Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
File: nA1VQL3NMwUrwA__JmM4vzzIKoA.mft (raw, json)
Hash identifier: U1Lhh60Wcj6EUPsD/Tb3r87BJaA8aRaRnGZbh90ICkM=
Subject key identifier: 74:88:1F:90:00:8E:03:09:1A:96:B3:8A:F7:D5:80:E0:A9:C8:B7:EE
Authority key identifier: 9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
Certificate issuer: /CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Certificate serial: 0197B8FD20D46342B9253AD906882FCBDBEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
Manifest number: 0AA8
Signing time: Sun 29 Jun 2025 00:01:26 +0000
Manifest this update: Sun 29 Jun 2025 00:01:26 +0000
Manifest next update: Mon 30 Jun 2025 00:01:26 +0000
Files and hashes: 1: dOMaomaM3zc_oZf2l_KGgZkjQjM.roa (hash: ZA8CPvYUiDN0MdAy8uYPcmT72kE+r1MAEa1eMhF5nMk=)
2: nA1VQL3NMwUrwA__JmM4vzzIKoA.crl (hash: GKo4R4u8Z8T0OZ+gjG4pGE/boCuYK3AkvOXVbQ7Bxt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:20:d4:63:42:b9:25:3a:d9:06:88:2f:cb:db:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Validity
Not Before: Jun 29 00:01:26 2025 GMT
Not After : Jun 30 00:01:26 2025 GMT
Subject: CN=74881f90008e03091a96b38af7d580e0a9c8b7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9b:e7:c9:40:69:98:76:5a:6d:91:26:f6:e4:
9c:67:2d:72:e3:ea:25:d8:3d:96:34:6d:a5:22:7c:
36:64:58:47:34:57:59:f0:43:20:dc:ae:5d:38:a0:
29:01:f1:2e:a0:27:eb:9f:de:f1:55:23:04:fb:f0:
0b:17:91:92:d7:16:b4:c9:26:98:ff:5c:14:42:2e:
2c:95:84:ec:d9:58:4a:1b:f5:24:bf:05:95:8b:7a:
2a:66:b1:a7:5c:bd:a4:e6:58:c7:a7:4d:f0:20:e5:
6a:75:8b:95:ef:c9:40:8f:a4:50:d5:73:b4:49:fb:
ef:91:3b:28:09:3f:c0:1d:0a:64:eb:e3:11:09:96:
d0:6a:41:db:d3:81:57:8d:0e:e6:35:b8:4c:32:d5:
f8:85:7c:47:0e:40:ad:2b:fd:24:18:2d:2e:e4:90:
f1:62:43:dc:ae:4a:06:1b:8f:b2:18:67:12:f6:88:
70:cc:17:34:c6:8a:d1:eb:b4:00:db:e7:6b:aa:e4:
ba:bb:bf:45:7b:5f:fd:6b:7d:e6:a7:26:7b:61:4b:
a5:4f:f5:d6:2c:b2:53:59:39:9c:d6:11:2e:ca:d3:
fe:a0:e5:fe:6c:86:4d:b4:e0:f1:89:51:dc:53:b0:
8b:1e:f6:cd:8a:99:07:40:cc:e3:d8:c6:16:39:54:
fc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:88:1F:90:00:8E:03:09:1A:96:B3:8A:F7:D5:80:E0:A9:C8:B7:EE
X509v3 Authority Key Identifier:
keyid:9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:14:70:cf:24:bc:6c:00:c1:45:82:30:b1:49:3e:8d:6e:67:
88:20:9b:cd:43:0b:79:94:64:97:5f:fd:d1:93:3b:16:0d:c3:
da:b8:c3:77:29:d4:64:25:ff:c3:47:76:ec:23:eb:28:1c:c8:
89:5f:da:f7:ef:8c:2b:89:86:97:02:f1:88:21:e0:2e:e3:d4:
09:d4:9a:d8:8f:36:0a:12:24:7a:7b:53:58:ee:39:92:6f:43:
2d:b3:9c:f6:ac:0e:fe:f9:8b:4c:86:a4:4d:37:49:67:15:58:
5f:a6:fe:e0:c4:fb:22:55:6f:ad:59:e6:04:fe:05:58:54:7f:
a3:71:b3:3d:46:cb:25:04:fe:71:62:0a:17:9b:32:80:10:9b:
1a:b5:d3:95:ab:03:e9:53:3f:4b:f5:0d:bd:39:ab:2b:09:39:
1b:92:28:8d:6a:92:89:d0:d7:32:f4:a5:06:ac:b5:40:91:b4:
df:44:3d:3e:4b:14:13:c5:4a:cd:05:8b:3d:d1:84:2c:a2:1c:
42:12:27:79:9e:0c:8a:cd:8a:7b:ac:db:63:7d:0e:0a:8e:de:
9d:97:f4:95:b4:54:41:63:f2:24:d8:4d:e9:f9:cc:c0:57:8f:
be:6f:82:38:fd:8c:9a:29:7c:4b:68:7c:c8:fe:be:df:b0:4e:
94:33:0c:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/SDUY0K5JTrZBogvy9vvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMGQ1NTQwYmRjZDMzMDUyYmMwMGZmZjI2NjMzOGJmM2Nj
ODJhODAwHhcNMjUwNjI5MDAwMTI2WhcNMjUwNjMwMDAwMTI2WjAzMTEwLwYDVQQD
Eyg3NDg4MWY5MDAwOGUwMzA5MWE5NmIzOGFmN2Q1ODBlMGE5YzhiN2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pvnyUBpmHZabZEm9uScZy1y4+ol
2D2WNG2lInw2ZFhHNFdZ8EMg3K5dOKApAfEuoCfrn97xVSME+/ALF5GS1xa0ySaY
/1wUQi4slYTs2VhKG/UkvwWVi3oqZrGnXL2k5ljHp03wIOVqdYuV78lAj6RQ1XO0
SfvvkTsoCT/AHQpk6+MRCZbQakHb04FXjQ7mNbhMMtX4hXxHDkCtK/0kGC0u5JDx
YkPcrkoGG4+yGGcS9ohwzBc0xorR67QA2+drquS6u79Fe1/9a33mpyZ7YUulT/XW
LLJTWTmc1hEuytP+oOX+bIZNtODxiVHcU7CLHvbNipkHQMzj2MYWOVT8TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSIH5AAjgMJGpazivfVgOCpyLfuMB8GA1UdIwQY
MBaAFJwNVUC9zTMFK8AP/yZjOL88yCqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkExVlFMM05Nd1Vyd0FfX0ptTTR2enpJS29BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83MGRkYzQtZjljNC00OThiLTg1ZWUt
MTZmYzlkNDRlYzdkLzEvbkExVlFMM05Nd1Vyd0FfX0ptTTR2enpJS29BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi83MGRkYzQtZjljNC00OThiLTg1ZWUtMTZmYzlkNDRlYzdk
LzEvbkExVlFMM05Nd1Vyd0FfX0ptTTR2enpJS29BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRRwzyS8
bADBRYIwsUk+jW5niCCbzUMLeZRkl1/90ZM7Fg3D2rjDdynUZCX/w0d27CPrKBzI
iV/a9++MK4mGlwLxiCHgLuPUCdSa2I82ChIkentTWO45km9DLbOc9qwO/vmLTIak
TTdJZxVYX6b+4MT7IlVvrVnmBP4FWFR/o3GzPUbLJQT+cWIKF5sygBCbGrXTlasD
6VM/S/UNvTmrKwk5G5IojWqSidDXMvSlBqy1QJG030Q9PksUE8VKzQWLPdGELKIc
QhIneZ4Mis2Ke6zbY30OCo7enZf0lbRUQWPyJNhN6fnMwFePvm+COP2Mmil8S2h8
yP6+37BOlDMMDQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:31:48 2025 by rpki-client