Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
File: 0NhScDKV7Pi5cgH5FjEPiPTAirc.mft (raw, json)
Hash identifier: GXEyfy3a7oTiG9Tra1IZjeblJZ0BO13sF3QP76cx0Ro=
Subject key identifier: 4C:EF:45:BF:0F:2D:13:DE:28:AA:0D:8D:1F:83:94:55:FB:42:F5:4E
Authority key identifier: D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
Certificate issuer: /CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Certificate serial: 01987D8B92E5B30A1541B977B2D9F9F18D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 04:02:35 +0000
Manifest this update: Wed 06 Aug 2025 04:02:35 +0000
Manifest next update: Thu 07 Aug 2025 04:02:35 +0000
Files and hashes: 1: 0NhScDKV7Pi5cgH5FjEPiPTAirc.crl (hash: TaVwfTqE1yENZLbpZG2TRQphVxyPR32D0TpYJ8WsScM=)
2: YlrLpRr6jHVjZjhSp57OuuJNoDA.roa (hash: 3sLpE4GcZV46VhUEypK4IVzC6Mp0SDmiK7VScSwFOfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:92:e5:b3:0a:15:41:b9:77:b2:d9:f9:f1:8d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Validity
Not Before: Aug 6 04:02:35 2025 GMT
Not After : Aug 7 04:02:35 2025 GMT
Subject: CN=4cef45bf0f2d13de28aa0d8d1f839455fb42f54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:6e:79:3b:13:70:5b:5f:85:d0:68:cc:27:
ea:bf:d7:9a:f9:c5:8e:32:e8:00:d9:d7:ba:fb:7b:
e1:37:fb:e8:96:9c:0d:3c:7a:09:fe:32:b3:a3:8b:
ea:60:a3:93:cc:1b:af:28:08:90:d8:3b:f3:8b:b4:
cc:11:c8:ca:b5:39:d4:98:2f:1a:72:1b:b2:3c:04:
66:e3:ff:84:6c:f3:e0:05:18:9b:eb:01:67:1b:96:
64:e4:0c:46:80:af:c1:3c:08:da:bf:21:4d:d8:22:
79:98:21:73:d5:c3:f2:1a:45:76:c5:1a:d7:d3:ee:
8a:c2:69:1d:1a:d2:ec:35:38:f0:fa:e7:e9:91:09:
c1:4c:ee:16:7b:7a:dc:fe:82:b7:fb:2c:e4:00:04:
82:0d:27:50:39:e8:32:46:cc:33:b2:b6:ce:63:5f:
50:5a:fb:b6:5a:dd:5b:5b:ac:15:f7:4d:24:1e:e1:
1e:ef:71:7f:3d:13:f8:f4:3e:f9:49:74:8a:20:d6:
14:40:74:60:43:0d:72:c7:32:63:58:6a:6e:90:6c:
b5:1b:58:c2:ad:01:9d:1c:00:cf:ac:fd:69:d1:9c:
a7:55:01:37:d7:cd:6a:45:b0:01:7a:b8:84:94:18:
a6:4c:50:d7:74:75:0b:83:6c:34:f3:02:94:77:76:
95:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EF:45:BF:0F:2D:13:DE:28:AA:0D:8D:1F:83:94:55:FB:42:F5:4E
X509v3 Authority Key Identifier:
keyid:D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b3:39:b6:03:7b:c0:b6:00:1b:b7:8c:f6:15:1a:32:eb:c2:
84:07:c2:03:64:06:ed:85:62:7f:b7:27:8d:39:58:91:1c:46:
86:ca:ba:6b:4f:d0:77:24:32:a4:cc:52:eb:5a:a4:16:ec:fa:
c7:dd:27:ff:4f:60:5c:13:14:02:ad:23:fb:1c:da:7a:3f:bd:
1e:19:17:79:f4:d4:fb:41:58:13:1e:40:01:6a:11:9f:c8:a3:
03:80:c0:a7:24:d4:38:bf:96:96:ed:6a:45:f1:5e:13:8a:93:
b6:1b:03:53:33:dc:de:28:1b:63:0e:5d:28:74:21:1d:bb:3e:
b8:b6:15:fb:b3:d3:c5:4b:03:a6:8a:84:91:f4:83:24:ae:52:
3f:84:fb:fa:b9:1f:21:82:8f:31:a1:84:60:db:98:18:53:02:
2f:e8:92:dd:73:c6:91:33:b5:a3:a0:37:52:d3:fb:b0:47:48:
a0:7c:f4:79:83:e4:f4:1f:2f:ef:75:58:e3:6b:c4:17:32:8d:
64:33:fa:63:77:68:95:8d:a8:1e:6b:18:6c:7f:5c:e1:04:19:
52:a3:68:9a:9f:a4:dc:cf:15:f0:69:b5:49:48:89:bb:f3:6e:
15:6a:25:6e:21:b1:df:45:27:da:a1:29:27:63:28:29:4c:4a:
33:17:95:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9i5LlswoVQbl3stn58Y16MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZDg1MjcwMzI5NWVjZjhiOTcyMDFmOTE2MzEwZjg4ZjRj
MDhhYjcwHhcNMjUwODA2MDQwMjM1WhcNMjUwODA3MDQwMjM1WjAzMTEwLwYDVQQD
Eyg0Y2VmNDViZjBmMmQxM2RlMjhhYTBkOGQxZjgzOTQ1NWZiNDJmNTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv85ueTsTcFtfhdBozCfqv9ea+cWO
MugA2de6+3vhN/volpwNPHoJ/jKzo4vqYKOTzBuvKAiQ2Dvzi7TMEcjKtTnUmC8a
chuyPARm4/+EbPPgBRib6wFnG5Zk5AxGgK/BPAjavyFN2CJ5mCFz1cPyGkV2xRrX
0+6KwmkdGtLsNTjw+ufpkQnBTO4We3rc/oK3+yzkAASCDSdQOegyRswzsrbOY19Q
Wvu2Wt1bW6wV900kHuEe73F/PRP49D75SXSKINYUQHRgQw1yxzJjWGpukGy1G1jC
rQGdHADPrP1p0ZynVQE3181qRbABeriElBimTFDXdHULg2w08wKUd3aVZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzvRb8PLRPeKKoNjR+DlFX7QvVOMB8GA1UdIwQY
MBaAFNDYUnAylez4uXIB+RYxD4j0wIq3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME5oU2NES1Y3UGk1Y2dINUZqRVBpUFRBaXJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lYWY5NzQtNmVmZC00NjMzLWI4NGEt
YThhYWY4ODZjODIwLzEvME5oU2NES1Y3UGk1Y2dINUZqRVBpUFRBaXJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9lYWY5NzQtNmVmZC00NjMzLWI4NGEtYThhYWY4ODZjODIw
LzEvME5oU2NES1Y3UGk1Y2dINUZqRVBpUFRBaXJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbM5tgN7
wLYAG7eM9hUaMuvChAfCA2QG7YVif7cnjTlYkRxGhsq6a0/QdyQypMxS61qkFuz6
x90n/09gXBMUAq0j+xzaej+9HhkXefTU+0FYEx5AAWoRn8ijA4DApyTUOL+Wlu1q
RfFeE4qTthsDUzPc3igbYw5dKHQhHbs+uLYV+7PTxUsDpoqEkfSDJK5SP4T7+rkf
IYKPMaGEYNuYGFMCL+iS3XPGkTO1o6A3UtP7sEdIoHz0eYPk9B8v73VY42vEFzKN
ZDP6Y3dolY2oHmsYbH9c4QQZUqNomp+k3M8V8Gm1SUiJu/NuFWolbiGx30Un2qEp
J2MoKUxKMxeV4Q==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:29:11 2025 by rpki-client