Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
File: NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json)
Hash identifier: 1w7tSbxuwA4OcUn8oUWG1ehqnqvoRe+sjDsXVpZ3MkU=
Subject key identifier: 66:4B:FE:47:54:F7:30:25:D5:70:E8:AB:9E:8C:45:2B:C3:46:28:C4
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 0198879FA6B76256D19256DDD54BB0A1CA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
Manifest number: 05F3
Signing time: Fri 08 Aug 2025 03:00:43 +0000
Manifest this update: Fri 08 Aug 2025 03:00:43 +0000
Manifest next update: Sat 09 Aug 2025 03:00:43 +0000
Files and hashes: 1: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: Cnb2ZHnFXuF5ja9MdFivcGQb+qUy3O6svvegUnp2FKs=)
2: bg5bOuuw1jO6ynyy8gmi6MGK7vU.roa (hash: ibYhxEKhbJdN0UQ/s48RBfEhiV9dbycm32Xti2GP31Y=)
3: hzr42e2R_h-LWwgBpSQZacNEqsc.roa (hash: 9mXipkAV76pHGL76kppNcnsru8YUceXMwinc9f3N1VQ=)
4: tL5-Keddv0icrOkLTgT8ryYM2Dk.roa (hash: oDOl9ZfQxy4MI0oXfGazHV5Kou2gL/nj4KWfMXDD32c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:9f:a6:b7:62:56:d1:92:56:dd:d5:4b:b0:a1:ca:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Aug 8 03:00:43 2025 GMT
Not After : Aug 9 03:00:43 2025 GMT
Subject: CN=664bfe4754f73025d570e8ab9e8c452bc34628c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:3f:bc:e5:7a:62:72:65:2b:25:4e:e2:73:
64:df:46:da:fc:64:6c:fb:02:31:d6:40:9f:94:f7:
3c:cd:b2:74:4f:b6:e1:5b:87:cf:63:d8:b5:a5:fc:
28:81:eb:01:43:e7:e7:85:3d:f1:6c:d4:f4:3d:c0:
7b:b8:2e:67:f8:13:fd:9a:ea:e6:38:16:48:d6:ff:
aa:a9:63:d1:2f:c5:55:f4:fd:ec:eb:8c:2e:9d:e4:
43:28:ca:31:6a:0c:09:41:a7:80:3c:ab:d9:4e:04:
9f:47:9d:0d:51:20:20:fe:1c:7a:c1:0b:b4:72:7a:
88:fa:6c:f7:39:d8:1c:d6:a4:8d:05:68:c3:01:de:
5c:1c:02:54:29:74:7a:55:c1:b1:56:db:d2:77:cb:
6f:2f:01:cb:fe:4f:c1:82:aa:6c:9e:e4:6c:8a:70:
31:fa:84:9f:6b:51:60:fd:ea:47:80:33:73:d7:f9:
46:c7:41:6d:a7:8e:58:ce:eb:bb:b7:0b:ad:d4:13:
c1:11:79:e4:89:a6:90:80:56:3e:09:71:62:13:4e:
f7:1a:5a:37:8d:b0:70:68:25:0a:23:18:e9:e3:99:
07:f5:02:88:32:ef:81:40:2d:5e:f1:cd:34:36:6c:
c6:09:3c:1b:da:3c:94:6b:00:01:dd:8c:e9:d8:5d:
6c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4B:FE:47:54:F7:30:25:D5:70:E8:AB:9E:8C:45:2B:C3:46:28:C4
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:94:04:35:81:19:99:da:b7:46:55:b0:15:d0:a9:8c:d7:5c:
db:b6:12:47:3f:3c:2f:c8:84:f5:3c:46:8a:ae:15:94:b0:a2:
9f:ff:f5:0d:d2:0f:38:b1:ac:9b:31:3e:de:dd:73:54:9e:9a:
da:bd:03:19:f3:19:96:19:b2:9b:0a:8d:04:8b:e1:b7:2f:43:
0f:9a:33:85:ac:c1:92:0a:d3:a0:fd:06:78:5c:d2:14:fa:62:
cf:f7:bc:0f:d6:02:17:c7:03:a9:da:95:43:5e:a2:48:5d:a1:
be:c8:d7:a0:45:8f:24:8b:a5:65:cc:7e:22:74:57:1e:66:af:
a5:a2:f2:78:27:2c:0a:bc:94:cd:7d:4d:34:6b:09:78:2a:08:
4e:cb:eb:12:94:9d:5a:4f:11:48:3d:0b:fd:3e:ce:71:25:aa:
55:ca:f5:5b:e3:f3:c7:8d:66:dd:c9:03:da:fd:5e:a9:63:1c:
60:1b:26:c8:6b:4d:1a:38:09:01:f6:50:f2:ea:98:d4:a0:96:
d7:1e:c6:fe:15:42:c9:97:75:31:ca:df:8b:7f:98:ac:da:66:
65:3f:06:04:b0:2a:52:4c:62:3a:32:b1:3e:2d:c4:11:78:0a:
49:b8:ae:d7:c7:3c:6d:5f:38:34:70:4f:34:9c:7e:40:6a:5f:
b5:2c:6b:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiHn6a3YlbRklbd1UuwocqIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTMwMjJkZWRjMWY4ZjAxM2FhNmUzOTBmYTIzYmQyMmYx
ZmUzOTIwHhcNMjUwODA4MDMwMDQzWhcNMjUwODA5MDMwMDQzWjAzMTEwLwYDVQQD
Eyg2NjRiZmU0NzU0ZjczMDI1ZDU3MGU4YWI5ZThjNDUyYmMzNDYyOGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulw/vOV6YnJlKyVO4nNk30ba/GRs
+wIx1kCflPc8zbJ0T7bhW4fPY9i1pfwogesBQ+fnhT3xbNT0PcB7uC5n+BP9murm
OBZI1v+qqWPRL8VV9P3s64wuneRDKMoxagwJQaeAPKvZTgSfR50NUSAg/hx6wQu0
cnqI+mz3Odgc1qSNBWjDAd5cHAJUKXR6VcGxVtvSd8tvLwHL/k/BgqpsnuRsinAx
+oSfa1Fg/epHgDNz1/lGx0Ftp45Yzuu7twut1BPBEXnkiaaQgFY+CXFiE073Glo3
jbBwaCUKIxjp45kH9QKIMu+BQC1e8c00NmzGCTwb2jyUawAB3Yzp2F1s/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZL/kdU9zAl1XDoq56MRSvDRijEMB8GA1UdIwQY
MBaAFDYTAi3twfjwE6puOQ+iO9IvH+OSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhNQ0xlM0ItUEFUcW00NUQ2STcwaThmNDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xZTdmOTYtZTkzNi00MmM4LWFjNjIt
NDA2NjlhZDE5ZmI5LzEvTmhNQ0xlM0ItUEFUcW00NUQ2STcwaThmNDVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8xZTdmOTYtZTkzNi00MmM4LWFjNjItNDA2NjlhZDE5ZmI5
LzEvTmhNQ0xlM0ItUEFUcW00NUQ2STcwaThmNDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq5QENYEZ
mdq3RlWwFdCpjNdc27YSRz88L8iE9TxGiq4VlLCin//1DdIPOLGsmzE+3t1zVJ6a
2r0DGfMZlhmymwqNBIvhty9DD5ozhazBkgrToP0GeFzSFPpiz/e8D9YCF8cDqdqV
Q16iSF2hvsjXoEWPJIulZcx+InRXHmavpaLyeCcsCryUzX1NNGsJeCoITsvrEpSd
Wk8RSD0L/T7OcSWqVcr1W+Pzx41m3ckD2v1eqWMcYBsmyGtNGjgJAfZQ8uqY1KCW
1x7G/hVCyZd1Mcrfi3+YrNpmZT8GBLAqUkxiOjKxPi3EEXgKSbiu18c8bV84NHBP
NJx+QGpftSxryQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:21:41 2025 by rpki-client