Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
File: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft (raw, json)
Hash identifier: NMhwA6CIXn2z9HtM96YcB1bwRtHukl4QcbcqFT+yuuU=
Subject key identifier: C1:7F:B0:19:44:DE:3E:7D:CA:97:36:24:03:BE:EE:DA:A1:67:94:0B
Authority key identifier: F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
Certificate issuer: /CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Certificate serial: 019844761139CB0733D8BB5A8B5DFF3BCA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
Manifest number: 0DB6
Signing time: Sat 26 Jul 2025 02:00:45 +0000
Manifest this update: Sat 26 Jul 2025 02:00:45 +0000
Manifest next update: Sun 27 Jul 2025 02:00:45 +0000
Files and hashes: 1: 0MrgjigrDPt6rPegZME8cXiUORo.roa (hash: 7glCaQ9Yvpvmun3d90ogrApzDsZCqJLUsDw/+14dTgE=)
2: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl (hash: OCyVaCFtVXG8vIOV4roe+2NuUu8kB/DmqR9GQcuNyLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:76:11:39:cb:07:33:d8:bb:5a:8b:5d:ff:3b:ca:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Validity
Not Before: Jul 26 02:00:45 2025 GMT
Not After : Jul 27 02:00:45 2025 GMT
Subject: CN=c17fb01944de3e7dca97362403beeedaa167940b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:64:bf:72:c1:b8:83:a9:bd:63:24:8d:9c:00:
49:de:84:27:b5:ee:4e:6a:ee:74:09:66:e4:3b:3c:
ae:62:99:3f:9b:15:6f:0f:00:47:9d:b6:64:3a:a8:
92:e7:9f:e2:67:2c:b9:7d:af:fe:20:a4:42:a5:d6:
64:74:bb:6b:98:06:61:05:ae:33:2a:27:2f:7b:04:
52:6b:a6:ac:e9:35:14:21:36:a2:72:a2:ee:06:a1:
a9:7c:db:08:37:73:fd:85:93:fd:1d:11:19:a7:1b:
5a:49:23:63:ff:3a:92:75:09:67:3a:00:e0:fd:76:
cd:94:2b:04:e4:05:42:65:6f:f9:fd:f8:02:43:31:
eb:a5:1c:0b:6f:b8:19:fe:88:aa:60:3f:e1:d6:51:
fd:14:00:6a:fa:82:13:c8:27:b8:cd:cb:8b:72:0d:
8f:d5:e8:c8:8f:da:1b:30:ad:19:f2:bf:60:f6:8d:
e1:bb:8f:d7:d4:c7:d2:21:f8:5e:0c:b2:87:3c:23:
55:9a:ce:d2:e1:2c:92:8f:7d:e4:74:0b:97:11:77:
5d:87:f0:b9:c4:5f:ca:f0:44:b2:72:fb:cf:c7:8b:
8b:e1:12:9b:0a:04:9e:86:e1:92:71:78:58:e7:cd:
a7:17:a3:fe:cf:bd:ba:c3:fd:46:d0:bd:2a:14:83:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7F:B0:19:44:DE:3E:7D:CA:97:36:24:03:BE:EE:DA:A1:67:94:0B
X509v3 Authority Key Identifier:
keyid:F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:04:0a:7a:0b:b6:6e:48:e8:c1:8a:82:6d:f0:af:92:72:c4:
3f:9e:76:9f:d4:c7:2d:8f:20:05:cb:da:10:5c:4a:25:b0:3b:
51:4b:a5:03:44:8c:cb:91:be:ec:4f:92:2e:45:d6:b6:9a:32:
7c:a9:39:48:96:b6:9c:55:02:bf:98:22:57:35:c1:5b:59:b3:
99:6c:57:05:61:fc:9b:9c:f7:91:8f:e6:c7:20:1d:c3:c5:40:
46:cd:51:fa:86:46:a6:d5:08:24:62:62:68:53:e7:c6:44:b2:
83:dd:cc:ea:75:1c:85:50:8d:9f:39:99:ac:64:34:18:15:fb:
b1:90:01:6e:77:b9:f3:58:5a:7c:f5:fa:8a:b8:48:c3:48:a2:
3a:6c:40:5e:b9:58:02:9e:f4:23:d3:d6:e8:5a:bb:4e:71:d6:
b2:a6:97:a6:b8:5b:e1:e4:99:14:01:1a:3a:27:40:27:2a:65:
30:64:fc:12:b8:95:94:a6:39:20:42:f5:77:8f:32:6f:8a:2c:
13:e5:8e:3a:c7:90:c6:23:f3:5c:55:fd:e0:36:7d:78:35:49:
a0:31:aa:b4:06:86:44:60:e4:66:07:96:f2:02:20:d5:1a:47:
9d:0a:c4:88:dc:f5:5a:1e:2e:64:0e:ed:b7:ae:c3:2c:63:5c:
74:52:74:0e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhEdhE5ywcz2Ltai13/O8poMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZDcyMTNmMzU4NWI3MTEyZGZmMGNiNDNjMTkyYjFjYWYz
MDdkMTgwHhcNMjUwNzI2MDIwMDQ1WhcNMjUwNzI3MDIwMDQ1WjAzMTEwLwYDVQQD
EyhjMTdmYjAxOTQ0ZGUzZTdkY2E5NzM2MjQwM2JlZWVkYWExNjc5NDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmS/csG4g6m9YySNnABJ3oQnte5O
au50CWbkOzyuYpk/mxVvDwBHnbZkOqiS55/iZyy5fa/+IKRCpdZkdLtrmAZhBa4z
KicvewRSa6as6TUUITaicqLuBqGpfNsIN3P9hZP9HREZpxtaSSNj/zqSdQlnOgDg
/XbNlCsE5AVCZW/5/fgCQzHrpRwLb7gZ/oiqYD/h1lH9FABq+oITyCe4zcuLcg2P
1ejIj9obMK0Z8r9g9o3hu4/X1MfSIfheDLKHPCNVms7S4SySj33kdAuXEXddh/C5
xF/K8ESycvvPx4uL4RKbCgSehuGScXhY582nF6P+z726w/1G0L0qFIPkpwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMF/sBlE3j59ypc2JAO+7tqhZ5QLMB8GA1UdIwQY
MBaAFPjXIT81hbcRLf8MtDwZKxyvMH0YMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1OY2hQeldGdHhFdF93eTBQQmtySEs4d2ZSZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvNDk1M2VlLTkxMGYtNGI4ZS1iNDY0
LTI2NTBlZGQzMDEzZi8xLzEtTmNoUHpXRnR4RXRfd3kwUEJrckhLOHdmUmcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk5LzQ5NTNlZS05MTBmLTRiOGUtYjQ2NC0yNjUwZWRkMzAx
M2YvMS8xLU5jaFB6V0Z0eEV0X3d5MFBCa3JISzh3ZlJnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6QQK
egu2bkjowYqCbfCvknLEP552n9THLY8gBcvaEFxKJbA7UUulA0SMy5G+7E+SLkXW
tpoyfKk5SJa2nFUCv5giVzXBW1mzmWxXBWH8m5z3kY/mxyAdw8VARs1R+oZGptUI
JGJiaFPnxkSyg93M6nUchVCNnzmZrGQ0GBX7sZABbne581hafPX6irhIw0iiOmxA
XrlYAp70I9PW6Fq7TnHWsqaXprhb4eSZFAEaOidAJyplMGT8EriVlKY5IEL1d48y
b4osE+WOOseQxiPzXFX94DZ9eDVJoDGqtAaGRGDkZgeW8gIg1RpHnQrEiNz1Wh4u
ZA7tt67DLGNcdFJ0Dg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:59:20 2025 by rpki-client