Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
File: Nb4qqbT7-QcV68yQU0-dLVT32kM.mft (raw, json)
Hash identifier: B/Ju8syNKeRTahCYs1pg7hFwBbMIRI8h/nL4sgyEnjI=
Subject key identifier: BE:DA:E8:00:F1:DB:8F:CB:50:43:EE:7A:F6:4C:FE:33:DC:E8:AB:0D
Authority key identifier: 35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
Certificate issuer: /CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Certificate serial: 01988D33FC87382EF68D9E555403DE3D5531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
Manifest number: 0234
Signing time: Sat 09 Aug 2025 05:00:51 +0000
Manifest this update: Sat 09 Aug 2025 05:00:51 +0000
Manifest next update: Sun 10 Aug 2025 05:00:51 +0000
Files and hashes: 1: Nb4qqbT7-QcV68yQU0-dLVT32kM.crl (hash: j4CDOJPMRDVcfK6GuBFvRjoTE2jNxngnvSAKwh9kTHo=)
2: NepfpGWCX6iiE6umFGKvSmfWR3o.roa (hash: FLwtEJgUjgrIcEp00Qgejhk+RC1p+QNIVoP/IiMZjv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:33:fc:87:38:2e:f6:8d:9e:55:54:03:de:3d:55:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Validity
Not Before: Aug 9 05:00:51 2025 GMT
Not After : Aug 10 05:00:51 2025 GMT
Subject: CN=bedae800f1db8fcb5043ee7af64cfe33dce8ab0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4d:e8:d2:fc:e6:94:25:ff:8a:c7:98:d0:ed:
9e:f4:b8:1b:69:4d:45:64:35:6f:cf:1b:f7:d4:7c:
03:ae:7a:e3:10:0c:e0:25:ea:d7:fd:89:10:a3:f3:
64:09:0d:06:1a:39:51:1d:e2:b2:98:bd:12:7f:be:
43:c5:e2:6f:65:bb:07:62:89:09:7e:db:c5:52:ee:
1f:ee:b0:c2:dd:bb:ce:b4:ea:5d:c2:d0:ba:36:3c:
e9:2b:ab:aa:b9:d2:e6:51:d6:b9:86:ea:95:d5:2a:
7c:f2:c3:11:e9:75:c0:80:c1:73:d4:95:f4:03:5f:
09:76:fa:26:88:1c:fb:34:5a:99:b4:22:44:7e:fa:
65:94:89:0d:02:cc:7c:c0:5c:d5:88:e7:37:19:ed:
e0:02:f9:d1:99:e0:5f:37:f6:13:bc:07:77:23:c9:
27:4f:ee:f6:02:ed:e0:2b:76:4c:12:03:f7:e8:e2:
4c:46:98:72:d4:5a:68:dc:55:fd:6c:58:2b:da:bf:
5b:99:44:d3:ba:03:ab:45:01:ec:19:86:6d:2e:12:
46:2f:d4:24:9f:5d:2c:1f:60:24:20:08:31:ad:e7:
ac:68:9c:1b:04:6c:5f:12:3d:a2:88:81:d2:d0:c7:
7b:b3:9c:ad:ca:cf:e5:69:49:c9:21:b1:ea:a1:8d:
41:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DA:E8:00:F1:DB:8F:CB:50:43:EE:7A:F6:4C:FE:33:DC:E8:AB:0D
X509v3 Authority Key Identifier:
keyid:35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a8:d3:f8:df:36:ec:4d:82:29:8b:3f:b6:93:80:5c:bd:4a:
9a:23:2a:78:85:9e:09:92:2a:64:76:89:c1:3b:92:69:b2:87:
49:9b:01:15:3c:24:74:5c:e5:d2:e2:8b:0b:bc:2b:e2:b1:c0:
1e:3b:ee:1c:59:26:60:9c:bc:ef:4a:e5:7f:18:e4:f1:d5:65:
2e:c7:d2:ab:a6:9b:72:b1:0d:db:c1:28:72:10:85:30:da:35:
24:93:11:df:03:8a:67:f6:eb:27:96:cb:f4:2d:a9:53:e9:39:
70:5a:a3:0c:21:d1:1e:9b:19:62:18:5a:cb:f3:81:0d:72:15:
bd:c0:96:1d:ae:74:a3:dd:6a:16:7f:ae:dc:87:15:3b:25:39:
1d:b4:93:8a:78:33:d5:b0:a6:18:d7:a1:04:e2:38:c2:40:b7:
f2:33:c0:65:47:da:8f:fa:14:f2:01:86:cb:f0:58:ec:e2:b8:
3e:bf:97:3a:a2:81:1e:cf:08:e1:7e:fa:82:93:43:7a:8b:30:
cb:2d:34:13:ce:fd:1e:a5:31:56:99:2d:6f:0c:8a:8f:5c:81:
7f:ef:dd:b6:d2:44:55:55:8c:67:88:27:9a:c5:fa:7a:bb:ac:
5c:0e:92:81:5b:b4:76:06:10:be:c9:d9:6d:a7:34:c4:d6:86:
61:82:06:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNM/yHOC72jZ5VVAPePVUxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1YmUyYWE5YjRmYmY5MDcxNWViY2M5MDUzNGY5ZDJkNTRm
N2RhNDMwHhcNMjUwODA5MDUwMDUxWhcNMjUwODEwMDUwMDUxWjAzMTEwLwYDVQQD
EyhiZWRhZTgwMGYxZGI4ZmNiNTA0M2VlN2FmNjRjZmUzM2RjZThhYjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4E3o0vzmlCX/iseY0O2e9LgbaU1F
ZDVvzxv31HwDrnrjEAzgJerX/YkQo/NkCQ0GGjlRHeKymL0Sf75DxeJvZbsHYokJ
ftvFUu4f7rDC3bvOtOpdwtC6NjzpK6uqudLmUda5huqV1Sp88sMR6XXAgMFz1JX0
A18JdvomiBz7NFqZtCJEfvpllIkNAsx8wFzViOc3Ge3gAvnRmeBfN/YTvAd3I8kn
T+72Au3gK3ZMEgP36OJMRphy1Fpo3FX9bFgr2r9bmUTTugOrRQHsGYZtLhJGL9Qk
n10sH2AkIAgxreesaJwbBGxfEj2iiIHS0Md7s5ytys/laUnJIbHqoY1BHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7a6ADx24/LUEPuevZM/jPc6KsNMB8GA1UdIwQY
MBaAFDW+Kqm0+/kHFevMkFNPnS1U99pDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmI0cXFiVDctUWNWNjh5UVUwLWRMVlQzMmtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni85YTk5NTgtMDlkMC00YTI4LWFlODgt
Y2I5ZjA0YzFlMTU0LzEvTmI0cXFiVDctUWNWNjh5UVUwLWRMVlQzMmtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni85YTk5NTgtMDlkMC00YTI4LWFlODgtY2I5ZjA0YzFlMTU0
LzEvTmI0cXFiVDctUWNWNjh5UVUwLWRMVlQzMmtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgajT+N82
7E2CKYs/tpOAXL1KmiMqeIWeCZIqZHaJwTuSabKHSZsBFTwkdFzl0uKLC7wr4rHA
HjvuHFkmYJy870rlfxjk8dVlLsfSq6abcrEN28EochCFMNo1JJMR3wOKZ/brJ5bL
9C2pU+k5cFqjDCHRHpsZYhhay/OBDXIVvcCWHa50o91qFn+u3IcVOyU5HbSTingz
1bCmGNehBOI4wkC38jPAZUfaj/oU8gGGy/BY7OK4Pr+XOqKBHs8I4X76gpNDeosw
yy00E879HqUxVpktbwyKj1yBf+/dttJEVVWMZ4gnmsX6erusXA6SgVu0dgYQvsnZ
bac0xNaGYYIGzg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:47:38 2025 by rpki-client