Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft
File: NltKurcWrRQHqQLlF2Vg7MN8lm0.mft (raw, json)
Hash identifier: KfIkke/RZhyFpGEUP/pKDcNpsldssSUIhp0N34jtKmg=
Subject key identifier: 83:02:AA:1C:A5:65:88:E6:C1:5E:D3:C9:F1:E6:F9:CE:6A:0F:CC:8B
Authority key identifier: 36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D
Certificate issuer: /CN=365b4abab716ad1407a902e5176560ecc37c966d
Certificate serial: 0199337FFE9B66C06A6AE18441C97989DA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft
Manifest number: 0FDF
Signing time: Wed 10 Sep 2025 12:00:50 +0000
Manifest this update: Wed 10 Sep 2025 12:00:50 +0000
Manifest next update: Thu 11 Sep 2025 12:00:50 +0000
Files and hashes: 1: 663owoCy0geoSEBq18zjFiT7Z94.roa (hash: 1TSeYE3XDa7rGIOANkOioACjFE0zrxWJZSCcKrx3NcU=)
2: KIM-NbEkTbitOU_rhpt4qAs9-Oo.roa (hash: H4xfbttPRqY/FlOJMk6QaNDUIdoa4V9nPRdLB2/KbPU=)
3: LD0Ui4wMeU8IWaHDiSVwgyowOUw.roa (hash: 31h6z+WARy6dkl6qHeADOyyrJnTIy/84Jsu1HRgGL7A=)
4: NltKurcWrRQHqQLlF2Vg7MN8lm0.crl (hash: 6Wx9cXTquYhjQCsDjL9oWs3d8276lBKQwzY9GUBY0w4=)
5: u8gM57Vzy83m5elKcN7yP_JfkD0.roa (hash: 11ORynfloHVoIfYWzniyOLKFlZYtVFhIVMRALKTSBUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:7f:fe:9b:66:c0:6a:6a:e1:84:41:c9:79:89:da:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=365b4abab716ad1407a902e5176560ecc37c966d
Validity
Not Before: Sep 10 12:00:50 2025 GMT
Not After : Sep 11 12:00:50 2025 GMT
Subject: CN=8302aa1ca56588e6c15ed3c9f1e6f9ce6a0fcc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:a3:3c:e0:ce:09:01:93:47:58:ad:ad:6d:
da:b8:cd:0b:c3:f0:d3:91:39:1b:c4:a2:70:15:6d:
d9:e1:1e:16:52:6a:6e:0b:f3:8a:b2:45:d1:00:09:
17:70:ad:26:c2:81:db:6a:b8:26:8b:08:0f:69:45:
13:78:23:bc:52:db:b8:64:00:0d:b3:8b:2f:67:b3:
9e:2f:09:b0:04:b4:30:04:3b:aa:41:0d:94:13:ea:
f4:1c:35:9c:f3:44:47:39:c5:21:86:e7:53:c4:3c:
bf:70:11:f3:8f:f4:0d:b8:90:f7:2f:53:44:b8:14:
ae:e3:bf:9c:48:13:83:f9:a9:19:71:3c:ae:33:63:
bb:65:d4:cc:b5:0f:dc:77:46:60:63:75:14:76:a0:
1d:f2:c8:ae:48:d7:62:85:91:a0:82:80:88:05:c5:
d2:6e:61:5a:91:4e:6a:31:28:dd:99:a3:8c:11:f5:
91:e2:ac:e1:26:b6:93:bc:d4:57:14:dd:3f:67:f1:
6b:08:a3:e7:a8:ea:09:fa:dd:94:7c:c9:5b:9c:44:
4b:89:4d:06:27:b4:db:e1:e2:f1:4e:42:e9:24:c2:
ce:80:c9:8c:0b:07:88:5f:e7:b2:55:83:69:93:d4:
33:52:0f:11:79:54:9a:95:f7:29:1f:9f:3b:7b:f2:
78:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:02:AA:1C:A5:65:88:E6:C1:5E:D3:C9:F1:E6:F9:CE:6A:0F:CC:8B
X509v3 Authority Key Identifier:
keyid:36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d7:82:32:f2:27:a1:48:f5:8c:8a:6d:b0:e8:64:dc:89:0c:
2d:64:cb:c6:e5:16:35:38:6c:6d:13:b8:4c:c5:22:e7:5d:61:
68:d8:35:3a:73:ec:8f:91:54:45:c5:e3:f0:8d:57:de:54:6d:
ff:98:83:ba:c1:24:5a:0d:b0:ec:82:ab:8c:d1:e3:39:a7:f7:
3f:4d:97:c0:63:e5:53:95:e4:de:b1:b9:27:e8:6d:13:96:6f:
1f:71:2c:16:de:c7:c1:ad:2e:a9:b0:33:ee:b7:2d:9a:07:c8:
1e:57:c5:4e:5f:11:3a:1a:d5:0c:46:46:d1:36:7d:ab:95:37:
50:d2:f4:4a:0c:5a:12:f8:33:74:83:8c:f0:fb:b8:b9:d5:d0:
20:ff:61:e4:95:af:70:4c:81:b0:a9:9c:98:74:ad:1e:13:7d:
a7:3d:31:91:b4:4b:51:80:a8:55:73:ac:b8:b8:4b:c6:e3:01:
6e:b2:0d:64:7b:d1:9e:05:75:32:b1:82:77:d3:ac:38:5a:67:
a5:a1:2e:82:de:70:21:93:1d:8c:3d:6f:9c:55:a3:08:98:91:
fd:7e:52:57:61:0d:47:7e:e0:be:49:56:b9:f9:0d:ce:31:24:
e9:dc:1f:29:6a:cd:a9:35:73:18:d9:c5:ec:a5:78:45:19:86:
35:c8:7c:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzf/6bZsBqauGEQcl5idp9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NWI0YWJhYjcxNmFkMTQwN2E5MDJlNTE3NjU2MGVjYzM3
Yzk2NmQwHhcNMjUwOTEwMTIwMDUwWhcNMjUwOTExMTIwMDUwWjAzMTEwLwYDVQQD
Eyg4MzAyYWExY2E1NjU4OGU2YzE1ZWQzYzlmMWU2ZjljZTZhMGZjYzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqOjPODOCQGTR1itrW3auM0Lw/DT
kTkbxKJwFW3Z4R4WUmpuC/OKskXRAAkXcK0mwoHbargmiwgPaUUTeCO8Utu4ZAAN
s4svZ7OeLwmwBLQwBDuqQQ2UE+r0HDWc80RHOcUhhudTxDy/cBHzj/QNuJD3L1NE
uBSu47+cSBOD+akZcTyuM2O7ZdTMtQ/cd0ZgY3UUdqAd8siuSNdihZGggoCIBcXS
bmFakU5qMSjdmaOMEfWR4qzhJraTvNRXFN0/Z/FrCKPnqOoJ+t2UfMlbnERLiU0G
J7Tb4eLxTkLpJMLOgMmMCweIX+eyVYNpk9QzUg8ReVSalfcpH587e/J4iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMCqhylZYjmwV7TyfHm+c5qD8yLMB8GA1UdIwQY
MBaAFDZbSrq3Fq0UB6kC5RdlYOzDfJZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmx0S3VyY1dyUlFIcVFMbEYyVmc3TU44bG0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lMzVhYzEtMDVkMS00MDZkLWI2Njgt
MzZlYWY3OTQ4NTMxLzEvTmx0S3VyY1dyUlFIcVFMbEYyVmc3TU44bG0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9lMzVhYzEtMDVkMS00MDZkLWI2NjgtMzZlYWY3OTQ4NTMx
LzEvTmx0S3VyY1dyUlFIcVFMbEYyVmc3TU44bG0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdeCMvIn
oUj1jIptsOhk3IkMLWTLxuUWNThsbRO4TMUi511haNg1OnPsj5FURcXj8I1X3lRt
/5iDusEkWg2w7IKrjNHjOaf3P02XwGPlU5Xk3rG5J+htE5ZvH3EsFt7Hwa0uqbAz
7rctmgfIHlfFTl8ROhrVDEZG0TZ9q5U3UNL0SgxaEvgzdIOM8Pu4udXQIP9h5JWv
cEyBsKmcmHStHhN9pz0xkbRLUYCoVXOsuLhLxuMBbrINZHvRngV1MrGCd9OsOFpn
paEugt5wIZMdjD1vnFWjCJiR/X5SV2ENR37gvklWufkNzjEk6dwfKWrNqTVzGNnF
7KV4RRmGNch8tQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 20:32:54 2025 by rpki-client