Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
File: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft (raw, json)
Hash identifier: 71BPlKKg/P9zxnuO+rmFONnTMnyZcBV2F0bK4ILTSps=
Subject key identifier: 0E:DD:0A:79:69:AB:84:7E:33:E4:13:74:8D:F5:C5:A1:B5:00:EE:C2
Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
Certificate issuer: /CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Certificate serial: 0198D73AE92B2F20D8386D9B759198703952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
Manifest number: 0FAE
Signing time: Sat 23 Aug 2025 14:00:18 +0000
Manifest this update: Sat 23 Aug 2025 14:00:18 +0000
Manifest next update: Sun 24 Aug 2025 14:00:18 +0000
Files and hashes: 1: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl (hash: SA2u1W9eMlwVh9w5g6K+4u1zUAVRPJYPah6w2iJtHiY=)
2: JKDoGMCZzjSndX7Ct7p3CxyKJR4.roa (hash: bo2ZyeRjzsKv0IsXJYurWXlAoWDOMikTk02MIFIPMnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:e9:2b:2f:20:d8:38:6d:9b:75:91:98:70:39:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Validity
Not Before: Aug 23 14:00:18 2025 GMT
Not After : Aug 24 14:00:18 2025 GMT
Subject: CN=0edd0a7969ab847e33e413748df5c5a1b500eec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:65:7c:e0:96:1d:f7:1c:4a:5c:37:4b:76:
42:33:4f:9e:98:25:4c:4d:b9:2c:0b:8f:f8:c7:02:
b4:bf:08:84:68:25:2d:a0:51:a2:74:47:04:c7:08:
c1:88:46:50:cd:a2:90:ef:54:31:5c:e6:8b:94:cb:
14:ca:68:75:09:b3:db:fc:0d:32:f6:9d:fd:3d:d5:
ed:6f:f9:9d:e7:08:8d:76:2e:71:c8:3c:bb:02:20:
93:d7:3b:5e:e6:26:b0:a6:61:ae:89:e6:64:8d:04:
77:ac:3c:31:48:39:e1:7d:82:8c:cc:42:ff:dc:b1:
5f:52:c2:5d:e9:b7:00:07:90:7c:91:72:fd:cc:ee:
58:8b:f7:91:df:8a:88:76:3d:56:d5:7b:23:97:0b:
07:31:a6:23:aa:45:1c:f8:67:c6:cb:3c:71:eb:80:
30:a3:ce:f6:a7:27:88:35:aa:98:6a:0e:48:f3:9e:
6a:fd:de:a7:1f:f9:7c:aa:d7:e8:9b:d4:4f:2f:b7:
9b:a7:62:2a:1a:d3:d6:11:7e:40:59:cc:04:90:63:
5c:77:7a:e2:de:05:d7:d6:4f:ca:06:9e:34:cc:9e:
1d:a7:9c:57:45:40:7d:b8:d7:f2:12:04:6f:cb:61:
9c:c3:aa:25:4e:31:5e:12:38:96:9c:40:51:44:05:
c4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DD:0A:79:69:AB:84:7E:33:E4:13:74:8D:F5:C5:A1:B5:00:EE:C2
X509v3 Authority Key Identifier:
keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b0:23:67:05:86:78:32:6f:1d:64:b7:81:b3:29:01:8a:d5:
6c:e5:a2:c8:0a:79:77:89:d2:e1:e9:38:73:d8:49:44:89:25:
c4:d0:ab:a2:c8:87:76:aa:b0:8a:c5:fb:6a:9d:2a:57:38:cf:
d4:88:19:65:10:5f:7f:ae:99:43:af:44:46:39:f9:a2:ec:c0:
06:18:c6:59:b3:10:dd:01:5a:55:6b:79:2c:10:d5:d0:83:c3:
d9:68:2f:34:e8:27:c2:b9:e6:73:96:71:8f:65:bf:67:5e:79:
2f:57:79:e1:cc:e8:e7:d7:a2:30:ef:f7:96:03:11:b1:bc:c7:
d7:35:3a:21:cf:3e:c8:7c:53:37:34:82:4a:0e:ad:f0:f1:7a:
2c:18:45:94:e5:07:15:bc:26:16:25:aa:c8:38:4c:80:0a:42:
4f:89:2f:ef:0f:5f:5a:fe:53:6c:90:a6:f9:bd:92:c8:f1:d7:
6f:2c:6b:1e:8f:ad:e6:33:b2:d0:a2:7d:28:91:58:22:27:56:
5d:50:4b:3d:73:36:cd:29:77:53:6d:5d:4b:25:d8:aa:0e:e3:
a1:da:84:5a:2c:0a:4d:cd:e5:88:7f:ad:a9:52:96:42:20:ae:
b7:ed:cf:1a:dc:06:f7:81:e1:01:70:47:0a:74:a4:50:63:80:
04:7e:6f:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXOukrLyDYOG2bdZGYcDlSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZGI4M2FkYzc2YmFmZjYwNTcwMGNjYTQ4Y2M0ZjZmOGM1
MjlmNjYwHhcNMjUwODIzMTQwMDE4WhcNMjUwODI0MTQwMDE4WjAzMTEwLwYDVQQD
EygwZWRkMGE3OTY5YWI4NDdlMzNlNDEzNzQ4ZGY1YzVhMWI1MDBlZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxllfOCWHfccSlw3S3ZCM0+emCVM
TbksC4/4xwK0vwiEaCUtoFGidEcExwjBiEZQzaKQ71QxXOaLlMsUymh1CbPb/A0y
9p39PdXtb/md5wiNdi5xyDy7AiCT1zte5iawpmGuieZkjQR3rDwxSDnhfYKMzEL/
3LFfUsJd6bcAB5B8kXL9zO5Yi/eR34qIdj1W1XsjlwsHMaYjqkUc+GfGyzxx64Aw
o872pyeINaqYag5I855q/d6nH/l8qtfom9RPL7ebp2IqGtPWEX5AWcwEkGNcd3ri
3gXX1k/KBp40zJ4dp5xXRUB9uNfyEgRvy2Gcw6olTjFeEjiWnEBRRAXEbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7dCnlpq4R+M+QTdI31xaG1AO7CMB8GA1UdIwQY
MBaAFPTbg63Ha6/2BXAMykjMT2+MUp9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU51RHJjZHJyX1lGY0F6S1NNeFBiNHhTbjJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81MDFlYTgtMTgzOS00N2ZlLWFhNDQt
MWI0MTdkNWUxZmJkLzEvOU51RHJjZHJyX1lGY0F6S1NNeFBiNHhTbjJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81MDFlYTgtMTgzOS00N2ZlLWFhNDQtMWI0MTdkNWUxZmJk
LzEvOU51RHJjZHJyX1lGY0F6S1NNeFBiNHhTbjJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLAjZwWG
eDJvHWS3gbMpAYrVbOWiyAp5d4nS4ek4c9hJRIklxNCrosiHdqqwisX7ap0qVzjP
1IgZZRBff66ZQ69ERjn5ouzABhjGWbMQ3QFaVWt5LBDV0IPD2WgvNOgnwrnmc5Zx
j2W/Z155L1d54czo59eiMO/3lgMRsbzH1zU6Ic8+yHxTNzSCSg6t8PF6LBhFlOUH
FbwmFiWqyDhMgApCT4kv7w9fWv5TbJCm+b2SyPHXbyxrHo+t5jOy0KJ9KJFYIidW
XVBLPXM2zSl3U21dSyXYqg7jodqEWiwKTc3liH+tqVKWQiCut+3PGtwG94HhAXBH
CnSkUGOABH5v/w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:56:05 2025 by rpki-client