Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
File: NAd7QemIc-fwb7HfP105xyGxND8.mft (raw, json)
Hash identifier: l5ZKLD9WnB+ROKlXQihYssQ9+kX6BaltN08l1ouE3us=
Subject key identifier: A6:C1:52:84:C8:55:60:22:75:FC:58:69:FE:25:0E:48:34:A2:BB:DC
Authority key identifier: 34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
Certificate issuer: /CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Certificate serial: 0198556930ABEE3F058D46B14BFB0C47ECDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
Manifest number: 1610
Signing time: Tue 29 Jul 2025 09:00:13 +0000
Manifest this update: Tue 29 Jul 2025 09:00:13 +0000
Manifest next update: Wed 30 Jul 2025 09:00:13 +0000
Files and hashes: 1: L3eXX40R-J2MZIIUJdb8enfoeE8.roa (hash: lwjbJYBJSc/rhMWtZdkfBAupkIFWhtQl6cOuFgh+q0M=)
2: NAd7QemIc-fwb7HfP105xyGxND8.crl (hash: UsVlxqsY6qLswUh7L4PAOki+GVT3g+BDAtMxqtGTa1k=)
3: rzrW1TWZL4bnPJ-nB128HmDlFaY.roa (hash: jgoKQgRuGI4ln2b618FpeT2y9vZl1AD1XL8CqPtrGN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:30:ab:ee:3f:05:8d:46:b1:4b:fb:0c:47:ec:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Validity
Not Before: Jul 29 09:00:13 2025 GMT
Not After : Jul 30 09:00:13 2025 GMT
Subject: CN=a6c15284c855602275fc5869fe250e4834a2bbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a4:1d:79:63:41:a5:3d:49:bc:a1:ec:b0:4f:
2e:41:6a:fb:94:a7:9f:e8:9c:a5:1d:72:dd:ed:36:
cd:8e:55:f9:d5:1a:49:fe:b2:36:db:42:a8:fc:b5:
a4:ad:31:75:3f:e0:65:9a:63:e5:e9:14:e6:49:45:
7f:0d:c3:a7:ea:56:ec:08:6f:7d:24:df:f4:a3:3b:
81:b3:32:39:5b:bb:52:92:b2:08:4d:f5:f8:54:a9:
02:6e:2e:9d:cd:9e:ba:9f:a2:0b:0c:8a:ef:ba:6e:
bf:d0:0d:cf:33:0e:77:08:38:26:12:8a:7c:3a:dd:
05:b9:a2:f4:d4:cf:b4:72:03:d5:eb:58:fa:57:30:
2d:47:4b:ff:3b:86:46:04:ee:7d:67:64:41:4d:6b:
e5:cb:62:0f:9b:a0:32:50:cf:0b:d0:cb:f9:5c:0d:
11:ec:24:f5:e4:55:44:7a:67:45:b1:4b:cf:1f:e4:
39:f8:60:23:e3:52:40:71:a6:fa:da:03:74:68:85:
4d:23:81:20:99:b2:ce:15:7f:50:73:f2:79:20:5a:
9e:ae:01:bf:89:a7:4c:60:59:fb:ab:c4:bf:40:bc:
23:17:43:ee:79:8b:f9:c2:72:d4:17:85:53:3d:a6:
ec:5c:13:52:f7:bb:1e:08:13:71:74:e4:c1:da:f4:
58:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C1:52:84:C8:55:60:22:75:FC:58:69:FE:25:0E:48:34:A2:BB:DC
X509v3 Authority Key Identifier:
keyid:34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:72:54:a0:08:7f:38:90:c6:16:04:85:7f:1c:c3:7a:64:31:
08:8f:b9:2c:5a:40:c9:0a:11:cb:e5:12:75:71:3b:5a:b9:f7:
fa:85:06:f8:e4:76:57:d7:5d:e8:a2:02:b5:e8:99:86:8c:07:
4e:39:85:c1:22:59:07:98:58:c8:7f:26:6a:b1:50:85:a7:ee:
ff:b4:18:f1:bc:78:04:4b:6f:0c:d3:0f:21:aa:40:94:02:c2:
d6:69:09:bf:fb:74:54:e6:65:66:e7:96:57:b5:d8:ff:29:93:
30:e8:e6:86:58:94:e1:08:7b:cb:39:a8:db:3f:5a:89:66:09:
67:eb:3c:b0:a3:3a:93:c0:4e:18:42:de:fa:8f:bd:38:8d:a6:
c7:7d:2d:1d:4f:85:1f:bd:b4:8d:7d:2c:65:35:42:8c:9a:1b:
2a:bc:c4:c4:c9:22:4c:44:5a:6e:ed:5e:7f:80:94:d3:e7:5f:
64:a2:1d:86:3c:dd:e1:2c:bb:5d:94:5d:41:85:ff:ad:e5:5d:
17:1b:f6:4f:24:68:66:eb:67:47:54:dd:6d:14:9a:4e:b9:bc:
8f:08:62:df:fe:84:4d:e2:03:13:4a:6e:f0:74:44:58:f9:f6:
fe:26:dc:bb:26:3d:31:63:c9:e9:ab:dc:6d:f7:67:5e:53:6c:
d4:5b:e5:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhVaTCr7j8FjUaxS/sMR+zfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MDc3YjQxZTk4ODczZTdmMDZmYjFkZjNmNWQzOWM3MjFi
MTM0M2YwHhcNMjUwNzI5MDkwMDEzWhcNMjUwNzMwMDkwMDEzWjAzMTEwLwYDVQQD
EyhhNmMxNTI4NGM4NTU2MDIyNzVmYzU4NjlmZTI1MGU0ODM0YTJiYmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46QdeWNBpT1JvKHssE8uQWr7lKef
6JylHXLd7TbNjlX51RpJ/rI220Ko/LWkrTF1P+BlmmPl6RTmSUV/DcOn6lbsCG99
JN/0ozuBszI5W7tSkrIITfX4VKkCbi6dzZ66n6ILDIrvum6/0A3PMw53CDgmEop8
Ot0FuaL01M+0cgPV61j6VzAtR0v/O4ZGBO59Z2RBTWvly2IPm6AyUM8L0Mv5XA0R
7CT15FVEemdFsUvPH+Q5+GAj41JAcab62gN0aIVNI4EgmbLOFX9Qc/J5IFqergG/
iadMYFn7q8S/QLwjF0PueYv5wnLUF4VTPabsXBNS97seCBNxdOTB2vRY8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbBUoTIVWAidfxYaf4lDkg0orvcMB8GA1UdIwQY
MBaAFDQHe0HpiHPn8G+x3z9dOcchsTQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC80NDg4MDAtODI5ZS00YjdhLTkyYzQt
Y2I3Y2JjYTdjMWUwLzEvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC80NDg4MDAtODI5ZS00YjdhLTkyYzQtY2I3Y2JjYTdjMWUw
LzEvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArXJUoAh/
OJDGFgSFfxzDemQxCI+5LFpAyQoRy+USdXE7Wrn3+oUG+OR2V9dd6KICteiZhowH
TjmFwSJZB5hYyH8marFQhafu/7QY8bx4BEtvDNMPIapAlALC1mkJv/t0VOZlZueW
V7XY/ymTMOjmhliU4Qh7yzmo2z9aiWYJZ+s8sKM6k8BOGELe+o+9OI2mx30tHU+F
H720jX0sZTVCjJobKrzExMkiTERabu1ef4CU0+dfZKIdhjzd4Sy7XZRdQYX/reVd
Fxv2TyRoZutnR1TdbRSaTrm8jwhi3/6ETeIDE0pu8HREWPn2/ibcuyY9MWPJ6avc
bfdnXlNs1FvlQw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 18:57:25 2025 by rpki-client