Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
File: nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft (raw, json)
Hash identifier: 9Oy7Xpu288mNsiOVoCgIj0y3A4IO3tGfWk6Ua8dWeKY=
Subject key identifier: B6:4F:E8:1D:82:BB:DD:F2:88:AE:13:6A:2E:F7:B4:A0:F7:77:64:36
Authority key identifier: 9D:0E:2B:9E:69:F5:62:DF:14:CF:77:2B:DE:05:F7:DA:CD:E2:59:61
Certificate issuer: /CN=9d0e2b9e69f562df14cf772bde05f7dacde25961
Certificate serial: 0197BFA3E49DDCC21AC311E98776CC59DE6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
Manifest number: 0C8C
Signing time: Mon 30 Jun 2025 07:01:18 +0000
Manifest this update: Mon 30 Jun 2025 07:01:18 +0000
Manifest next update: Tue 01 Jul 2025 07:01:18 +0000
Files and hashes: 1: aRmXLbWgvqCrB_ieixDwg5bWHH4.roa (hash: NkuU0nUuwUULqqtGwJsRiK14f6VjdQm0HvAAtBo3GJQ=)
2: nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl (hash: hGG782si7UdtvqyIA0SGtbyLLXANcvbku7kLOk1e550=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:a3:e4:9d:dc:c2:1a:c3:11:e9:87:76:cc:59:de:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e2b9e69f562df14cf772bde05f7dacde25961
Validity
Not Before: Jun 30 07:01:18 2025 GMT
Not After : Jul 1 07:01:18 2025 GMT
Subject: CN=b64fe81d82bbddf288ae136a2ef7b4a0f7776436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:55:44:10:5c:6f:64:28:f5:35:ae:25:78:
4a:56:f6:94:e6:00:54:41:62:33:f0:6d:75:09:c9:
be:69:1b:d4:5a:c4:f5:67:3c:48:fa:9c:ca:d4:c0:
1c:84:66:0f:ab:b7:ad:d7:e6:7f:99:93:5d:90:1b:
38:51:4a:85:b2:01:6d:ca:9e:88:c3:d7:df:27:fe:
04:75:b0:4a:45:9f:2d:1b:b3:13:cb:e8:ad:b3:00:
96:3c:39:5b:2a:a6:c6:39:f4:83:42:b8:8b:15:5c:
00:29:4a:58:99:23:ec:98:44:b3:38:38:5b:9b:4b:
fa:bb:70:5d:05:4a:26:76:72:7c:10:96:37:e3:f3:
c3:d0:53:a3:8e:c4:d6:c3:41:e3:34:b5:f9:2d:c4:
aa:d5:35:3a:3b:7c:60:6a:94:9f:57:18:2e:a4:98:
3e:ff:37:1a:95:10:75:78:d7:96:e9:64:78:50:ff:
49:93:5d:4b:e9:e0:79:f0:9b:a4:a5:93:d4:fc:60:
ea:79:b4:df:78:22:3a:61:d9:f8:cc:3b:1f:1c:56:
48:cc:44:83:a2:09:c4:42:7c:6a:86:d6:6b:d3:d0:
91:1a:1c:7c:00:e1:ae:90:8d:9b:0c:ac:81:ff:93:
72:3f:46:16:bf:54:d9:7e:9d:78:00:2d:94:a0:0a:
2b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4F:E8:1D:82:BB:DD:F2:88:AE:13:6A:2E:F7:B4:A0:F7:77:64:36
X509v3 Authority Key Identifier:
keyid:9D:0E:2B:9E:69:F5:62:DF:14:CF:77:2B:DE:05:F7:DA:CD:E2:59:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d9:1b:e6:43:ce:eb:0c:7f:7d:ae:2c:92:2e:20:fc:47:9a:
00:c5:f4:72:3f:50:e5:e2:90:72:98:61:6d:bf:76:63:d8:2b:
30:f0:69:92:7e:8e:0d:df:27:cf:69:20:75:65:33:c5:b5:2a:
86:e7:9c:4e:4e:60:8c:ca:52:34:2d:3c:2f:66:84:e4:fd:1a:
26:06:cc:d7:94:7d:af:c1:a6:d3:bb:af:32:58:aa:6f:2d:b2:
71:89:3c:34:d0:f6:fa:0b:58:3f:d8:23:dc:71:11:67:33:85:
d7:74:cf:10:56:6d:95:b0:9f:19:96:ee:f8:9c:2c:76:0e:68:
e8:8f:a3:6f:a6:06:99:75:32:c7:7e:3b:38:74:95:48:61:ed:
69:ec:ee:4d:69:2c:f7:5c:b4:ec:ff:ae:4a:d9:57:20:5d:1d:
53:bf:42:05:e7:f0:25:47:e3:1a:9d:4e:4f:17:3a:4a:21:e0:
a2:4c:dc:81:a2:be:dd:66:10:a3:d5:13:1f:b9:cb:cf:41:c2:
87:b0:49:5c:31:0f:2f:97:d8:cf:7f:35:4b:bb:ef:f9:0b:4b:
53:b4:a3:1d:16:4a:98:19:2c:9a:ec:9a:4b:b9:4f:69:f2:ad:
cc:d6:6a:bc:aa:06:01:48:43:47:19:df:c0:32:d6:a3:7c:c8:
34:5c:0d:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe/o+Sd3MIawxHph3bMWd5rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMGUyYjllNjlmNTYyZGYxNGNmNzcyYmRlMDVmN2RhY2Rl
MjU5NjEwHhcNMjUwNjMwMDcwMTE4WhcNMjUwNzAxMDcwMTE4WjAzMTEwLwYDVQQD
EyhiNjRmZTgxZDgyYmJkZGYyODhhZTEzNmEyZWY3YjRhMGY3Nzc2NDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AdVRBBcb2Qo9TWuJXhKVvaU5gBU
QWIz8G11Ccm+aRvUWsT1ZzxI+pzK1MAchGYPq7et1+Z/mZNdkBs4UUqFsgFtyp6I
w9ffJ/4EdbBKRZ8tG7MTy+itswCWPDlbKqbGOfSDQriLFVwAKUpYmSPsmESzODhb
m0v6u3BdBUomdnJ8EJY34/PD0FOjjsTWw0HjNLX5LcSq1TU6O3xgapSfVxgupJg+
/zcalRB1eNeW6WR4UP9Jk11L6eB58JukpZPU/GDqebTfeCI6Ydn4zDsfHFZIzESD
ognEQnxqhtZr09CRGhx8AOGukI2bDKyB/5NyP0YWv1TZfp14AC2UoAorJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZP6B2Cu93yiK4Tai73tKD3d2Q2MB8GA1UdIwQY
MBaAFJ0OK55p9WLfFM93K94F99rN4llhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblE0cm5tbjFZdDhVejNjcjNnWDMyczNpV1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yNWJlMmYtOTJlYi00Y2RlLWEyNDct
ZDhkYzM0MDM2Y2U3LzEvblE0cm5tbjFZdDhVejNjcjNnWDMyczNpV1dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8yNWJlMmYtOTJlYi00Y2RlLWEyNDctZDhkYzM0MDM2Y2U3
LzEvblE0cm5tbjFZdDhVejNjcjNnWDMyczNpV1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdkb5kPO
6wx/fa4ski4g/EeaAMX0cj9Q5eKQcphhbb92Y9grMPBpkn6ODd8nz2kgdWUzxbUq
huecTk5gjMpSNC08L2aE5P0aJgbM15R9r8Gm07uvMliqby2ycYk8NND2+gtYP9gj
3HERZzOF13TPEFZtlbCfGZbu+Jwsdg5o6I+jb6YGmXUyx347OHSVSGHtaezuTWks
91y07P+uStlXIF0dU79CBefwJUfjGp1OTxc6SiHgokzcgaK+3WYQo9UTH7nLz0HC
h7BJXDEPL5fYz381S7vv+QtLU7SjHRZKmBksmuyaS7lPafKtzNZqvKoGAUhDRxnf
wDLWo3zINFwNdg==
-----END CERTIFICATE-----
Generated at Mon Jun 30 16:04:12 2025 by rpki-client