Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
File: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft (raw, json)
Hash identifier: Q3AdlRwbkkTv77Ea6wimm/y4FncARMNOCukweFpykvE=
Subject key identifier: 60:9B:B7:89:24:FC:4C:91:C3:F2:B5:E5:95:FB:F5:A0:9F:7D:51:3B
Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
Certificate issuer: /CN=35a4ce50d0cde415473313b11b85719408faba24
Certificate serial: 019936EF6EDAE06E19EB61C356BD026EDDD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
Manifest number: 0626
Signing time: Thu 11 Sep 2025 04:01:25 +0000
Manifest this update: Thu 11 Sep 2025 04:01:25 +0000
Manifest next update: Fri 12 Sep 2025 04:01:25 +0000
Files and hashes: 1: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl (hash: xatOPtDGzLkqtxXH19BNQoxzGbzink64U5VWb7DZh+w=)
2: uaKznLkiq_dgHHhfSIgbJMtsM9Y.roa (hash: 2urEmTA6x5wxy7tL41R+/4xA4ZeFcK1CcklGg3fdBt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ef:6e:da:e0:6e:19:eb:61:c3:56:bd:02:6e:dd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24
Validity
Not Before: Sep 11 04:01:25 2025 GMT
Not After : Sep 12 04:01:25 2025 GMT
Subject: CN=609bb78924fc4c91c3f2b5e595fbf5a09f7d513b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9a:a6:ac:50:b3:f9:b3:a1:64:8a:ee:28:b1:
28:38:f8:bf:fd:dd:16:94:f9:10:02:0f:e9:17:17:
26:d1:51:9d:89:a1:2b:8c:ca:04:fe:a7:af:bd:2e:
86:67:f8:23:6a:e0:4d:7f:b2:8f:61:ad:75:2d:a5:
4c:0e:f0:67:14:2f:23:26:99:18:c0:46:8e:c2:33:
8a:ce:12:35:0c:65:0c:aa:5a:50:85:1c:35:e3:8a:
6e:ce:b8:b2:60:c0:cc:c2:40:9b:00:3a:fa:5c:2b:
e8:25:a6:e0:57:cc:2f:b3:c6:dc:64:01:04:73:f3:
bb:ca:79:16:3f:15:33:83:25:2f:c9:bb:cc:4d:e3:
06:5a:ef:13:8e:97:2b:9d:a2:94:2e:2d:34:b3:ab:
ec:e3:fd:e9:2c:ab:d6:0e:80:82:b7:ab:cc:a1:87:
13:b1:71:e4:a9:5f:06:34:cb:8e:5e:3d:fd:56:a1:
08:5f:bf:54:de:2c:3d:55:07:b9:fe:21:98:11:d9:
c9:8d:ea:9b:b3:83:7c:18:9e:1c:fe:db:b4:36:c9:
10:11:45:64:ba:45:f9:19:3c:10:6c:39:c6:65:3d:
da:15:25:87:f3:36:15:22:fb:cf:b6:9b:60:c2:4b:
34:30:98:1f:c4:70:7e:ef:28:27:7f:2e:55:e7:7f:
d1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9B:B7:89:24:FC:4C:91:C3:F2:B5:E5:95:FB:F5:A0:9F:7D:51:3B
X509v3 Authority Key Identifier:
keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:24:d1:a5:ee:1e:81:b7:68:f6:28:96:b8:1f:b3:3a:45:2b:
45:4d:d0:4a:1d:5e:0d:a6:bf:59:eb:4d:da:c1:92:90:82:b5:
99:df:62:0f:26:cf:9c:dc:57:12:a0:8e:88:ed:51:55:63:4c:
f8:65:05:c2:7b:76:50:84:c7:eb:5b:73:94:72:51:5d:67:c1:
a8:d7:14:cd:3c:21:94:16:39:1d:19:45:f7:b1:b6:66:3b:b5:
ea:66:5b:66:e6:3e:21:8d:dc:0d:4b:9a:c2:3b:28:f7:b6:0c:
74:4c:59:e1:85:02:57:ba:a3:b1:39:bb:e7:56:c4:c6:21:9e:
c5:c0:d9:e1:20:13:30:0a:4c:9d:b4:8f:ca:69:0a:53:f3:65:
51:16:54:c4:78:e5:74:b9:ff:8b:b1:8e:db:c8:be:8f:6c:a4:
2d:bc:f0:3b:9e:10:b2:1e:98:c4:1f:85:b7:3a:58:fd:02:67:
4d:e1:65:30:09:7d:2a:01:b6:65:83:ca:a5:7f:71:aa:a5:f3:
af:aa:45:a7:8c:02:55:16:76:d1:2d:82:d3:5e:96:a7:47:59:
6c:c6:25:2c:59:44:e8:95:06:1d:ac:a4:d9:a9:86:51:5d:3f:
61:b6:30:97:f4:05:25:cd:fd:9b:0b:68:fc:ba:3b:fe:cd:02:
4e:09:2d:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk2727a4G4Z62HDVr0Cbt3WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1YTRjZTUwZDBjZGU0MTU0NzMzMTNiMTFiODU3MTk0MDhm
YWJhMjQwHhcNMjUwOTExMDQwMTI1WhcNMjUwOTEyMDQwMTI1WjAzMTEwLwYDVQQD
Eyg2MDliYjc4OTI0ZmM0YzkxYzNmMmI1ZTU5NWZiZjVhMDlmN2Q1MTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25qmrFCz+bOhZIruKLEoOPi//d0W
lPkQAg/pFxcm0VGdiaErjMoE/qevvS6GZ/gjauBNf7KPYa11LaVMDvBnFC8jJpkY
wEaOwjOKzhI1DGUMqlpQhRw144puzriyYMDMwkCbADr6XCvoJabgV8wvs8bcZAEE
c/O7ynkWPxUzgyUvybvMTeMGWu8TjpcrnaKULi00s6vs4/3pLKvWDoCCt6vMoYcT
sXHkqV8GNMuOXj39VqEIX79U3iw9VQe5/iGYEdnJjeqbs4N8GJ4c/tu0NskQEUVk
ukX5GTwQbDnGZT3aFSWH8zYVIvvPtptgwks0MJgfxHB+7ygnfy5V53/RQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCbt4kk/EyRw/K15ZX79aCffVE7MB8GA1UdIwQY
MBaAFDWkzlDQzeQVRzMTsRuFcZQI+rokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmFUT1VORE41QlZITXhPeEc0VnhsQWo2dWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9iNTBiMWMtMmJjNS00MzgyLWEyN2It
MDNiNjRjMTkxZDRhLzEvTmFUT1VORE41QlZITXhPeEc0VnhsQWo2dWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9iNTBiMWMtMmJjNS00MzgyLWEyN2ItMDNiNjRjMTkxZDRh
LzEvTmFUT1VORE41QlZITXhPeEc0VnhsQWo2dWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcyTRpe4e
gbdo9iiWuB+zOkUrRU3QSh1eDaa/WetN2sGSkIK1md9iDybPnNxXEqCOiO1RVWNM
+GUFwnt2UITH61tzlHJRXWfBqNcUzTwhlBY5HRlF97G2Zju16mZbZuY+IY3cDUua
wjso97YMdExZ4YUCV7qjsTm751bExiGexcDZ4SATMApMnbSPymkKU/NlURZUxHjl
dLn/i7GO28i+j2ykLbzwO54Qsh6YxB+FtzpY/QJnTeFlMAl9KgG2ZYPKpX9xqqXz
r6pFp4wCVRZ20S2C016Wp0dZbMYlLFlE6JUGHayk2amGUV0/YbYwl/QFJc39mwto
/Lo7/s0CTgktvQ==
-----END CERTIFICATE-----
Generated at Thu Sep 11 09:07:50 2025 by rpki-client