Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
File: Rns5TPikBRwWfUaLx7iSpx3uTQM.mft (raw, json)
Hash identifier: NxS9HtcGgihwhPLxl6bbun4diVk4ac0J6CIH45z0fpc=
Subject key identifier: 89:82:9D:8A:72:14:1B:82:0F:3C:A6:F7:86:FF:68:91:67:25:0D:FB
Authority key identifier: 46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03
Certificate issuer: /CN=467b394cf8a4051c167d468bc7b892a71dee4d03
Certificate serial: 0198D773534640A78340971D1CAD97C8417B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
Manifest number: 0A39
Signing time: Sat 23 Aug 2025 15:01:56 +0000
Manifest this update: Sat 23 Aug 2025 15:01:56 +0000
Manifest next update: Sun 24 Aug 2025 15:01:56 +0000
Files and hashes: 1: Rns5TPikBRwWfUaLx7iSpx3uTQM.crl (hash: NHqL6LICBYap6JpQUhns+4mq/vbLOQFFVQ0yUDsxsZk=)
2: dgAEK4wIhzdNcfF05upWmZfXZZk.roa (hash: U/vt5a1C9rZX//TwbwJI8SM4gcB/oWBETRm681WJLz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:53:46:40:a7:83:40:97:1d:1c:ad:97:c8:41:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467b394cf8a4051c167d468bc7b892a71dee4d03
Validity
Not Before: Aug 23 15:01:56 2025 GMT
Not After : Aug 24 15:01:56 2025 GMT
Subject: CN=89829d8a72141b820f3ca6f786ff689167250dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:55:e4:c2:9e:24:2c:0c:23:9a:74:d8:5a:c0:
42:dc:aa:33:28:fb:0a:2f:00:ee:53:6d:ef:f0:ed:
ff:d1:83:b9:a2:e6:fa:06:a5:47:c6:06:9d:dc:b7:
c9:78:de:d3:c7:d7:71:6e:1f:f2:83:52:6b:4b:92:
b5:75:15:2e:87:4d:ac:40:a9:a5:4b:7f:13:42:a8:
7c:3a:f0:72:9b:25:30:9a:bb:8f:08:65:bd:e3:68:
c1:bd:31:e8:dd:2d:ff:bb:3c:81:6a:d7:8e:72:29:
88:bd:d7:8c:c9:e5:f1:8f:aa:e6:10:c4:fd:bc:01:
b8:bd:c0:23:53:f1:80:ab:3c:e9:6e:1e:c4:63:40:
b9:07:b9:ab:d6:6e:61:d1:98:f0:13:9e:02:a6:23:
96:23:18:0f:9d:55:0c:ce:88:e8:cb:05:b1:4b:2c:
ea:41:75:84:34:d4:7b:0a:58:68:c3:9d:25:d1:f2:
92:9b:d4:70:13:cf:db:1f:6e:be:5c:46:d2:16:c8:
4c:14:be:84:00:6f:99:81:3c:71:de:dc:5e:5c:49:
5e:a3:b4:05:29:68:6c:13:8c:9f:b4:74:f2:82:b4:
4c:60:18:ea:f0:f9:b8:76:98:cf:ef:e4:92:7a:87:
68:92:8f:b4:a0:d5:3f:17:d3:66:93:17:2f:42:28:
2c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:82:9D:8A:72:14:1B:82:0F:3C:A6:F7:86:FF:68:91:67:25:0D:FB
X509v3 Authority Key Identifier:
keyid:46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0d:c4:cb:88:2c:82:6f:e3:11:7f:67:67:1a:0f:37:0d:8a:
fa:b3:8e:8c:c9:a0:a4:dd:71:f4:ac:16:e8:c4:01:32:9a:92:
69:5d:90:92:a4:77:93:05:0f:9e:1a:ec:60:27:8a:91:84:74:
a9:f9:52:55:a8:64:41:f1:1d:fa:b3:ba:7b:72:af:f4:86:7e:
df:8a:4f:8f:2f:e4:d7:e9:7c:4a:f0:8f:ab:1f:ea:55:ca:6c:
51:10:85:06:ef:f2:e3:c3:33:fa:94:cc:76:f4:9b:5d:33:77:
65:04:40:0b:fb:82:6b:12:6f:37:c1:c6:ac:d9:7c:8d:5a:2a:
8a:54:3a:bb:86:93:c4:dd:fe:79:f2:3e:8b:80:f2:5e:90:1a:
14:24:1b:f8:8a:9c:dd:25:f4:13:ac:70:74:90:92:c7:f4:17:
d6:26:64:df:fa:5c:75:58:c9:08:00:40:8a:d5:0d:73:4b:ac:
8c:35:38:57:51:06:25:ce:47:32:0b:ef:68:f0:58:cc:98:dc:
4e:2e:eb:96:15:91:71:8a:90:c4:d1:03:ee:56:0d:67:7e:77:
9c:33:99:83:39:b2:fe:9d:bf:d0:2b:85:ba:de:89:8e:92:36:
c7:9c:62:31:2c:79:cc:e9:c6:49:41:32:3a:f1:d8:47:f0:62:
85:10:8b:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXc1NGQKeDQJcdHK2XyEF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2N2IzOTRjZjhhNDA1MWMxNjdkNDY4YmM3Yjg5MmE3MWRl
ZTRkMDMwHhcNMjUwODIzMTUwMTU2WhcNMjUwODI0MTUwMTU2WjAzMTEwLwYDVQQD
Eyg4OTgyOWQ4YTcyMTQxYjgyMGYzY2E2Zjc4NmZmNjg5MTY3MjUwZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1Xkwp4kLAwjmnTYWsBC3KozKPsK
LwDuU23v8O3/0YO5oub6BqVHxgad3LfJeN7Tx9dxbh/yg1JrS5K1dRUuh02sQKml
S38TQqh8OvBymyUwmruPCGW942jBvTHo3S3/uzyBateOcimIvdeMyeXxj6rmEMT9
vAG4vcAjU/GAqzzpbh7EY0C5B7mr1m5h0ZjwE54CpiOWIxgPnVUMzojoywWxSyzq
QXWENNR7Clhow50l0fKSm9RwE8/bH26+XEbSFshMFL6EAG+ZgTxx3txeXEleo7QF
KWhsE4yftHTygrRMYBjq8Pm4dpjP7+SSeodoko+0oNU/F9NmkxcvQigs3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImCnYpyFBuCDzym94b/aJFnJQ37MB8GA1UdIwQY
MBaAFEZ7OUz4pAUcFn1Gi8e4kqcd7k0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm5zNVRQaWtCUndXZlVhTHg3aVNweDN1VFFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNWM4MDUtZjYwYy00NDJjLWFjNWQt
MGYwMWI1NjA2NTdjLzEvUm5zNVRQaWtCUndXZlVhTHg3aVNweDN1VFFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zNWM4MDUtZjYwYy00NDJjLWFjNWQtMGYwMWI1NjA2NTdj
LzEvUm5zNVRQaWtCUndXZlVhTHg3aVNweDN1VFFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGg3Ey4gs
gm/jEX9nZxoPNw2K+rOOjMmgpN1x9KwW6MQBMpqSaV2QkqR3kwUPnhrsYCeKkYR0
qflSVahkQfEd+rO6e3Kv9IZ+34pPjy/k1+l8SvCPqx/qVcpsURCFBu/y48Mz+pTM
dvSbXTN3ZQRAC/uCaxJvN8HGrNl8jVoqilQ6u4aTxN3+efI+i4DyXpAaFCQb+Iqc
3SX0E6xwdJCSx/QX1iZk3/pcdVjJCABAitUNc0usjDU4V1EGJc5HMgvvaPBYzJjc
Ti7rlhWRcYqQxNED7lYNZ353nDOZgzmy/p2/0CuFut6JjpI2x5xiMSx5zOnGSUEy
OvHYR/BihRCL3g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:54:58 2025 by rpki-client