Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
File: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft (raw, json)
Hash identifier: 8o5MSGgvHTKpI0iHU5sHOY0dOk9mElbN9LoBqZZs18Q=
Subject key identifier: CD:93:33:40:8C:2B:AC:4A:C5:AF:0B:C8:A7:07:15:BD:C7:A9:60:D6
Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
Certificate issuer: /CN=35a4ce50d0cde415473313b11b85719408faba24
Certificate serial: 01984B541752E944B59BC32C7E11E95BC001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
Manifest number: 05AC
Signing time: Sun 27 Jul 2025 10:00:58 +0000
Manifest this update: Sun 27 Jul 2025 10:00:58 +0000
Manifest next update: Mon 28 Jul 2025 10:00:58 +0000
Files and hashes: 1: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl (hash: JquCmcRaHKNnmREaeAon1GW0Pj86AdN7PzkMs/RUNjk=)
2: uaKznLkiq_dgHHhfSIgbJMtsM9Y.roa (hash: 2urEmTA6x5wxy7tL41R+/4xA4ZeFcK1CcklGg3fdBt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:17:52:e9:44:b5:9b:c3:2c:7e:11:e9:5b:c0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24
Validity
Not Before: Jul 27 10:00:58 2025 GMT
Not After : Jul 28 10:00:58 2025 GMT
Subject: CN=cd9333408c2bac4ac5af0bc8a70715bdc7a960d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:01:97:3b:86:8b:0f:79:71:2e:6a:e8:bb:
31:f2:05:47:51:ce:bf:15:18:ad:33:54:54:98:82:
a4:8f:f9:ec:d1:94:00:7c:2d:a7:2b:4b:77:7d:e2:
05:5d:3d:2e:cc:d6:2f:77:f2:cc:dd:cc:19:ba:86:
84:f5:46:5f:b4:92:01:bd:af:c8:c1:f5:16:39:a0:
a8:78:a2:05:82:51:5f:e4:01:24:c1:c0:7a:e3:3e:
3d:6f:03:8d:46:60:6f:fe:14:77:13:e1:01:e9:24:
cb:c6:1e:37:87:d7:18:a5:07:a0:50:61:7d:6d:af:
e7:fa:2c:c5:33:50:81:57:c2:06:52:54:30:e2:ac:
46:74:ab:23:98:c0:9a:2d:a8:46:55:bd:29:88:3f:
bb:cc:bf:fe:4c:8f:d9:e0:fe:7c:62:b8:86:f0:cd:
15:b5:13:87:1e:7b:88:db:18:80:ab:0b:ad:8a:2f:
f4:2d:01:51:40:cb:8d:b2:d4:a2:8c:0d:3b:eb:80:
ed:98:8f:d1:71:a7:9a:8c:82:0c:5f:46:55:c9:54:
5c:ae:ce:eb:e8:57:df:d2:61:1b:ec:de:53:e1:52:
78:bb:8e:c1:f8:02:68:55:07:f2:93:3e:73:f8:93:
9c:6b:be:a3:cb:b9:0c:22:b4:a3:97:af:80:95:36:
dd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:93:33:40:8C:2B:AC:4A:C5:AF:0B:C8:A7:07:15:BD:C7:A9:60:D6
X509v3 Authority Key Identifier:
keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e8:4a:57:a4:f2:06:ed:34:a5:3e:35:52:6e:c9:32:e6:60:
57:df:8b:3f:6e:37:eb:7e:5b:04:d9:85:ee:0e:11:fa:de:c8:
53:36:ee:6d:d1:eb:63:d9:cd:e3:9f:47:ff:a4:d0:db:e7:22:
6a:91:dc:57:42:cd:e2:65:cb:72:b6:be:a6:1b:df:31:d8:46:
cb:8e:7d:30:21:15:c8:bd:59:a7:de:fb:bb:b8:85:bb:be:ab:
87:78:1e:fe:bc:5f:a8:fe:c4:51:6f:bd:ca:be:c4:9a:6a:46:
d3:04:4c:1b:0e:05:bf:0b:ff:d5:3c:06:90:68:17:8a:7b:ea:
18:3e:61:28:38:d6:28:48:1e:25:c4:43:f7:67:ba:e5:06:e1:
56:e6:ff:be:3a:cb:6c:79:15:f2:7f:b2:c8:c0:d3:0e:c1:99:
ac:34:96:97:bb:f3:86:42:b2:17:31:24:df:08:3b:d4:d0:3a:
54:c4:f6:68:35:56:81:75:a7:67:7f:f6:4e:bd:91:aa:d1:0f:
34:9b:1f:eb:dc:9b:d3:c3:ce:c9:17:03:bb:c4:e7:c5:53:c9:
a1:b9:b7:97:4e:b1:8b:7e:5b:23:3b:f0:bc:9a:e9:be:25:55:
87:f8:1f:d9:45:78:33:a2:d3:d8:37:6c:ad:7f:7a:f4:92:09:
2b:37:82:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVBdS6US1m8MsfhHpW8ABMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1YTRjZTUwZDBjZGU0MTU0NzMzMTNiMTFiODU3MTk0MDhm
YWJhMjQwHhcNMjUwNzI3MTAwMDU4WhcNMjUwNzI4MTAwMDU4WjAzMTEwLwYDVQQD
EyhjZDkzMzM0MDhjMmJhYzRhYzVhZjBiYzhhNzA3MTViZGM3YTk2MGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3oBlzuGiw95cS5q6Lsx8gVHUc6/
FRitM1RUmIKkj/ns0ZQAfC2nK0t3feIFXT0uzNYvd/LM3cwZuoaE9UZftJIBva/I
wfUWOaCoeKIFglFf5AEkwcB64z49bwONRmBv/hR3E+EB6STLxh43h9cYpQegUGF9
ba/n+izFM1CBV8IGUlQw4qxGdKsjmMCaLahGVb0piD+7zL/+TI/Z4P58YriG8M0V
tROHHnuI2xiAqwutii/0LQFRQMuNstSijA0764DtmI/RcaeajIIMX0ZVyVRcrs7r
6Fff0mEb7N5T4VJ4u47B+AJoVQfykz5z+JOca76jy7kMIrSjl6+AlTbdBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2TM0CMK6xKxa8LyKcHFb3HqWDWMB8GA1UdIwQY
MBaAFDWkzlDQzeQVRzMTsRuFcZQI+rokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmFUT1VORE41QlZITXhPeEc0VnhsQWo2dWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9iNTBiMWMtMmJjNS00MzgyLWEyN2It
MDNiNjRjMTkxZDRhLzEvTmFUT1VORE41QlZITXhPeEc0VnhsQWo2dWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9iNTBiMWMtMmJjNS00MzgyLWEyN2ItMDNiNjRjMTkxZDRh
LzEvTmFUT1VORE41QlZITXhPeEc0VnhsQWo2dWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARehKV6Ty
Bu00pT41Um7JMuZgV9+LP243635bBNmF7g4R+t7IUzbubdHrY9nN459H/6TQ2+ci
apHcV0LN4mXLcra+phvfMdhGy459MCEVyL1Zp977u7iFu76rh3ge/rxfqP7EUW+9
yr7EmmpG0wRMGw4Fvwv/1TwGkGgXinvqGD5hKDjWKEgeJcRD92e65QbhVub/vjrL
bHkV8n+yyMDTDsGZrDSWl7vzhkKyFzEk3wg71NA6VMT2aDVWgXWnZ3/2Tr2RqtEP
NJsf69yb08POyRcDu8TnxVPJobm3l06xi35bIzvwvJrpviVVh/gf2UV4M6LT2Dds
rX969JIJKzeCLg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:02:21 2025 by rpki-client