
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
File: ni19W4LIN4uiFTlDzpSCzkzUlRs.mft (raw, json)
Hash identifier: mzE6aBS1kGWbol8pp/0uVc4ar3JOiksUsP5cnCGTDTI=
Subject key identifier: F4:AF:F5:CB:66:76:7F:99:BF:AC:36:53:26:CD:2B:DE:2B:69:FA:56
Authority key identifier: 9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B
Certificate issuer: /CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b
Certificate serial: 0197B96AC6A2571754D512C89A44FFA4B72E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
Manifest number: 1259
Signing time: Sun 29 Jun 2025 02:01:11 +0000
Manifest this update: Sun 29 Jun 2025 02:01:11 +0000
Manifest next update: Mon 30 Jun 2025 02:01:11 +0000
Files and hashes: 1: WTmdMFPzU41Yj6CYfdDHa3cKmOo.roa (hash: ZRrWNdq+lRZfywzlRdTcVIMqLndtMkQtQ6MhxjI8HvM=)
2: ni19W4LIN4uiFTlDzpSCzkzUlRs.crl (hash: KWzVtFhxmfj3GWEgysUjxrgibv8Z12F1sGpGtpx2Jsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:c6:a2:57:17:54:d5:12:c8:9a:44:ff:a4:b7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b
Validity
Not Before: Jun 29 02:01:11 2025 GMT
Not After : Jun 30 02:01:11 2025 GMT
Subject: CN=f4aff5cb66767f99bfac365326cd2bde2b69fa56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:1b:91:3a:d2:e9:af:c3:58:67:2c:d5:51:
35:65:0e:84:2e:93:99:1e:74:a3:07:06:25:4f:40:
21:9f:9a:5e:c4:8c:19:d0:2e:f8:9c:bf:67:dc:92:
5a:28:af:18:32:93:c4:cf:53:1f:36:29:4a:87:dc:
4c:e2:b6:da:4b:24:37:1c:74:4d:c9:01:9f:67:27:
37:6c:81:df:12:53:f1:79:fe:35:98:ed:46:28:ef:
f7:5f:81:c4:95:72:15:b1:cd:a7:75:ec:10:de:cf:
ea:11:b7:ca:86:3a:d8:5d:10:85:d5:81:68:06:47:
56:56:d3:28:49:d5:35:46:89:43:7f:09:9a:3b:21:
4d:bd:f5:9f:ad:68:b1:de:31:86:14:d1:bc:a4:e8:
d6:a6:bf:5d:63:85:71:41:a0:b0:36:9f:8d:e2:35:
58:f1:1e:55:2d:c2:38:39:0e:97:3e:2b:b0:c0:83:
47:8b:2c:0b:9d:cb:2f:50:78:87:1a:bf:f2:92:b0:
97:86:e7:a4:df:fc:fd:6e:4b:af:6b:68:1e:8b:6b:
c7:8b:d6:fc:89:40:20:55:c5:06:cb:f8:f3:5b:df:
ed:3a:53:aa:ab:6a:04:e5:d0:73:07:48:0e:bb:01:
6e:c7:2c:5c:04:80:a3:bd:c6:c5:6d:db:14:b2:b0:
5c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AF:F5:CB:66:76:7F:99:BF:AC:36:53:26:CD:2B:DE:2B:69:FA:56
X509v3 Authority Key Identifier:
keyid:9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:89:8f:25:bc:25:55:f0:5b:39:a7:42:09:8f:ec:8f:88:32:
47:57:30:6e:34:39:a1:55:eb:ab:68:f2:bd:cc:2e:bd:a9:48:
20:82:d3:4a:e9:39:b4:2b:d0:97:ed:8f:06:be:61:11:d5:21:
27:b4:8a:e5:38:7f:27:7e:de:4f:10:37:7a:2f:27:70:15:1b:
ee:7d:94:cd:de:f3:3e:ff:a2:73:15:e3:77:f2:10:2f:61:3d:
3b:fd:81:fd:69:77:08:ad:f2:76:47:6e:f5:eb:cd:30:7d:90:
47:73:18:ce:67:91:20:ea:17:93:8e:25:8a:b0:6d:ba:70:0a:
e4:80:72:01:93:79:5c:51:e0:9c:25:a3:61:0a:5f:80:2a:91:
f8:5b:f8:e2:b7:0a:37:a5:54:ff:40:3c:f9:a3:e4:b6:43:50:
4e:56:1f:55:96:60:b0:7f:0a:7f:3f:08:a1:4b:53:33:6c:bf:
77:b3:5a:19:12:68:b6:0c:f2:aa:f2:17:2d:08:9e:e0:7e:bc:
e8:8b:62:34:b4:0f:db:51:62:c3:68:85:83:8d:72:bc:6f:6c:
95:ad:08:d8:54:cc:c7:9b:63:17:c0:e2:67:d2:4d:37:00:a8:
bf:ed:17:90:10:c5:85:b8:86:0b:0d:a3:88:af:78:77:ce:5a:
20:c7:9b:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5asaiVxdU1RLImkT/pLcuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMmQ3ZDViODJjODM3OGJhMjE1Mzk0M2NlOTQ4MmNlNGNk
NDk1MWIwHhcNMjUwNjI5MDIwMTExWhcNMjUwNjMwMDIwMTExWjAzMTEwLwYDVQQD
EyhmNGFmZjVjYjY2NzY3Zjk5YmZhYzM2NTMyNmNkMmJkZTJiNjlmYTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof8bkTrS6a/DWGcs1VE1ZQ6ELpOZ
HnSjBwYlT0Ahn5pexIwZ0C74nL9n3JJaKK8YMpPEz1MfNilKh9xM4rbaSyQ3HHRN
yQGfZyc3bIHfElPxef41mO1GKO/3X4HElXIVsc2ndewQ3s/qEbfKhjrYXRCF1YFo
BkdWVtMoSdU1RolDfwmaOyFNvfWfrWix3jGGFNG8pOjWpr9dY4VxQaCwNp+N4jVY
8R5VLcI4OQ6XPiuwwINHiywLncsvUHiHGr/ykrCXhuek3/z9bkuva2gei2vHi9b8
iUAgVcUGy/jzW9/tOlOqq2oE5dBzB0gOuwFuxyxcBICjvcbFbdsUsrBcFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSv9ctmdn+Zv6w2UybNK94rafpWMB8GA1UdIwQY
MBaAFJ4tfVuCyDeLohU5Q86Ugs5M1JUbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmkxOVc0TElONHVpRlRsRHpwU0N6a3pVbFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jYThkOTgtZTdhNC00YmRjLThjOTAt
YjI5NjA2ZDUxZjlkLzEvbmkxOVc0TElONHVpRlRsRHpwU0N6a3pVbFJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9jYThkOTgtZTdhNC00YmRjLThjOTAtYjI5NjA2ZDUxZjlk
LzEvbmkxOVc0TElONHVpRlRsRHpwU0N6a3pVbFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEomPJbwl
VfBbOadCCY/sj4gyR1cwbjQ5oVXrq2jyvcwuvalIIILTSuk5tCvQl+2PBr5hEdUh
J7SK5Th/J37eTxA3ei8ncBUb7n2Uzd7zPv+icxXjd/IQL2E9O/2B/Wl3CK3ydkdu
9evNMH2QR3MYzmeRIOoXk44lirBtunAK5IByAZN5XFHgnCWjYQpfgCqR+Fv44rcK
N6VU/0A8+aPktkNQTlYfVZZgsH8Kfz8IoUtTM2y/d7NaGRJotgzyqvIXLQie4H68
6ItiNLQP21Fiw2iFg41yvG9sla0I2FTMx5tjF8DiZ9JNNwCov+0XkBDFhbiGCw2j
iK94d85aIMebNg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:06:27 2025 by rpki-client