Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
File: ni6I9QfNLq27IyyGT3Htum7LXaA.mft (raw, json)
Hash identifier: HxsmeEgWj3qXBMOdf0nXUlAPgj/uWXeCS2fD/AIPtlc=
Subject key identifier: 6B:BA:99:6B:F9:29:73:CD:5A:ED:50:39:5B:C3:B7:56:85:B1:CF:9F
Authority key identifier: 9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
Certificate issuer: /CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Certificate serial: 0198D697FDF1D4B94F079E623B5C0E24C4E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
Manifest number: 0EA2
Signing time: Sat 23 Aug 2025 11:02:21 +0000
Manifest this update: Sat 23 Aug 2025 11:02:21 +0000
Manifest next update: Sun 24 Aug 2025 11:02:21 +0000
Files and hashes: 1: ni6I9QfNLq27IyyGT3Htum7LXaA.crl (hash: bFELiPnknMzAz6HjpiKY+tIdJuNReT4ZAy47xqxMyaM=)
2: uweYkDCu-qqfi3ug1YgUgTCGT6M.roa (hash: /KpNT+Dkmz13bWhCJTvJ8D+AbxL/YrXSoux1HxprkcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:fd:f1:d4:b9:4f:07:9e:62:3b:5c:0e:24:c4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Validity
Not Before: Aug 23 11:02:21 2025 GMT
Not After : Aug 24 11:02:21 2025 GMT
Subject: CN=6bba996bf92973cd5aed50395bc3b75685b1cf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c9:58:ae:02:2e:c2:d3:ba:37:41:37:62:41:
fe:2e:81:eb:81:2f:33:00:27:f0:1a:b6:a2:3d:f6:
60:fa:66:39:aa:b8:b3:1f:79:0e:47:0a:af:c6:5b:
96:0f:df:88:dd:25:c9:c2:6f:74:73:21:fd:86:d2:
be:3d:9a:13:2e:33:96:ee:b7:46:0b:7d:44:fd:4a:
51:09:5f:1b:61:91:af:09:6d:bd:fa:3d:37:f2:da:
e5:69:6c:14:9c:16:88:d1:c6:ea:a7:55:91:88:e2:
53:23:e5:09:cd:e7:f4:e2:90:8f:20:59:c5:99:63:
f9:07:10:7c:d6:51:c6:2c:d5:5b:67:79:ba:48:f4:
78:f5:2f:0a:43:79:6a:49:42:14:16:fc:bc:1b:db:
f5:66:bf:a4:1e:6a:7d:a0:b9:c7:e8:b6:0b:6f:f8:
78:d7:53:42:49:7e:b4:82:5c:77:c4:d5:0f:3b:1f:
c3:ce:69:b5:ba:d1:0b:68:e6:bf:91:e2:8d:24:32:
db:eb:74:57:51:eb:5f:82:dc:56:f6:4a:1e:e0:1a:
fb:14:dc:32:2f:39:53:60:b4:ef:2d:7e:9f:5b:c5:
e9:da:c2:f6:06:d5:8e:4b:4a:84:87:cb:93:4c:59:
50:1c:29:51:1d:c8:ee:72:44:e4:0d:50:71:2f:90:
eb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BA:99:6B:F9:29:73:CD:5A:ED:50:39:5B:C3:B7:56:85:B1:CF:9F
X509v3 Authority Key Identifier:
keyid:9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e3:13:09:13:e9:bc:14:a0:8e:3b:97:61:19:01:38:bb:0d:
5d:d1:ff:c5:5e:02:37:b5:51:55:94:da:26:68:77:bc:b3:30:
2f:c9:3b:e5:d2:af:ef:0d:5d:30:da:34:c2:ad:14:ec:b7:d3:
d4:13:f5:35:6f:3c:eb:f9:3d:31:df:3c:de:97:eb:74:94:72:
92:7b:ad:01:1c:8d:f3:62:a5:2d:04:11:0f:22:d3:87:e8:63:
eb:41:66:b1:5c:4a:6f:45:2a:f8:74:e1:67:85:74:4e:88:75:
be:10:ba:df:c1:ea:34:a6:9e:4c:78:64:a8:15:f6:6a:01:82:
8b:b1:75:f7:08:d1:8b:b5:9f:2e:c9:25:82:1c:f4:85:de:57:
d4:85:8d:9f:79:94:41:42:98:aa:d4:f4:d6:f4:31:51:c8:2b:
11:82:29:f0:d2:bc:d0:5e:19:c2:14:cc:5a:99:47:ef:21:04:
39:40:69:10:df:57:54:c8:75:42:f3:81:e4:2a:4a:e2:18:23:
28:fc:c0:ea:59:20:26:a6:5c:00:64:a8:e4:9a:96:97:05:a2:
eb:2e:5d:70:63:55:08:9f:3c:46:74:cb:d0:56:98:a5:51:a5:
f5:5c:b0:f8:78:2b:32:39:f8:14:70:ac:e9:a2:c5:06:e4:79:
b4:6c:24:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWl/3x1LlPB55iO1wOJMTgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMmU4OGY1MDdjZDJlYWRiYjIzMmM4NjRmNzFlZGJhNmVj
YjVkYTAwHhcNMjUwODIzMTEwMjIxWhcNMjUwODI0MTEwMjIxWjAzMTEwLwYDVQQD
Eyg2YmJhOTk2YmY5Mjk3M2NkNWFlZDUwMzk1YmMzYjc1Njg1YjFjZjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlclYrgIuwtO6N0E3YkH+LoHrgS8z
ACfwGraiPfZg+mY5qrizH3kORwqvxluWD9+I3SXJwm90cyH9htK+PZoTLjOW7rdG
C31E/UpRCV8bYZGvCW29+j038trlaWwUnBaI0cbqp1WRiOJTI+UJzef04pCPIFnF
mWP5BxB81lHGLNVbZ3m6SPR49S8KQ3lqSUIUFvy8G9v1Zr+kHmp9oLnH6LYLb/h4
11NCSX60glx3xNUPOx/Dzmm1utELaOa/keKNJDLb63RXUetfgtxW9koe4Br7FNwy
LzlTYLTvLX6fW8Xp2sL2BtWOS0qEh8uTTFlQHClRHcjuckTkDVBxL5DrmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGu6mWv5KXPNWu1QOVvDt1aFsc+fMB8GA1UdIwQY
MBaAFJ4uiPUHzS6tuyMshk9x7bpuy12gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmk2STlRZk5McTI3SXl5R1QzSHR1bTdMWGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zMDc2NGUtNzk5Zi00NzM2LTk2ODYt
OTJkNWQzOTcwYTU5LzEvbmk2STlRZk5McTI3SXl5R1QzSHR1bTdMWGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zMDc2NGUtNzk5Zi00NzM2LTk2ODYtOTJkNWQzOTcwYTU5
LzEvbmk2STlRZk5McTI3SXl5R1QzSHR1bTdMWGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEeMTCRPp
vBSgjjuXYRkBOLsNXdH/xV4CN7VRVZTaJmh3vLMwL8k75dKv7w1dMNo0wq0U7LfT
1BP1NW886/k9Md883pfrdJRyknutARyN82KlLQQRDyLTh+hj60FmsVxKb0Uq+HTh
Z4V0Toh1vhC638HqNKaeTHhkqBX2agGCi7F19wjRi7WfLsklghz0hd5X1IWNn3mU
QUKYqtT01vQxUcgrEYIp8NK80F4ZwhTMWplH7yEEOUBpEN9XVMh1QvOB5CpK4hgj
KPzA6lkgJqZcAGSo5JqWlwWi6y5dcGNVCJ88RnTL0FaYpVGl9Vyw+HgrMjn4FHCs
6aLFBuR5tGwk8Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:27:13 2025 by rpki-client