Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
File: 9NwmxibFHF3vbyRm849VslApZC8.mft (raw, json)
Hash identifier: 4/+9K8Hz1B4CyISV6N1em5OutyqPywMm0pu6EWOG5QA=
Subject key identifier: 08:04:BD:35:E7:A3:1E:97:4F:30:A6:D7:F3:D6:95:DA:9E:F4:7D:B5
Authority key identifier: F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
Certificate issuer: /CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Certificate serial: 0198D474950146061C4E046150F23F102822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
Manifest number: 0EB4
Signing time: Sat 23 Aug 2025 01:04:26 +0000
Manifest this update: Sat 23 Aug 2025 01:04:26 +0000
Manifest next update: Sun 24 Aug 2025 01:04:26 +0000
Files and hashes: 1: 9NwmxibFHF3vbyRm849VslApZC8.crl (hash: 1ULLrBJdZ9QmBwfDBMJIn8vQoxSejjIeJCbePvPhuOQ=)
2: XI2V1xAOtuCnHnEsCZ4HB4sk5c0.roa (hash: NGuYGkHyS6sZ+OmDpCbd7Xg31/u7/ppig2sfjfcm+Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:95:01:46:06:1c:4e:04:61:50:f2:3f:10:28:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Validity
Not Before: Aug 23 01:04:26 2025 GMT
Not After : Aug 24 01:04:26 2025 GMT
Subject: CN=0804bd35e7a31e974f30a6d7f3d695da9ef47db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:fe:6d:0e:35:6d:60:fa:d7:83:80:40:3e:
80:8a:e4:50:6d:cb:dd:22:d1:75:46:76:10:a5:25:
2d:be:c6:2c:09:df:6f:be:42:4d:8c:04:94:39:90:
8b:44:01:c7:d0:b3:9a:0e:cd:b1:61:54:26:8c:37:
e2:b7:96:c4:6f:65:67:f3:ba:13:93:43:d2:ac:3e:
43:2d:a3:a0:93:69:ec:de:71:cf:9b:8d:8d:f0:f7:
e2:95:e8:fe:d4:c6:f8:75:13:1e:74:57:7c:b5:5f:
ec:fa:24:5c:69:16:b3:13:fb:cc:ce:b5:97:17:6f:
18:2e:a4:39:95:3f:c0:ee:41:42:6f:dd:01:63:43:
2b:30:b8:10:ee:9b:76:5f:44:b5:c6:5d:3b:12:cb:
29:84:a1:4e:21:56:d3:9f:d8:98:11:cb:cc:2f:91:
30:f8:2f:25:dd:89:3b:d7:63:19:e2:4d:f6:99:10:
75:84:68:e1:ac:8d:14:17:84:4f:fa:d5:8e:30:06:
f3:e9:0e:a5:1e:cb:40:36:08:a3:f6:ae:9e:2a:7f:
c6:2d:52:b3:cf:b7:f8:f5:64:1b:35:40:09:02:65:
b0:e9:c6:50:cc:8d:6a:5f:10:c0:a1:5a:1c:6e:7c:
3f:81:32:07:2f:b0:ee:1f:24:c5:64:78:cd:35:27:
08:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:04:BD:35:E7:A3:1E:97:4F:30:A6:D7:F3:D6:95:DA:9E:F4:7D:B5
X509v3 Authority Key Identifier:
keyid:F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6f:a4:0d:5f:ac:93:f6:74:15:9f:d0:98:3b:05:bc:57:3f:
70:23:64:2b:e6:d1:cc:15:66:d9:9c:09:0f:27:00:94:a9:54:
12:47:0f:9b:d8:80:22:47:1e:db:dd:51:53:a1:04:36:b1:77:
da:c3:3f:d0:2a:80:f1:75:c5:25:d1:e1:bc:db:e6:77:d4:1a:
9e:9a:83:74:0f:d0:ac:3f:43:49:d3:62:72:5b:b2:0f:50:ac:
25:9a:35:15:07:19:43:68:d1:72:50:b4:dd:98:9c:52:3c:1b:
a4:ad:82:a6:d0:16:91:c2:9e:85:27:a0:ac:b2:fa:3c:c2:a1:
90:17:4f:1a:3f:7e:57:f3:e0:9c:3c:f9:3c:20:7f:46:52:3b:
0a:2d:01:af:aa:b0:ab:fe:8c:2e:0a:9c:85:8a:49:12:0d:42:
34:55:4c:ce:6f:7c:99:ec:94:87:f4:06:40:4f:ce:45:20:c1:
60:71:74:0d:2e:65:80:d6:06:14:17:07:39:80:96:ad:24:e3:
53:c2:6b:a4:f3:53:bc:d5:07:1b:b3:bc:aa:33:62:ca:a0:0c:
e6:81:79:6c:e4:1f:8e:f1:fa:6e:ab:34:cf:cf:e2:95:af:fa:
e5:3b:42:55:76:5a:01:00:45:15:6a:0d:98:72:60:cc:ec:91:
b0:73:bd:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdJUBRgYcTgRhUPI/ECgiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZGMyNmM2MjZjNTFjNWRlZjZmMjQ2NmYzOGY1NWIyNTAy
OTY0MmYwHhcNMjUwODIzMDEwNDI2WhcNMjUwODI0MDEwNDI2WjAzMTEwLwYDVQQD
EygwODA0YmQzNWU3YTMxZTk3NGYzMGE2ZDdmM2Q2OTVkYTllZjQ3ZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhT+bQ41bWD614OAQD6AiuRQbcvd
ItF1RnYQpSUtvsYsCd9vvkJNjASUOZCLRAHH0LOaDs2xYVQmjDfit5bEb2Vn87oT
k0PSrD5DLaOgk2ns3nHPm42N8Pfilej+1Mb4dRMedFd8tV/s+iRcaRazE/vMzrWX
F28YLqQ5lT/A7kFCb90BY0MrMLgQ7pt2X0S1xl07EssphKFOIVbTn9iYEcvML5Ew
+C8l3Yk712MZ4k32mRB1hGjhrI0UF4RP+tWOMAbz6Q6lHstANgij9q6eKn/GLVKz
z7f49WQbNUAJAmWw6cZQzI1qXxDAoVocbnw/gTIHL7DuHyTFZHjNNScIdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgEvTXnox6XTzCm1/PWldqe9H21MB8GA1UdIwQY
MBaAFPTcJsYmxRxd728kZvOPVbJQKWQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU53bXhpYkZIRjN2YnlSbTg0OVZzbEFwWkM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wODc5ZDgtZjIxNi00NWFiLWJmODct
MjNlMWRhZGYxMDZjLzEvOU53bXhpYkZIRjN2YnlSbTg0OVZzbEFwWkM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wODc5ZDgtZjIxNi00NWFiLWJmODctMjNlMWRhZGYxMDZj
LzEvOU53bXhpYkZIRjN2YnlSbTg0OVZzbEFwWkM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhW+kDV+s
k/Z0FZ/QmDsFvFc/cCNkK+bRzBVm2ZwJDycAlKlUEkcPm9iAIkce291RU6EENrF3
2sM/0CqA8XXFJdHhvNvmd9QanpqDdA/QrD9DSdNicluyD1CsJZo1FQcZQ2jRclC0
3ZicUjwbpK2CptAWkcKehSegrLL6PMKhkBdPGj9+V/PgnDz5PCB/RlI7Ci0Br6qw
q/6MLgqchYpJEg1CNFVMzm98meyUh/QGQE/ORSDBYHF0DS5lgNYGFBcHOYCWrSTj
U8JrpPNTvNUHG7O8qjNiyqAM5oF5bOQfjvH6bqs0z8/ila/65TtCVXZaAQBFFWoN
mHJgzOyRsHO9/A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:26 2025 by rpki-client