Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
File: nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft (raw, json)
Hash identifier: 6VBp9/IfNj0y+C3dgJC41X6cmpCE3v6vy/mwp7+1fGg=
Subject key identifier: 8D:BB:25:0C:B6:C7:0C:CA:E7:53:44:B4:E3:BD:0E:C2:78:D1:1D:99
Authority key identifier: 9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9
Certificate issuer: /CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
Certificate serial: 0198D4730DF7FF8846414B7310F72E1F1613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
Manifest number: 08C9
Signing time: Sat 23 Aug 2025 01:02:46 +0000
Manifest this update: Sat 23 Aug 2025 01:02:46 +0000
Manifest next update: Sun 24 Aug 2025 01:02:46 +0000
Files and hashes: 1: 91cINY9woI_zH6e1r3Wkrenr7Yg.roa (hash: 3OQuboWAG+RQMvSWcHif8T7bhj5yD9lJGrTB5RXF988=)
2: nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl (hash: 9rG1H/j2eHdU8pG8xMObgkARPgyicd37lzG2yGxU4Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:0d:f7:ff:88:46:41:4b:73:10:f7:2e:1f:16:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
Validity
Not Before: Aug 23 01:02:46 2025 GMT
Not After : Aug 24 01:02:46 2025 GMT
Subject: CN=8dbb250cb6c70ccae75344b4e3bd0ec278d11d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:df:9f:8b:7b:8e:4e:dd:f1:10:6b:fd:e8:
2a:39:b6:ee:27:9e:18:6d:42:33:17:28:74:57:17:
5e:85:85:bb:6f:ae:ba:70:11:b7:7b:1e:41:8c:ad:
09:36:b0:9a:94:d7:b9:a7:91:f9:e3:97:fc:1a:62:
c8:b2:4b:d7:67:47:cd:ab:1a:c1:b5:f3:99:01:e9:
9e:d8:5d:cd:6b:e7:33:95:18:69:e5:f4:a3:4c:e9:
55:a9:c6:5f:63:14:b4:68:27:a3:d7:e4:b8:e1:0d:
ce:4f:9c:f4:e9:1b:25:fb:4e:32:b0:e6:3e:1b:53:
90:8f:e7:9a:37:c0:3a:ce:b5:ee:a8:00:f6:21:4e:
3f:a8:c3:c8:cf:7d:4a:17:43:7d:42:e6:1f:cf:09:
24:29:23:17:1c:ff:e1:58:2f:0e:ab:2d:f9:58:4b:
f4:d5:01:0d:48:06:81:aa:5b:37:2c:53:1f:8d:46:
64:1b:85:64:37:51:6b:51:ba:c2:d7:2a:6c:ae:ee:
26:54:c1:02:9b:aa:24:b9:34:49:2f:87:5a:d4:a4:
5f:23:98:11:02:cc:3b:8f:09:6d:f5:16:95:21:7d:
8f:b8:b4:20:be:49:27:5e:44:e4:43:21:7a:9f:86:
52:12:fa:83:7a:54:bb:ba:8d:1f:87:f7:62:0a:1b:
09:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BB:25:0C:B6:C7:0C:CA:E7:53:44:B4:E3:BD:0E:C2:78:D1:1D:99
X509v3 Authority Key Identifier:
keyid:9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f4:ed:7d:b6:e9:6c:7a:54:85:39:34:1a:85:03:1e:57:eb:
79:c4:e4:8f:30:9e:71:44:0c:b9:1a:94:14:a0:97:71:66:00:
63:79:26:ce:39:4d:f3:1f:7e:68:e6:71:28:f7:ef:10:b0:78:
0a:f4:70:b6:80:eb:52:ba:55:28:be:e3:01:d2:31:05:7d:ef:
1e:3f:32:8b:8c:fe:c0:68:09:83:4f:ce:61:d1:e8:c3:b7:ee:
71:09:18:84:dd:81:0f:8e:b3:6a:3c:46:12:ae:bc:2b:3c:e6:
76:9f:0a:54:49:35:72:de:dd:ef:b7:85:a0:a6:55:fb:0d:4d:
46:f8:dd:d9:bb:4d:99:75:80:17:82:bf:25:6b:e8:54:16:8f:
97:b6:ad:23:13:8b:b3:09:30:04:ad:ec:36:01:19:a9:3f:af:
8d:43:7b:7d:11:02:96:92:84:79:67:22:83:1b:de:89:f9:80:
e9:20:3e:0f:72:05:6e:11:65:b6:d3:30:e1:63:9c:e1:b4:7f:
6e:42:88:54:46:e3:d3:ae:68:27:95:c1:d2:76:b4:07:50:9a:
02:59:d6:db:99:5f:c2:49:c2:2f:10:9b:3a:71:b6:d4:ab:ff:
7d:be:0b:df:4c:f7:80:40:93:a5:5e:08:48:25:5e:89:9a:e1:
43:66:52:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcw33/4hGQUtzEPcuHxYTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZjE4NWU5OWZmZTYxMTUyN2EwZTk0MzMxMTUxZmZlMmVl
NzJhZTkwHhcNMjUwODIzMDEwMjQ2WhcNMjUwODI0MDEwMjQ2WjAzMTEwLwYDVQQD
Eyg4ZGJiMjUwY2I2YzcwY2NhZTc1MzQ0YjRlM2JkMGVjMjc4ZDExZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunrfn4t7jk7d8RBr/egqObbuJ54Y
bUIzFyh0VxdehYW7b666cBG3ex5BjK0JNrCalNe5p5H545f8GmLIskvXZ0fNqxrB
tfOZAeme2F3Na+czlRhp5fSjTOlVqcZfYxS0aCej1+S44Q3OT5z06Rsl+04ysOY+
G1OQj+eaN8A6zrXuqAD2IU4/qMPIz31KF0N9QuYfzwkkKSMXHP/hWC8Oqy35WEv0
1QENSAaBqls3LFMfjUZkG4VkN1FrUbrC1ypsru4mVMECm6okuTRJL4da1KRfI5gR
Asw7jwlt9RaVIX2PuLQgvkknXkTkQyF6n4ZSEvqDelS7uo0fh/diChsJlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI27JQy2xwzK51NEtOO9DsJ40R2ZMB8GA1UdIwQY
MBaAFJ3xhemf/mEVJ6DpQzEVH/4u5yrpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy82MGU1MWYtYjgwMy00NzRkLWIyN2Et
ZjI5OTBjZWI5NGVjLzEvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy82MGU1MWYtYjgwMy00NzRkLWIyN2EtZjI5OTBjZWI5NGVj
LzEvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfTtfbbp
bHpUhTk0GoUDHlfrecTkjzCecUQMuRqUFKCXcWYAY3kmzjlN8x9+aOZxKPfvELB4
CvRwtoDrUrpVKL7jAdIxBX3vHj8yi4z+wGgJg0/OYdHow7fucQkYhN2BD46zajxG
Eq68Kzzmdp8KVEk1ct7d77eFoKZV+w1NRvjd2btNmXWAF4K/JWvoVBaPl7atIxOL
swkwBK3sNgEZqT+vjUN7fREClpKEeWcigxveifmA6SA+D3IFbhFlttMw4WOc4bR/
bkKIVEbj065oJ5XB0na0B1CaAlnW25lfwknCLxCbOnG21Kv/fb4L30z3gECTpV4I
SCVeiZrhQ2ZS3A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:55 2025 by rpki-client