Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
File: nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft (raw, json)
Hash identifier: e5OGqaShbppYxRo+F+LGs3+QSI8+iQ+ey8mNrYkOFRA=
Subject key identifier: 7B:72:B9:A7:31:AA:A3:9C:2B:BA:C8:BD:6D:B2:AC:E6:58:21:95:01
Authority key identifier: 9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
Certificate issuer: /CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Certificate serial: 019921B1306246ADF459A89F72AB2D5F2F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
Manifest number: 076F
Signing time: Sun 07 Sep 2025 01:01:24 +0000
Manifest this update: Sun 07 Sep 2025 01:01:24 +0000
Manifest next update: Mon 08 Sep 2025 01:01:24 +0000
Files and hashes: 1: nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl (hash: lmh6C7YNSCCME04mKkaCuli6tpUoyeTKN2oWsK5fwB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:30:62:46:ad:f4:59:a8:9f:72:ab:2d:5f:2f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Validity
Not Before: Sep 7 01:01:24 2025 GMT
Not After : Sep 8 01:01:24 2025 GMT
Subject: CN=7b72b9a731aaa39c2bbac8bd6db2ace658219501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1b:b1:a5:04:8e:21:6b:42:2f:55:51:79:5e:
4e:08:53:10:d2:aa:0f:0a:fa:5e:fe:83:8d:91:48:
4d:f6:bd:96:a9:88:48:f2:90:2c:f6:f3:b1:31:a3:
5e:da:f9:e1:bb:f5:9b:67:03:e7:79:dc:01:e6:3e:
44:26:c6:17:5d:7b:5a:3f:52:a3:af:fa:07:0b:69:
3d:0e:3b:26:e0:f3:f6:61:ea:f6:c5:31:27:11:20:
fb:8c:8b:20:46:d8:ac:4b:ff:cd:c6:11:4c:24:98:
2c:a8:9b:50:12:3a:ff:99:a1:79:a2:c2:b3:4d:ea:
a8:8e:10:0d:ca:e2:dc:3b:78:3f:8c:bb:c7:07:54:
2c:f6:1f:9d:ca:d7:b5:61:4b:8e:a1:0c:5a:84:cf:
b7:07:9c:07:8c:b0:aa:b1:19:95:17:4f:f7:e2:e2:
76:38:90:20:80:73:42:b4:0c:c3:89:b8:c8:5e:69:
2d:09:87:22:e4:8b:59:c5:d7:59:d9:a0:80:84:90:
a0:f4:13:cf:db:5f:fa:4c:92:12:9a:3d:7e:7f:fb:
33:05:75:e3:15:06:74:50:1c:51:96:71:34:41:21:
cd:13:ec:12:37:62:4c:f7:b7:2b:7b:4f:b8:94:e9:
66:d2:93:c1:d8:41:02:21:3c:19:e3:6a:0f:5d:04:
4e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:72:B9:A7:31:AA:A3:9C:2B:BA:C8:BD:6D:B2:AC:E6:58:21:95:01
X509v3 Authority Key Identifier:
keyid:9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7c:71:52:7e:a4:0d:4f:1d:c7:d2:a5:eb:30:4a:f5:21:95:
53:18:b5:1e:7b:12:99:2c:f1:55:5e:ab:7b:dc:fb:e6:a6:70:
89:ca:b6:27:b8:61:2b:13:64:21:f4:82:ce:6f:86:bb:0f:0d:
32:f9:dd:2d:90:df:d5:f2:9b:f2:0c:93:18:99:55:c5:6c:9a:
21:cd:30:9b:31:ff:60:5d:a1:75:92:77:98:f6:35:55:ed:20:
44:c2:30:29:2e:bf:1a:ba:84:70:14:e0:3a:b5:7f:eb:a8:29:
90:d9:a0:3c:df:35:cd:52:81:99:73:51:12:e0:45:a4:b8:25:
d2:d7:6d:67:be:fb:c0:e4:09:a0:a6:c9:61:c7:e9:72:cf:7e:
c6:bb:3a:6f:3c:cd:54:c4:03:39:ac:51:60:ad:aa:f3:89:18:
2d:59:a7:9d:af:c5:e9:1d:72:36:2c:7e:9e:a7:59:10:c1:11:
a8:46:aa:4c:ab:60:e6:e2:22:e3:dc:87:99:1f:0c:e8:ea:dd:
f1:fd:b9:e9:39:f8:63:6d:1c:1c:de:64:75:d4:6e:75:4f:a5:
3b:77:a8:f4:11:b5:c1:bf:ed:5a:81:76:db:d8:cc:95:46:a7:
df:1a:66:ef:03:70:ab:27:54:dd:66:85:5b:95:9a:49:75:94:
ea:e1:6c:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsTBiRq30WaifcqstXy9eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMDU1NGIzYTY5MDc3Y2IyNjI5ZGE0ODA3YzNlMDJhNTYx
YWQ5NGEwHhcNMjUwOTA3MDEwMTI0WhcNMjUwOTA4MDEwMTI0WjAzMTEwLwYDVQQD
Eyg3YjcyYjlhNzMxYWFhMzljMmJiYWM4YmQ2ZGIyYWNlNjU4MjE5NTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxuxpQSOIWtCL1VReV5OCFMQ0qoP
Cvpe/oONkUhN9r2WqYhI8pAs9vOxMaNe2vnhu/WbZwPnedwB5j5EJsYXXXtaP1Kj
r/oHC2k9Djsm4PP2Yer2xTEnESD7jIsgRtisS//NxhFMJJgsqJtQEjr/maF5osKz
TeqojhANyuLcO3g/jLvHB1Qs9h+dyte1YUuOoQxahM+3B5wHjLCqsRmVF0/34uJ2
OJAggHNCtAzDibjIXmktCYci5ItZxddZ2aCAhJCg9BPP21/6TJISmj1+f/szBXXj
FQZ0UBxRlnE0QSHNE+wSN2JM97cre0+4lOlm0pPB2EECITwZ42oPXQROjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtyuacxqqOcK7rIvW2yrOZYIZUBMB8GA1UdIwQY
MBaAFJwFVLOmkHfLJinaSAfD4CpWGtlKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkFWVXM2YVFkOHNtS2RwSUI4UGdLbFlhMlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81ZjI4YjYtNjA4Mi00YTM1LWEzMjgt
NDA4MjBjODQyNmI0LzEvbkFWVXM2YVFkOHNtS2RwSUI4UGdLbFlhMlVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS81ZjI4YjYtNjA4Mi00YTM1LWEzMjgtNDA4MjBjODQyNmI0
LzEvbkFWVXM2YVFkOHNtS2RwSUI4UGdLbFlhMlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3xxUn6k
DU8dx9Kl6zBK9SGVUxi1HnsSmSzxVV6re9z75qZwicq2J7hhKxNkIfSCzm+Guw8N
MvndLZDf1fKb8gyTGJlVxWyaIc0wmzH/YF2hdZJ3mPY1Ve0gRMIwKS6/GrqEcBTg
OrV/66gpkNmgPN81zVKBmXNREuBFpLgl0tdtZ777wOQJoKbJYcfpcs9+xrs6bzzN
VMQDOaxRYK2q84kYLVmnna/F6R1yNix+nqdZEMERqEaqTKtg5uIi49yHmR8M6Ord
8f256Tn4Y20cHN5kddRudU+lO3eo9BG1wb/tWoF229jMlUan3xpm7wNwqydU3WaF
W5WaSXWU6uFs+A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:08 2025 by rpki-client