
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft
File: Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft (raw, json)
Hash identifier: MI6bQKqvr0fjw2jC4iFGud9JOVENdXjoVLE7piFlpjU=
Subject key identifier: 3F:D8:BD:8F:A8:60:87:BF:4B:33:78:73:80:02:53:B8:44:5E:88:42
Authority key identifier: 36:3E:14:53:87:ED:A5:B0:8A:A3:00:D6:3B:4F:C3:5E:59:83:64:FD
Certificate issuer: /CN=363e145387eda5b08aa300d63b4fc35e598364fd
Certificate serial: 0198744FF242A12C4A371096BB18B565FE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj4UU4ftpbCKowDWO0_DXlmDZP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft
Manifest number: 0B4F
Signing time: Mon 04 Aug 2025 09:00:53 +0000
Manifest this update: Mon 04 Aug 2025 09:00:53 +0000
Manifest next update: Tue 05 Aug 2025 09:00:53 +0000
Files and hashes: 1: Nj4UU4ftpbCKowDWO0_DXlmDZP0.crl (hash: u4wEqHjzVcIKKQP15dJVYFK2d6Ms0KTZEv2ATxOKvLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj4UU4ftpbCKowDWO0_DXlmDZP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:f2:42:a1:2c:4a:37:10:96:bb:18:b5:65:fe:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363e145387eda5b08aa300d63b4fc35e598364fd
Validity
Not Before: Aug 4 09:00:53 2025 GMT
Not After : Aug 5 09:00:53 2025 GMT
Subject: CN=3fd8bd8fa86087bf4b337873800253b8445e8842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f8:d2:2c:ff:a3:65:f0:34:f4:8d:14:31:83:
3c:e7:c7:59:9b:13:d7:98:c8:c5:0f:3a:90:5b:aa:
8c:be:51:aa:2f:84:18:c9:2e:0a:32:cb:d3:02:da:
8a:1a:16:31:18:09:c7:23:e6:e5:83:1f:21:56:ef:
87:67:ea:f7:3d:d7:75:f9:e1:4d:49:ed:0a:dc:7f:
45:44:42:29:a8:e6:1c:5c:9d:73:d0:71:1b:3f:58:
10:2e:66:90:21:b6:d3:67:25:b3:05:36:66:c9:18:
13:8a:38:c6:b0:9e:11:b6:c3:ce:4e:ca:2a:78:f1:
e2:eb:78:28:d2:5d:27:17:1d:1a:56:26:a4:89:ff:
93:63:46:cb:5c:bb:69:ce:d1:2c:a4:03:50:ff:ee:
06:cc:ba:f7:6f:2e:c7:f2:69:24:31:e7:9b:72:10:
aa:6c:2c:61:12:ee:6a:e1:3b:de:b8:13:48:73:ba:
79:10:17:c4:c9:24:3d:5e:12:f3:19:e1:7d:ea:52:
e0:7a:d0:03:9c:31:b2:37:a5:88:39:d4:b2:cd:c4:
a6:a0:15:97:f8:f5:ab:f5:ea:50:8c:72:00:7e:5f:
f3:de:e1:3e:6f:3a:21:a0:2a:5b:c7:3c:e1:ce:23:
21:fe:51:c5:fe:ab:97:db:84:9e:75:dd:48:0a:55:
e9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D8:BD:8F:A8:60:87:BF:4B:33:78:73:80:02:53:B8:44:5E:88:42
X509v3 Authority Key Identifier:
keyid:36:3E:14:53:87:ED:A5:B0:8A:A3:00:D6:3B:4F:C3:5E:59:83:64:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj4UU4ftpbCKowDWO0_DXlmDZP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:95:05:74:ce:56:67:00:c7:72:34:49:f2:be:f9:99:cb:41:
92:b0:b6:dd:42:82:3c:44:da:16:e7:44:17:a3:45:fa:3f:27:
3a:4c:92:36:d8:a5:d8:59:9b:cc:97:ed:a8:e4:db:6e:b6:30:
39:8d:f2:17:8a:a3:b7:ab:7a:f0:ba:e7:53:42:a8:75:ab:49:
b0:a2:57:3b:55:9d:b1:07:84:14:4d:31:9d:6f:77:18:f5:b7:
03:81:25:b9:8d:17:7e:94:6a:4d:2d:f4:9e:ba:3b:25:d2:fc:
fd:89:2b:5a:96:5c:ba:2d:37:fa:fe:a7:a7:8b:c5:06:f8:07:
20:ea:a5:79:13:5f:06:b0:90:28:4e:c6:15:0f:9e:74:1a:1d:
09:14:bd:c8:99:f6:3e:68:50:5c:60:0c:85:d0:e5:c3:3d:f5:
91:a3:3a:61:7f:9c:54:63:ad:92:5b:5a:72:46:71:50:3c:5b:
48:36:7e:6a:00:0f:ca:e6:e0:cb:05:95:52:8b:6b:99:bd:5f:
64:fb:55:e6:c6:79:58:2c:a8:ef:8c:01:f8:ca:7c:49:95:ea:
88:07:65:ff:97:cb:95:f1:8f:60:bd:c4:35:e6:ce:80:db:0e:
ba:f0:20:92:d0:8f:3f:b9:1e:a1:d1:c2:75:9f:0f:52:fe:10:
9d:cc:1a:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0T/JCoSxKNxCWuxi1Zf4TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2M2UxNDUzODdlZGE1YjA4YWEzMDBkNjNiNGZjMzVlNTk4
MzY0ZmQwHhcNMjUwODA0MDkwMDUzWhcNMjUwODA1MDkwMDUzWjAzMTEwLwYDVQQD
EygzZmQ4YmQ4ZmE4NjA4N2JmNGIzMzc4NzM4MDAyNTNiODQ0NWU4ODQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/jSLP+jZfA09I0UMYM858dZmxPX
mMjFDzqQW6qMvlGqL4QYyS4KMsvTAtqKGhYxGAnHI+blgx8hVu+HZ+r3Pdd1+eFN
Se0K3H9FREIpqOYcXJ1z0HEbP1gQLmaQIbbTZyWzBTZmyRgTijjGsJ4RtsPOTsoq
ePHi63go0l0nFx0aViakif+TY0bLXLtpztEspANQ/+4GzLr3by7H8mkkMeebchCq
bCxhEu5q4TveuBNIc7p5EBfEySQ9XhLzGeF96lLgetADnDGyN6WIOdSyzcSmoBWX
+PWr9epQjHIAfl/z3uE+bzohoCpbxzzhziMh/lHF/quX24Sedd1IClXpOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/YvY+oYIe/SzN4c4ACU7hEXohCMB8GA1UdIwQY
MBaAFDY+FFOH7aWwiqMA1jtPw15Zg2T9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmo0VVU0ZnRwYkNLb3dEV08wX0RYbG1EWlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC84M2FmYTAtNjRkMi00YzFmLWFhMTgt
ZWMzZDAwZTMzYmNhLzEvTmo0VVU0ZnRwYkNLb3dEV08wX0RYbG1EWlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC84M2FmYTAtNjRkMi00YzFmLWFhMTgtZWMzZDAwZTMzYmNh
LzEvTmo0VVU0ZnRwYkNLb3dEV08wX0RYbG1EWlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpUFdM5W
ZwDHcjRJ8r75mctBkrC23UKCPETaFudEF6NF+j8nOkySNtil2FmbzJftqOTbbrYw
OY3yF4qjt6t68LrnU0KodatJsKJXO1WdsQeEFE0xnW93GPW3A4EluY0XfpRqTS30
nro7JdL8/YkrWpZcui03+v6np4vFBvgHIOqleRNfBrCQKE7GFQ+edBodCRS9yJn2
PmhQXGAMhdDlwz31kaM6YX+cVGOtkltackZxUDxbSDZ+agAPyubgywWVUotrmb1f
ZPtV5sZ5WCyo74wB+Mp8SZXqiAdl/5fLlfGPYL3ENebOgNsOuvAgktCPP7keodHC
dZ8PUv4Qncwatg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:51 2025 by rpki-client