Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
File: NGbkl-i6koMIR7TYtnEDJdI72oU.mft (raw, json)
Hash identifier: g69z8WnOs3/eVfR+bC9LZteH0AyAJHQbx9GxapDSllE=
Subject key identifier: AE:5E:CA:13:78:89:80:AB:39:2B:01:53:F0:06:AF:1A:2D:08:B4:25
Authority key identifier: 34:66:E4:97:E8:BA:92:83:08:47:B4:D8:B6:71:03:25:D2:3B:DA:85
Certificate issuer: /CN=3466e497e8ba92830847b4d8b6710325d23bda85
Certificate serial: 019916BF04581AE7B202646509266537544E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
Manifest number: 06CA
Signing time: Thu 04 Sep 2025 22:00:41 +0000
Manifest this update: Thu 04 Sep 2025 22:00:41 +0000
Manifest next update: Fri 05 Sep 2025 22:00:41 +0000
Files and hashes: 1: NGbkl-i6koMIR7TYtnEDJdI72oU.crl (hash: +joNeiP/xEoAUm85HXXGkyXmoKwzdTHu9eupiS+qqMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:bf:04:58:1a:e7:b2:02:64:65:09:26:65:37:54:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3466e497e8ba92830847b4d8b6710325d23bda85
Validity
Not Before: Sep 4 22:00:41 2025 GMT
Not After : Sep 5 22:00:41 2025 GMT
Subject: CN=ae5eca13788980ab392b0153f006af1a2d08b425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1d:de:c2:b0:b7:4c:a1:52:15:92:5c:e4:99:
bb:e1:37:90:5b:d1:d6:a3:29:14:d1:f7:ab:d1:66:
30:35:69:d5:1c:9d:4e:b1:02:2f:97:ed:7c:3a:a8:
72:6b:77:5f:be:9d:bc:8a:17:fb:fb:ef:0b:8e:ed:
b3:e3:df:ad:5a:83:49:0c:bb:c7:2c:a5:8c:8d:1c:
33:65:d7:04:15:87:99:af:53:b2:9e:17:46:51:27:
d7:c0:d4:cf:f9:04:bc:48:b5:fb:78:a4:56:e6:35:
92:e7:e8:44:ec:71:ef:ef:d3:3d:8b:da:16:e8:08:
3c:29:ff:9d:4c:0c:b8:02:22:c0:d5:7f:db:23:91:
1c:cb:44:a6:0f:60:28:55:3c:65:fd:04:e6:94:73:
1b:08:b1:7f:8b:09:5c:3a:07:5b:d9:b8:56:ab:f5:
2e:cf:0a:b8:e1:4f:b9:fe:5c:b6:4b:e2:ad:4b:cf:
0c:0f:82:32:2e:9e:33:01:6d:17:f9:90:79:bb:f5:
41:01:aa:96:bb:46:e0:c2:13:8a:23:d2:a1:c8:1c:
be:a8:35:19:db:85:88:fc:28:16:93:c2:74:2f:77:
0d:8a:d2:1c:15:79:5d:11:20:b9:c7:a2:89:ba:f1:
b8:1a:99:2b:c4:b5:6d:eb:e6:34:4f:36:56:05:d4:
e9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5E:CA:13:78:89:80:AB:39:2B:01:53:F0:06:AF:1A:2D:08:B4:25
X509v3 Authority Key Identifier:
keyid:34:66:E4:97:E8:BA:92:83:08:47:B4:D8:B6:71:03:25:D2:3B:DA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0d:dd:f6:5f:8e:da:2a:05:4f:ee:32:22:a2:5d:9c:2f:4f:
c1:2c:75:d8:cd:2b:6a:a6:d0:be:9f:e1:cf:39:7a:68:04:ac:
1a:6b:75:3c:1b:4e:55:be:ad:c3:7d:61:3a:26:7c:48:80:41:
92:44:48:57:47:98:f1:de:fe:6c:d9:94:bc:8e:f2:74:06:73:
fc:dd:24:5f:77:5c:73:55:d4:85:3a:46:cd:b0:47:f0:6d:38:
ec:5c:49:89:d6:6c:16:bb:5a:7d:82:d7:77:b3:1c:ae:fd:5f:
9b:6e:50:dd:e5:64:08:20:66:90:6f:4f:de:a2:28:57:84:68:
63:ad:c8:a4:0f:45:32:a4:f7:0e:fc:cb:d3:7d:71:ae:12:d2:
50:36:11:c0:04:6c:9b:a6:87:08:80:db:f6:13:54:58:d3:70:
79:0b:1a:64:e9:95:a2:97:59:be:16:ff:65:31:56:6d:25:ee:
c0:d8:e8:bd:7f:df:e4:37:11:d2:39:d5:56:c8:0b:0c:4f:72:
ed:78:94:0b:17:b0:d4:72:1e:d4:ec:22:74:66:5a:82:a4:ff:
0f:a9:f3:49:e6:8f:5a:f1:ea:20:fe:c3:46:37:c8:d1:4e:e5:
19:5e:58:3a:06:54:72:03:db:86:62:4e:69:62:de:40:07:66:
94:5b:98:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkWvwRYGueyAmRlCSZlN1ROMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NjZlNDk3ZThiYTkyODMwODQ3YjRkOGI2NzEwMzI1ZDIz
YmRhODUwHhcNMjUwOTA0MjIwMDQxWhcNMjUwOTA1MjIwMDQxWjAzMTEwLwYDVQQD
EyhhZTVlY2ExMzc4ODk4MGFiMzkyYjAxNTNmMDA2YWYxYTJkMDhiNDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9h3ewrC3TKFSFZJc5Jm74TeQW9HW
oykU0fer0WYwNWnVHJ1OsQIvl+18Oqhya3dfvp28ihf7++8Lju2z49+tWoNJDLvH
LKWMjRwzZdcEFYeZr1OynhdGUSfXwNTP+QS8SLX7eKRW5jWS5+hE7HHv79M9i9oW
6Ag8Kf+dTAy4AiLA1X/bI5Ecy0SmD2AoVTxl/QTmlHMbCLF/iwlcOgdb2bhWq/Uu
zwq44U+5/ly2S+KtS88MD4IyLp4zAW0X+ZB5u/VBAaqWu0bgwhOKI9KhyBy+qDUZ
24WI/CgWk8J0L3cNitIcFXldESC5x6KJuvG4GpkrxLVt6+Y0TzZWBdTp7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5eyhN4iYCrOSsBU/AGrxotCLQlMB8GA1UdIwQY
MBaAFDRm5JfoupKDCEe02LZxAyXSO9qFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkdia2wtaTZrb01JUjdUWXRuRURKZEk3Mm9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80NDg0NmQtNTVkMC00YTIwLWJkMTEt
ZGNhZDA4ZjJmMjNmLzEvTkdia2wtaTZrb01JUjdUWXRuRURKZEk3Mm9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80NDg0NmQtNTVkMC00YTIwLWJkMTEtZGNhZDA4ZjJmMjNm
LzEvTkdia2wtaTZrb01JUjdUWXRuRURKZEk3Mm9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEw3d9l+O
2ioFT+4yIqJdnC9PwSx12M0raqbQvp/hzzl6aASsGmt1PBtOVb6tw31hOiZ8SIBB
kkRIV0eY8d7+bNmUvI7ydAZz/N0kX3dcc1XUhTpGzbBH8G047FxJidZsFrtafYLX
d7Mcrv1fm25Q3eVkCCBmkG9P3qIoV4RoY63IpA9FMqT3DvzL031xrhLSUDYRwARs
m6aHCIDb9hNUWNNweQsaZOmVopdZvhb/ZTFWbSXuwNjovX/f5DcR0jnVVsgLDE9y
7XiUCxew1HIe1OwidGZagqT/D6nzSeaPWvHqIP7DRjfI0U7lGV5YOgZUcgPbhmJO
aWLeQAdmlFuYdQ==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:03:21 2025 by rpki-client