Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json)
Hash identifier: C1pIS62Ap9Q1Z1RdFYYuVKNN0gltMWs1qXcr099GHTc=
Subject key identifier: 47:50:8B:1E:1D:0E:C6:E8:36:56:4A:09:CA:D4:B2:C6:CA:8D:BA:BA
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial: 01984852A6904ABA4209A03BF7F5FF4DD85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
Manifest number: 016B
Signing time: Sat 26 Jul 2025 20:00:32 +0000
Manifest this update: Sat 26 Jul 2025 20:00:32 +0000
Manifest next update: Sun 27 Jul 2025 20:00:32 +0000
Files and hashes: 1: Cn6aTJ6E1_-gCpRxnelqtaB0lKU.roa (hash: VqTM+HURS8DC+WZMdKoSVyf3dPPj9el6+N1nRAL14WU=)
2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: A62fdneEVC443Cltlp4QXxTP3FZMiYxMxUr+bhy6ghs=)
3: rT2NKGhh-IbqjO8Z7nYfbW1wOX8.roa (hash: iTv3B38u9yzbs8hr8RvbnohLnyRQDgptr0b4/9herOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:a6:90:4a:ba:42:09:a0:3b:f7:f5:ff:4d:d8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
Validity
Not Before: Jul 26 20:00:32 2025 GMT
Not After : Jul 27 20:00:32 2025 GMT
Subject: CN=47508b1e1d0ec6e836564a09cad4b2c6ca8dbaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ff:4a:44:3b:e3:66:96:d3:c2:42:fd:f0:32:
65:ea:d2:92:b4:44:58:3f:4d:c7:15:f9:9a:2f:9f:
a7:6d:e6:c5:0c:63:58:77:ba:9b:cf:32:b6:f8:0b:
6f:09:17:23:7c:70:fd:3b:c1:9e:0b:5b:f6:ee:0c:
3a:fa:82:d6:8e:66:49:31:a6:8b:95:c2:67:e2:0b:
70:f3:28:ec:f9:be:0a:4d:aa:2d:b7:d5:19:09:f1:
d6:25:11:0d:88:6e:c4:a9:a4:6b:16:01:ff:53:c5:
50:be:cb:19:00:78:3c:89:12:b9:b0:4d:a7:48:87:
ab:58:51:47:82:62:c5:07:58:0d:d5:09:28:c7:8a:
c4:14:a9:35:87:be:bf:d9:e6:29:a1:85:97:b6:e3:
00:49:8a:6a:7d:1e:77:fa:42:2c:4c:89:e2:da:a3:
94:7c:e7:f7:bf:53:0f:03:65:fc:87:03:87:ae:26:
63:39:b2:f5:5e:d3:35:a8:f0:95:8b:c3:df:9e:76:
f1:30:71:6d:dc:15:6d:29:a6:f0:af:25:0f:07:0f:
d8:38:d3:cf:2a:59:f2:76:a6:55:6a:8b:ac:a2:f2:
db:26:cc:38:8f:92:9e:67:91:88:e6:7f:ee:eb:47:
da:52:88:36:bc:73:2e:bf:43:10:93:0e:a1:24:68:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:50:8B:1E:1D:0E:C6:E8:36:56:4A:09:CA:D4:B2:C6:CA:8D:BA:BA
X509v3 Authority Key Identifier:
keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e7:0f:70:f8:fe:cf:b0:93:15:79:e3:2a:b2:6e:e0:77:63:
b0:81:ed:53:76:88:52:8c:da:16:dd:f7:42:94:25:9c:8a:fb:
a2:98:2b:40:a6:6f:94:75:32:25:5c:6d:da:e3:fa:b7:2f:f3:
fe:04:74:ff:ba:e8:bb:62:47:1a:91:4c:ae:6e:50:20:c1:af:
90:aa:d4:a0:b5:02:5c:f8:ed:51:a6:41:37:cb:c8:4f:d0:95:
8d:7d:92:0b:27:b3:c1:bd:1e:20:20:3d:33:fd:c3:c8:d5:71:
31:af:c3:8b:19:6d:56:90:fe:60:ab:dc:af:b8:98:df:98:43:
60:6f:bf:16:68:a0:cb:1d:aa:1b:e6:58:a5:ae:82:27:f4:cb:
8e:f0:2d:b0:4c:04:94:91:79:1a:8d:1c:be:b6:8b:b0:2e:8c:
1f:1d:3a:33:26:5a:b7:64:1e:b1:07:eb:0d:c6:e3:3d:69:09:
ba:11:03:6c:ff:a5:ed:93:6f:cb:18:15:a0:4e:7a:52:08:a0:
ae:62:07:3b:e6:13:4b:d0:67:eb:5e:e6:85:16:72:15:98:65:
09:fb:cf:7f:3a:a8:7b:9c:b9:16:ce:70:97:e2:d0:9d:14:18:
9c:17:d0:85:8e:7b:ea:f0:7b:2a:05:21:fb:2a:c2:85:eb:92:
4d:75:d0:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUqaQSrpCCaA79/X/TdhcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MWYxYzc1YTFkYzg2NGRmYmY5ODc0M2M1MDZlZTE4Njky
NGY2NDMwHhcNMjUwNzI2MjAwMDMyWhcNMjUwNzI3MjAwMDMyWjAzMTEwLwYDVQQD
Eyg0NzUwOGIxZTFkMGVjNmU4MzY1NjRhMDljYWQ0YjJjNmNhOGRiYWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6v9KRDvjZpbTwkL98DJl6tKStERY
P03HFfmaL5+nbebFDGNYd7qbzzK2+AtvCRcjfHD9O8GeC1v27gw6+oLWjmZJMaaL
lcJn4gtw8yjs+b4KTaott9UZCfHWJRENiG7EqaRrFgH/U8VQvssZAHg8iRK5sE2n
SIerWFFHgmLFB1gN1Qkox4rEFKk1h76/2eYpoYWXtuMASYpqfR53+kIsTIni2qOU
fOf3v1MPA2X8hwOHriZjObL1XtM1qPCVi8PfnnbxMHFt3BVtKabwryUPBw/YONPP
KlnydqZVaousovLbJsw4j5KeZ5GI5n/u60faUog2vHMuv0MQkw6hJGiZqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdQix4dDsboNlZKCcrUssbKjbq6MB8GA1UdIwQY
MBaAFDUfHHWh3IZN+/mHQ8UG7hhpJPZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yOWE2Y2QtM2FjNi00NzQ5LThjZmUt
ZGNlYWEyYWUwYTc0LzEvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8yOWE2Y2QtM2FjNi00NzQ5LThjZmUtZGNlYWEyYWUwYTc0
LzEvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOcPcPj+
z7CTFXnjKrJu4HdjsIHtU3aIUozaFt33QpQlnIr7opgrQKZvlHUyJVxt2uP6ty/z
/gR0/7rou2JHGpFMrm5QIMGvkKrUoLUCXPjtUaZBN8vIT9CVjX2SCyezwb0eICA9
M/3DyNVxMa/DixltVpD+YKvcr7iY35hDYG+/Fmigyx2qG+ZYpa6CJ/TLjvAtsEwE
lJF5Go0cvraLsC6MHx06MyZat2QesQfrDcbjPWkJuhEDbP+l7ZNvyxgVoE56Ugig
rmIHO+YTS9Bn617mhRZyFZhlCfvPfzqoe5y5Fs5wl+LQnRQYnBfQhY576vB7KgUh
+yrCheuSTXXQ+A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:33:26 2025 by rpki-client