Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
File: NGyrWUu9qbRA_afTl0y9RByY5ck.mft (raw, json)
Hash identifier: /5a3yB1ET6CZNLBy4PEKU0cktIYExJo0qAg45h0srog=
Subject key identifier: 72:01:C8:D4:6B:2C:0C:5B:90:E6:8E:E9:87:CD:67:8A:3B:64:2A:8D
Authority key identifier: 34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
Certificate issuer: /CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Certificate serial: 0199228C51925779C4EBD434934035C40F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 05:00:45 +0000
Manifest this update: Sun 07 Sep 2025 05:00:45 +0000
Manifest next update: Mon 08 Sep 2025 05:00:45 +0000
Files and hashes: 1: NGyrWUu9qbRA_afTl0y9RByY5ck.crl (hash: /toYLEaLDvs7iQghoQIibHlugP38X4gU3VjMdKYgF0Q=)
2: qWxHxzkwFGcxa5jSluitx-sE42Y.roa (hash: 3aDiNAN4onF/Cdaq+yTsD+jmRJ2OmMmFOaHRV5Fmhp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:51:92:57:79:c4:eb:d4:34:93:40:35:c4:0f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Validity
Not Before: Sep 7 05:00:45 2025 GMT
Not After : Sep 8 05:00:45 2025 GMT
Subject: CN=7201c8d46b2c0c5b90e68ee987cd678a3b642a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:c2:82:0f:8e:28:1c:87:87:a0:99:f2:a4:
eb:6b:4b:86:ca:15:35:de:a7:5c:22:fa:06:41:41:
96:76:3b:20:8c:73:9f:43:ed:70:8a:0b:f4:c1:58:
2c:60:74:0b:0f:79:d6:d1:97:d3:65:60:9e:9d:6e:
c2:8c:7a:69:2b:6e:4a:e6:b0:78:39:5a:4a:36:b8:
1d:86:11:5c:b2:b5:a5:a0:7b:7f:a8:65:1c:77:bf:
f8:d2:12:8b:57:bf:cd:a1:11:a1:0b:b9:06:5e:0a:
20:c4:ea:a1:f4:79:b3:eb:19:75:eb:3c:21:99:6b:
5e:5a:27:d7:02:ca:28:fe:d8:91:39:1a:61:d8:ec:
c8:c2:bf:d4:76:a9:1d:4d:bf:2b:34:26:eb:5a:da:
ca:6f:a7:28:eb:75:82:15:7c:71:c9:b3:5a:0f:25:
a8:df:52:5f:b1:94:07:76:f2:4c:ab:68:c4:30:dc:
68:73:f3:9c:b5:fb:db:df:a4:1f:f3:49:7d:55:38:
e4:d3:0c:67:7a:0d:0f:65:9b:03:dc:32:0d:14:b4:
e5:71:c1:e1:40:b2:04:57:c7:0f:05:e8:ee:32:af:
e0:ef:e2:98:ec:fb:1b:78:65:5e:11:28:d4:9a:64:
e2:83:91:99:9f:f9:76:c9:9c:10:07:a7:6f:dd:3d:
a5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:01:C8:D4:6B:2C:0C:5B:90:E6:8E:E9:87:CD:67:8A:3B:64:2A:8D
X509v3 Authority Key Identifier:
keyid:34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:37:9b:5b:05:42:e1:91:32:a0:d1:d6:1b:96:8e:c8:a7:41:
31:11:d4:94:3e:81:c0:3d:b8:e3:93:5b:19:c7:bb:56:45:73:
e3:68:f3:0c:ba:97:ce:e1:21:e1:ee:a7:c8:72:7b:a3:82:b7:
96:80:fd:97:2e:d6:24:4f:48:44:a0:a8:b8:de:5e:8d:b5:e4:
a8:3a:c0:5b:89:c2:a9:05:dd:ee:66:11:c6:7f:16:ea:0d:19:
20:00:b3:6a:60:fc:e9:37:5b:c2:74:98:e1:7e:41:42:05:1c:
81:9a:99:c4:11:36:ce:1d:7f:01:d1:57:a0:e3:96:3f:f1:6c:
5b:41:72:9b:6a:fe:4f:58:7c:90:f5:1f:8d:eb:4b:97:01:22:
39:58:e5:e0:56:3f:ca:f8:57:d0:0a:71:35:49:eb:10:3c:1b:
8e:65:63:57:4d:d4:31:8d:c1:dc:e6:aa:b5:ee:d5:fd:ca:cc:
a7:26:8d:d9:85:f8:15:c4:17:f5:9e:a3:b2:dd:68:a2:d1:67:
94:04:e2:cf:cd:61:b6:8b:46:f2:a2:78:e1:32:c1:14:fa:bd:
7e:66:26:d7:9f:2a:39:7a:ca:e6:23:9f:18:d3:32:b5:9e:17:
bb:a1:79:ee:8e:5b:b8:5d:7e:ab:f2:c7:53:ee:6b:d9:d1:4d:
cf:c1:bc:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijFGSV3nE69Q0k0A1xA9bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NmNhYjU5NGJiZGE5YjQ0MGZkYTdkMzk3NGNiZDQ0MWM5
OGU1YzkwHhcNMjUwOTA3MDUwMDQ1WhcNMjUwOTA4MDUwMDQ1WjAzMTEwLwYDVQQD
Eyg3MjAxYzhkNDZiMmMwYzViOTBlNjhlZTk4N2NkNjc4YTNiNjQyYThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttbCgg+OKByHh6CZ8qTra0uGyhU1
3qdcIvoGQUGWdjsgjHOfQ+1wigv0wVgsYHQLD3nW0ZfTZWCenW7CjHppK25K5rB4
OVpKNrgdhhFcsrWloHt/qGUcd7/40hKLV7/NoRGhC7kGXgogxOqh9Hmz6xl16zwh
mWteWifXAsoo/tiRORph2OzIwr/UdqkdTb8rNCbrWtrKb6co63WCFXxxybNaDyWo
31JfsZQHdvJMq2jEMNxoc/Octfvb36Qf80l9VTjk0wxneg0PZZsD3DINFLTlccHh
QLIEV8cPBejuMq/g7+KY7PsbeGVeESjUmmTig5GZn/l2yZwQB6dv3T2lKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIByNRrLAxbkOaO6YfNZ4o7ZCqNMB8GA1UdIwQY
MBaAFDRsq1lLvam0QP2n05dMvUQcmOXJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkd5cldVdTlxYlJBX2FmVGwweTlSQnlZNWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy85ZWY2NmQtMmQ1Zi00OWQ4LTkwNGMt
N2ExM2E1ZWZhZjVlLzEvTkd5cldVdTlxYlJBX2FmVGwweTlSQnlZNWNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy85ZWY2NmQtMmQ1Zi00OWQ4LTkwNGMtN2ExM2E1ZWZhZjVl
LzEvTkd5cldVdTlxYlJBX2FmVGwweTlSQnlZNWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDebWwVC
4ZEyoNHWG5aOyKdBMRHUlD6BwD2445NbGce7VkVz42jzDLqXzuEh4e6nyHJ7o4K3
loD9ly7WJE9IRKCouN5ejbXkqDrAW4nCqQXd7mYRxn8W6g0ZIACzamD86TdbwnSY
4X5BQgUcgZqZxBE2zh1/AdFXoOOWP/FsW0Fym2r+T1h8kPUfjetLlwEiOVjl4FY/
yvhX0ApxNUnrEDwbjmVjV03UMY3B3Oaqte7V/crMpyaN2YX4FcQX9Z6jst1ootFn
lATiz81htotG8qJ44TLBFPq9fmYm158qOXrK5iOfGNMytZ4Xu6F57o5buF1+q/LH
U+5r2dFNz8G8FQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:11 2025 by rpki-client