Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier: PpnHgh6PVBCC/bikm5XOyKGMtNRANMAAxFRxQEyvcpg=
Subject key identifier: C8:64:95:0A:A7:F5:AB:B0:2B:AB:2F:E6:5D:4E:88:F3:33:6D:11:CB
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 019873E1F7611E96DB16953D66CAA3E77427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number: 1113
Signing time: Mon 04 Aug 2025 07:00:45 +0000
Manifest this update: Mon 04 Aug 2025 07:00:45 +0000
Manifest next update: Tue 05 Aug 2025 07:00:45 +0000
Files and hashes: 1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: dqAfSfIgdDuvofDjPBES/BpoHQg/YpDc/1aRPMR0cvw=)
2: saaFFJdprL2UcH3v0LL3zZpp7jc.roa (hash: YyF7BBYn0BiV4oWuG7tgrnT28h9nKay6fwuXu0twrBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:f7:61:1e:96:db:16:95:3d:66:ca:a3:e7:74:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: Aug 4 07:00:45 2025 GMT
Not After : Aug 5 07:00:45 2025 GMT
Subject: CN=c864950aa7f5abb02bab2fe65d4e88f3336d11cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:f7:d2:d5:43:dd:6e:78:e8:20:98:ef:c8:
3a:29:12:c9:3e:c7:06:de:d8:21:0c:9b:dd:68:e9:
69:f9:39:1a:6b:8d:1a:ca:79:8b:d1:4b:ff:79:c9:
14:7e:50:be:16:33:2c:b3:de:5c:d3:35:b9:13:d5:
ed:6d:29:af:94:e2:d9:96:5e:e0:da:e2:02:91:27:
50:79:6d:81:b2:a7:7e:ad:d2:a7:b0:db:0f:65:33:
8c:6a:55:8e:a1:a6:4a:16:2f:56:23:7d:99:bb:97:
98:b0:3e:fa:51:10:12:5e:67:5b:4f:fd:55:7c:66:
35:4c:8d:af:62:72:c9:cb:6b:0a:24:5f:18:a4:d9:
c2:7c:af:7e:6a:4b:26:cb:6b:52:61:c5:6e:18:0e:
13:98:c0:25:47:cd:ff:a6:d2:4e:1f:f2:a3:ea:0e:
20:34:7b:c1:ef:98:21:c6:d5:55:f3:c6:3e:ce:c7:
74:20:6d:2e:90:97:21:8d:6c:b6:6c:ee:30:59:af:
56:dc:4b:c8:1c:7b:2c:df:17:37:9f:6c:4e:e3:ad:
55:f9:b1:47:4c:55:79:55:4a:40:ae:c0:87:04:ef:
c4:4c:c8:f5:cc:92:fe:c0:14:5a:7e:49:f5:63:e5:
2d:bc:82:ce:7d:07:b5:f2:84:0c:2a:af:f9:ac:8c:
59:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:64:95:0A:A7:F5:AB:B0:2B:AB:2F:E6:5D:4E:88:F3:33:6D:11:CB
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:04:b4:d7:09:28:b9:15:e2:92:d6:7f:49:05:f7:2c:51:3a:
68:08:53:69:87:51:ed:ef:5a:df:91:dc:ca:4a:8d:f8:a7:30:
4a:7d:8d:11:0b:9d:55:5f:cd:da:da:57:f0:a9:ab:f4:d8:2f:
61:15:79:e1:00:4a:88:27:fe:c5:20:2c:71:6d:89:d7:92:6e:
c7:85:c1:24:02:e7:88:19:e3:ef:4c:c6:ee:b3:9c:14:8e:bb:
e0:0f:0e:8d:b5:32:2e:83:69:44:fe:47:2f:bb:e3:ec:9c:1e:
b7:94:82:14:78:b5:ff:1a:95:9b:f1:f7:4a:e8:86:23:b9:fe:
4d:8a:57:d0:37:10:0b:9d:7b:f1:2f:22:3b:9a:8a:5c:f3:49:
e4:18:06:62:28:eb:f2:59:34:1f:ae:78:0e:a8:6d:99:8e:25:
c6:ea:b7:1a:d1:cd:b7:2a:45:d4:e8:81:4b:d1:0d:b0:44:fb:
20:38:3c:ba:e3:3f:99:1c:1c:31:30:2f:d7:f7:af:55:80:b4:
66:70:b1:d1:42:0c:24:c7:30:53:56:dc:03:e1:44:2d:69:68:
fd:79:6f:3c:5c:a3:f4:ed:8b:18:65:44:25:33:3f:fa:3b:04:
a1:6d:7f:25:55:f8:40:91:a9:cd:59:74:cd:44:8f:12:4a:f6:
08:f3:1e:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4fdhHpbbFpU9Zsqj53QnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NDJiYmM4M2UyOGMxMDNjMTdkNWEyMDFlZGVmNTY3MjYz
NGRiZTgwHhcNMjUwODA0MDcwMDQ1WhcNMjUwODA1MDcwMDQ1WjAzMTEwLwYDVQQD
EyhjODY0OTUwYWE3ZjVhYmIwMmJhYjJmZTY1ZDRlODhmMzMzNmQxMWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywj30tVD3W546CCY78g6KRLJPscG
3tghDJvdaOlp+Tkaa40aynmL0Uv/eckUflC+FjMss95c0zW5E9XtbSmvlOLZll7g
2uICkSdQeW2Bsqd+rdKnsNsPZTOMalWOoaZKFi9WI32Zu5eYsD76URASXmdbT/1V
fGY1TI2vYnLJy2sKJF8YpNnCfK9+aksmy2tSYcVuGA4TmMAlR83/ptJOH/Kj6g4g
NHvB75ghxtVV88Y+zsd0IG0ukJchjWy2bO4wWa9W3EvIHHss3xc3n2xO461V+bFH
TFV5VUpArsCHBO/ETMj1zJL+wBRafkn1Y+UtvILOfQe18oQMKq/5rIxZhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhklQqn9auwK6sv5l1OiPMzbRHLMB8GA1UdIwQY
MBaAFDZCu8g+KMEDwX1aIB7e9WcmNNvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYt
NmNiMmUwMmNhZWYyLzEvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYtNmNiMmUwMmNhZWYy
LzEvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQS01wko
uRXiktZ/SQX3LFE6aAhTaYdR7e9a35HcykqN+KcwSn2NEQudVV/N2tpX8Kmr9Ngv
YRV54QBKiCf+xSAscW2J15Jux4XBJALniBnj70zG7rOcFI674A8OjbUyLoNpRP5H
L7vj7Jwet5SCFHi1/xqVm/H3SuiGI7n+TYpX0DcQC5178S8iO5qKXPNJ5BgGYijr
8lk0H654DqhtmY4lxuq3GtHNtypF1OiBS9ENsET7IDg8uuM/mRwcMTAv1/evVYC0
ZnCx0UIMJMcwU1bcA+FELWlo/XlvPFyj9O2LGGVEJTM/+jsEoW1/JVX4QJGpzVl0
zUSPEkr2CPMemw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:25 2025 by rpki-client