Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json)
Hash identifier: 3ElqjJGjhMMAdpBvSpcwGLS0T0Bfsj31PPve0S1DrWk=
Subject key identifier: 37:4F:83:32:3D:34:2D:03:91:2B:B3:4B:66:D6:F9:56:CC:5F:F5:DD
Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Certificate serial: 019872985E2751718352106CBCAD83DE0C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
Manifest number: 036E
Signing time: Mon 04 Aug 2025 01:00:44 +0000
Manifest this update: Mon 04 Aug 2025 01:00:44 +0000
Manifest next update: Tue 05 Aug 2025 01:00:44 +0000
Files and hashes: 1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: B0y0jMwQ9Wt+Er348RFe5MhX7pCGjE66pz1hjQTXE68=)
2: HexBDB0ALKRx19vAL_olvRM_0pc.roa (hash: ajSzA7jvEEstqpYQIZuBqV7eWXJVONLQH581vvaQYJc=)
3: PrcLqHgKnfIRGf3YM80gSjoYr6I.roa (hash: ZkwH8oTWm6e+gIX3jU/BvkpmjX7EH4UuYT++yIKL1DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:5e:27:51:71:83:52:10:6c:bc:ad:83:de:0c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Validity
Not Before: Aug 4 01:00:44 2025 GMT
Not After : Aug 5 01:00:44 2025 GMT
Subject: CN=374f83323d342d03912bb34b66d6f956cc5ff5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:31:f4:37:a8:73:99:71:c4:de:cf:83:7f:
23:96:0b:7b:e0:61:a0:c5:8c:8e:1b:25:ab:53:3f:
e2:ee:3b:6a:9b:62:b1:e3:3e:24:db:16:37:f7:36:
35:a3:5f:27:69:1d:f9:76:54:93:a0:d1:7b:4e:94:
cd:e0:ad:85:e5:55:a5:a0:be:c2:eb:d3:9b:40:60:
a2:ed:c7:c5:e1:f5:29:f3:9c:a0:77:ba:43:64:90:
fb:62:53:9a:8c:c4:30:7e:d6:ce:a0:7b:ba:d5:2c:
1f:b0:5c:96:38:e6:48:69:13:34:90:12:3b:02:da:
cf:7e:5a:dc:aa:b8:72:a0:32:be:30:36:13:9d:f5:
45:b5:34:e6:f4:c0:b8:13:1d:82:9c:56:e1:fc:da:
bf:02:88:ac:64:b2:a2:95:97:ef:3d:39:ad:c4:13:
22:ac:31:a6:46:3e:31:a8:98:8c:a5:cf:1b:2d:21:
c0:f8:14:82:2a:35:d4:5f:1f:b6:2a:57:5d:b3:63:
5d:72:87:57:df:4d:82:d0:aa:90:4e:5a:bf:ea:a9:
64:83:25:9d:5f:20:64:dd:c4:8b:9c:79:6a:bc:3e:
61:57:3c:84:89:32:da:ad:27:13:28:cb:1c:07:a4:
96:65:be:05:a4:c6:f0:59:f8:93:ac:f7:00:1a:5d:
cd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4F:83:32:3D:34:2D:03:91:2B:B3:4B:66:D6:F9:56:CC:5F:F5:DD
X509v3 Authority Key Identifier:
keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3d:20:7e:df:9d:e9:09:05:0f:a3:79:b3:75:34:a0:97:59:
18:0f:e6:2f:c9:67:2a:96:8a:b8:f1:a6:6f:6b:57:17:93:16:
03:32:a4:94:3d:82:b5:fb:9d:75:d8:31:41:09:88:f7:7f:8f:
ea:31:da:4f:ef:87:ce:85:36:21:58:f3:7d:f8:12:ea:e5:7f:
83:b5:82:27:4b:30:68:12:e7:59:ca:3b:f5:e5:c8:e6:a6:97:
af:e4:9b:e1:4d:d8:be:33:ef:c1:ce:5f:78:91:f5:15:44:a8:
0c:e4:09:1c:0a:0c:e8:8f:65:a8:20:f9:0e:fd:fb:73:fd:fe:
af:1a:9c:c8:60:04:d9:93:23:86:c1:9e:e8:ef:f3:ca:df:8b:
16:2c:8d:54:5b:66:70:3c:cd:37:8e:16:1f:4e:fe:21:90:c9:
af:7d:72:25:74:d4:b3:df:22:5a:13:c6:b6:62:b7:fc:21:c8:
0f:c0:24:0d:29:13:6b:58:ef:f7:66:d2:bc:e9:41:38:27:62:
a1:41:ae:16:4d:cb:e6:3a:a6:28:34:39:4a:fb:f2:5d:57:1f:
07:e5:67:e8:70:f9:6b:c1:c6:4c:5b:3c:2b:2a:70:c6:23:b6:
80:90:17:42:d2:6c:88:4a:7a:34:70:37:cd:a7:1d:cf:c4:9d:
13:5b:62:ef
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhymF4nUXGDUhBsvK2D3gwhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZDZkZGVlMzRjNWJiOGVjMGViOTE5Y2UyNjU2YmYwY2Q4
NTVkNTQwHhcNMjUwODA0MDEwMDQ0WhcNMjUwODA1MDEwMDQ0WjAzMTEwLwYDVQQD
EygzNzRmODMzMjNkMzQyZDAzOTEyYmIzNGI2NmQ2Zjk1NmNjNWZmNWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiYx9Deoc5lxxN7Pg38jlgt74GGg
xYyOGyWrUz/i7jtqm2Kx4z4k2xY39zY1o18naR35dlSToNF7TpTN4K2F5VWloL7C
69ObQGCi7cfF4fUp85ygd7pDZJD7YlOajMQwftbOoHu61SwfsFyWOOZIaRM0kBI7
AtrPflrcqrhyoDK+MDYTnfVFtTTm9MC4Ex2CnFbh/Nq/AoisZLKilZfvPTmtxBMi
rDGmRj4xqJiMpc8bLSHA+BSCKjXUXx+2Kldds2NdcodX302C0KqQTlq/6qlkgyWd
XyBk3cSLnHlqvD5hVzyEiTLarScTKMscB6SWZb4FpMbwWfiTrPcAGl3NlQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDdPgzI9NC0DkSuzS2bW+VbMX/XdMB8GA1UdIwQY
MBaAFPjW3e40xbuOwOuRnOJla/DNhV1UMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1OYmQ3alRGdTQ3QTY1R2M0bVZyOE0yRlhWUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvNzgzZGE1LTY1NzItNDEzZC05ZDZi
LTA5NGQwZGIxYWQyYy8xLzEtTmJkN2pURnU0N0E2NUdjNG1WcjhNMkZYVlEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2E2Lzc4M2RhNS02NTcyLTQxM2QtOWQ2Yi0wOTRkMGRiMWFk
MmMvMS8xLU5iZDdqVEZ1NDdBNjVHYzRtVnI4TTJGWFZRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnj0g
ft+d6QkFD6N5s3U0oJdZGA/mL8lnKpaKuPGmb2tXF5MWAzKklD2CtfudddgxQQmI
93+P6jHaT++HzoU2IVjzffgS6uV/g7WCJ0swaBLnWco79eXI5qaXr+Sb4U3YvjPv
wc5feJH1FUSoDOQJHAoM6I9lqCD5Dv37c/3+rxqcyGAE2ZMjhsGe6O/zyt+LFiyN
VFtmcDzNN44WH07+IZDJr31yJXTUs98iWhPGtmK3/CHID8AkDSkTa1jv92bSvOlB
OCdioUGuFk3L5jqmKDQ5SvvyXVcfB+Vn6HD5a8HGTFs8KypwxiO2gJAXQtJsiEp6
NHA3zacdz8SdE1ti7w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:15 2025 by rpki-client