Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
File: nCy3-coO_XK-JYpKCTWIBjdLRmI.mft (raw, json)
Hash identifier: O+st+QbBakgw+O2WOYGEx4YIzapcYK/Kah64+ADSqLw=
Subject key identifier: 31:19:65:25:AC:95:64:19:1B:A4:00:62:83:B5:60:AB:12:46:EE:F0
Authority key identifier: 9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
Certificate issuer: /CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Certificate serial: 0198D5F175A61A5EE78F5062E9521E4CDB60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
Manifest number: 0C9D
Signing time: Sat 23 Aug 2025 08:00:27 +0000
Manifest this update: Sat 23 Aug 2025 08:00:27 +0000
Manifest next update: Sun 24 Aug 2025 08:00:27 +0000
Files and hashes: 1: Dotq45i-CIL8miP4blqY3J6J13s.roa (hash: AeEyJtBFVLSGPDiSeedlZidCthzwYAlppOftvZd9mwo=)
2: nCy3-coO_XK-JYpKCTWIBjdLRmI.crl (hash: g4HJ7Xx3onFnmEhWrG/BBKtfieib1Nhpu8nqZPVTdos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:75:a6:1a:5e:e7:8f:50:62:e9:52:1e:4c:db:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Validity
Not Before: Aug 23 08:00:27 2025 GMT
Not After : Aug 24 08:00:27 2025 GMT
Subject: CN=31196525ac9564191ba4006283b560ab1246eef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:f0:87:5b:e6:46:9a:fd:13:a6:d7:6f:77:
95:6f:de:bd:21:48:1b:8d:18:61:ff:9b:33:80:50:
ef:19:ad:ec:83:73:fa:1f:5a:ac:9f:a9:fa:11:3b:
4c:1c:70:74:87:09:f7:fc:53:80:95:2f:05:70:ab:
98:5b:bf:7a:fd:a4:bb:38:c0:b1:95:52:ad:78:30:
c6:80:9e:18:07:2d:cb:ef:a5:0e:ac:56:90:90:ca:
1e:b5:cc:14:10:f6:d2:09:a3:02:d6:13:42:72:a4:
4a:50:07:9a:71:03:99:77:07:a0:c4:31:9c:0d:f8:
b6:1f:0a:41:0a:0f:52:d3:ef:1d:58:8b:8c:39:05:
d2:15:41:65:50:2d:29:fc:6a:d9:81:c3:25:95:63:
4b:fb:a9:58:ba:79:c6:e3:4e:e0:5d:5e:fc:21:dd:
2a:e2:3b:3c:47:8c:70:68:53:6e:37:90:09:5f:e6:
da:94:06:10:01:4c:e2:27:1f:7b:7d:cc:49:4b:c5:
bc:61:f2:08:6c:e7:a7:33:89:5f:b1:ff:5c:a8:12:
65:3c:05:16:b8:c8:d0:63:60:ce:7e:ae:fb:e2:54:
98:2a:6e:10:3d:8c:33:fe:99:de:3c:87:b4:8b:94:
94:fe:e4:9b:57:da:13:ee:64:c9:21:60:c6:db:db:
83:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:19:65:25:AC:95:64:19:1B:A4:00:62:83:B5:60:AB:12:46:EE:F0
X509v3 Authority Key Identifier:
keyid:9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:53:09:27:e8:f3:9b:94:e0:f8:9a:73:d3:37:82:8a:c3:5f:
fb:fc:a8:e4:a1:6d:74:04:c2:98:ff:d1:a5:b3:ff:2e:f0:0a:
21:32:2c:39:aa:6e:20:a3:30:d2:08:31:3d:5b:fe:17:17:3d:
89:fc:64:84:d6:9d:6a:23:6f:8a:ea:34:ae:96:76:0b:b2:61:
b5:60:0a:37:81:03:96:e6:ef:29:50:b8:70:d6:d3:62:ee:2f:
a2:6a:32:b9:b2:0c:5e:0b:95:64:c7:f6:3a:63:d7:9c:49:c9:
df:7b:bf:d6:08:8a:53:d1:a2:46:3f:2c:21:3c:1d:8f:27:d1:
ee:a7:95:d2:9d:da:6e:b2:b7:b9:cd:b7:3d:3e:b9:e6:0f:12:
ee:53:db:5a:09:5c:c0:8c:9d:f0:8e:01:f9:00:25:cb:c6:fe:
64:87:ae:b1:d5:d5:24:9f:c6:48:24:18:b3:51:4c:5c:b8:04:
4f:71:8f:fd:ac:b9:c4:2f:e3:41:69:54:ca:ed:ed:a4:4b:cc:
61:84:c9:39:dd:5a:70:2a:9f:23:c2:c2:cd:2b:5b:23:c6:43:
b5:85:8f:28:0a:16:dd:ff:98:ef:18:29:35:1b:14:23:07:12:
3a:0e:9c:26:c1:bd:c4:5a:d2:3d:e5:6b:d3:6c:77:e5:d3:32:
c3:45:d0:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8XWmGl7nj1Bi6VIeTNtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMmNiN2Y5Y2EwZWZkNzJiZTI1OGE0YTA5MzU4ODA2Mzc0
YjQ2NjIwHhcNMjUwODIzMDgwMDI3WhcNMjUwODI0MDgwMDI3WjAzMTEwLwYDVQQD
EygzMTE5NjUyNWFjOTU2NDE5MWJhNDAwNjI4M2I1NjBhYjEyNDZlZWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLjwh1vmRpr9E6bXb3eVb969IUgb
jRhh/5szgFDvGa3sg3P6H1qsn6n6ETtMHHB0hwn3/FOAlS8FcKuYW796/aS7OMCx
lVKteDDGgJ4YBy3L76UOrFaQkMoetcwUEPbSCaMC1hNCcqRKUAeacQOZdwegxDGc
Dfi2HwpBCg9S0+8dWIuMOQXSFUFlUC0p/GrZgcMllWNL+6lYunnG407gXV78Id0q
4js8R4xwaFNuN5AJX+balAYQAUziJx97fcxJS8W8YfIIbOenM4lfsf9cqBJlPAUW
uMjQY2DOfq774lSYKm4QPYwz/pnePIe0i5SU/uSbV9oT7mTJIWDG29uDgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEZZSWslWQZG6QAYoO1YKsSRu7wMB8GA1UdIwQY
MBaAFJwst/nKDv1yviWKSgk1iAY3S0ZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkN5My1jb09fWEstSllwS0NUV0lCamRMUm1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84NmE0MjYtNTZlZS00NmRkLTk0MjUt
N2Y5MmMzNGViMDdjLzEvbkN5My1jb09fWEstSllwS0NUV0lCamRMUm1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84NmE0MjYtNTZlZS00NmRkLTk0MjUtN2Y5MmMzNGViMDdj
LzEvbkN5My1jb09fWEstSllwS0NUV0lCamRMUm1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFMJJ+jz
m5Tg+Jpz0zeCisNf+/yo5KFtdATCmP/RpbP/LvAKITIsOapuIKMw0ggxPVv+Fxc9
ifxkhNadaiNviuo0rpZ2C7JhtWAKN4EDlubvKVC4cNbTYu4vomoyubIMXguVZMf2
OmPXnEnJ33u/1giKU9GiRj8sITwdjyfR7qeV0p3abrK3uc23PT655g8S7lPbWglc
wIyd8I4B+QAly8b+ZIeusdXVJJ/GSCQYs1FMXLgET3GP/ay5xC/jQWlUyu3tpEvM
YYTJOd1acCqfI8LCzStbI8ZDtYWPKAoW3f+Y7xgpNRsUIwcSOg6cJsG9xFrSPeVr
02x35dMyw0XQ+Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:46 2025 by rpki-client