
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
File: NY82t7AwW9n_68U3oadWt04E1eQ.mft (raw, json)
Hash identifier: L16hbJqxKbV8Jftqlm0sNjh5u88gELyIOKctzSF66PI=
Subject key identifier: D1:ED:7B:CD:AF:59:E5:C5:87:92:CF:B5:65:94:7F:CA:0F:9D:FD:7F
Authority key identifier: 35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
Certificate issuer: /CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Certificate serial: 01987CAE07A29DB939FCF04E8D66AABDBEFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
Manifest number: 0655
Signing time: Wed 06 Aug 2025 00:00:36 +0000
Manifest this update: Wed 06 Aug 2025 00:00:36 +0000
Manifest next update: Thu 07 Aug 2025 00:00:36 +0000
Files and hashes: 1: 8ID8kgv1Se1rg2FGJCKuXeDTZdw.roa (hash: mtFporZGWALvI1bFzQb9Xpsj858BjBk/glbS/pmBQi4=)
2: NY82t7AwW9n_68U3oadWt04E1eQ.crl (hash: 7prKTuUUE8kvnSGMhlo1UeGRLWVp0wwadINAYgyYfrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:07:a2:9d:b9:39:fc:f0:4e:8d:66:aa:bd:be:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Validity
Not Before: Aug 6 00:00:36 2025 GMT
Not After : Aug 7 00:00:36 2025 GMT
Subject: CN=d1ed7bcdaf59e5c58792cfb565947fca0f9dfd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:04:5b:eb:47:dd:4c:72:11:72:2d:08:6e:e7:
12:51:32:69:9b:b4:c3:6c:f0:a3:31:d4:6e:72:ec:
7c:06:18:b7:b3:75:fd:67:8b:b7:7b:15:7d:be:c2:
0e:28:fd:b1:75:b4:55:54:f6:4f:29:5d:ca:95:d3:
e9:f9:fa:94:52:08:52:75:c6:f2:57:22:29:43:21:
ad:d9:db:fd:79:61:61:31:91:ba:f9:e9:62:c7:c0:
49:a2:18:60:f0:f7:46:5d:53:69:7a:e3:7e:ad:47:
01:8f:e5:b7:6c:58:71:9f:fd:8d:86:37:9c:e1:c7:
74:fc:01:bf:ea:3d:8e:c5:bd:b2:97:fe:7a:f6:eb:
53:c5:41:b7:21:af:49:4d:27:ac:39:c4:19:c6:36:
5d:81:11:66:c6:90:d6:e3:b0:32:f9:8b:a9:bf:96:
61:f9:34:51:36:41:84:17:87:42:19:61:2a:8d:7c:
e3:06:55:84:b9:91:e6:ca:11:fb:b1:26:98:f7:08:
09:31:b1:e1:05:22:49:5e:1a:46:e4:f6:a0:2c:f3:
65:f9:7c:34:0b:37:ad:2d:a5:4d:21:a1:94:69:67:
6b:a8:38:a6:bd:38:64:e8:ad:d1:fb:25:bc:b2:cb:
a3:34:3b:20:9a:c3:b1:07:e7:d0:c9:10:d2:37:21:
34:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:ED:7B:CD:AF:59:E5:C5:87:92:CF:B5:65:94:7F:CA:0F:9D:FD:7F
X509v3 Authority Key Identifier:
keyid:35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8e:eb:5e:d8:a8:33:29:c1:c9:ef:6d:85:ce:93:e3:4c:be:
7a:e7:63:25:05:0a:17:a6:3c:c4:ee:6c:6a:95:67:da:8b:73:
28:2f:30:c9:d1:cf:18:64:41:9a:5e:b8:61:55:20:a4:c1:d5:
06:c3:fd:35:4a:77:e4:41:ab:1f:aa:30:07:09:6a:6c:0a:a5:
5c:fa:91:63:36:90:cc:fc:51:7c:2a:49:78:01:b9:cc:9f:bc:
61:7e:e4:cb:fa:3d:1e:58:10:eb:e2:48:46:15:dc:c1:a2:7a:
19:42:a2:37:f3:f4:d2:08:17:66:04:a3:69:21:0f:a9:ba:1c:
76:92:02:65:97:fe:f0:22:35:07:27:41:7a:6a:7d:4a:88:b8:
44:84:6e:a8:45:3e:a5:58:b9:25:c2:fd:ee:b7:47:3f:bd:30:
cf:af:0c:9b:d0:fd:33:99:3f:9e:0a:a5:7f:77:74:bc:44:8b:
5f:cd:35:0f:95:98:9a:19:b7:1a:ab:9c:d4:84:f4:41:81:e9:
5c:79:fb:f6:b5:66:51:80:aa:ff:1b:2c:0b:80:42:91:76:18:
3c:d1:23:2e:c0:55:1c:5f:de:2c:ca:29:e0:2e:ea:87:53:76:
3e:f0:11:16:f8:9b:35:6e:63:b0:15:53:50:e7:0d:a5:15:44:
33:02:bb:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8rgeinbk5/PBOjWaqvb7+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OGYzNmI3YjAzMDViZDlmZmViYzUzN2ExYTc1NmI3NGUw
NGQ1ZTQwHhcNMjUwODA2MDAwMDM2WhcNMjUwODA3MDAwMDM2WjAzMTEwLwYDVQQD
EyhkMWVkN2JjZGFmNTllNWM1ODc5MmNmYjU2NTk0N2ZjYTBmOWRmZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QRb60fdTHIRci0IbucSUTJpm7TD
bPCjMdRucux8Bhi3s3X9Z4u3exV9vsIOKP2xdbRVVPZPKV3KldPp+fqUUghSdcby
VyIpQyGt2dv9eWFhMZG6+elix8BJohhg8PdGXVNpeuN+rUcBj+W3bFhxn/2Nhjec
4cd0/AG/6j2Oxb2yl/569utTxUG3Ia9JTSesOcQZxjZdgRFmxpDW47Ay+Yupv5Zh
+TRRNkGEF4dCGWEqjXzjBlWEuZHmyhH7sSaY9wgJMbHhBSJJXhpG5PagLPNl+Xw0
CzetLaVNIaGUaWdrqDimvThk6K3R+yW8ssujNDsgmsOxB+fQyRDSNyE0LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHte82vWeXFh5LPtWWUf8oPnf1/MB8GA1UdIwQY
MBaAFDWPNrewMFvZ/+vFN6GnVrdOBNXkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlk4MnQ3QXdXOW5fNjhVM29hZFd0MDRFMWVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC84YzkwNjctY2M2ZC00YzRhLWI2NjEt
MzdkMTU3MTlhMmQwLzEvTlk4MnQ3QXdXOW5fNjhVM29hZFd0MDRFMWVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC84YzkwNjctY2M2ZC00YzRhLWI2NjEtMzdkMTU3MTlhMmQw
LzEvTlk4MnQ3QXdXOW5fNjhVM29hZFd0MDRFMWVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhY7rXtio
MynBye9thc6T40y+eudjJQUKF6Y8xO5sapVn2otzKC8wydHPGGRBml64YVUgpMHV
BsP9NUp35EGrH6owBwlqbAqlXPqRYzaQzPxRfCpJeAG5zJ+8YX7ky/o9HlgQ6+JI
RhXcwaJ6GUKiN/P00ggXZgSjaSEPqbocdpICZZf+8CI1BydBemp9Soi4RIRuqEU+
pVi5JcL97rdHP70wz68Mm9D9M5k/ngqlf3d0vESLX801D5WYmhm3Gquc1IT0QYHp
XHn79rVmUYCq/xssC4BCkXYYPNEjLsBVHF/eLMop4C7qh1N2PvARFvibNW5jsBVT
UOcNpRVEMwK75A==
-----END CERTIFICATE-----
Generated at Wed Aug 6 06:02:16 2025 by rpki-client