Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
File: NFtPe0oW256STwkIzuPaJvIq1IE.mft (raw, json)
Hash identifier: /5eK4M4IsW3dCGuIJt2aSRmX7Rz/RKpC+sZJmEiBzr8=
Subject key identifier: 0D:A0:6A:64:E2:2C:09:84:25:3E:44:C1:5E:17:74:91:02:F5:FF:9C
Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Certificate serial: 01984BC18DB123BBF6F13098C029AD277992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
Manifest number: 10A6
Signing time: Sun 27 Jul 2025 12:00:32 +0000
Manifest this update: Sun 27 Jul 2025 12:00:32 +0000
Manifest next update: Mon 28 Jul 2025 12:00:32 +0000
Files and hashes: 1: AOLXuvzQH0F3MDzBXr5hgJth6jA.roa (hash: ANOWCNK1N2HN8iwkM8P3PMXp5btgZ6sFl3wjdGu9Tfo=)
2: IUqUo2gZccO5DJEGZ2QrdwAd_rY.roa (hash: N//BCS9/s8yglI9IXPIoNJivxPmiF8d0yubes6L4x2s=)
3: NFtPe0oW256STwkIzuPaJvIq1IE.crl (hash: a8ZySTaa90pY9mlDxaFqTXQHJMoBua1yDhNYj7m4PIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:8d:b1:23:bb:f6:f1:30:98:c0:29:ad:27:79:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Validity
Not Before: Jul 27 12:00:32 2025 GMT
Not After : Jul 28 12:00:32 2025 GMT
Subject: CN=0da06a64e22c0984253e44c15e17749102f5ff9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c9:1d:51:f3:da:51:66:a9:ee:07:fb:14:2a:
c2:7f:2d:bf:c7:27:ee:4c:d3:6d:8d:95:bb:40:03:
26:c4:c6:31:93:e3:99:69:d6:f3:b4:9f:25:23:e9:
a4:fc:03:4d:d1:d6:b9:ac:6b:09:f8:a6:0a:bf:7f:
71:42:3f:6b:9b:a6:bc:37:c3:a0:04:6a:b4:8f:ca:
02:6f:5b:ec:fd:c5:38:65:09:3d:b3:8b:d0:b0:d9:
3c:a4:7c:4e:aa:39:82:2f:6a:5c:4b:fd:4a:3a:21:
68:e1:ec:44:3d:32:2d:08:a3:06:c6:56:b1:f7:49:
25:7a:12:af:f4:1b:22:59:a8:c2:33:49:7f:c6:cf:
4b:52:a9:f1:30:0c:e5:da:af:34:53:99:21:e3:3f:
37:2f:64:4e:7d:e3:6e:85:4f:12:a6:00:58:ca:ab:
8f:aa:45:e8:d8:1b:c7:e4:f1:4d:20:76:fa:b1:56:
99:91:ec:2e:96:8c:1b:aa:cd:0b:15:df:7f:cc:a8:
a8:bc:a8:ad:c2:81:6e:6a:0e:ad:63:eb:da:ed:b1:
66:e4:ef:55:ef:c0:cf:e4:53:68:d4:1f:c9:1c:15:
15:5c:39:52:33:0a:a5:e3:cb:90:b4:26:5b:f3:a4:
6d:fb:91:01:88:d3:a4:5c:1e:00:86:73:8b:3c:07:
b4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A0:6A:64:E2:2C:09:84:25:3E:44:C1:5E:17:74:91:02:F5:FF:9C
X509v3 Authority Key Identifier:
keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9c:6e:7e:8e:45:c7:86:85:04:66:b2:18:62:ce:3a:3a:81:
68:2a:a1:ea:2b:a5:cc:7f:be:1c:83:ff:03:72:9b:d7:19:2a:
5d:59:17:90:26:7d:18:e4:51:22:0c:e9:0e:bb:7a:2e:c0:ce:
87:c3:d9:de:fb:67:b9:1d:eb:1e:f7:38:b4:56:f7:39:f1:19:
89:32:31:1b:2f:08:cd:3a:cf:33:0a:fc:83:6b:72:1a:c7:2e:
82:25:db:13:96:88:94:b4:fd:30:a7:0a:53:e3:59:f7:24:e3:
73:25:ab:ac:97:21:97:d5:bb:62:ca:a5:6b:be:63:19:96:5d:
d8:81:b2:2f:91:e1:02:ae:6b:c7:26:79:81:0a:41:dd:0d:c9:
68:9b:7f:85:a5:bc:78:c0:78:cf:c2:8e:bd:96:e3:45:08:2e:
59:4a:c7:f4:30:bc:3d:30:51:cc:dc:99:70:1f:e3:7f:45:29:
4f:84:ee:f3:b3:08:cc:0b:65:5c:7b:8c:81:14:b7:77:31:31:
cc:9a:31:d6:80:01:1c:35:11:db:fd:d3:11:e4:d7:bb:12:e2:
96:72:eb:ce:fc:90:d9:d1:35:09:74:db:05:01:9f:80:22:d4:
d1:c7:7d:bb:f4:b3:81:ae:59:2c:81:01:94:3f:de:a6:cd:2e:
b0:7d:be:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLwY2xI7v28TCYwCmtJ3mSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NWI0ZjdiNGExNmRiOWU5MjRmMDkwOGNlZTNkYTI2ZjIy
YWQ0ODEwHhcNMjUwNzI3MTIwMDMyWhcNMjUwNzI4MTIwMDMyWjAzMTEwLwYDVQQD
EygwZGEwNmE2NGUyMmMwOTg0MjUzZTQ0YzE1ZTE3NzQ5MTAyZjVmZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyskdUfPaUWap7gf7FCrCfy2/xyfu
TNNtjZW7QAMmxMYxk+OZadbztJ8lI+mk/ANN0da5rGsJ+KYKv39xQj9rm6a8N8Og
BGq0j8oCb1vs/cU4ZQk9s4vQsNk8pHxOqjmCL2pcS/1KOiFo4exEPTItCKMGxlax
90klehKv9BsiWajCM0l/xs9LUqnxMAzl2q80U5kh4z83L2ROfeNuhU8SpgBYyquP
qkXo2BvH5PFNIHb6sVaZkewulowbqs0LFd9/zKiovKitwoFuag6tY+va7bFm5O9V
78DP5FNo1B/JHBUVXDlSMwql48uQtCZb86Rt+5EBiNOkXB4AhnOLPAe0TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2gamTiLAmEJT5EwV4XdJEC9f+cMB8GA1UdIwQY
MBaAFDRbT3tKFtuekk8JCM7j2ibyKtSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zNmE5YWYtMGQ2YS00NWUzLTljYTUt
NDA4NThiOTVmY2Y1LzEvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8zNmE5YWYtMGQ2YS00NWUzLTljYTUtNDA4NThiOTVmY2Y1
LzEvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZxufo5F
x4aFBGayGGLOOjqBaCqh6iulzH++HIP/A3Kb1xkqXVkXkCZ9GORRIgzpDrt6LsDO
h8PZ3vtnuR3rHvc4tFb3OfEZiTIxGy8IzTrPMwr8g2tyGscugiXbE5aIlLT9MKcK
U+NZ9yTjcyWrrJchl9W7Ysqla75jGZZd2IGyL5HhAq5rxyZ5gQpB3Q3JaJt/haW8
eMB4z8KOvZbjRQguWUrH9DC8PTBRzNyZcB/jf0UpT4Tu87MIzAtlXHuMgRS3dzEx
zJox1oABHDUR2/3TEeTXuxLilnLrzvyQ2dE1CXTbBQGfgCLU0cd9u/Szga5ZLIEB
lD/eps0usH2+CQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 16:32:02 2025 by rpki-client