Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
File: nmh1g4EMwAZO207-QFf1phpV5ws.mft (raw, json)
Hash identifier: bFb1D4QfP+cZDMCsETkJ+MtBbSjZ/gR42VOpWFR64o4=
Subject key identifier: E8:29:44:F9:32:78:AD:9C:29:6D:EC:D2:95:C6:72:35:94:4F:02:3F
Authority key identifier: 9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
Certificate issuer: /CN=9e687583810cc0064edb4efe4057f5a61a55e70b
Certificate serial: 019849D385A9EB9D0DCE86F13337EF4A8DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
Manifest number: 04D6
Signing time: Sun 27 Jul 2025 03:00:55 +0000
Manifest this update: Sun 27 Jul 2025 03:00:55 +0000
Manifest next update: Mon 28 Jul 2025 03:00:55 +0000
Files and hashes: 1: nmh1g4EMwAZO207-QFf1phpV5ws.crl (hash: zhTTmNfwY0ekTfS5YSyvXm4KU1IRruUVwyFsyeEVexs=)
2: qw-aF3yIkt-72WfpE7ETeHkvHMU.roa (hash: 3nZH1KB8lozx5AtSdJomkLmrFoDBz1VyVSOmQdHc1wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:85:a9:eb:9d:0d:ce:86:f1:33:37:ef:4a:8d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e687583810cc0064edb4efe4057f5a61a55e70b
Validity
Not Before: Jul 27 03:00:55 2025 GMT
Not After : Jul 28 03:00:55 2025 GMT
Subject: CN=e82944f93278ad9c296decd295c67235944f023f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:36:e7:2b:56:85:0e:d2:8b:6c:86:b1:7d:
46:50:9a:e8:ae:8e:74:b1:69:e7:4f:d1:5d:7c:1e:
42:97:4c:8d:5a:36:bf:bd:68:57:56:13:f1:23:bd:
dd:24:49:85:3f:18:a0:55:bf:7d:83:65:20:82:72:
e0:d3:8c:c4:5b:ef:fc:9c:e0:0d:fb:57:f5:5c:51:
1a:2d:79:82:8a:54:6c:f1:46:f1:42:2a:87:63:94:
45:76:c3:57:b3:b2:43:83:e9:51:c9:f2:9d:a7:dc:
5a:44:ae:08:4d:10:9e:a6:4d:9d:21:5c:03:0d:83:
0d:f5:34:c8:5c:4f:07:ae:71:69:0b:a0:14:46:42:
ab:71:bb:fd:48:2e:25:93:43:03:24:30:88:90:84:
e2:04:05:97:b5:a8:07:f2:b6:57:44:8d:2b:1d:29:
80:9f:3d:eb:8f:1b:f9:77:4c:69:bb:b3:13:ee:75:
81:a3:90:c9:b4:e7:d5:4f:f7:39:71:b1:1d:f3:03:
4e:9f:71:39:a2:34:c8:7d:1b:49:2f:eb:23:5d:12:
b4:c3:63:e6:32:68:d6:3b:da:c1:85:aa:db:8f:4b:
dd:0a:a0:43:0f:d5:c0:7c:71:d7:e2:66:7c:45:1f:
ff:7c:00:20:7b:dd:5f:f7:50:f9:9a:4c:c1:28:66:
38:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:29:44:F9:32:78:AD:9C:29:6D:EC:D2:95:C6:72:35:94:4F:02:3F
X509v3 Authority Key Identifier:
keyid:9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:13:73:36:ce:fe:9d:fe:8c:a3:f7:47:a7:35:92:eb:65:e6:
c5:38:17:fd:61:9d:1b:96:51:17:d2:cf:62:ba:1f:ae:c0:ad:
a1:55:27:06:66:66:e4:81:17:28:fa:c2:12:a7:02:33:08:ae:
81:fa:17:40:37:eb:dd:50:f0:ed:af:13:f2:d0:37:59:b0:6c:
54:42:4a:74:36:ff:7f:d0:e7:97:4d:86:18:06:b5:58:89:b7:
c2:66:a6:86:9f:50:76:78:7c:fb:cc:fc:d3:f2:86:45:4d:de:
b3:0c:a8:bc:17:f5:a5:5b:a3:a6:b1:fc:7d:aa:b5:2b:a1:9a:
b5:51:fc:ba:ae:63:d0:cc:72:60:dd:a6:11:6f:8e:a6:79:28:
aa:cc:bf:23:75:f9:c1:49:c7:5a:9f:5a:95:1c:21:3f:e7:b3:
0b:56:7c:38:a2:56:1c:01:2c:a0:22:bd:28:a8:5f:67:bb:9a:
a5:b6:d1:93:d2:83:c0:b4:bb:03:fc:74:1a:88:91:8b:26:99:
eb:ff:41:9c:49:53:ef:cb:6b:c3:15:b5:79:26:81:bc:31:2d:
68:4f:d0:bc:85:f9:16:23:69:60:69:b4:44:9c:d2:86:d5:5d:
89:56:61:db:ff:41:57:66:12:d2:a5:25:6e:a1:2b:51:33:d8:
da:70:86:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ04Wp650NzobxMzfvSo2yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNjg3NTgzODEwY2MwMDY0ZWRiNGVmZTQwNTdmNWE2MWE1
NWU3MGIwHhcNMjUwNzI3MDMwMDU1WhcNMjUwNzI4MDMwMDU1WjAzMTEwLwYDVQQD
EyhlODI5NDRmOTMyNzhhZDljMjk2ZGVjZDI5NWM2NzIzNTk0NGYwMjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6M25ytWhQ7Si2yGsX1GUJroro50
sWnnT9FdfB5Cl0yNWja/vWhXVhPxI73dJEmFPxigVb99g2UggnLg04zEW+/8nOAN
+1f1XFEaLXmCilRs8UbxQiqHY5RFdsNXs7JDg+lRyfKdp9xaRK4ITRCepk2dIVwD
DYMN9TTIXE8HrnFpC6AURkKrcbv9SC4lk0MDJDCIkITiBAWXtagH8rZXRI0rHSmA
nz3rjxv5d0xpu7MT7nWBo5DJtOfVT/c5cbEd8wNOn3E5ojTIfRtJL+sjXRK0w2Pm
MmjWO9rBharbj0vdCqBDD9XAfHHX4mZ8RR//fAAge91f91D5mkzBKGY4gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgpRPkyeK2cKW3s0pXGcjWUTwI/MB8GA1UdIwQY
MBaAFJ5odYOBDMAGTttO/kBX9aYaVecLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm1oMWc0RU13QVpPMjA3LVFGZjFwaHBWNXdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC83Zjc4ZTMtMGNjZC00MWZjLTk4ODMt
NjliZTAzN2JmMDc5LzEvbm1oMWc0RU13QVpPMjA3LVFGZjFwaHBWNXdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC83Zjc4ZTMtMGNjZC00MWZjLTk4ODMtNjliZTAzN2JmMDc5
LzEvbm1oMWc0RU13QVpPMjA3LVFGZjFwaHBWNXdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRNzNs7+
nf6Mo/dHpzWS62XmxTgX/WGdG5ZRF9LPYrofrsCtoVUnBmZm5IEXKPrCEqcCMwiu
gfoXQDfr3VDw7a8T8tA3WbBsVEJKdDb/f9Dnl02GGAa1WIm3wmamhp9Qdnh8+8z8
0/KGRU3eswyovBf1pVujprH8faq1K6GatVH8uq5j0MxyYN2mEW+Opnkoqsy/I3X5
wUnHWp9alRwhP+ezC1Z8OKJWHAEsoCK9KKhfZ7uapbbRk9KDwLS7A/x0GoiRiyaZ
6/9BnElT78trwxW1eSaBvDEtaE/QvIX5FiNpYGm0RJzShtVdiVZh2/9BV2YS0qUl
bqErUTPY2nCGTg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:29:17 2025 by rpki-client