Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
File: N5fgOfAlolqm6ZI5HZJCYGmbpns.mft (raw, json)
Hash identifier: lOzTEuXJ0ZhnDGwzPZV3B2h8GqVmvaRMRsfHFDED3wE=
Subject key identifier: F9:B3:C9:C2:78:D2:CE:EA:E6:60:76:55:FE:F7:E7:40:BD:9C:9C:A2
Authority key identifier: 37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
Certificate issuer: /CN=3797e039f025a25aa6e992391d924260699ba67b
Certificate serial: 0198D5BBAECD916161841BD983B91DC4B666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
Manifest number: 0FC4
Signing time: Sat 23 Aug 2025 07:01:43 +0000
Manifest this update: Sat 23 Aug 2025 07:01:43 +0000
Manifest next update: Sun 24 Aug 2025 07:01:43 +0000
Files and hashes: 1: N5fgOfAlolqm6ZI5HZJCYGmbpns.crl (hash: 6z9a4tLXd7jA7irbJCgXBJ4BNfe798ItcXWNLiFAF08=)
2: sVzqlUVXrHqVsVw4yhzSu1oYIjM.roa (hash: HaD8do3X9duYtx96VIyzNjLwjQlO2MrTlBSjfqbB5ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ae:cd:91:61:61:84:1b:d9:83:b9:1d:c4:b6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3797e039f025a25aa6e992391d924260699ba67b
Validity
Not Before: Aug 23 07:01:43 2025 GMT
Not After : Aug 24 07:01:43 2025 GMT
Subject: CN=f9b3c9c278d2ceeae6607655fef7e740bd9c9ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:3e:09:e6:3c:05:78:c4:67:98:19:8c:e5:
eb:e5:0f:6f:ed:26:bc:f7:14:7d:a5:d0:52:30:23:
6f:09:45:ee:b2:0a:b4:1b:ea:28:89:aa:d9:1f:2a:
42:51:9a:6b:3e:3a:6b:f7:e3:18:8f:30:a9:49:21:
ad:13:ee:63:52:49:5e:1a:eb:53:6e:9c:20:d6:dc:
41:8d:a1:79:63:40:16:ad:da:de:24:d5:da:82:43:
02:32:2b:a9:16:38:cb:94:44:87:f0:20:61:bf:59:
44:ed:43:fb:fe:55:77:c5:42:9b:d3:2b:34:e5:72:
8f:62:9e:cd:73:37:24:59:a0:6d:c1:7d:37:1c:5f:
f8:5c:4d:5b:4a:05:6e:44:b4:e6:95:17:75:f8:98:
a7:65:32:ea:3b:36:3e:f9:da:f1:c2:9e:3c:df:5b:
38:7c:b6:56:2a:81:6b:b3:fd:b6:9a:bd:97:70:8b:
9c:f1:08:86:32:d7:0c:c5:ed:ba:4d:01:18:1f:76:
e9:25:43:dd:66:3b:83:e4:56:f0:f0:62:45:2b:a5:
d6:c8:25:80:fa:b3:77:1f:f9:d4:01:2b:a9:b3:f8:
06:6d:e2:a4:41:6f:5e:7c:97:02:d0:cc:78:8a:6c:
ca:c1:17:ae:5d:19:12:4a:f0:7c:20:7f:37:76:13:
16:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B3:C9:C2:78:D2:CE:EA:E6:60:76:55:FE:F7:E7:40:BD:9C:9C:A2
X509v3 Authority Key Identifier:
keyid:37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:3f:a8:16:24:11:9a:f3:1a:93:2d:4e:c3:5c:6f:22:3d:6d:
0c:31:a0:80:95:f2:b9:28:f7:f7:a8:da:80:b9:c9:57:a2:9b:
c5:a0:63:92:10:ce:15:27:1d:6d:5f:10:7d:b3:fc:d3:c0:a9:
e0:49:38:df:e9:6e:c8:c0:6d:21:d3:d8:46:88:6a:20:83:d2:
97:50:1d:c9:8f:3a:a5:5f:65:d8:36:c8:3d:01:b6:7a:5d:0f:
28:9e:4a:e6:62:cf:e4:9a:a5:d6:08:59:fa:0e:bb:97:5a:e8:
5b:9b:de:40:44:8b:5b:28:ef:3c:11:7c:08:df:e8:5b:c7:97:
a4:76:3b:d4:cd:5e:50:6f:a2:99:ee:fe:63:73:bd:70:81:98:
51:36:cd:85:8a:97:6c:99:7d:a3:fa:b6:60:f4:0b:61:aa:60:
6e:64:0a:ed:0a:da:f7:ae:74:90:2c:71:e8:56:f0:a1:7f:8e:
5c:12:a3:e0:1c:d1:c4:16:84:23:12:99:68:68:16:21:d1:a7:
84:a5:50:4b:2c:87:6d:f5:1f:a2:0f:fc:38:3b:42:7f:83:9b:
80:f2:ac:53:1b:b6:a7:95:20:92:b2:4f:75:3c:6a:39:c9:b3:
b1:9c:18:e3:be:55:cc:fe:f4:d5:e9:c9:88:68:0b:e6:8c:09:
e0:ef:c8:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu67NkWFhhBvZg7kdxLZmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OTdlMDM5ZjAyNWEyNWFhNmU5OTIzOTFkOTI0MjYwNjk5
YmE2N2IwHhcNMjUwODIzMDcwMTQzWhcNMjUwODI0MDcwMTQzWjAzMTEwLwYDVQQD
EyhmOWIzYzljMjc4ZDJjZWVhZTY2MDc2NTVmZWY3ZTc0MGJkOWM5Y2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4Q+CeY8BXjEZ5gZjOXr5Q9v7Sa8
9xR9pdBSMCNvCUXusgq0G+ooiarZHypCUZprPjpr9+MYjzCpSSGtE+5jUkleGutT
bpwg1txBjaF5Y0AWrdreJNXagkMCMiupFjjLlESH8CBhv1lE7UP7/lV3xUKb0ys0
5XKPYp7NczckWaBtwX03HF/4XE1bSgVuRLTmlRd1+JinZTLqOzY++drxwp4831s4
fLZWKoFrs/22mr2XcIuc8QiGMtcMxe26TQEYH3bpJUPdZjuD5Fbw8GJFK6XWyCWA
+rN3H/nUASups/gGbeKkQW9efJcC0Mx4imzKwReuXRkSSvB8IH83dhMWbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmzycJ40s7q5mB2Vf7350C9nJyiMB8GA1UdIwQY
MBaAFDeX4DnwJaJapumSOR2SQmBpm6Z7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjVmZ09mQWxvbHFtNlpJNUhaSkNZR21icG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wYWJiOGEtOTc5OC00YmY4LWJhZTEt
YzFjMDVjZGI3ODQxLzEvTjVmZ09mQWxvbHFtNlpJNUhaSkNZR21icG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wYWJiOGEtOTc5OC00YmY4LWJhZTEtYzFjMDVjZGI3ODQx
LzEvTjVmZ09mQWxvbHFtNlpJNUhaSkNZR21icG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvD+oFiQR
mvMaky1Ow1xvIj1tDDGggJXyuSj396jagLnJV6KbxaBjkhDOFScdbV8QfbP808Cp
4Ek43+luyMBtIdPYRohqIIPSl1AdyY86pV9l2DbIPQG2el0PKJ5K5mLP5Jql1ghZ
+g67l1roW5veQESLWyjvPBF8CN/oW8eXpHY71M1eUG+ime7+Y3O9cIGYUTbNhYqX
bJl9o/q2YPQLYapgbmQK7Qra9650kCxx6FbwoX+OXBKj4BzRxBaEIxKZaGgWIdGn
hKVQSyyHbfUfog/8ODtCf4ObgPKsUxu2p5UgkrJPdTxqOcmzsZwY475VzP701enJ
iGgL5owJ4O/Ixw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:47 2025 by rpki-client