Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.mft
File: NJxIN9k5hA1fbHSqwINm70v-SHQ.mft (raw, json)
Hash identifier: uO4aD8I/YL5jKb9jC8LXYVQWFEn8nJ2LAAPatf+cEvo=
Subject key identifier: 5A:9E:AE:80:F1:9D:A4:FF:BF:49:42:7C:48:D0:9D:8D:ED:CB:47:7F
Authority key identifier: 34:9C:48:37:D9:39:84:0D:5F:6C:74:AA:C0:83:66:EF:4B:FE:48:74
Certificate issuer: /CN=349c4837d939840d5f6c74aac08366ef4bfe4874
Certificate serial: 01988543258A7977929230879BFF2960E951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJxIN9k5hA1fbHSqwINm70v-SHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.mft
Manifest number: 020C
Signing time: Thu 07 Aug 2025 16:00:26 +0000
Manifest this update: Thu 07 Aug 2025 16:00:26 +0000
Manifest next update: Fri 08 Aug 2025 16:00:26 +0000
Files and hashes: 1: NJxIN9k5hA1fbHSqwINm70v-SHQ.crl (hash: 3PGC4FNPt9IAdFfuX8ERJcr2W9qjFF8tZ6k13PveBHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJxIN9k5hA1fbHSqwINm70v-SHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:43:25:8a:79:77:92:92:30:87:9b:ff:29:60:e9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349c4837d939840d5f6c74aac08366ef4bfe4874
Validity
Not Before: Aug 7 16:00:26 2025 GMT
Not After : Aug 8 16:00:26 2025 GMT
Subject: CN=5a9eae80f19da4ffbf49427c48d09d8dedcb477f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ec:ec:ae:fb:9e:23:ba:dd:f5:3c:99:b4:eb:
ab:2b:fe:53:35:e3:27:45:8d:fa:ad:b0:06:59:1d:
aa:64:61:01:71:91:77:ac:ae:53:3a:bc:ac:3c:7d:
d1:3e:57:a2:19:b6:12:7e:a1:da:16:16:f4:be:9b:
a0:74:73:06:d0:59:42:f5:7a:97:ec:cd:d6:ae:11:
e6:9b:a8:d2:e1:7c:d3:49:10:4b:2a:8e:51:a9:31:
9d:32:5f:9b:22:0d:d4:0f:08:8f:61:b6:83:16:7b:
24:61:69:29:30:22:e7:15:03:bb:55:f2:ee:ce:e8:
8d:80:1e:a2:f5:83:6c:af:99:0f:02:37:37:c8:95:
e8:64:01:e0:0c:7e:eb:77:00:ce:a2:53:e8:6c:df:
df:fa:42:68:da:f2:6c:a4:2a:c1:99:1d:a9:20:49:
50:1f:fe:0a:2e:19:98:8c:34:fa:78:5f:49:fa:fd:
36:cd:97:3a:b3:6f:94:ad:bc:89:89:1b:97:51:70:
35:90:b1:df:49:9a:96:5f:37:ed:75:1b:b1:02:9b:
e2:f0:ef:96:f8:86:b2:ec:9f:13:6a:b6:20:dd:ce:
15:91:dd:f7:d4:db:c7:12:9a:24:c5:b7:cb:69:74:
31:fa:22:26:87:ab:92:5b:c2:16:a5:9d:b5:80:61:
bb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9E:AE:80:F1:9D:A4:FF:BF:49:42:7C:48:D0:9D:8D:ED:CB:47:7F
X509v3 Authority Key Identifier:
keyid:34:9C:48:37:D9:39:84:0D:5F:6C:74:AA:C0:83:66:EF:4B:FE:48:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJxIN9k5hA1fbHSqwINm70v-SHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d1:7c:cb:22:48:7f:77:70:15:79:43:22:46:16:8a:a7:10:
67:7e:f3:92:1f:46:79:d1:d3:9f:4e:36:f2:37:7c:7f:4f:96:
03:64:d6:bc:1f:e7:74:2c:f0:6f:30:84:29:40:61:07:a1:e4:
17:5f:94:04:0b:79:b0:c7:ec:3e:36:e9:ce:08:dd:9d:e8:7c:
76:50:ec:c2:2f:15:d4:63:1e:45:b8:29:9d:3c:91:e4:48:4e:
2a:3e:b2:5f:ef:fb:7b:94:19:34:a9:e7:b7:83:98:bf:5a:78:
28:52:ea:9c:bf:a8:36:67:04:c3:01:f7:64:fc:eb:51:bb:40:
36:4c:ee:15:52:d9:03:fe:2c:09:e6:35:01:99:8d:a0:04:f1:
e8:d7:3b:7a:ad:14:ac:a9:b4:87:6e:f8:8f:fb:26:dc:f6:0a:
f3:66:75:3c:96:3a:f6:8c:04:cf:5b:f0:a0:27:1c:75:39:b3:
fa:21:d3:04:df:25:49:46:08:41:d6:24:ab:fe:4b:3f:28:48:
2c:54:25:5e:2f:91:7c:10:a7:63:a6:5e:d3:96:7d:9a:50:b8:
6f:af:5b:e2:64:1e:45:f4:37:a7:7d:ea:99:5a:8b:bf:69:3c:
76:ef:bc:fe:4e:2f:7b:73:85:8a:b3:e8:cf:c1:06:37:15:04:
64:89:24:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiFQyWKeXeSkjCHm/8pYOlRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWM0ODM3ZDkzOTg0MGQ1ZjZjNzRhYWMwODM2NmVmNGJm
ZTQ4NzQwHhcNMjUwODA3MTYwMDI2WhcNMjUwODA4MTYwMDI2WjAzMTEwLwYDVQQD
Eyg1YTllYWU4MGYxOWRhNGZmYmY0OTQyN2M0OGQwOWQ4ZGVkY2I0NzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+zsrvueI7rd9TyZtOurK/5TNeMn
RY36rbAGWR2qZGEBcZF3rK5TOrysPH3RPleiGbYSfqHaFhb0vpugdHMG0FlC9XqX
7M3WrhHmm6jS4XzTSRBLKo5RqTGdMl+bIg3UDwiPYbaDFnskYWkpMCLnFQO7VfLu
zuiNgB6i9YNsr5kPAjc3yJXoZAHgDH7rdwDOolPobN/f+kJo2vJspCrBmR2pIElQ
H/4KLhmYjDT6eF9J+v02zZc6s2+UrbyJiRuXUXA1kLHfSZqWXzftdRuxApvi8O+W
+Iay7J8TarYg3c4Vkd331NvHEpokxbfLaXQx+iImh6uSW8IWpZ21gGG7YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqeroDxnaT/v0lCfEjQnY3ty0d/MB8GA1UdIwQY
MBaAFDScSDfZOYQNX2x0qsCDZu9L/kh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp4SU45azVoQTFmYkhTcXdJTm03MHYtU0hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hZmQ3MWItMDI2OC00NDA5LWEzODMt
NTg0YTc2Mzk5NDE0LzEvTkp4SU45azVoQTFmYkhTcXdJTm03MHYtU0hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9hZmQ3MWItMDI2OC00NDA5LWEzODMtNTg0YTc2Mzk5NDE0
LzEvTkp4SU45azVoQTFmYkhTcXdJTm03MHYtU0hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtF8yyJI
f3dwFXlDIkYWiqcQZ37zkh9GedHTn0428jd8f0+WA2TWvB/ndCzwbzCEKUBhB6Hk
F1+UBAt5sMfsPjbpzgjdneh8dlDswi8V1GMeRbgpnTyR5EhOKj6yX+/7e5QZNKnn
t4OYv1p4KFLqnL+oNmcEwwH3ZPzrUbtANkzuFVLZA/4sCeY1AZmNoATx6Nc7eq0U
rKm0h274j/sm3PYK82Z1PJY69owEz1vwoCccdTmz+iHTBN8lSUYIQdYkq/5LPyhI
LFQlXi+RfBCnY6Ze05Z9mlC4b69b4mQeRfQ3p33qmVqLv2k8du+8/k4ve3OFirPo
z8EGNxUEZIkkoQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:50:11 2025 by rpki-client