Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
File: nOYfsJJrzgyvrdDysZNIiVpEgUc.mft (raw, json)
Hash identifier: SuRpCWlJsUqmCUHwG1Odh2KxM3fNr/utObWjV2wO11s=
Subject key identifier: 80:8F:AB:67:D1:D9:35:A8:51:D5:11:F2:8B:41:1D:9B:F1:E8:1A:96
Authority key identifier: 9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
Certificate issuer: /CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Certificate serial: 0197BA0FB0C1770FCC5CE1BF2CD9C52378F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
Manifest number: 01A9
Signing time: Sun 29 Jun 2025 05:01:19 +0000
Manifest this update: Sun 29 Jun 2025 05:01:19 +0000
Manifest next update: Mon 30 Jun 2025 05:01:19 +0000
Files and hashes: 1: 7ZCM2DGQAxMoqKS4r08nTwBlTvg.roa (hash: Nsq7TZX/LJBEuY63VFLqAaBjZcBcw7djLWbv9kH4DH4=)
2: nOYfsJJrzgyvrdDysZNIiVpEgUc.crl (hash: kjiwQ+IafOFQKPDqsK+GKhnuNxEnEztdTCiRUZ5MDwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:b0:c1:77:0f:cc:5c:e1:bf:2c:d9:c5:23:78:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Validity
Not Before: Jun 29 05:01:19 2025 GMT
Not After : Jun 30 05:01:19 2025 GMT
Subject: CN=808fab67d1d935a851d511f28b411d9bf1e81a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:e7:70:47:4c:d5:c7:9a:75:bc:34:05:a1:
9a:47:65:90:b9:aa:2d:53:81:6f:79:d3:d5:24:39:
56:66:2f:08:87:73:6e:2d:91:c8:2d:01:39:e1:fe:
e5:10:a1:67:f7:4b:70:fd:39:1b:49:7d:55:64:7e:
2b:4b:a7:86:de:c8:d0:b8:4c:b7:a1:c0:3a:ad:3e:
70:8b:37:6d:7c:aa:73:ae:f9:32:72:09:72:5d:4c:
ec:31:34:85:f6:e0:69:09:7e:2a:cc:62:93:81:47:
0f:03:df:5d:12:55:20:15:92:28:c7:44:9c:84:91:
e2:8c:ab:aa:7e:7f:96:90:df:ce:e7:fb:70:3f:68:
bc:85:84:52:2f:a8:c6:cf:b8:0f:73:16:00:07:7f:
ae:77:4f:58:9a:65:43:b8:f4:be:98:49:36:8e:bf:
bd:1d:28:d4:31:58:95:f5:a9:b7:a0:69:0d:c3:9e:
22:3d:60:de:e3:8f:00:a1:db:87:35:2d:3b:f6:40:
8d:90:85:9f:6d:a2:d9:ce:b7:e6:89:ed:56:cb:39:
f2:dc:b1:4c:b1:37:15:dc:b2:7b:8f:b9:fa:8e:73:
fc:f6:48:e4:b2:7f:06:a4:04:12:a8:24:2c:80:4e:
2f:ff:52:a0:5f:2b:c9:0c:9a:6d:55:6e:d0:44:26:
9b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8F:AB:67:D1:D9:35:A8:51:D5:11:F2:8B:41:1D:9B:F1:E8:1A:96
X509v3 Authority Key Identifier:
keyid:9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:12:6f:2b:87:45:77:3a:6c:82:fa:92:6a:e8:7c:8a:de:85:
b1:12:70:9a:02:c4:ff:45:be:ac:6f:42:3c:51:d6:de:bb:1e:
a0:0d:03:2c:0c:c4:2d:92:02:e7:fb:1b:c0:48:09:e8:94:66:
ca:35:ab:16:90:7c:c4:94:60:88:39:2f:f4:dd:fc:f1:76:e4:
a3:a4:a4:2e:2c:27:0b:a5:39:f7:3e:dc:7f:6c:47:9d:3e:72:
da:0d:fc:9f:b9:5a:32:e1:95:6d:fb:bb:1b:4a:b2:99:7f:aa:
e2:cd:0a:7d:27:ec:20:88:70:4b:e2:7f:a5:8c:60:07:c4:7c:
fc:ae:50:99:1e:8c:42:a3:48:ea:ba:3f:6f:ad:f1:e7:17:0b:
1c:17:d1:15:ae:5f:9b:16:14:e7:d1:e9:d3:d0:05:cc:e2:a7:
b3:20:11:fd:3e:d0:61:07:60:a9:3a:e5:f3:80:1d:70:5c:c9:
6e:05:1c:6e:49:22:87:22:c3:27:62:b0:c4:08:2d:b8:6e:70:
ab:91:3c:40:b3:a9:34:07:1e:e1:a4:2b:fe:bc:78:04:56:61:
c8:31:46:93:09:5d:0f:5a:5e:53:de:52:9a:41:b2:6d:0f:15:
a9:d8:73:9c:34:92:9c:e5:93:cb:83:7d:b6:d7:bd:6d:8f:ff:
ff:cb:fc:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6D7DBdw/MXOG/LNnFI3jxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZTYxZmIwOTI2YmNlMGNhZmFkZDBmMmIxOTM0ODg5NWE0
NDgxNDcwHhcNMjUwNjI5MDUwMTE5WhcNMjUwNjMwMDUwMTE5WjAzMTEwLwYDVQQD
Eyg4MDhmYWI2N2QxZDkzNWE4NTFkNTExZjI4YjQxMWQ5YmYxZTgxYTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjDncEdM1ceadbw0BaGaR2WQuaot
U4FvedPVJDlWZi8Ih3NuLZHILQE54f7lEKFn90tw/TkbSX1VZH4rS6eG3sjQuEy3
ocA6rT5wizdtfKpzrvkycglyXUzsMTSF9uBpCX4qzGKTgUcPA99dElUgFZIox0Sc
hJHijKuqfn+WkN/O5/twP2i8hYRSL6jGz7gPcxYAB3+ud09YmmVDuPS+mEk2jr+9
HSjUMViV9am3oGkNw54iPWDe448AoduHNS079kCNkIWfbaLZzrfmie1Wyzny3LFM
sTcV3LJ7j7n6jnP89kjksn8GpAQSqCQsgE4v/1KgXyvJDJptVW7QRCab4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICPq2fR2TWoUdUR8otBHZvx6BqWMB8GA1UdIwQY
MBaAFJzmH7CSa84Mr63Q8rGTSIlaRIFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk9ZZnNKSnJ6Z3l2cmREeXNaTklpVnBFZ1VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MGU5NTctMWUxNy00MTBlLTkxYTEt
OTZiN2UwYThlZTA5LzEvbk9ZZnNKSnJ6Z3l2cmREeXNaTklpVnBFZ1VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MGU5NTctMWUxNy00MTBlLTkxYTEtOTZiN2UwYThlZTA5
LzEvbk9ZZnNKSnJ6Z3l2cmREeXNaTklpVnBFZ1VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBJvK4dF
dzpsgvqSauh8it6FsRJwmgLE/0W+rG9CPFHW3rseoA0DLAzELZIC5/sbwEgJ6JRm
yjWrFpB8xJRgiDkv9N388Xbko6SkLiwnC6U59z7cf2xHnT5y2g38n7laMuGVbfu7
G0qymX+q4s0KfSfsIIhwS+J/pYxgB8R8/K5QmR6MQqNI6ro/b63x5xcLHBfRFa5f
mxYU59Hp09AFzOKnsyAR/T7QYQdgqTrl84AdcFzJbgUcbkkihyLDJ2KwxAgtuG5w
q5E8QLOpNAce4aQr/rx4BFZhyDFGkwldD1peU95SmkGybQ8VqdhznDSSnOWTy4N9
tte9bY///8v8Uw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:59:56 2025 by rpki-client