Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
File: nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json)
Hash identifier: 8zEeiwMhbOjEW1WFJg8yIWCFeqVkhipLBcYYXJYQAJ4=
Subject key identifier: ED:73:EE:78:A8:3F:B6:F8:18:94:18:06:34:ED:84:D7:E7:EE:4E:5D
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial: 01984B54ADE0F699C256BC8D7DD7D5684C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
Manifest number: 0932
Signing time: Sun 27 Jul 2025 10:01:37 +0000
Manifest this update: Sun 27 Jul 2025 10:01:37 +0000
Manifest next update: Mon 28 Jul 2025 10:01:37 +0000
Files and hashes: 1: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: g2JF0U1DLO2C1EKvSlTFtWNZJceCV2zKEhbqqUlnsAI=)
2: udQIyLLEg9QQXb-UkTqLHg_TlmY.roa (hash: tqfLE5OeUFZI9sRR907kQS3AlAfPN5yiahDFaxm0yMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:ad:e0:f6:99:c2:56:bc:8d:7d:d7:d5:68:4c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
Validity
Not Before: Jul 27 10:01:37 2025 GMT
Not After : Jul 28 10:01:37 2025 GMT
Subject: CN=ed73ee78a83fb6f81894180634ed84d7e7ee4e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:63:54:ca:f9:b7:b4:27:99:b8:2d:b5:4d:c1:
30:0e:59:bf:fc:d5:22:f8:b9:bd:2a:14:c5:fe:bd:
7f:5e:d6:82:c9:19:08:a8:ad:03:10:d8:fa:f1:50:
78:8e:43:7a:17:1d:00:b1:2b:4e:10:e9:dc:db:0f:
4f:01:b3:74:15:33:49:ab:3f:29:e1:ed:0c:5d:73:
28:b0:79:a3:04:6e:2a:ba:d5:e1:6a:86:cb:8d:22:
98:dc:40:26:94:d3:ab:21:82:7a:19:f0:c4:56:e1:
0a:2e:90:7e:1a:a8:44:38:f6:25:b1:a8:28:35:8f:
e4:d4:11:d8:e0:04:6d:ae:9a:84:05:ba:27:d6:5b:
3f:c5:76:31:68:7e:a9:70:f0:a7:b2:27:f1:39:43:
fc:c5:ac:1e:e8:50:ae:b3:3e:64:75:94:79:28:b6:
ac:63:b9:7d:ea:e9:18:41:e3:24:17:c2:b8:8d:72:
61:26:76:e5:8a:96:33:c4:53:be:d1:db:ac:07:d6:
90:11:3a:83:9a:2f:12:53:4f:35:ff:4e:e8:fd:6b:
12:47:35:fc:28:77:4e:03:34:0c:82:84:13:06:6c:
ff:49:0c:dc:18:69:5c:c3:b9:10:96:fd:42:8a:4c:
96:c5:0c:84:97:a9:f3:73:d7:7e:87:07:52:b9:8e:
38:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:73:EE:78:A8:3F:B6:F8:18:94:18:06:34:ED:84:D7:E7:EE:4E:5D
X509v3 Authority Key Identifier:
keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:40:9f:32:24:85:42:c9:1e:5e:78:ee:1e:2d:8a:05:38:3f:
93:11:2c:77:51:9e:50:ba:c1:f1:4f:4c:c8:de:d5:d5:30:02:
8f:1d:2b:7e:2e:a7:3d:59:ff:35:a2:0b:89:55:a5:ae:c6:08:
70:ce:a2:5c:28:e5:ee:ca:8a:6c:7c:93:b6:85:95:05:50:69:
7f:eb:b1:3c:a5:16:4c:8f:72:c4:6a:e9:85:27:44:75:50:42:
c4:73:1b:52:6c:eb:8f:3f:46:09:79:4e:41:3d:db:08:07:fd:
cc:3b:37:45:76:76:52:73:95:bf:41:5c:75:66:54:60:2b:ee:
a8:e5:9a:7d:af:fe:d1:07:95:f3:21:01:fd:05:64:2b:21:b2:
13:72:a0:de:28:97:00:a8:90:25:81:9a:41:66:55:6f:dd:cf:
9b:84:97:28:a8:92:19:d3:a9:12:61:42:49:89:05:25:35:2a:
ae:36:ba:06:5a:d2:7c:93:29:19:f0:87:4b:57:59:13:c6:3c:
67:1b:96:13:07:85:e7:44:82:a5:e5:c8:87:3a:9a:a2:d7:a3:
df:7c:0d:02:91:88:fc:72:ff:82:fd:35:59:0c:8c:ce:8c:59:
99:8c:02:70:1c:51:63:2f:d0:81:1c:af:56:2c:1e:80:be:ac:
48:a0:3a:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVK3g9pnCVryNfdfVaEyTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNjgzNGFlMzU2MzBhMDRjNzhmMjc3NjA1MjUyNjc4ZmI2
NDVjNDUwHhcNMjUwNzI3MTAwMTM3WhcNMjUwNzI4MTAwMTM3WjAzMTEwLwYDVQQD
EyhlZDczZWU3OGE4M2ZiNmY4MTg5NDE4MDYzNGVkODRkN2U3ZWU0ZTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGNUyvm3tCeZuC21TcEwDlm//NUi
+Lm9KhTF/r1/XtaCyRkIqK0DENj68VB4jkN6Fx0AsStOEOnc2w9PAbN0FTNJqz8p
4e0MXXMosHmjBG4qutXhaobLjSKY3EAmlNOrIYJ6GfDEVuEKLpB+GqhEOPYlsago
NY/k1BHY4ARtrpqEBbon1ls/xXYxaH6pcPCnsifxOUP8xawe6FCusz5kdZR5KLas
Y7l96ukYQeMkF8K4jXJhJnblipYzxFO+0dusB9aQETqDmi8SU081/07o/WsSRzX8
KHdOAzQMgoQTBmz/SQzcGGlcw7kQlv1CikyWxQyEl6nzc9d+hwdSuY44tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1z7nioP7b4GJQYBjTthNfn7k5dMB8GA1UdIwQY
MBaAFJ5oNK41YwoEx48ndgUlJnj7ZFxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYjk3YzgtOTU3Ni00MjQ3LTk2ZTYt
NTI3OTg0ZmMxMTgxLzEvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zYjk3YzgtOTU3Ni00MjQ3LTk2ZTYtNTI3OTg0ZmMxMTgx
LzEvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUCfMiSF
QskeXnjuHi2KBTg/kxEsd1GeULrB8U9MyN7V1TACjx0rfi6nPVn/NaILiVWlrsYI
cM6iXCjl7sqKbHyTtoWVBVBpf+uxPKUWTI9yxGrphSdEdVBCxHMbUmzrjz9GCXlO
QT3bCAf9zDs3RXZ2UnOVv0FcdWZUYCvuqOWafa/+0QeV8yEB/QVkKyGyE3Kg3iiX
AKiQJYGaQWZVb93Pm4SXKKiSGdOpEmFCSYkFJTUqrja6BlrSfJMpGfCHS1dZE8Y8
ZxuWEweF50SCpeXIhzqaotej33wNApGI/HL/gv01WQyMzoxZmYwCcBxRYy/QgRyv
ViwegL6sSKA6pA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:29:06 2025 by rpki-client