Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
File: NNsbsppK6oXhnCiS0Mg54vuUXtA.mft (raw, json)
Hash identifier: QzMomEcCEK4Ff4d7Qw+jfUj6jGULsv0xm6zi40uRtCg=
Subject key identifier: DC:96:58:63:BD:7E:E1:E6:CE:83:99:6B:CA:E6:51:CE:E9:48:79:AB
Authority key identifier: 34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
Certificate issuer: /CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Certificate serial: 019893363CA8AAFEBE5F7C2B4E8F62229770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
Manifest number: 0307
Signing time: Sun 10 Aug 2025 09:01:01 +0000
Manifest this update: Sun 10 Aug 2025 09:01:01 +0000
Manifest next update: Mon 11 Aug 2025 09:01:01 +0000
Files and hashes: 1: MxQVcAiuW0p4EDIiEm7q3BWYvP8.roa (hash: JVFsJWGBLPgzxt9uY5l+yySS0Ei3Tn04Hx81eXPjKe4=)
2: NNsbsppK6oXhnCiS0Mg54vuUXtA.crl (hash: LUtA0XUHv70Y7XN7sQRrknFAX0MODtL05c73y8ycGxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:3c:a8:aa:fe:be:5f:7c:2b:4e:8f:62:22:97:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Validity
Not Before: Aug 10 09:01:01 2025 GMT
Not After : Aug 11 09:01:01 2025 GMT
Subject: CN=dc965863bd7ee1e6ce83996bcae651cee94879ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:50:bb:11:90:68:58:be:da:a3:65:8c:8c:
28:2a:8c:e2:fc:db:51:92:2f:8b:7d:b7:46:81:89:
39:93:10:12:05:06:17:0f:62:3d:97:70:13:fb:c9:
96:e5:fa:23:22:59:1b:ca:a3:cb:fd:15:b0:cb:0a:
3f:56:3c:00:9e:a0:86:b1:4f:fb:b6:35:ab:a0:c3:
39:c6:c1:22:7a:a0:f5:44:a7:28:65:40:fd:96:c2:
2a:87:02:26:51:5d:32:a2:78:bb:da:2a:df:a0:34:
d0:7e:34:39:0d:ec:a7:49:f9:7d:61:a6:9f:f5:15:
ef:41:4f:7c:ae:83:cd:98:94:c6:2d:8e:21:d6:ef:
ce:c5:57:41:61:40:b2:4e:09:22:ef:ea:71:c8:24:
08:ee:90:b4:c9:25:cc:49:2f:71:36:4e:ce:07:1e:
2e:94:c1:89:6d:8e:18:9e:2d:9e:3b:c9:08:40:41:
8b:40:45:85:7d:cd:fd:a4:80:73:90:c9:19:e4:cc:
de:70:74:76:67:eb:c8:5c:92:ce:e4:ed:ad:fe:a6:
f5:c2:7b:84:62:e9:af:01:21:11:01:be:79:3d:e5:
07:75:30:ee:ee:5f:8f:87:e1:86:8d:e0:f6:15:e4:
7d:e2:93:aa:7b:71:31:37:87:d2:cc:fa:40:34:5d:
33:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:96:58:63:BD:7E:E1:E6:CE:83:99:6B:CA:E6:51:CE:E9:48:79:AB
X509v3 Authority Key Identifier:
keyid:34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8d:68:27:b4:67:4c:da:75:36:ca:41:6a:3a:ba:bc:89:4d:
0a:8e:75:9b:99:d4:03:67:55:5d:14:86:4f:80:7a:da:a9:b6:
b9:9f:18:60:be:30:92:c0:b3:8d:75:a2:12:39:cd:88:61:a8:
cc:80:e5:0a:79:94:74:90:50:c0:99:1b:a7:bd:72:f9:9d:ff:
cf:88:e1:65:46:60:51:73:e1:10:23:5e:c2:65:28:b3:b3:dc:
10:4a:3c:40:39:ab:79:96:3e:50:14:16:8e:aa:c2:7c:40:79:
c4:81:54:24:93:9b:a0:59:57:20:9f:5e:b2:a0:0a:c2:1d:10:
38:b3:3e:6e:dc:d0:66:5c:9e:9b:02:d7:f3:08:3b:5c:29:d1:
f0:09:4f:62:34:55:b5:22:27:9c:0e:52:e7:f9:ff:5a:cf:04:
e8:6d:8b:cc:02:1f:24:6d:63:8d:4f:6e:3c:6e:67:62:44:3a:
6c:07:cc:72:71:fd:7f:e9:6d:3f:7c:bc:47:08:bd:ac:df:55:
c1:53:4a:4e:d4:29:2f:81:6a:8c:2c:60:0d:3b:da:a1:e6:cc:
de:9c:18:b4:26:fe:5f:8f:84:35:4a:9c:4a:0f:6c:12:47:0f:
51:8d:3b:c4:a0:86:71:f2:5f:73:0a:01:52:e4:af:c1:b3:50:
6e:d5:a4:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTNjyoqv6+X3wrTo9iIpdwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZGIxYmIyOWE0YWVhODVlMTljMjg5MmQwYzgzOWUyZmI5
NDVlZDAwHhcNMjUwODEwMDkwMTAxWhcNMjUwODExMDkwMTAxWjAzMTEwLwYDVQQD
EyhkYzk2NTg2M2JkN2VlMWU2Y2U4Mzk5NmJjYWU2NTFjZWU5NDg3OWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz39QuxGQaFi+2qNljIwoKozi/NtR
ki+LfbdGgYk5kxASBQYXD2I9l3AT+8mW5fojIlkbyqPL/RWwywo/VjwAnqCGsU/7
tjWroMM5xsEieqD1RKcoZUD9lsIqhwImUV0yoni72irfoDTQfjQ5DeynSfl9Yaaf
9RXvQU98roPNmJTGLY4h1u/OxVdBYUCyTgki7+pxyCQI7pC0ySXMSS9xNk7OBx4u
lMGJbY4Yni2eO8kIQEGLQEWFfc39pIBzkMkZ5MzecHR2Z+vIXJLO5O2t/qb1wnuE
YumvASERAb55PeUHdTDu7l+Ph+GGjeD2FeR94pOqe3ExN4fSzPpANF0zpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyWWGO9fuHmzoOZa8rmUc7pSHmrMB8GA1UdIwQY
MBaAFDTbG7KaSuqF4ZwoktDIOeL7lF7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk5zYnNwcEs2b1hobkNpUzBNZzU0dnVVWHRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84ZGI4ZDItNmIxMS00ZDE5LThlOGQt
NTJhMTA0MjViMTM2LzEvTk5zYnNwcEs2b1hobkNpUzBNZzU0dnVVWHRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84ZGI4ZDItNmIxMS00ZDE5LThlOGQtNTJhMTA0MjViMTM2
LzEvTk5zYnNwcEs2b1hobkNpUzBNZzU0dnVVWHRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg41oJ7Rn
TNp1NspBajq6vIlNCo51m5nUA2dVXRSGT4B62qm2uZ8YYL4wksCzjXWiEjnNiGGo
zIDlCnmUdJBQwJkbp71y+Z3/z4jhZUZgUXPhECNewmUos7PcEEo8QDmreZY+UBQW
jqrCfEB5xIFUJJOboFlXIJ9esqAKwh0QOLM+btzQZlyemwLX8wg7XCnR8AlPYjRV
tSInnA5S5/n/Ws8E6G2LzAIfJG1jjU9uPG5nYkQ6bAfMcnH9f+ltP3y8Rwi9rN9V
wVNKTtQpL4FqjCxgDTvaoebM3pwYtCb+X4+ENUqcSg9sEkcPUY07xKCGcfJfcwoB
UuSvwbNQbtWkLg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:52:30 2025 by rpki-client