Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.mft
File: NmTkRiopAqUvgm2uOFZXMe_FvdM.mft (raw, json)
Hash identifier: kDmyTXUpGRl5AM0j5Md4z5CbspGDcNVfgWNZ5TJUllo=
Subject key identifier: 43:00:EB:70:95:19:42:FD:DF:E6:33:A2:91:A5:78:76:A3:51:A7:DC
Authority key identifier: 36:64:E4:46:2A:29:02:A5:2F:82:6D:AE:38:56:57:31:EF:C5:BD:D3
Certificate issuer: /CN=3664e4462a2902a52f826dae38565731efc5bdd3
Certificate serial: 019891B54A8E3D3B7E5C26A34F89C43DB64F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmTkRiopAqUvgm2uOFZXMe_FvdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.mft
Manifest number: 1576
Signing time: Sun 10 Aug 2025 02:00:34 +0000
Manifest this update: Sun 10 Aug 2025 02:00:34 +0000
Manifest next update: Mon 11 Aug 2025 02:00:34 +0000
Files and hashes: 1: NmTkRiopAqUvgm2uOFZXMe_FvdM.crl (hash: wYLBqmKe5OBoEOWmPtDFqrX+2NdzcVAe7q4/OPLFoXQ=)
2: bRSiH3Ltu0n345442eKdUINyK3s.roa (hash: WObRy2TpZce8N0K21ZTeL8NwUXrbmFADn/Y+S73z7rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmTkRiopAqUvgm2uOFZXMe_FvdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:b5:4a:8e:3d:3b:7e:5c:26:a3:4f:89:c4:3d:b6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3664e4462a2902a52f826dae38565731efc5bdd3
Validity
Not Before: Aug 10 02:00:34 2025 GMT
Not After : Aug 11 02:00:34 2025 GMT
Subject: CN=4300eb70951942fddfe633a291a57876a351a7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9f:77:0f:fb:0d:92:c6:da:b8:9c:31:2f:b3:
45:74:f1:fe:43:2b:ed:d0:b1:ca:59:1a:1c:e0:38:
b8:db:e8:61:bd:a2:1c:fa:51:d6:1d:f2:4f:6f:63:
0f:4f:d5:26:0d:94:26:c4:3e:90:23:e2:6f:a3:68:
4d:8c:95:4f:87:d2:bb:ba:d4:e0:59:0b:81:b5:8e:
b1:da:52:21:b1:1b:92:69:b7:5a:73:46:74:3f:a5:
c2:10:d2:8a:c1:e4:27:ac:8a:6c:5f:8b:b2:17:c7:
23:27:92:ff:13:06:e6:0d:ff:0f:d8:3e:1a:3e:46:
dd:47:d4:07:4a:6e:1e:00:54:a7:29:bc:96:ed:e3:
85:6c:88:44:85:6a:65:80:77:56:9f:fe:67:f4:b5:
cf:3c:8f:f5:32:71:10:81:0f:b2:15:5e:9f:06:68:
0b:b3:8e:b0:17:cc:00:ef:e2:02:90:0c:5d:98:94:
f4:52:53:13:1a:03:62:1d:42:f8:49:5c:b7:20:1e:
07:55:10:c9:c8:10:6f:3e:1e:05:72:05:89:ff:3f:
33:36:b2:6b:f7:4b:9a:63:f1:c0:4c:0a:5b:de:66:
39:c2:dd:f7:15:38:80:19:fb:8b:55:4f:2f:9e:f1:
cf:ae:ec:06:ff:4c:8e:34:39:8a:ef:84:5c:2b:c8:
46:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:00:EB:70:95:19:42:FD:DF:E6:33:A2:91:A5:78:76:A3:51:A7:DC
X509v3 Authority Key Identifier:
keyid:36:64:E4:46:2A:29:02:A5:2F:82:6D:AE:38:56:57:31:EF:C5:BD:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmTkRiopAqUvgm2uOFZXMe_FvdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e2:d3:d5:bd:27:d3:58:38:dc:d4:82:67:a2:ae:73:5d:37:
81:f6:12:fa:cb:c5:b1:fb:c8:ca:cc:58:3b:29:aa:e5:1a:0d:
0a:46:28:41:85:9d:7e:34:1a:20:b5:65:78:ad:dd:4d:23:e1:
4f:16:12:59:d6:f4:12:0f:32:29:de:cf:63:f9:5f:d6:1a:7b:
88:94:3e:ae:29:93:82:c1:96:ed:17:26:ba:29:49:7e:ea:39:
41:f8:23:7c:49:5b:f8:d0:c0:71:40:88:89:2c:6c:1f:f8:fe:
e1:7c:40:30:22:8a:bf:29:fe:cf:7a:01:55:eb:74:60:db:8d:
1f:77:da:51:c7:7a:6a:8b:58:39:a8:d5:61:47:b1:6e:7d:eb:
01:75:63:3b:33:86:0d:ce:47:25:92:59:c9:9f:24:a6:aa:48:
58:ff:e3:50:1b:87:58:72:ba:98:49:3c:58:41:24:58:4f:a5:
ce:a0:08:a9:5f:23:92:f7:7b:f7:9c:b0:bd:10:10:24:0e:e9:
16:9f:18:c8:58:ff:5e:b9:af:b6:d2:da:8c:5f:17:02:be:fe:
cb:24:ac:6d:5a:ae:01:c3:43:bd:95:69:e7:6d:25:69:32:19:
4a:3b:8b:5e:f3:88:4f:73:01:81:03:ef:de:ad:d3:dd:80:40:
70:c8:65:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiRtUqOPTt+XCajT4nEPbZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NjRlNDQ2MmEyOTAyYTUyZjgyNmRhZTM4NTY1NzMxZWZj
NWJkZDMwHhcNMjUwODEwMDIwMDM0WhcNMjUwODExMDIwMDM0WjAzMTEwLwYDVQQD
Eyg0MzAwZWI3MDk1MTk0MmZkZGZlNjMzYTI5MWE1Nzg3NmEzNTFhN2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1593D/sNksbauJwxL7NFdPH+Qyvt
0LHKWRoc4Di42+hhvaIc+lHWHfJPb2MPT9UmDZQmxD6QI+Jvo2hNjJVPh9K7utTg
WQuBtY6x2lIhsRuSabdac0Z0P6XCENKKweQnrIpsX4uyF8cjJ5L/EwbmDf8P2D4a
PkbdR9QHSm4eAFSnKbyW7eOFbIhEhWplgHdWn/5n9LXPPI/1MnEQgQ+yFV6fBmgL
s46wF8wA7+ICkAxdmJT0UlMTGgNiHUL4SVy3IB4HVRDJyBBvPh4FcgWJ/z8zNrJr
90uaY/HATApb3mY5wt33FTiAGfuLVU8vnvHPruwG/0yONDmK74RcK8hG5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMA63CVGUL93+YzopGleHajUafcMB8GA1UdIwQY
MBaAFDZk5EYqKQKlL4JtrjhWVzHvxb3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm1Ua1Jpb3BBcVV2Z20ydU9GWlhNZV9GdmRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9iYTAwODUtMzA2MC00Yzk2LTkwZGEt
YTQ1YjFhNGFjZTU2LzEvTm1Ua1Jpb3BBcVV2Z20ydU9GWlhNZV9GdmRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9iYTAwODUtMzA2MC00Yzk2LTkwZGEtYTQ1YjFhNGFjZTU2
LzEvTm1Ua1Jpb3BBcVV2Z20ydU9GWlhNZV9GdmRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOLT1b0n
01g43NSCZ6Kuc103gfYS+svFsfvIysxYOymq5RoNCkYoQYWdfjQaILVleK3dTSPh
TxYSWdb0Eg8yKd7PY/lf1hp7iJQ+rimTgsGW7RcmuilJfuo5QfgjfElb+NDAcUCI
iSxsH/j+4XxAMCKKvyn+z3oBVet0YNuNH3faUcd6aotYOajVYUexbn3rAXVjOzOG
Dc5HJZJZyZ8kpqpIWP/jUBuHWHK6mEk8WEEkWE+lzqAIqV8jkvd795ywvRAQJA7p
Fp8YyFj/XrmvttLajF8XAr7+yySsbVquAcNDvZVp520laTIZSjuLXvOIT3MBgQPv
3q3T3YBAcMhlhw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:15:07 2025 by rpki-client