Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
File: N5FWc7KL362ywgGaxo0EZP0htxo.mft (raw, json)
Hash identifier: 4k1GGVrnxyNft2KF83Bg9s5u2rrIJ2K/Ko9QEeKhGwA=
Subject key identifier: 9A:0F:42:96:15:B0:D2:BE:AD:29:91:A2:25:D7:86:16:9B:6F:2B:34
Authority key identifier: 37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
Certificate issuer: /CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Certificate serial: 0198D8BD11DC44F02DE0B7A8FFCBB1335007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
Manifest number: 15DF
Signing time: Sat 23 Aug 2025 21:02:06 +0000
Manifest this update: Sat 23 Aug 2025 21:02:06 +0000
Manifest next update: Sun 24 Aug 2025 21:02:06 +0000
Files and hashes: 1: DH9htlq0hiwldp4q07DNTkVZOf8.roa (hash: J0KU22uieTNYBq4unRpzKgHyqTQbyJRKS4kqQcbzVVo=)
2: N5FWc7KL362ywgGaxo0EZP0htxo.crl (hash: gfBxugUFCnwtoXI6THF3dgF4Hex3Jd8BSBIBal+T+38=)
3: jeU3xqGrcmxdIS4lfaliQojmUd4.roa (hash: WoVvfzkH0PYO9V3NP53Pv15mZRXcsOzFbw+RGpI6V54=)
4: mbXBHvnDkr71szR1uqXUf3o_CNU.roa (hash: gBt+bTGYlOGXiT5DEgI8/fzoH444V5sSGRbb6v+iHAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 21:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:11:dc:44:f0:2d:e0:b7:a8:ff:cb:b1:33:50:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Validity
Not Before: Aug 23 21:02:06 2025 GMT
Not After : Aug 24 21:02:06 2025 GMT
Subject: CN=9a0f429615b0d2bead2991a225d786169b6f2b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9b:65:c9:15:83:14:3f:6c:4b:c7:b5:32:b9:
88:04:fa:32:93:a0:ad:3e:29:ee:c3:a7:c0:3a:37:
04:78:13:0a:95:b2:48:ec:64:6a:92:6d:0e:8c:2d:
b9:9b:7c:f6:8c:15:ec:9f:23:d5:6f:1f:d5:06:89:
4b:97:b4:20:1b:da:02:8e:d4:a2:4c:0f:d4:99:1c:
d5:e2:78:38:df:e0:dd:dd:91:b5:47:05:ec:f4:3f:
a5:f1:26:c7:27:51:f8:47:d9:48:cb:ad:a4:13:7d:
5d:76:95:26:a1:95:c6:87:73:7d:89:57:50:69:59:
c2:bb:ab:36:a0:86:e1:2a:58:68:ab:e4:82:51:47:
c3:d9:98:7e:f7:ba:d1:ba:f2:c6:51:c1:f2:ce:1f:
bb:15:e4:67:7c:39:bb:81:66:45:21:17:83:7f:89:
53:e1:7a:f4:68:dd:41:39:2a:96:57:74:7d:e0:2e:
20:af:bc:52:4d:83:d5:cc:16:13:1d:43:17:e5:64:
96:8e:8d:27:50:a4:5d:2c:e7:96:fe:ea:6e:03:00:
4c:46:15:0f:4d:c0:af:b1:8a:48:ed:9e:89:60:55:
7c:69:07:77:d5:07:8d:26:84:df:93:a9:55:da:67:
18:7b:31:75:b7:62:40:bb:5a:25:8f:0f:79:57:e5:
95:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0F:42:96:15:B0:D2:BE:AD:29:91:A2:25:D7:86:16:9B:6F:2B:34
X509v3 Authority Key Identifier:
keyid:37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:98:f4:c2:76:90:69:04:f1:d6:8f:ea:a7:e9:e7:10:57:85:
1f:2d:10:0c:62:d4:ed:c8:b9:79:0b:27:1c:70:59:f9:9d:af:
f2:d4:3f:2f:7e:86:be:c1:a5:b1:2d:c1:d0:50:39:ea:6f:2e:
c6:e7:34:04:f3:01:8e:a6:7a:0a:df:70:75:e8:66:b1:3f:d7:
b4:e4:41:09:72:8f:bd:22:36:74:dd:8a:6d:d3:93:ae:8b:f3:
ea:6f:8d:59:04:f8:9f:d1:19:3c:a0:70:bb:5d:b5:32:e0:ea:
30:09:97:ff:a3:7b:48:7a:bd:e5:7d:16:e3:4b:45:d3:f9:18:
fc:94:91:31:84:9f:75:0d:7c:3c:f4:fa:25:45:84:77:24:aa:
0c:12:83:05:a4:df:3a:12:56:9d:d7:1a:b1:2e:66:aa:ee:29:
cf:6b:ef:98:1c:6d:6c:9a:3b:45:67:60:aa:c1:e4:c6:3a:c3:
c5:f5:6e:1b:a5:61:e6:f0:8d:24:e6:3c:d6:71:e2:1b:c5:58:
fd:ba:05:0b:8b:0a:9b:15:0e:ba:93:d4:bc:0a:2c:3a:ce:4f:
23:61:83:54:35:87:75:e6:28:7a:43:93:f8:1b:de:d5:84:ce:
34:30:1c:66:96:c3:30:73:6f:e7:1a:59:30:8c:43:e2:00:81:
97:d0:53:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYvRHcRPAt4Leo/8uxM1AHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OTE1NjczYjI4YmRmYWRiMmMyMDE5YWM2OGQwNDY0ZmQy
MWI3MWEwHhcNMjUwODIzMjEwMjA2WhcNMjUwODI0MjEwMjA2WjAzMTEwLwYDVQQD
Eyg5YTBmNDI5NjE1YjBkMmJlYWQyOTkxYTIyNWQ3ODYxNjliNmYyYjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnptlyRWDFD9sS8e1MrmIBPoyk6Ct
Pinuw6fAOjcEeBMKlbJI7GRqkm0OjC25m3z2jBXsnyPVbx/VBolLl7QgG9oCjtSi
TA/UmRzV4ng43+Dd3ZG1RwXs9D+l8SbHJ1H4R9lIy62kE31ddpUmoZXGh3N9iVdQ
aVnCu6s2oIbhKlhoq+SCUUfD2Zh+97rRuvLGUcHyzh+7FeRnfDm7gWZFIReDf4lT
4Xr0aN1BOSqWV3R94C4gr7xSTYPVzBYTHUMX5WSWjo0nUKRdLOeW/upuAwBMRhUP
TcCvsYpI7Z6JYFV8aQd31QeNJoTfk6lV2mcYezF1t2JAu1oljw95V+WVHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoPQpYVsNK+rSmRoiXXhhabbys0MB8GA1UdIwQY
MBaAFDeRVnOyi9+tssIBmsaNBGT9IbcaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjVGV2M3S0wzNjJ5d2dHYXhvMEVaUDBodHhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS80ZWE0ZjctZDcwZS00MmEyLWFmZDct
M2UzYTE4OGY0OWRlLzEvTjVGV2M3S0wzNjJ5d2dHYXhvMEVaUDBodHhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS80ZWE0ZjctZDcwZS00MmEyLWFmZDctM2UzYTE4OGY0OWRl
LzEvTjVGV2M3S0wzNjJ5d2dHYXhvMEVaUDBodHhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipj0wnaQ
aQTx1o/qp+nnEFeFHy0QDGLU7ci5eQsnHHBZ+Z2v8tQ/L36GvsGlsS3B0FA56m8u
xuc0BPMBjqZ6Ct9wdehmsT/XtORBCXKPvSI2dN2KbdOTrovz6m+NWQT4n9EZPKBw
u121MuDqMAmX/6N7SHq95X0W40tF0/kY/JSRMYSfdQ18PPT6JUWEdySqDBKDBaTf
OhJWndcasS5mqu4pz2vvmBxtbJo7RWdgqsHkxjrDxfVuG6Vh5vCNJOY81nHiG8VY
/boFC4sKmxUOupPUvAosOs5PI2GDVDWHdeYoekOT+Bve1YTONDAcZpbDMHNv5xpZ
MIxD4gCBl9BTzQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:23:14 2025 by rpki-client