Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
File: NhIf0uc0bus8H451uTyE-VhB9EY.mft (raw, json)
Hash identifier: 5fyjGrDVYDZFRUgpx3FkG8B7Z/QbVtbdE07lfjzlKbU=
Subject key identifier: EA:1B:AC:FC:DF:D0:B6:D9:68:99:79:AF:D0:CB:14:61:39:45:DC:6E
Authority key identifier: 36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46
Certificate issuer: /CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446
Certificate serial: 019922C382D4A51C6A907FAC7195834BE1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
Manifest number: 0388
Signing time: Sun 07 Sep 2025 06:01:02 +0000
Manifest this update: Sun 07 Sep 2025 06:01:02 +0000
Manifest next update: Mon 08 Sep 2025 06:01:02 +0000
Files and hashes: 1: NhIf0uc0bus8H451uTyE-VhB9EY.crl (hash: cK2SzP8T9HnOosUcsJgCaUSbhnO9+tNKnp/FUJVZnjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:82:d4:a5:1c:6a:90:7f:ac:71:95:83:4b:e1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446
Validity
Not Before: Sep 7 06:01:02 2025 GMT
Not After : Sep 8 06:01:02 2025 GMT
Subject: CN=ea1bacfcdfd0b6d9689979afd0cb14613945dc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6e:0d:d4:a9:43:d3:b1:53:94:89:b2:6a:c9:
17:38:7f:90:74:0a:72:3c:69:68:41:f3:73:c6:26:
3b:e2:c8:59:15:d1:7f:cb:48:bc:dd:4a:13:6c:5f:
ff:44:65:bd:b8:f0:bd:47:82:f8:65:89:6b:62:19:
1e:34:af:5e:a1:8d:f5:ae:45:0e:2e:b9:ff:6f:17:
37:7a:2c:9c:42:5d:71:d3:c8:e8:a8:dd:86:e3:e1:
c1:21:bc:2e:97:2a:b5:d1:40:e0:fa:b9:4f:1e:48:
40:ee:37:d7:dd:9d:02:b6:43:91:c2:90:7b:ca:90:
07:fa:84:40:d2:fe:ea:ec:19:6d:66:b3:f9:46:50:
6b:41:d6:fa:42:9d:3a:a8:97:8d:a7:fd:36:19:8e:
93:69:bd:d4:6f:48:d7:17:08:1e:14:83:1a:5d:3c:
b1:7b:c9:9a:8c:3b:c7:d2:4f:24:37:68:2a:b7:46:
1b:98:42:d8:9d:03:fb:79:2b:a4:9d:d1:89:8a:1d:
bd:79:71:77:e4:6a:1d:4e:3d:e2:29:95:7c:fe:b8:
67:94:8f:76:1d:fd:0d:e7:44:5a:a2:1b:1d:de:a2:
5f:91:43:8f:10:f4:b8:a1:cc:8c:33:c1:6d:b5:45:
38:81:c9:cf:2e:6d:9f:ca:45:24:a8:98:ef:5f:d3:
ef:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1B:AC:FC:DF:D0:B6:D9:68:99:79:AF:D0:CB:14:61:39:45:DC:6E
X509v3 Authority Key Identifier:
keyid:36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5c:48:42:03:a2:1f:58:b0:b9:34:8a:b0:5b:43:37:cd:c3:
08:0a:c3:b6:4c:4a:7b:e4:0b:af:9c:34:ff:bf:2c:86:c5:cf:
72:51:16:da:eb:73:d5:83:0c:b8:2f:54:dc:5a:83:ff:c0:06:
9d:1e:3a:7c:ff:c0:ec:3e:97:b1:05:18:97:a7:3b:77:9b:a9:
52:95:3d:0f:ac:c4:d8:9f:fb:3c:b5:50:d2:d8:d4:7b:4a:fb:
84:a8:09:05:65:6e:f2:c8:a3:f9:d2:12:cb:ed:92:be:39:0e:
3c:24:29:9f:10:7f:18:d5:39:7a:16:ad:68:83:ca:7b:8c:fa:
45:bd:2f:f6:3a:b5:ef:4c:74:57:77:b0:e7:a4:d3:28:51:c5:
03:63:8a:87:7e:1c:86:5c:d7:cb:4b:08:a9:8d:9c:7f:b5:ea:
7c:5b:7a:d5:bf:7d:15:97:91:98:ea:92:a7:15:f3:1d:77:5f:
89:8b:52:b3:bc:f1:ce:62:ab:36:11:42:7e:7b:ca:17:69:7c:
53:ac:11:93:e1:15:d9:fe:b3:35:ed:5a:d3:4c:85:8b:54:44:
3b:4e:31:27:f7:1e:79:d3:43:c2:dc:63:af:b9:eb:e8:33:99:
22:08:de:fa:bf:45:7c:84:9f:3e:f7:a0:6b:18:19:bb:46:61:
41:33:6d:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw4LUpRxqkH+scZWDS+HnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTIxZmQyZTczNDZlZWIzYzFmOGU3NWI5M2M4NGY5NTg0
MWY0NDYwHhcNMjUwOTA3MDYwMTAyWhcNMjUwOTA4MDYwMTAyWjAzMTEwLwYDVQQD
EyhlYTFiYWNmY2RmZDBiNmQ5Njg5OTc5YWZkMGNiMTQ2MTM5NDVkYzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw24N1KlD07FTlImyaskXOH+QdApy
PGloQfNzxiY74shZFdF/y0i83UoTbF//RGW9uPC9R4L4ZYlrYhkeNK9eoY31rkUO
Lrn/bxc3eiycQl1x08joqN2G4+HBIbwulyq10UDg+rlPHkhA7jfX3Z0CtkORwpB7
ypAH+oRA0v7q7BltZrP5RlBrQdb6Qp06qJeNp/02GY6Tab3Ub0jXFwgeFIMaXTyx
e8majDvH0k8kN2gqt0YbmELYnQP7eSukndGJih29eXF35GodTj3iKZV8/rhnlI92
Hf0N50Raohsd3qJfkUOPEPS4ocyMM8FttUU4gcnPLm2fykUkqJjvX9PvFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOobrPzf0LbZaJl5r9DLFGE5RdxuMB8GA1UdIwQY
MBaAFDYSH9LnNG7rPB+Odbk8hPlYQfRGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhJZjB1YzBidXM4SDQ1MXVUeUUtVmhCOUVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yMWQ1NjAtY2IxNS00NmMzLWFmMzQt
YTg5ZTkzN2UyOWQxLzEvTmhJZjB1YzBidXM4SDQ1MXVUeUUtVmhCOUVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yMWQ1NjAtY2IxNS00NmMzLWFmMzQtYTg5ZTkzN2UyOWQx
LzEvTmhJZjB1YzBidXM4SDQ1MXVUeUUtVmhCOUVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVxIQgOi
H1iwuTSKsFtDN83DCArDtkxKe+QLr5w0/78shsXPclEW2utz1YMMuC9U3FqD/8AG
nR46fP/A7D6XsQUYl6c7d5upUpU9D6zE2J/7PLVQ0tjUe0r7hKgJBWVu8sij+dIS
y+2SvjkOPCQpnxB/GNU5ehataIPKe4z6Rb0v9jq170x0V3ew56TTKFHFA2OKh34c
hlzXy0sIqY2cf7XqfFt61b99FZeRmOqSpxXzHXdfiYtSs7zxzmKrNhFCfnvKF2l8
U6wRk+EV2f6zNe1a00yFi1REO04xJ/ceedNDwtxjr7nr6DOZIgje+r9FfISfPveg
axgZu0ZhQTNtZg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:41 2025 by rpki-client