Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
File: nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft (raw, json)
Hash identifier: zSzrqfhmZaWgjhhabU6cNUz8Bu8ZMz/zkWHfjFpas2M=
Subject key identifier: 86:D2:88:A4:94:4F:BC:21:06:25:9B:E4:9D:A5:92:C4:94:B9:BE:C9
Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
Certificate issuer: /CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Certificate serial: 0198D474114FB8B9AF9A96A03DD0CA36E04F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
Manifest number: 070F
Signing time: Sat 23 Aug 2025 01:03:52 +0000
Manifest this update: Sat 23 Aug 2025 01:03:52 +0000
Manifest next update: Sun 24 Aug 2025 01:03:52 +0000
Files and hashes: 1: nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl (hash: dWnHhKtD35YKjRi3WX4m9j7svCXmxw6AUaL0f4pkHXQ=)
2: wxRtFa54V_vU8mgLHIqlXUzZMOc.roa (hash: PMULlzIWB9KqtKOtRO+7MsiWSaPQynQGmN9eXMu6mPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:11:4f:b8:b9:af:9a:96:a0:3d:d0:ca:36:e0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Validity
Not Before: Aug 23 01:03:52 2025 GMT
Not After : Aug 24 01:03:52 2025 GMT
Subject: CN=86d288a4944fbc2106259be49da592c494b9bec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:76:47:13:0f:6f:7c:98:3d:9c:76:8a:89:
c0:05:b7:3c:ab:74:44:a1:9f:dd:1b:6f:51:30:8b:
37:0e:9f:1f:7b:99:2f:ef:60:39:ac:66:ef:7d:fb:
0b:20:e4:34:f6:e8:2b:76:5f:bb:3a:f6:44:6b:8d:
da:47:df:58:23:38:be:06:0b:67:44:fa:b0:22:ce:
0c:7a:2b:f6:4e:84:6c:69:a0:a2:56:fa:15:e5:af:
fd:68:92:5c:55:8f:a1:a3:50:20:1d:fa:e3:46:e9:
c4:31:1b:14:f5:d7:3e:e2:f8:53:7f:22:2c:d8:aa:
1f:19:3c:e5:3f:b3:4c:43:0b:ae:fe:3d:4f:3e:c4:
a6:29:f3:87:73:ca:05:b9:82:d5:f7:41:a1:06:cc:
a0:f3:81:12:34:5f:a8:a6:28:78:79:5e:f9:cb:4d:
4b:0a:aa:7f:79:a4:0a:c8:d8:f5:d0:c0:ed:89:69:
74:5f:8f:88:5b:ba:ca:dc:a2:25:82:7a:c7:94:33:
1a:7d:07:2e:6e:80:45:b9:74:95:52:30:a0:71:f1:
d6:57:cf:bf:70:24:24:34:24:da:72:77:76:09:14:
67:53:d3:b2:68:f1:c4:7a:4d:d8:ed:94:eb:a3:3d:
39:ce:4f:47:2d:bd:aa:0b:7e:73:0a:3d:52:74:36:
95:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D2:88:A4:94:4F:BC:21:06:25:9B:E4:9D:A5:92:C4:94:B9:BE:C9
X509v3 Authority Key Identifier:
keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4c:19:1d:bd:aa:ca:88:49:d1:4c:7e:90:91:4e:72:9d:4d:
59:e3:c8:21:b2:ec:73:b2:c1:83:66:cb:19:5f:1c:83:37:a7:
be:f2:93:2d:ea:13:07:44:ba:20:f3:72:7d:94:a1:18:45:d0:
e7:f8:d6:3f:f8:d0:4a:cf:c1:64:95:b1:5f:93:4e:8b:34:9a:
7f:e5:c3:d7:a7:b7:b8:86:2b:69:73:39:34:75:d8:4f:54:78:
65:aa:86:ff:20:28:65:91:f0:73:8d:60:44:02:66:d4:74:a9:
33:a9:4c:3e:74:a8:75:92:f6:b3:88:e1:8a:88:f9:4f:09:aa:
0a:63:a4:ae:b9:b2:1d:62:7a:0c:e9:20:7d:11:8a:f8:7a:ae:
14:5e:19:e1:c7:10:54:83:e0:b3:39:49:fc:6d:18:45:ff:76:
53:21:72:62:7a:c0:f7:00:50:7b:60:10:16:fa:c0:10:b1:62:
46:6d:14:cb:d5:ae:2a:9c:4a:2c:72:31:17:3b:f6:ea:b1:05:
00:90:7e:4e:eb:08:e6:5f:b5:e3:8c:26:24:4f:90:8a:d5:64:
1f:2f:33:59:2e:bd:a6:d3:13:a0:c3:dd:ad:66:84:96:84:d9:
3e:8b:9a:cb:ac:f1:c9:8a:c5:df:b5:2c:45:ff:ad:fb:d0:33:
d7:c9:9f:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdBFPuLmvmpagPdDKNuBPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNjIwZjMxYjQ5OTdjNzM0NWJjNjZiNDZiNDNkNjg2YmYw
MDkzMWEwHhcNMjUwODIzMDEwMzUyWhcNMjUwODI0MDEwMzUyWjAzMTEwLwYDVQQD
Eyg4NmQyODhhNDk0NGZiYzIxMDYyNTliZTQ5ZGE1OTJjNDk0YjliZWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBV2RxMPb3yYPZx2ionABbc8q3RE
oZ/dG29RMIs3Dp8fe5kv72A5rGbvffsLIOQ09ugrdl+7OvZEa43aR99YIzi+Bgtn
RPqwIs4Meiv2ToRsaaCiVvoV5a/9aJJcVY+ho1AgHfrjRunEMRsU9dc+4vhTfyIs
2KofGTzlP7NMQwuu/j1PPsSmKfOHc8oFuYLV90GhBsyg84ESNF+opih4eV75y01L
Cqp/eaQKyNj10MDtiWl0X4+IW7rK3KIlgnrHlDMafQcuboBFuXSVUjCgcfHWV8+/
cCQkNCTacnd2CRRnU9OyaPHEek3Y7ZTroz05zk9HLb2qC35zCj1SdDaVNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbSiKSUT7whBiWb5J2lksSUub7JMB8GA1UdIwQY
MBaAFJxiDzG0mXxzRbxmtGtD1oa/AJMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2Qt
NGI4NzkzZGI3NDYwLzEvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2QtNGI4NzkzZGI3NDYw
LzEvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0wZHb2q
yohJ0Ux+kJFOcp1NWePIIbLsc7LBg2bLGV8cgzenvvKTLeoTB0S6IPNyfZShGEXQ
5/jWP/jQSs/BZJWxX5NOizSaf+XD16e3uIYraXM5NHXYT1R4ZaqG/yAoZZHwc41g
RAJm1HSpM6lMPnSodZL2s4jhioj5TwmqCmOkrrmyHWJ6DOkgfRGK+HquFF4Z4ccQ
VIPgszlJ/G0YRf92UyFyYnrA9wBQe2AQFvrAELFiRm0Uy9WuKpxKLHIxFzv26rEF
AJB+TusI5l+144wmJE+QitVkHy8zWS69ptMToMPdrWaEloTZPouay6zxyYrF37Us
Rf+t+9Az18mfww==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:43 2025 by rpki-client