Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
File: naPpS0JKXF0_MDICt1QWm4sMlfo.mft (raw, json)
Hash identifier: /Us5HO1Axj2qocsRYY4KUGRj9QDZuAOfOAK8j3kmqnw=
Subject key identifier: EB:C4:F4:B8:7E:6B:5F:25:83:B2:66:07:60:90:FE:DC:EB:3D:DB:0B
Authority key identifier: 9D:A3:E9:4B:42:4A:5C:5D:3F:30:32:02:B7:54:16:9B:8B:0C:95:FA
Certificate issuer: /CN=9da3e94b424a5c5d3f303202b754169b8b0c95fa
Certificate serial: 019849D307F823C9C881B8F84E71C5C8E914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
Manifest number: 06E8
Signing time: Sun 27 Jul 2025 03:00:23 +0000
Manifest this update: Sun 27 Jul 2025 03:00:23 +0000
Manifest next update: Mon 28 Jul 2025 03:00:23 +0000
Files and hashes: 1: naPpS0JKXF0_MDICt1QWm4sMlfo.crl (hash: oVRDZ4//ntbiHSIxipgaXEhX1/x0n8FDKwIKAq0aylw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:07:f8:23:c9:c8:81:b8:f8:4e:71:c5:c8:e9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da3e94b424a5c5d3f303202b754169b8b0c95fa
Validity
Not Before: Jul 27 03:00:23 2025 GMT
Not After : Jul 28 03:00:23 2025 GMT
Subject: CN=ebc4f4b87e6b5f2583b266076090fedceb3ddb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:12:dc:20:84:be:b8:46:3d:6a:54:6c:92:3a:
ef:18:1d:e3:c8:78:87:65:ef:d5:b1:20:2c:d3:46:
cb:cb:05:ae:52:94:0d:2d:32:ae:c4:32:9b:b5:2f:
9f:ec:a7:5a:bc:d5:0f:5e:a4:72:3b:91:fd:d4:cb:
6a:88:6a:3e:5d:e2:f1:d6:80:7a:b5:f9:28:b3:b0:
b1:b5:83:75:4f:f9:b0:ce:af:0e:52:a2:d1:7d:86:
82:26:75:76:8c:43:27:fa:9c:ed:04:53:f1:af:5a:
79:bc:62:42:18:20:7a:ac:37:a8:71:d5:f7:2b:49:
e3:22:16:52:ce:e2:c6:48:14:f6:8e:9a:78:b0:2b:
55:37:5e:ee:36:ee:73:12:24:14:ea:35:57:4b:94:
4a:87:5f:f2:58:4a:ea:cc:a4:50:40:d6:09:ce:85:
d9:02:9a:c3:84:af:f6:57:8f:7a:cb:80:33:36:d8:
51:a7:0a:74:b4:79:85:30:65:6b:ee:75:43:a7:f6:
4f:e9:f6:82:ba:08:fc:e2:6b:38:1d:97:25:41:25:
77:00:97:03:8c:5c:98:24:48:10:65:8e:28:b5:da:
3c:60:cb:91:dc:41:cc:74:40:c9:23:45:0c:9a:7c:
d4:56:68:ae:26:53:22:16:6b:e2:e1:38:05:50:09:
38:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C4:F4:B8:7E:6B:5F:25:83:B2:66:07:60:90:FE:DC:EB:3D:DB:0B
X509v3 Authority Key Identifier:
keyid:9D:A3:E9:4B:42:4A:5C:5D:3F:30:32:02:B7:54:16:9B:8B:0C:95:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ea:9d:5a:29:42:3d:9a:4b:ac:3d:87:45:d5:41:98:d3:1e:
0a:49:3e:87:6a:92:15:49:fc:88:eb:01:07:69:bd:dd:02:6d:
7f:2d:1f:36:c9:b4:3b:0f:90:16:0a:e8:d4:dc:be:58:44:75:
17:cd:99:4c:20:01:75:b6:7d:fb:47:e7:5e:fd:4b:4a:90:b3:
d0:8a:78:00:04:01:5e:a9:73:f3:6d:05:7a:82:b1:61:7b:2b:
6e:16:c2:9c:cc:32:2d:99:b5:f8:a0:f1:23:da:34:92:50:0c:
c3:04:a0:f0:58:8c:a1:97:c4:b5:36:e0:af:96:52:8c:cc:03:
1b:4f:a3:4a:dc:6a:97:a4:9e:27:69:cb:59:8f:b9:c1:31:85:
1a:39:bd:e3:8d:10:4d:2d:8c:6c:61:a4:1c:90:b6:1c:ed:04:
eb:07:e1:d8:55:35:41:0e:4a:87:2b:ac:b5:91:36:c6:96:1a:
61:17:d2:b4:8e:c4:c5:5e:89:2e:9c:f7:50:06:55:fe:6b:d6:
82:92:1b:c7:36:72:ef:c7:c3:60:91:91:75:b6:20:68:34:a3:
eb:73:78:62:ec:c5:3d:7a:21:78:18:f1:ff:6e:9d:23:c4:ca:
a6:01:61:87:65:8c:2d:d6:c3:7b:96:a1:ed:35:9b:5e:72:22:
46:68:b6:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0wf4I8nIgbj4TnHFyOkUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYTNlOTRiNDI0YTVjNWQzZjMwMzIwMmI3NTQxNjliOGIw
Yzk1ZmEwHhcNMjUwNzI3MDMwMDIzWhcNMjUwNzI4MDMwMDIzWjAzMTEwLwYDVQQD
EyhlYmM0ZjRiODdlNmI1ZjI1ODNiMjY2MDc2MDkwZmVkY2ViM2RkYjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xLcIIS+uEY9alRskjrvGB3jyHiH
Ze/VsSAs00bLywWuUpQNLTKuxDKbtS+f7KdavNUPXqRyO5H91MtqiGo+XeLx1oB6
tfkos7CxtYN1T/mwzq8OUqLRfYaCJnV2jEMn+pztBFPxr1p5vGJCGCB6rDeocdX3
K0njIhZSzuLGSBT2jpp4sCtVN17uNu5zEiQU6jVXS5RKh1/yWErqzKRQQNYJzoXZ
AprDhK/2V496y4AzNthRpwp0tHmFMGVr7nVDp/ZP6faCugj84ms4HZclQSV3AJcD
jFyYJEgQZY4otdo8YMuR3EHMdEDJI0UMmnzUVmiuJlMiFmvi4TgFUAk4cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvE9Lh+a18lg7JmB2CQ/tzrPdsLMB8GA1UdIwQY
MBaAFJ2j6UtCSlxdPzAyArdUFpuLDJX6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmFQcFMwSktYRjBfTURJQ3QxUVdtNHNNbGZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS84YmJkNzQtZTAzZS00YWVhLWFjOGMt
YTVhNWQ2ZWI4NDBmLzEvbmFQcFMwSktYRjBfTURJQ3QxUVdtNHNNbGZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS84YmJkNzQtZTAzZS00YWVhLWFjOGMtYTVhNWQ2ZWI4NDBm
LzEvbmFQcFMwSktYRjBfTURJQ3QxUVdtNHNNbGZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+qdWilC
PZpLrD2HRdVBmNMeCkk+h2qSFUn8iOsBB2m93QJtfy0fNsm0Ow+QFgro1Ny+WER1
F82ZTCABdbZ9+0fnXv1LSpCz0Ip4AAQBXqlz820FeoKxYXsrbhbCnMwyLZm1+KDx
I9o0klAMwwSg8FiMoZfEtTbgr5ZSjMwDG0+jStxql6SeJ2nLWY+5wTGFGjm9440Q
TS2MbGGkHJC2HO0E6wfh2FU1QQ5KhyustZE2xpYaYRfStI7ExV6JLpz3UAZV/mvW
gpIbxzZy78fDYJGRdbYgaDSj63N4YuzFPXoheBjx/26dI8TKpgFhh2WMLdbDe5ah
7TWbXnIiRmi2FQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:37:36 2025 by rpki-client