Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
File: NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft (raw, json)
Hash identifier: SJwqt+ajDELRdRwCaFo5T94kTaEBf26wXulEyZGc8/4=
Subject key identifier: B8:8E:AC:71:03:AB:C3:53:F5:B2:E1:9C:43:F1:2A:BB:B7:B7:07:95
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial: 01991E78B0541DD50EC060F9AF8D22827FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
Manifest number: 1673
Signing time: Sat 06 Sep 2025 10:00:49 +0000
Manifest this update: Sat 06 Sep 2025 10:00:49 +0000
Manifest next update: Sun 07 Sep 2025 10:00:49 +0000
Files and hashes: 1: 92pgx6QNH23m1sb49k-ykMttkN0.roa (hash: 6x2mradcGTZ+q9pm81EMeP+6J3k4A+BvCK17T29Njxw=)
2: NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl (hash: s1LK8zhgcP++8kPCWCcKwipbPtlQf62GHW4AqhcAbwA=)
3: lZsMnzEe-znnn1V93iNCRM_YAak.roa (hash: z+dECtyUmhjS80QJzbvWDw1cRN0vxIcWCWIADf50+Fg=)
4: oYs8paRk9JPLOaUCIoa9pxPnmCs.roa (hash: kBYq1h4wg3W+NuRYMWAaTbphy585KIiOSln9Rszwvtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:78:b0:54:1d:d5:0e:c0:60:f9:af:8d:22:82:7f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Validity
Not Before: Sep 6 10:00:49 2025 GMT
Not After : Sep 7 10:00:49 2025 GMT
Subject: CN=b88eac7103abc353f5b2e19c43f12abbb7b70795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:6b:7c:b6:c3:ea:62:ef:8e:9e:e5:9e:0c:
c6:c8:43:33:3b:73:b6:55:db:3a:97:e1:de:bc:bb:
23:2d:35:fd:fd:a5:d7:62:7e:10:cc:41:6a:21:16:
4f:a0:17:65:41:80:ef:ff:29:a5:e4:5f:2d:88:14:
88:3d:ab:f5:97:23:8e:65:de:17:55:de:5a:16:6a:
4d:53:60:d5:22:35:e0:cc:47:29:f3:9b:17:d9:8b:
6d:5b:b9:2c:bf:1e:71:0b:cd:61:dc:c5:ca:7b:bf:
8f:5c:5b:d8:95:43:2c:67:52:aa:95:f6:6b:74:80:
70:59:a5:25:94:7d:7b:fc:97:a5:1f:1a:02:d0:6d:
d7:46:3c:13:0f:5b:a5:9e:d0:8b:0f:bd:7a:63:ff:
25:4c:e3:6e:ec:f5:9f:16:a9:40:79:a5:d9:4e:8a:
32:6e:52:25:86:71:4a:d6:ce:57:64:a8:4a:01:77:
c9:f1:2f:dd:7a:93:34:62:db:ee:02:61:a8:0b:a7:
02:cd:1a:5a:b2:e3:9d:b8:30:6a:44:82:13:f6:e1:
c8:a4:22:9e:26:79:d9:e7:37:b9:b7:f8:71:a9:55:
80:06:29:75:8e:0a:bf:75:0a:1c:69:fb:22:b2:a5:
22:5d:60:5c:db:a7:22:33:c6:1d:7c:89:2d:8d:ff:
ee:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8E:AC:71:03:AB:C3:53:F5:B2:E1:9C:43:F1:2A:BB:B7:B7:07:95
X509v3 Authority Key Identifier:
keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:80:c6:2c:45:21:88:67:3f:72:5a:55:fa:e7:1a:98:50:7a:
53:45:69:9e:ec:c2:d0:6b:5f:8d:5f:c3:1f:83:76:91:cc:7c:
97:63:24:5f:14:12:6c:c4:c4:2b:43:64:94:4d:ad:29:4f:12:
ca:3d:ff:45:57:51:ec:11:e6:5a:a6:d1:3f:c7:d3:bd:f4:d1:
8f:c9:9d:60:99:09:71:93:6b:52:53:3d:66:25:fe:23:58:fd:
3e:f0:d9:a4:19:db:25:1f:76:46:81:da:6a:53:61:6d:8b:35:
15:e4:2d:37:8f:9e:fc:c2:03:02:6f:17:27:8d:8f:13:fa:5c:
3e:bc:79:80:f9:57:1e:1f:5f:7e:03:d2:4b:03:8b:a0:52:73:
70:35:cd:39:c9:26:63:57:87:e4:0b:c7:1c:f8:df:d5:1a:18:
ae:41:e6:b1:94:b4:09:c1:34:96:b2:98:a2:8b:64:a1:17:ab:
a0:5b:48:af:4a:27:15:7e:aa:ed:67:5e:66:c3:f3:9f:87:de:
84:68:8f:6c:2a:85:44:17:f2:a0:43:53:91:18:ec:9f:37:ce:
25:ca:13:81:8c:c9:2f:e5:de:c3:9c:5c:20:08:17:23:72:8c:
3c:d6:1f:5b:6b:1e:db:83:84:e3:63:fd:72:5a:aa:e6:21:11:
93:62:17:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkeeLBUHdUOwGD5r40ign/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MGJlYTNmY2MzY2JjZWRjODI5MTljZjU3Yzc0MTA4YmFl
YTM2OWUwHhcNMjUwOTA2MTAwMDQ5WhcNMjUwOTA3MTAwMDQ5WjAzMTEwLwYDVQQD
EyhiODhlYWM3MTAzYWJjMzUzZjViMmUxOWM0M2YxMmFiYmI3YjcwNzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeFrfLbD6mLvjp7lngzGyEMzO3O2
Vds6l+HevLsjLTX9/aXXYn4QzEFqIRZPoBdlQYDv/yml5F8tiBSIPav1lyOOZd4X
Vd5aFmpNU2DVIjXgzEcp85sX2YttW7ksvx5xC81h3MXKe7+PXFvYlUMsZ1KqlfZr
dIBwWaUllH17/JelHxoC0G3XRjwTD1ulntCLD716Y/8lTONu7PWfFqlAeaXZTooy
blIlhnFK1s5XZKhKAXfJ8S/depM0YtvuAmGoC6cCzRpasuOduDBqRIIT9uHIpCKe
JnnZ5ze5t/hxqVWABil1jgq/dQocafsisqUiXWBc26ciM8YdfIktjf/u2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiOrHEDq8NT9bLhnEPxKru3tweVMB8GA1UdIwQY
MBaAFDQL6j/MPLztyCkZz1fHQQi66jaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lY2RhM2QtYTJkYi00OTA4LTg2MmYt
MTExMDU2MzY5YTIzLzEvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9lY2RhM2QtYTJkYi00OTA4LTg2MmYtMTExMDU2MzY5YTIz
LzEvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIDGLEUh
iGc/clpV+ucamFB6U0VpnuzC0GtfjV/DH4N2kcx8l2MkXxQSbMTEK0NklE2tKU8S
yj3/RVdR7BHmWqbRP8fTvfTRj8mdYJkJcZNrUlM9ZiX+I1j9PvDZpBnbJR92RoHa
alNhbYs1FeQtN4+e/MIDAm8XJ42PE/pcPrx5gPlXHh9ffgPSSwOLoFJzcDXNOckm
Y1eH5AvHHPjf1RoYrkHmsZS0CcE0lrKYootkoReroFtIr0onFX6q7WdeZsPzn4fe
hGiPbCqFRBfyoENTkRjsnzfOJcoTgYzJL+Xew5xcIAgXI3KMPNYfW2se24OE42P9
clqq5iERk2IXYw==
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:34:06 2025 by rpki-client