Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
File: NNEMl2M2XzPU3hEJftXhmsm3qP8.mft (raw, json)
Hash identifier: AqvQvzfCu6VLzm925PGy6wDccFc8Pniq91Sh2Odvfec=
Subject key identifier: 97:54:FC:7B:B2:06:DE:5C:6A:DB:0B:33:53:41:B9:86:48:04:D9:3E
Authority key identifier: 34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
Certificate issuer: /CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Certificate serial: 01982859E2BF7698559A0139CE1F083B76C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
Manifest number: 0B
Signing time: Sun 20 Jul 2025 15:00:35 +0000
Manifest this update: Sun 20 Jul 2025 15:00:35 +0000
Manifest next update: Mon 21 Jul 2025 15:00:35 +0000
Files and hashes: 1: NNEMl2M2XzPU3hEJftXhmsm3qP8.crl (hash: l/78cU3ccdR6YwsOpPhSjWFFGmY0yTUfZ0wN4eWSpmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:59:e2:bf:76:98:55:9a:01:39:ce:1f:08:3b:76:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Validity
Not Before: Jul 20 15:00:35 2025 GMT
Not After : Jul 21 15:00:35 2025 GMT
Subject: CN=9754fc7bb206de5c6adb0b335341b9864804d93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:c8:ae:21:06:e3:0d:55:8b:98:40:c8:6d:
58:cd:50:20:2f:e3:83:9a:28:2a:c4:dd:4c:d1:ee:
02:e6:72:26:ec:13:08:64:a3:63:c4:5d:74:88:4b:
8f:84:73:56:c6:88:df:3a:e2:1c:d7:fe:b1:fb:5c:
26:31:a4:cc:2c:8b:6a:01:9f:64:5f:45:96:30:ed:
46:05:eb:29:aa:4e:2f:74:2b:57:04:2d:07:8d:82:
d5:de:fd:6d:6a:3c:86:10:5a:e4:8f:12:bd:68:b2:
56:65:fd:3a:11:0c:db:ca:dd:39:b7:b3:c4:42:86:
29:ae:87:aa:53:21:27:1d:53:5c:64:3e:90:ff:77:
2b:85:f1:4c:e9:1e:f0:28:8c:db:bc:f5:28:15:2f:
54:7c:45:fc:06:0a:35:28:08:49:32:97:0b:4d:d1:
68:1e:79:8f:9c:7d:7a:fd:12:11:62:f2:92:0b:24:
a9:b2:52:27:be:a8:83:4b:ed:64:b8:80:c3:c7:f4:
42:4c:44:9f:1b:8b:66:00:26:2f:aa:4a:01:d9:28:
3e:ce:a2:f6:9c:db:3d:90:bc:e4:49:0c:c9:7c:03:
34:12:cb:ad:0c:b0:c8:43:4e:b7:46:f9:08:4f:ee:
f5:8b:4c:3f:d3:8a:1f:ed:cd:c2:f9:40:d0:ae:ab:
57:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:54:FC:7B:B2:06:DE:5C:6A:DB:0B:33:53:41:B9:86:48:04:D9:3E
X509v3 Authority Key Identifier:
keyid:34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:fe:d3:33:0b:5c:1c:47:2e:99:7e:f0:05:56:7d:72:5b:83:
64:de:5f:be:76:69:a9:1c:9c:4b:54:9d:50:03:47:5b:63:cc:
f3:06:e0:19:98:a6:0c:a8:47:51:b4:20:5f:25:03:73:20:17:
79:dd:87:4a:77:87:5d:26:b1:4d:83:f8:f6:4d:8a:31:82:68:
3e:75:12:07:d1:7d:04:97:da:f5:06:36:99:78:7f:81:9e:0a:
3f:a7:8d:de:d6:bd:cb:c0:3b:80:b5:f0:9d:f9:da:41:fc:8e:
30:0a:4f:85:0a:2d:04:83:69:e1:3f:cd:9d:ec:2c:ef:58:1f:
fa:d2:a8:10:0f:09:b8:23:e9:33:53:e4:5d:e5:b5:95:d6:84:
6a:33:f8:5f:9d:ea:98:57:50:ec:a3:b4:78:c5:51:53:49:44:
b8:08:34:cf:d9:5d:f3:e1:60:b4:c7:04:5e:e7:b8:a4:55:e0:
8d:8c:fc:ff:15:3a:81:5b:60:94:93:4e:e6:6e:6e:24:36:ad:
7b:7c:8d:aa:ee:97:cb:82:54:92:3b:fe:2f:5b:c4:99:17:48:
91:61:82:2f:30:65:45:c0:0e:ae:68:e9:19:08:55:7e:6a:82:
03:72:2f:29:ee:92:9c:eb:e9:21:12:11:ad:6f:83:1b:01:1f:
03:fe:01:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgoWeK/dphVmgE5zh8IO3bGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZDEwYzk3NjMzNjVmMzNkNGRlMTEwOTdlZDVlMTlhYzli
N2E4ZmYwHhcNMjUwNzIwMTUwMDM1WhcNMjUwNzIxMTUwMDM1WjAzMTEwLwYDVQQD
Eyg5NzU0ZmM3YmIyMDZkZTVjNmFkYjBiMzM1MzQxYjk4NjQ4MDRkOTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/zIriEG4w1Vi5hAyG1YzVAgL+OD
migqxN1M0e4C5nIm7BMIZKNjxF10iEuPhHNWxojfOuIc1/6x+1wmMaTMLItqAZ9k
X0WWMO1GBespqk4vdCtXBC0HjYLV3v1tajyGEFrkjxK9aLJWZf06EQzbyt05t7PE
QoYproeqUyEnHVNcZD6Q/3crhfFM6R7wKIzbvPUoFS9UfEX8Bgo1KAhJMpcLTdFo
HnmPnH16/RIRYvKSCySpslInvqiDS+1kuIDDx/RCTESfG4tmACYvqkoB2Sg+zqL2
nNs9kLzkSQzJfAM0EsutDLDIQ063RvkIT+71i0w/04of7c3C+UDQrqtXaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdU/HuyBt5catsLM1NBuYZIBNk+MB8GA1UdIwQY
MBaAFDTRDJdjNl8z1N4RCX7V4ZrJt6j/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk5FTWwyTTJYelBVM2hFSmZ0WGhtc20zcVA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC81N2JjZmYtMTViZS00ZmQ4LWI0OTEt
N2Y4Nzg0ZTIxOWU5LzEvTk5FTWwyTTJYelBVM2hFSmZ0WGhtc20zcVA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC81N2JjZmYtMTViZS00ZmQ4LWI0OTEtN2Y4Nzg0ZTIxOWU5
LzEvTk5FTWwyTTJYelBVM2hFSmZ0WGhtc20zcVA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADv7TMwtc
HEcumX7wBVZ9cluDZN5fvnZpqRycS1SdUANHW2PM8wbgGZimDKhHUbQgXyUDcyAX
ed2HSneHXSaxTYP49k2KMYJoPnUSB9F9BJfa9QY2mXh/gZ4KP6eN3ta9y8A7gLXw
nfnaQfyOMApPhQotBINp4T/Nnews71gf+tKoEA8JuCPpM1PkXeW1ldaEajP4X53q
mFdQ7KO0eMVRU0lEuAg0z9ld8+FgtMcEXue4pFXgjYz8/xU6gVtglJNO5m5uJDat
e3yNqu6Xy4JUkjv+L1vEmRdIkWGCLzBlRcAOrmjpGQhVfmqCA3IvKe6SnOvpIRIR
rW+DGwEfA/4B1w==
-----END CERTIFICATE-----
Generated at Sun Jul 20 20:19:22 2025 by rpki-client