Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
File: NrEA4fbz_-bjXph-DQGVt5k6jTM.mft (raw, json)
Hash identifier: L9NWujI0pF7a5uQGjBhe4eyvbZaC4vihXxx5kd6g/jY=
Subject key identifier: B9:2E:73:EA:D6:D7:54:E0:9B:E1:1E:3F:44:BE:40:2C:26:EB:AE:93
Authority key identifier: 36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
Certificate issuer: /CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Certificate serial: 01992FDA3592DE6A235EC87666AED367B3C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
Manifest number: 167A
Signing time: Tue 09 Sep 2025 19:00:53 +0000
Manifest this update: Tue 09 Sep 2025 19:00:53 +0000
Manifest next update: Wed 10 Sep 2025 19:00:53 +0000
Files and hashes: 1: KwzLAJFh9AChcSwdy64vpYAmPMw.roa (hash: gKP8z3trUWmnbUH4Fi3xjFDbQv59f3+z5G16CBeShsM=)
2: NrEA4fbz_-bjXph-DQGVt5k6jTM.crl (hash: KGU9G5zNLRXG/OqcO7SO/hWVDQ3m/QzPCj2K2QkjfuM=)
3: xgRFqxuYECy3s3qxM6WfghCOWpk.roa (hash: C6vhgdbkPh06biK8G7xaWybwcmLZK2bGK2ryBwYlob0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:da:35:92:de:6a:23:5e:c8:76:66:ae:d3:67:b3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Validity
Not Before: Sep 9 19:00:53 2025 GMT
Not After : Sep 10 19:00:53 2025 GMT
Subject: CN=b92e73ead6d754e09be11e3f44be402c26ebae93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:96:4b:ad:c1:f5:e5:34:2c:36:18:c5:52:
7f:7e:b2:cb:a7:c8:00:99:f1:fa:16:0b:ea:a9:c4:
db:4a:2b:ee:7c:c4:e7:de:29:57:a5:0d:1c:04:5d:
f0:54:d2:6a:ca:e4:0e:8f:f5:54:cf:e2:2d:5f:64:
76:a9:a3:74:e7:cf:f3:f5:55:bd:34:28:a1:ad:87:
45:b1:ca:81:fe:fe:24:45:06:ac:27:3b:1d:e3:f4:
12:47:f1:62:6f:c5:83:c9:98:8c:7b:53:44:53:8f:
67:34:96:60:38:48:ed:78:4d:d9:2a:05:ae:b3:b8:
df:02:a2:7a:4f:33:fe:6a:47:da:74:bd:3b:a2:80:
98:96:7b:5e:73:73:ff:42:86:a4:6e:28:c5:e8:5c:
84:4f:4c:a9:bd:e3:37:5b:2c:30:0a:aa:71:95:4c:
8d:30:c3:52:a2:11:b5:ea:81:49:87:e9:9a:8b:c3:
37:c9:8a:4b:72:f6:73:a6:ec:74:b0:bd:45:25:49:
97:6c:6d:d0:52:54:da:c4:89:53:08:5d:8b:5d:ce:
be:00:14:93:23:9e:c6:ab:bb:dc:f2:13:6d:ef:e6:
70:1b:08:a3:b2:9c:eb:7d:9c:90:05:69:a3:a4:b3:
11:16:ee:3c:07:7e:2d:6d:4b:f7:9d:78:b4:3f:1b:
00:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2E:73:EA:D6:D7:54:E0:9B:E1:1E:3F:44:BE:40:2C:26:EB:AE:93
X509v3 Authority Key Identifier:
keyid:36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:de:39:59:ac:6d:0f:7c:9b:c9:eb:22:ce:f0:a0:fc:88:22:
74:ce:b2:6a:33:8f:df:0a:c0:3b:03:79:5c:4e:9e:56:af:64:
7e:97:3b:9c:48:de:20:47:ce:4e:d3:89:22:81:21:3a:96:72:
f1:ea:ec:f4:31:ec:dd:ca:60:89:b8:85:04:33:38:1a:4c:62:
f7:e5:5d:97:8e:09:06:3e:f1:09:a3:bc:23:fe:d5:22:01:51:
da:bc:a4:73:83:8f:77:91:2b:c5:f1:b2:c0:63:1a:19:93:c6:
78:7f:a5:07:dd:a3:24:d7:6c:ce:b2:98:2d:9b:12:e8:90:e2:
64:e2:ce:85:ed:1f:1e:87:e6:84:95:88:d7:c3:df:6c:0d:5a:
70:f7:04:01:71:79:4b:33:30:51:b5:10:66:c5:01:01:0f:71:
cc:a0:a3:be:13:5f:32:fc:7c:8d:ac:aa:6f:3f:de:fe:4e:e3:
b8:ca:29:22:65:5b:bd:f3:55:b3:c0:f7:ee:a7:64:4b:f0:6d:
43:80:16:66:20:e7:87:45:ba:54:bd:ec:c1:2f:db:5a:88:cf:
3a:39:8d:92:34:42:fb:f8:d7:10:3c:35:fb:b5:d6:c4:e5:4f:
8e:33:37:56:a9:8f:26:b2:32:96:9e:2f:a4:f1:db:28:ce:d1:
3c:c9:82:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkv2jWS3mojXsh2Zq7TZ7PDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YjEwMGUxZjZmM2ZmZTZlMzVlOTg3ZTBkMDE5NWI3OTkz
YThkMzMwHhcNMjUwOTA5MTkwMDUzWhcNMjUwOTEwMTkwMDUzWjAzMTEwLwYDVQQD
EyhiOTJlNzNlYWQ2ZDc1NGUwOWJlMTFlM2Y0NGJlNDAyYzI2ZWJhZTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxACWS63B9eU0LDYYxVJ/frLLp8gA
mfH6FgvqqcTbSivufMTn3ilXpQ0cBF3wVNJqyuQOj/VUz+ItX2R2qaN058/z9VW9
NCihrYdFscqB/v4kRQasJzsd4/QSR/Fib8WDyZiMe1NEU49nNJZgOEjteE3ZKgWu
s7jfAqJ6TzP+akfadL07ooCYlntec3P/QoakbijF6FyET0ypveM3WywwCqpxlUyN
MMNSohG16oFJh+mai8M3yYpLcvZzpux0sL1FJUmXbG3QUlTaxIlTCF2LXc6+ABST
I57Gq7vc8hNt7+ZwGwijspzrfZyQBWmjpLMRFu48B34tbUv3nXi0PxsAEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkuc+rW11Tgm+EeP0S+QCwm666TMB8GA1UdIwQY
MBaAFDaxAOH28//m416Yfg0BlbeZOo0zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnJFQTRmYnpfLWJqWHBoLURRR1Z0NWs2alRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83MTMzOGQtZTYwMy00OTI2LWEwZjQt
ZTIyYzZlZDc4NDg1LzEvTnJFQTRmYnpfLWJqWHBoLURRR1Z0NWs2alRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83MTMzOGQtZTYwMy00OTI2LWEwZjQtZTIyYzZlZDc4NDg1
LzEvTnJFQTRmYnpfLWJqWHBoLURRR1Z0NWs2alRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgt45Waxt
D3ybyesizvCg/IgidM6yajOP3wrAOwN5XE6eVq9kfpc7nEjeIEfOTtOJIoEhOpZy
8ers9DHs3cpgibiFBDM4Gkxi9+Vdl44JBj7xCaO8I/7VIgFR2rykc4OPd5ErxfGy
wGMaGZPGeH+lB92jJNdszrKYLZsS6JDiZOLOhe0fHofmhJWI18PfbA1acPcEAXF5
SzMwUbUQZsUBAQ9xzKCjvhNfMvx8jayqbz/e/k7juMopImVbvfNVs8D37qdkS/Bt
Q4AWZiDnh0W6VL3swS/bWojPOjmNkjRC+/jXEDw1+7XWxOVPjjM3VqmPJrIylp4v
pPHbKM7RPMmChg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 03:42:19 2025 by rpki-client