Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
File: NIg6t5nxQCjltTdQbir4eESQQcU.mft (raw, json)
Hash identifier: sZIt/UqZ98DZCe00gqq1c+hvH6dYZd8/lPeA7YNqroA=
Subject key identifier: 54:30:D9:33:88:10:FC:B0:3F:5A:18:DA:11:1D:EB:2D:E4:7B:1E:37
Authority key identifier: 34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
Certificate issuer: /CN=34883ab799f14028e5b537506e2af878449041c5
Certificate serial: 01991BE544DADA44AEF94F96615B9180F8DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
Manifest number: 053C
Signing time: Fri 05 Sep 2025 22:00:33 +0000
Manifest this update: Fri 05 Sep 2025 22:00:33 +0000
Manifest next update: Sat 06 Sep 2025 22:00:33 +0000
Files and hashes: 1: NIg6t5nxQCjltTdQbir4eESQQcU.crl (hash: AVcKrKMHBUDqtxsrglNZ/UIcCLZhp4TF4+7HguDsqMY=)
2: aOjf7ha4NpM1xf113RLoBKrWwUY.roa (hash: hUQXGx10+6VeL01cd/7kpuKBjZges7kH8YJzcunm/rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1b:e5:44:da:da:44:ae:f9:4f:96:61:5b:91:80:f8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34883ab799f14028e5b537506e2af878449041c5
Validity
Not Before: Sep 5 22:00:33 2025 GMT
Not After : Sep 6 22:00:33 2025 GMT
Subject: CN=5430d9338810fcb03f5a18da111deb2de47b1e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:f2:ce:0c:9f:7b:4c:95:81:97:cf:0a:f1:
c5:67:bf:58:16:7e:6f:c6:45:34:85:b9:81:8c:be:
b0:26:56:80:22:80:fe:7d:3e:6e:98:59:7d:b5:21:
fb:dc:8f:1d:9b:9d:8f:cf:05:be:95:3e:9e:9e:08:
26:68:5f:d7:0b:39:63:c5:0f:6b:73:aa:12:76:c3:
91:59:ce:2c:a1:34:56:44:70:a5:1d:54:53:9a:3a:
8a:6b:7b:db:68:db:b1:fb:e6:c5:e6:c2:12:30:f1:
cb:68:e5:ff:8a:00:7c:e4:8d:e7:94:41:7e:24:14:
6e:87:46:92:a1:6b:09:01:be:ac:36:1a:94:d1:4b:
49:19:ff:08:6d:ec:d5:45:25:b8:19:f9:75:6a:d7:
97:ed:2f:48:62:dd:99:56:62:d5:9a:e6:7d:50:d1:
1a:ab:ef:ef:75:e4:7e:ed:07:b3:fe:ba:eb:71:17:
42:17:bb:72:88:ed:e7:e8:f1:35:b6:e8:0d:67:a9:
6a:24:1e:92:64:66:17:66:64:c2:3a:69:1e:40:1f:
d6:bd:62:7c:eb:16:ff:04:43:bf:3f:7d:08:34:23:
c4:c5:bc:d5:7a:1f:87:36:46:5d:4d:1b:31:a9:89:
d8:44:49:9d:f9:e9:2e:80:b9:f1:2d:9d:29:7a:9f:
84:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:30:D9:33:88:10:FC:B0:3F:5A:18:DA:11:1D:EB:2D:E4:7B:1E:37
X509v3 Authority Key Identifier:
keyid:34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:33:85:a5:f3:e3:27:66:6b:dd:81:66:ce:37:2b:29:33:31:
4c:2b:5e:66:74:7d:76:98:da:8e:8f:05:10:1d:68:73:4b:05:
43:31:71:de:d3:36:79:8a:9d:28:62:eb:f2:21:b9:6e:4a:59:
d3:dd:69:f9:6a:81:68:b7:a7:bf:19:63:aa:02:97:5e:15:16:
dc:0f:3d:aa:7f:22:fb:21:ec:c2:3d:80:c7:d0:5d:3e:ac:1e:
2f:99:5b:28:27:b0:b5:46:88:a0:44:47:1a:52:f7:ce:03:09:
74:b0:c1:16:d6:20:0e:ca:51:2d:d0:05:cb:dc:e2:8c:fe:8d:
cd:62:1f:c0:c1:6e:6b:3e:e8:86:3e:a2:a6:85:72:72:5a:ba:
71:ea:ee:15:d6:df:42:45:f9:73:fb:8e:7a:39:f4:0a:99:2b:
9e:ca:80:7d:ce:3a:67:a9:7a:9b:82:84:5e:4c:31:a4:ff:05:
40:4d:33:d2:82:e5:6c:bb:c8:66:4f:ed:10:83:5c:a7:cd:7f:
86:e5:e8:68:a4:c8:e7:2e:2e:b0:eb:a2:5e:b2:ad:76:ae:6e:
8e:3c:d8:b6:20:42:a0:e4:ec:15:86:aa:a2:a3:8e:39:64:e5:
f2:6f:a5:a2:fd:bf:64:8c:3c:bc:1e:bf:a1:e0:16:ab:e3:e0:
27:a1:56:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkb5UTa2kSu+U+WYVuRgPjcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ODgzYWI3OTlmMTQwMjhlNWI1Mzc1MDZlMmFmODc4NDQ5
MDQxYzUwHhcNMjUwOTA1MjIwMDMzWhcNMjUwOTA2MjIwMDMzWjAzMTEwLwYDVQQD
Eyg1NDMwZDkzMzg4MTBmY2IwM2Y1YTE4ZGExMTFkZWIyZGU0N2IxZTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC7yzgyfe0yVgZfPCvHFZ79YFn5v
xkU0hbmBjL6wJlaAIoD+fT5umFl9tSH73I8dm52PzwW+lT6enggmaF/XCzljxQ9r
c6oSdsORWc4soTRWRHClHVRTmjqKa3vbaNux++bF5sISMPHLaOX/igB85I3nlEF+
JBRuh0aSoWsJAb6sNhqU0UtJGf8IbezVRSW4Gfl1ateX7S9IYt2ZVmLVmuZ9UNEa
q+/vdeR+7Qez/rrrcRdCF7tyiO3n6PE1tugNZ6lqJB6SZGYXZmTCOmkeQB/WvWJ8
6xb/BEO/P30INCPExbzVeh+HNkZdTRsxqYnYREmd+ekugLnxLZ0pep+EgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQw2TOIEPywP1oY2hEd6y3kex43MB8GA1UdIwQY
MBaAFDSIOreZ8UAo5bU3UG4q+HhEkEHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTklnNnQ1bnhRQ2psdFRkUWJpcjRlRVNRUWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mNGRlMTEtNTIzOS00ZWM1LTgxZTYt
MjY0OGZlOWNjMDIwLzEvTklnNnQ1bnhRQ2psdFRkUWJpcjRlRVNRUWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mNGRlMTEtNTIzOS00ZWM1LTgxZTYtMjY0OGZlOWNjMDIw
LzEvTklnNnQ1bnhRQ2psdFRkUWJpcjRlRVNRUWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDOFpfPj
J2Zr3YFmzjcrKTMxTCteZnR9dpjajo8FEB1oc0sFQzFx3tM2eYqdKGLr8iG5bkpZ
091p+WqBaLenvxljqgKXXhUW3A89qn8i+yHswj2Ax9BdPqweL5lbKCewtUaIoERH
GlL3zgMJdLDBFtYgDspRLdAFy9zijP6NzWIfwMFuaz7ohj6ipoVyclq6ceruFdbf
QkX5c/uOejn0CpkrnsqAfc46Z6l6m4KEXkwxpP8FQE0z0oLlbLvIZk/tEINcp81/
huXoaKTI5y4usOuiXrKtdq5ujjzYtiBCoOTsFYaqoqOOOWTl8m+lov2/ZIw8vB6/
oeAWq+PgJ6FWDw==
-----END CERTIFICATE-----
Generated at Sat Sep 6 05:18:05 2025 by rpki-client