Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
File: nE-xCAvPALb912uv2dUTPF4cPTI.mft (raw, json)
Hash identifier: aOi4kgqqIM9MstKb828PvjyiKm/p1q8Y2f3g9cMJcSU=
Subject key identifier: C0:88:CE:08:15:4F:66:D4:AE:67:3A:EA:72:6B:A9:C2:20:78:4E:43
Authority key identifier: 9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32
Certificate issuer: /CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
Certificate serial: 0198733D40C15A7DE30AB2D3C3FCCAABC143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
Manifest number: 05FD
Signing time: Mon 04 Aug 2025 04:00:50 +0000
Manifest this update: Mon 04 Aug 2025 04:00:50 +0000
Manifest next update: Tue 05 Aug 2025 04:00:50 +0000
Files and hashes: 1: nE-xCAvPALb912uv2dUTPF4cPTI.crl (hash: hwNPpi4ZkgsA4974tZxdd2kPLqyzSkPEsLkFcqvyUzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:40:c1:5a:7d:e3:0a:b2:d3:c3:fc:ca:ab:c1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
Validity
Not Before: Aug 4 04:00:50 2025 GMT
Not After : Aug 5 04:00:50 2025 GMT
Subject: CN=c088ce08154f66d4ae673aea726ba9c220784e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fc:a3:b9:9c:6e:66:36:96:c0:91:80:66:bc:
48:ba:b3:e2:c9:c5:d1:2f:b2:e9:08:cc:cd:2e:30:
ec:f5:fe:36:a3:ef:af:3a:f5:e7:d1:bc:b6:38:19:
5e:2d:23:70:1e:26:55:80:51:8c:9a:ad:1e:93:2f:
6a:ae:d5:6d:93:45:51:c8:9d:02:fe:6e:1f:2a:17:
65:41:73:f4:f1:2f:f9:45:ce:d0:87:b1:fc:11:79:
8b:a0:9b:6e:7c:84:b6:74:7f:7b:68:c9:f9:be:af:
66:24:e7:6a:8e:7f:91:5f:bf:75:9a:58:63:2c:c0:
8a:a9:32:bd:fb:65:2b:d2:f1:10:df:27:93:fc:c6:
b0:26:d4:7b:73:f1:f7:ec:21:b7:72:df:a6:90:5b:
76:1b:11:8e:d1:3a:4f:eb:7c:4b:3f:07:4d:92:8d:
88:76:1e:df:1e:bf:16:53:9c:91:46:5c:16:cc:54:
ad:02:ff:ff:cd:4c:eb:94:8b:98:38:06:db:3a:24:
90:06:f9:2e:e4:03:3c:03:c5:51:51:24:50:92:71:
94:a4:98:89:96:0d:aa:8e:d2:d4:fa:87:08:89:a7:
4d:e2:bc:55:c4:08:fd:c4:56:6a:64:02:7b:87:13:
1b:bf:15:f3:63:15:5e:ae:e3:3e:4c:30:d0:f9:8c:
78:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:88:CE:08:15:4F:66:D4:AE:67:3A:EA:72:6B:A9:C2:20:78:4E:43
X509v3 Authority Key Identifier:
keyid:9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:66:46:d6:19:20:d7:76:79:22:09:eb:5f:57:33:da:43:49:
25:86:da:81:a1:c4:13:4a:38:40:24:14:02:04:3d:3a:82:c3:
a4:80:b3:b2:dd:6d:74:0d:10:1d:b9:c7:35:6c:75:2c:4d:d0:
d8:7b:5c:75:f2:8d:81:4e:9b:c7:dd:58:de:86:80:e3:ff:a2:
a1:c4:8e:e3:48:14:0c:81:84:4f:aa:7e:28:d4:8f:d8:bc:fb:
79:7c:c2:ed:00:fb:31:45:c3:28:53:0a:e2:a8:03:bc:ac:01:
5e:f7:54:ca:be:f5:2c:09:5f:99:39:a2:1c:cd:06:5a:ca:9f:
02:18:60:ce:9c:e8:95:81:a5:eb:25:2c:a4:61:3c:dc:9b:a4:
a0:03:4a:a9:80:6a:86:fa:21:3f:70:28:c0:39:78:63:b1:b5:
0e:03:22:55:20:ed:c9:07:75:46:9c:e6:b2:ca:49:8e:fa:87:
a2:fe:04:90:a6:96:89:85:95:74:80:9c:63:70:a1:5f:71:0c:
4b:72:02:dc:1d:8d:49:8b:5e:10:d7:18:93:59:76:a7:fe:88:
ab:fe:e3:6d:59:3d:90:b9:dc:8e:43:1a:80:c3:2b:58:52:36:
22:46:41:85:75:a2:29:9e:56:fc:4e:fd:23:22:14:91:ef:71:
37:61:d2:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPUDBWn3jCrLTw/zKq8FDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNGZiMTA4MGJjZjAwYjZmZGQ3NmJhZmQ5ZDUxMzNjNWUx
YzNkMzIwHhcNMjUwODA0MDQwMDUwWhcNMjUwODA1MDQwMDUwWjAzMTEwLwYDVQQD
EyhjMDg4Y2UwODE1NGY2NmQ0YWU2NzNhZWE3MjZiYTljMjIwNzg0ZTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPyjuZxuZjaWwJGAZrxIurPiycXR
L7LpCMzNLjDs9f42o++vOvXn0by2OBleLSNwHiZVgFGMmq0eky9qrtVtk0VRyJ0C
/m4fKhdlQXP08S/5Rc7Qh7H8EXmLoJtufIS2dH97aMn5vq9mJOdqjn+RX791mlhj
LMCKqTK9+2Ur0vEQ3yeT/MawJtR7c/H37CG3ct+mkFt2GxGO0TpP63xLPwdNko2I
dh7fHr8WU5yRRlwWzFStAv//zUzrlIuYOAbbOiSQBvku5AM8A8VRUSRQknGUpJiJ
lg2qjtLU+ocIiadN4rxVxAj9xFZqZAJ7hxMbvxXzYxVeruM+TDDQ+Yx43wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCIzggVT2bUrmc66nJrqcIgeE5DMB8GA1UdIwQY
MBaAFJxPsQgLzwC2/ddrr9nVEzxeHD0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkUteENBdlBBTGI5MTJ1djJkVVRQRjRjUFRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85YTM1OWYtNGI3MC00OGMzLWEzOGYt
MjNiN2NlMzRlYmFjLzEvbkUteENBdlBBTGI5MTJ1djJkVVRQRjRjUFRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85YTM1OWYtNGI3MC00OGMzLWEzOGYtMjNiN2NlMzRlYmFj
LzEvbkUteENBdlBBTGI5MTJ1djJkVVRQRjRjUFRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALGZG1hkg
13Z5IgnrX1cz2kNJJYbagaHEE0o4QCQUAgQ9OoLDpICzst1tdA0QHbnHNWx1LE3Q
2HtcdfKNgU6bx91Y3oaA4/+iocSO40gUDIGET6p+KNSP2Lz7eXzC7QD7MUXDKFMK
4qgDvKwBXvdUyr71LAlfmTmiHM0GWsqfAhhgzpzolYGl6yUspGE83JukoANKqYBq
hvohP3AowDl4Y7G1DgMiVSDtyQd1RpzmsspJjvqHov4EkKaWiYWVdICcY3ChX3EM
S3IC3B2NSYteENcYk1l2p/6Iq/7jbVk9kLncjkMagMMrWFI2IkZBhXWiKZ5W/E79
IyIUke9xN2HSaA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:04 2025 by rpki-client