Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
File: NbA-yF0IYHprHd8f553GUcz-Pzc.mft (raw, json)
Hash identifier: Q1/FDJoGFdfXKADpg1cojjzV6kLUtLM074MVh0PpVMo=
Subject key identifier: 64:6C:40:17:F6:3C:8E:C6:E4:E1:15:68:02:56:67:16:AC:BF:52:BB
Authority key identifier: 35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
Certificate issuer: /CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Certificate serial: 01984708C0A5C6BBBBCD5293B29C39C33EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 14:00:12 +0000
Manifest this update: Sat 26 Jul 2025 14:00:12 +0000
Manifest next update: Sun 27 Jul 2025 14:00:12 +0000
Files and hashes: 1: EeFPhEstvW1EwmoMEs09YH1cZlE.roa (hash: zuogsczPuVIDLnfiQ5YgxbbQeRIuIE6FvsJkQLHPGfI=)
2: NbA-yF0IYHprHd8f553GUcz-Pzc.crl (hash: FkRgD7gRudrw619uGeVCx3+mZh+rYtK1nfQypZonXi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:c0:a5:c6:bb:bb:cd:52:93:b2:9c:39:c3:3e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Validity
Not Before: Jul 26 14:00:12 2025 GMT
Not After : Jul 27 14:00:12 2025 GMT
Subject: CN=646c4017f63c8ec6e4e1156802566716acbf52bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e3:27:a8:ca:80:0d:3b:a8:72:a7:3c:46:f7:
5c:5f:62:f8:34:45:8f:16:9e:62:b8:c1:dc:e0:e5:
04:46:56:6f:48:4c:51:24:e3:f7:aa:57:a4:17:a9:
1b:d4:37:16:c0:09:a2:bc:0b:70:0a:91:bf:c4:40:
3a:f4:64:42:7b:16:0d:03:2e:62:60:57:16:0e:e8:
01:07:ea:fd:a9:2b:1a:8b:12:68:2c:36:05:f6:f1:
b6:f0:80:bd:2c:5d:ce:39:89:8c:f8:8c:df:53:2e:
ea:43:8a:cb:f4:5c:eb:3e:f2:a3:a0:61:50:ca:c3:
31:47:1a:e7:b3:d1:99:12:c3:48:3e:54:f0:55:bf:
60:69:45:e1:07:a9:00:90:b7:c5:b5:c0:f8:19:ca:
f6:ac:b6:4d:b0:1a:20:0d:06:2a:cb:62:41:4a:fb:
7c:e6:b9:31:3a:e8:b2:21:cc:3e:4b:e3:b4:74:b0:
72:31:5e:41:2d:83:01:b8:d3:c9:3c:db:02:3a:eb:
9e:68:d5:e9:e5:57:11:61:55:6e:de:02:e2:f8:35:
7d:78:66:c6:0a:cf:25:f4:e6:87:88:e4:8a:13:2c:
72:f5:81:1c:61:6e:af:39:dc:89:c9:65:42:3e:a3:
ed:d4:f1:db:db:89:8f:9f:a1:46:45:80:70:8a:64:
ee:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6C:40:17:F6:3C:8E:C6:E4:E1:15:68:02:56:67:16:AC:BF:52:BB
X509v3 Authority Key Identifier:
keyid:35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f7:76:90:d8:9b:4e:1e:b3:c9:3d:26:23:d7:57:7c:f8:18:
3c:a7:75:3d:4a:58:c5:3e:df:b1:a9:eb:96:3a:43:a2:f5:6e:
da:19:67:1c:c4:5c:e8:a2:a0:e6:e7:7f:75:6f:fe:be:b3:77:
ca:de:d7:ec:81:20:5b:8b:d1:e7:8e:b7:2a:43:c2:b0:da:ec:
15:d5:08:01:83:1a:3f:03:4b:f7:2a:39:fc:d6:43:ce:7d:e4:
53:35:12:37:38:32:81:39:52:56:40:fc:e3:68:bb:95:b6:22:
60:e0:dd:45:dd:bc:0c:5d:2a:f1:9f:2f:8b:42:8b:33:c6:f9:
51:65:26:0a:1f:4e:94:b6:2f:96:a6:8d:91:c9:97:ec:05:03:
d7:50:a7:d3:df:eb:b4:6d:24:f3:02:87:92:b4:69:8e:28:46:
bb:05:91:6f:2b:89:42:c4:a0:97:b4:36:94:5a:15:aa:2c:9d:
39:eb:1b:4e:25:99:e0:b5:04:51:f6:25:a7:99:23:57:3b:fc:
a9:89:71:d4:12:6d:79:75:e8:04:05:ad:a6:34:50:75:07:d1:
86:40:65:b3:d6:aa:f5:86:81:f6:8c:bb:aa:22:e4:c5:47:e1:
83:1e:ea:57:fb:51:f6:1c:2f:d4:6a:f6:cc:97:f9:94:5d:ee:
e3:e8:70:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHCMClxru7zVKTspw5wz64MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1YjAzZWM4NWQwODYwN2E2YjFkZGYxZmU3OWRjNjUxY2Nm
ZTNmMzcwHhcNMjUwNzI2MTQwMDEyWhcNMjUwNzI3MTQwMDEyWjAzMTEwLwYDVQQD
Eyg2NDZjNDAxN2Y2M2M4ZWM2ZTRlMTE1NjgwMjU2NjcxNmFjYmY1MmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+MnqMqADTuocqc8RvdcX2L4NEWP
Fp5iuMHc4OUERlZvSExRJOP3qlekF6kb1DcWwAmivAtwCpG/xEA69GRCexYNAy5i
YFcWDugBB+r9qSsaixJoLDYF9vG28IC9LF3OOYmM+IzfUy7qQ4rL9FzrPvKjoGFQ
ysMxRxrns9GZEsNIPlTwVb9gaUXhB6kAkLfFtcD4Gcr2rLZNsBogDQYqy2JBSvt8
5rkxOuiyIcw+S+O0dLByMV5BLYMBuNPJPNsCOuueaNXp5VcRYVVu3gLi+DV9eGbG
Cs8l9OaHiOSKEyxy9YEcYW6vOdyJyWVCPqPt1PHb24mPn6FGRYBwimTuvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRsQBf2PI7G5OEVaAJWZxasv1K7MB8GA1UdIwQY
MBaAFDWwPshdCGB6ax3fH+edxlHM/j83MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmJBLXlGMElZSHBySGQ4ZjU1M0dVY3otUHpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9jYzRmZTktZTQ4Yy00MmRhLTk3ZWEt
YWI1N2NhYmMxOGY3LzEvTmJBLXlGMElZSHBySGQ4ZjU1M0dVY3otUHpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9jYzRmZTktZTQ4Yy00MmRhLTk3ZWEtYWI1N2NhYmMxOGY3
LzEvTmJBLXlGMElZSHBySGQ4ZjU1M0dVY3otUHpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfd2kNib
Th6zyT0mI9dXfPgYPKd1PUpYxT7fsanrljpDovVu2hlnHMRc6KKg5ud/dW/+vrN3
yt7X7IEgW4vR5463KkPCsNrsFdUIAYMaPwNL9yo5/NZDzn3kUzUSNzgygTlSVkD8
42i7lbYiYODdRd28DF0q8Z8vi0KLM8b5UWUmCh9OlLYvlqaNkcmX7AUD11Cn09/r
tG0k8wKHkrRpjihGuwWRbyuJQsSgl7Q2lFoVqiydOesbTiWZ4LUEUfYlp5kjVzv8
qYlx1BJteXXoBAWtpjRQdQfRhkBls9aq9YaB9oy7qiLkxUfhgx7qV/tR9hwv1Gr2
zJf5lF3u4+hwdg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:26:22 2025 by rpki-client