:c1:d9:7e:1f:4a:4f:8b:7b:f0:3d:da:70:f2:28:3a:d2:d5:
59:59:d7:59:42:50:d7:07:d1:e3:67:34:44:54:43:56:bd:e9:
a9:fd:2d:34:bb:13:97:f7:58:73:2b:fe:75:4b:bd:d3:b6:99:
9c:d3:80:2b:81:24:ed:b8:fb:b2:d7:e3:df:ab:a7:6c:01:9b:
61:d6:79:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6Ub+nl5Vq/iLQ16ZKPRXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYmI2MjVhYTU1YmQ4ZWYzNTQxMGFmZGRkMmEyYmMzNThh
MjVlZDEwHhcNMjUwODA1MTMwMDM0WhcNMjUwODA2MTMwMDM0WjAzMTEwLwYDVQQD
EygwYjg1MzExNjFmMWJjNWUxZjFkYmUyMWQ2NWQ4MTc2MmVkZWM2Mzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PPpjh+JDKg55BOD5RjO92FRhHPl
AhvN/p8tEVII1PVCZS8ZGHk2dgXNq6kiRcNA40ahaG4t3wzNrfHnablCoWNWcb4/
VnCZ5tOFn/ppXY2EPf603NlcCPDo6ptSst8tIz2L95Un+r1TLpW1wkk96rIsydgm
gi044x5D+qgyheT6zxG4HzjSsdvSYxZUJ7LHshO9K/b11ZLpbwISAzS/IgF48oI3
FTuCaVGTLu94V4S/2Ew1Yon76ZUgWyG7na2T7sfEIKiTnJQXtTP7LsaQffhe44Ni
qtycbzzTBtqEB7YBO56kCoy4p+5g5VAAE3omJXekqNQw/+Nd8NK8IMLrcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuFMRYfG8Xh8dviHWXYF2Lt7GOUMB8GA1UdIwQY
MBaAFJ27YlqlW9jvNUEK/d0qK8NYol7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmJ0aVdxVmIyTzgxUVFyOTNTb3J3MWlpWHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMzNhMTMtYTU0Yi00NWJiLWIwZDQt
YTQ5YjcyYTFjZmUyLzEvbmJ0aVdxVmIyTzgxUVFyOTNTb3J3MWlpWHRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMzNhMTMtYTU0Yi00NWJiLWIwZDQtYTQ5YjcyYTFjZmUy
LzEvbmJ0aVdxVmIyTzgxUVFyOTNTb3J3MWlpWHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlosmlyWb
MfH/DwyPEOhDxDJ/IV1JJduedM2bwnQb5cb/BcZInLlOFOf7jmaL+CYYs3jLRhKc
UDhGMN7dHEQiDO0ksa4Ac+A9LSZ78VgAieIDVyPr2rOsNQ4EfSGGVKIq9SD/QBZF
KzN9g0OwTABjulPRHJbSWmlTCoOS0L2HFVfiZ3tMuYJ480oshvFupFl4bg9e5Jdi
SIoGN/NQgYmpsK5iK1EQ5hH+3pjK34r5Gg3bbVt2t8HZfh9KT4t78D3acPIoOtLV
WVnXWUJQ1wfR42c0RFRDVr3pqf0tNLsTl/dYcyv+dUu907aZnNOAK4Ek7bj7stfj
36unbAGbYdZ5EQ==
-----END CERTIFICATE-----
Generated at Tue Aug 5 19:58:20 2025 by rpki-client