Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
File: Nq6kWA8QexEmjJbqMYko1O11_5M.mft (raw, json)
Hash identifier: AwVSWLvQO6rL1HQka4tN20s9OLx1IZM7lgxMRVKuV7E=
Subject key identifier: 8D:FE:D4:FF:EA:36:17:BB:D3:94:CF:99:F6:D6:5D:19:71:B1:C4:67
Authority key identifier: 36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93
Certificate issuer: /CN=36aea4580f107b11268c96ea318928d4ed75ff93
Certificate serial: 019846D2413EF7EA130CCFE4A788D7588493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
Manifest number: 04B7
Signing time: Sat 26 Jul 2025 13:00:40 +0000
Manifest this update: Sat 26 Jul 2025 13:00:40 +0000
Manifest next update: Sun 27 Jul 2025 13:00:40 +0000
Files and hashes: 1: Nq6kWA8QexEmjJbqMYko1O11_5M.crl (hash: 1XbA7J00ml1zNyUYdCbRiJVl7XISGOSRtKZm3ncbdDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:41:3e:f7:ea:13:0c:cf:e4:a7:88:d7:58:84:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36aea4580f107b11268c96ea318928d4ed75ff93
Validity
Not Before: Jul 26 13:00:40 2025 GMT
Not After : Jul 27 13:00:40 2025 GMT
Subject: CN=8dfed4ffea3617bbd394cf99f6d65d1971b1c467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:49:f6:31:6f:c2:0b:6d:1a:89:04:90:90:
3f:ee:ca:21:02:0c:cc:ac:c2:f5:08:47:e5:1b:fb:
e0:6f:e9:05:53:93:3d:b3:cd:32:c6:7e:8b:ce:42:
51:a2:6c:d0:d4:e2:f8:df:50:89:1d:f6:99:0d:0d:
b5:26:08:f1:3f:b9:a9:11:f0:2e:fa:d9:cc:33:b0:
1a:fe:19:77:12:7f:b1:3b:8f:9b:d9:49:a1:ef:c3:
72:f1:38:58:40:25:7a:ed:91:49:e5:3a:41:81:76:
2d:fa:38:3d:60:a5:e9:0b:0c:33:b3:03:70:cd:eb:
74:d5:f8:76:c6:ac:e1:07:62:35:49:b4:59:6c:2d:
cb:fd:b9:1b:b2:ee:8b:74:0d:3a:1d:cd:2f:c2:7c:
e4:95:5b:2c:9b:5b:22:b2:7e:89:2f:96:dc:73:4f:
0a:5e:73:a3:3f:04:9b:20:83:af:e7:db:4b:45:8a:
c5:c2:b8:25:61:f6:fd:da:46:af:88:60:2c:9e:d4:
58:08:a0:f5:9a:c3:cd:a0:0d:9e:30:3c:8d:09:71:
44:d9:23:06:d4:1e:3b:ad:d9:e8:1c:2f:b2:75:55:
71:4f:43:97:8f:9c:bf:9b:1c:0b:4a:b3:9f:9d:5a:
a4:22:3c:17:e6:f1:39:af:a2:0d:8f:ef:66:0e:56:
87:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FE:D4:FF:EA:36:17:BB:D3:94:CF:99:F6:D6:5D:19:71:B1:C4:67
X509v3 Authority Key Identifier:
keyid:36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:9a:3d:dd:0b:67:94:96:9d:34:8c:b1:4a:7d:fc:79:f2:e1:
ff:67:6a:f1:6a:80:0e:17:6e:b5:a2:52:3a:b9:4c:71:48:2e:
0d:ba:31:b2:cc:db:96:79:90:3e:a2:00:00:57:c1:bd:b0:ea:
96:05:00:5d:6d:83:d7:95:44:fe:88:7b:11:8a:f5:79:ee:67:
bc:dd:28:6a:0d:55:6c:a5:fb:49:ee:76:83:92:66:9e:48:83:
ba:bf:ec:1b:88:14:7d:cb:ba:10:4c:41:0f:ca:5e:52:e1:6d:
23:03:cc:e5:5f:e8:3a:53:d6:fe:7c:5c:ed:d2:72:ab:4b:77:
17:f3:a1:d4:4f:c4:f5:76:d3:20:ca:c9:31:28:eb:c3:a1:18:
7a:9a:78:a9:79:09:f7:98:6f:7d:5f:b4:1a:91:e5:86:f5:c3:
05:78:1d:d6:9b:7d:aa:40:46:30:91:e3:5d:82:93:21:d6:82:
ee:34:69:f7:02:c3:3b:72:38:5a:6c:b9:71:be:21:a2:ba:20:
3e:bb:f0:0a:5c:d4:44:47:b9:a5:71:1b:d0:c4:6b:5a:8c:5e:
ec:8d:3d:82:e1:83:60:3d:d2:b6:71:4b:3f:c9:12:df:61:21:
da:82:3e:e3:24:1e:a4:3a:4b:0d:fc:bb:6b:d2:aa:4f:f6:dd:
b1:a8:6f:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhG0kE+9+oTDM/kp4jXWISTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YWVhNDU4MGYxMDdiMTEyNjhjOTZlYTMxODkyOGQ0ZWQ3
NWZmOTMwHhcNMjUwNzI2MTMwMDQwWhcNMjUwNzI3MTMwMDQwWjAzMTEwLwYDVQQD
Eyg4ZGZlZDRmZmVhMzYxN2JiZDM5NGNmOTlmNmQ2NWQxOTcxYjFjNDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurxJ9jFvwgttGokEkJA/7sohAgzM
rML1CEflG/vgb+kFU5M9s80yxn6LzkJRomzQ1OL431CJHfaZDQ21JgjxP7mpEfAu
+tnMM7Aa/hl3En+xO4+b2Umh78Ny8ThYQCV67ZFJ5TpBgXYt+jg9YKXpCwwzswNw
zet01fh2xqzhB2I1SbRZbC3L/bkbsu6LdA06Hc0vwnzklVssm1sisn6JL5bcc08K
XnOjPwSbIIOv59tLRYrFwrglYfb92kaviGAsntRYCKD1msPNoA2eMDyNCXFE2SMG
1B47rdnoHC+ydVVxT0OXj5y/mxwLSrOfnVqkIjwX5vE5r6INj+9mDlaHAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3+1P/qNhe705TPmfbWXRlxscRnMB8GA1UdIwQY
MBaAFDaupFgPEHsRJoyW6jGJKNTtdf+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnE2a1dBOFFleEVtakpicU1Za28xTzExXzVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zMDU5ZGUtYmFmYy00YTRiLTg2YjYt
ZjI4ZDk3MmM4ODA4LzEvTnE2a1dBOFFleEVtakpicU1Za28xTzExXzVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zMDU5ZGUtYmFmYy00YTRiLTg2YjYtZjI4ZDk3MmM4ODA4
LzEvTnE2a1dBOFFleEVtakpicU1Za28xTzExXzVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJo93Qtn
lJadNIyxSn38efLh/2dq8WqADhdutaJSOrlMcUguDboxsszblnmQPqIAAFfBvbDq
lgUAXW2D15VE/oh7EYr1ee5nvN0oag1VbKX7Se52g5JmnkiDur/sG4gUfcu6EExB
D8peUuFtIwPM5V/oOlPW/nxc7dJyq0t3F/Oh1E/E9XbTIMrJMSjrw6EYepp4qXkJ
95hvfV+0GpHlhvXDBXgd1pt9qkBGMJHjXYKTIdaC7jRp9wLDO3I4Wmy5cb4horog
PrvwClzUREe5pXEb0MRrWoxe7I09guGDYD3StnFLP8kS32Eh2oI+4yQepDpLDfy7
a9KqT/bdsahvsw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:54:51 2025 by rpki-client