Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: 1OHWVJbT+FawM+mrYDQBuGrDXWR/Ufut2daCp+aNKFE=
Subject key identifier: E3:9D:81:6D:88:7F:0A:59:11:0D:77:AA:FB:03:7A:D3:DA:A7:69:1A
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 0199239FCD45042255956A24595601D8BCD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 1695
Signing time: Sun 07 Sep 2025 10:01:39 +0000
Manifest this update: Sun 07 Sep 2025 10:01:39 +0000
Manifest next update: Mon 08 Sep 2025 10:01:39 +0000
Files and hashes: 1: 1-ULf-aQJ3fC-9_w7BYQULZHTnNw.roa (hash: A5jmxQDIS4oGLvhKUV0INjhfzuBh6+1jpId+3WjZlWc=)
2: 5tPAApTwknAaRXxKmBtwLwGK11k.roa (hash: 8ijfuuyCQYG0KzVjWtjN0KlVGd8B1/5JOo3YUUGUm/k=)
3: 6Jm2eoj9ZSHN-oOUb9pQlIZSyeM.roa (hash: g919cnEgUex9Vq6Cq0vNxzfmvBW8lAFZJ89+7u0kuuo=)
4: LfROe2I71eG6M7Z-gNeANYWPFpE.roa (hash: jYCJfZL3yCQ4hYWioDRR7adhtNmlY65zHqG2PPbV/Qo=)
5: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: T5rztx/bl+uSDLlP9I5KJqxZ4vvN1IA0qCgsjJ4813o=)
6: WB5IR-rncEh5erhRHuCyer1roLg.roa (hash: xTtXPbZY0LbMC6jqC5khGuSb0ZaN44bjPSvJlY54fv0=)
7: dkDLfL12Mvt9oOTN814F8r3xyp4.roa (hash: Bf4qm+dtST2tX+x1TcvddLF9nRprjThyue/B71J9XDM=)
8: zEolHRB2AMzAHPn0pcNPX5SKSz8.roa (hash: hfJMojoDujNrnnYpdExfaP44xHymzJk56kqZMc0LOZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:cd:45:04:22:55:95:6a:24:59:56:01:d8:bc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Sep 7 10:01:39 2025 GMT
Not After : Sep 8 10:01:39 2025 GMT
Subject: CN=e39d816d887f0a59110d77aafb037ad3daa7691a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:39:24:bc:93:ab:32:91:1a:81:7f:0f:ca:29:
1b:40:a5:0b:d0:ad:4b:46:8b:f9:58:80:3d:6c:e3:
e1:07:10:57:9d:af:ad:c6:5a:2b:ee:03:a7:88:ac:
5b:7e:9c:7a:6e:cf:bd:2e:26:f4:3c:87:2b:52:a3:
58:50:ef:bd:12:77:36:1b:53:c4:f0:db:ac:4b:ac:
a6:6f:c8:19:d6:6d:cc:8a:06:39:b3:19:0e:f4:6a:
9a:c3:03:ab:81:33:be:57:89:07:30:b8:73:68:bc:
3b:7e:22:8c:5e:3c:f4:a0:aa:e1:f2:76:70:0a:9a:
5f:c2:fa:d5:37:cb:29:80:57:70:9c:68:17:a7:73:
55:b5:1b:a9:b6:03:4c:bd:d8:e8:4b:9c:47:4b:33:
3e:e2:56:35:6b:e2:45:b7:2b:68:49:65:47:52:37:
32:ba:de:1b:76:0b:cb:18:39:ba:72:b1:f9:99:83:
03:c4:93:d6:8b:a6:a1:92:44:45:86:a4:0e:c3:ac:
ab:9d:bc:90:78:a2:57:f8:dd:17:e2:fb:35:91:73:
99:e7:f7:1a:5a:fc:df:e6:34:dd:86:25:00:55:3d:
97:d6:7a:f8:c4:a2:fb:67:fe:24:da:f2:f1:ae:85:
89:b4:bf:a6:bd:54:dc:2a:03:b5:90:01:f4:b1:ab:
6a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9D:81:6D:88:7F:0A:59:11:0D:77:AA:FB:03:7A:D3:DA:A7:69:1A
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ee:12:49:27:06:ca:39:57:b3:62:91:7b:f5:fb:47:75:98:
41:f6:0c:27:15:04:6e:5c:45:a9:5d:0d:34:b3:a6:b6:3f:23:
df:0f:e0:24:36:bf:73:c0:c8:c5:d5:c5:ec:ac:46:57:2e:1d:
c0:ce:21:d1:60:6d:d9:89:87:9f:2e:d8:6b:9d:ef:ec:6a:ea:
6a:7d:67:ec:c1:82:10:b2:48:03:bb:d4:eb:73:1b:4f:5d:b1:
eb:a2:1d:1f:18:98:a5:cd:0d:d1:dc:d2:0b:25:31:6d:98:6c:
41:81:cc:b6:6b:3b:02:22:09:ce:24:4e:c6:ac:4e:6d:a2:88:
22:14:56:8b:91:c3:17:32:8a:7b:f3:3a:e5:ac:0c:aa:64:cb:
e4:fb:dc:9d:e3:11:7a:c9:25:5b:22:a3:2b:0e:02:9a:51:75:
91:bc:f7:20:ab:e2:ee:e4:78:e7:22:f6:fb:f7:34:00:65:18:
4b:a0:d7:7e:22:ff:b7:68:28:09:4d:50:c1:a9:f4:8d:2e:9b:
bf:f7:0c:e6:59:c4:9d:01:01:db:62:00:5f:a5:ac:3e:a6:18:
f3:61:43:a5:ac:f7:14:6f:b3:a4:fc:f9:7f:1a:e4:20:19:8c:
4c:28:38:e2:c1:78:12:1a:16:e2:9e:df:4b:12:12:87:d7:35:
50:7f:b0:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn81FBCJVlWokWVYB2LzTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MmY4OTE5ZTZiYzFlZjU2NjM0ODkwMThmYzg3NWJlMzRj
MGYyNGMwHhcNMjUwOTA3MTAwMTM5WhcNMjUwOTA4MTAwMTM5WjAzMTEwLwYDVQQD
EyhlMzlkODE2ZDg4N2YwYTU5MTEwZDc3YWFmYjAzN2FkM2RhYTc2OTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjkkvJOrMpEagX8PyikbQKUL0K1L
Rov5WIA9bOPhBxBXna+txlor7gOniKxbfpx6bs+9Lib0PIcrUqNYUO+9Enc2G1PE
8NusS6ymb8gZ1m3MigY5sxkO9GqawwOrgTO+V4kHMLhzaLw7fiKMXjz0oKrh8nZw
CppfwvrVN8spgFdwnGgXp3NVtRuptgNMvdjoS5xHSzM+4lY1a+JFtytoSWVHUjcy
ut4bdgvLGDm6crH5mYMDxJPWi6ahkkRFhqQOw6yrnbyQeKJX+N0X4vs1kXOZ5/ca
Wvzf5jTdhiUAVT2X1nr4xKL7Z/4k2vLxroWJtL+mvVTcKgO1kAH0satqcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOdgW2IfwpZEQ13qvsDetPap2kaMB8GA1UdIwQY
MBaAFDUviRnmvB71ZjSJAY/Idb40wPJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAt
ZTNmY2IyM2UzNDM4LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAtZTNmY2IyM2UzNDM4
LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbu4SSScG
yjlXs2KRe/X7R3WYQfYMJxUEblxFqV0NNLOmtj8j3w/gJDa/c8DIxdXF7KxGVy4d
wM4h0WBt2YmHny7Ya53v7Grqan1n7MGCELJIA7vU63MbT12x66IdHxiYpc0N0dzS
CyUxbZhsQYHMtms7AiIJziROxqxObaKIIhRWi5HDFzKKe/M65awMqmTL5PvcneMR
esklWyKjKw4CmlF1kbz3IKvi7uR45yL2+/c0AGUYS6DXfiL/t2goCU1Qwan0jS6b
v/cM5lnEnQEB22IAX6WsPqYY82FDpaz3FG+zpPz5fxrkIBmMTCg44sF4EhoW4p7f
SxISh9c1UH+wFQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:17 2025 by rpki-client