Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
File: cNySeAi5pn58uhunTvtb9sEsiVs.mft (raw, json)
Hash identifier: B0x5YoRQuhPyvho8hEk9sh5CEOQX0xpRjIQeou/qbwk=
Subject key identifier: 09:AF:9F:6F:73:34:75:56:1E:C0:63:6C:AA:25:EF:5C:05:79:8E:63
Authority key identifier: 70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B
Certificate issuer: /CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
Certificate serial: 0198D5BBE715D867F45248FE7BC174469300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 07:01:58 +0000
Manifest this update: Sat 23 Aug 2025 07:01:58 +0000
Manifest next update: Sun 24 Aug 2025 07:01:58 +0000
Files and hashes: 1: BAJtDqJxaWUqQAfiueye7uuRaiw.roa (hash: xliJwPehY40wkTea7xdHZ3Ii3nZae+NEE66sFETvyTA=)
2: cNySeAi5pn58uhunTvtb9sEsiVs.crl (hash: 8dprqRx+e0PMwnsGaAhcuUTnDc3nGA/2FLrbiQ9wPws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e7:15:d8:67:f4:52:48:fe:7b:c1:74:46:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
Validity
Not Before: Aug 23 07:01:58 2025 GMT
Not After : Aug 24 07:01:58 2025 GMT
Subject: CN=09af9f6f733475561ec0636caa25ef5c05798e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:79:49:f5:d2:fd:83:a8:9e:3e:6a:59:5c:5e:
1c:77:94:42:87:1c:91:34:d2:6d:22:eb:21:4a:47:
d1:77:94:ec:9b:57:36:34:ff:f0:a0:9a:f7:9c:0c:
08:75:01:dc:c4:7b:f7:26:88:da:ab:09:6a:b4:fd:
af:03:db:a5:f7:f3:d3:7e:eb:97:c2:c9:7a:df:84:
f4:c6:86:1d:37:d9:cb:69:73:7e:34:7d:ba:2e:65:
92:a0:78:83:f9:3e:43:da:3a:ec:c3:f7:ad:eb:09:
6c:93:ef:4f:f5:fd:6b:d9:6d:58:5e:7d:5d:e5:4b:
e5:5d:00:a7:01:c8:d9:c6:de:23:70:d3:22:09:a2:
e5:1a:00:04:fb:a4:f3:26:cf:10:77:d3:43:8c:84:
1d:19:6b:8c:b4:80:38:c1:f1:d3:f8:91:65:dc:63:
1d:55:67:a9:1e:2a:be:11:a3:c8:94:ac:ea:bb:31:
bb:0a:47:81:a3:a1:00:33:76:2b:37:47:ae:22:73:
d2:a1:1b:99:fb:94:62:cd:c2:1e:9b:9d:97:b9:8e:
31:4d:09:3d:05:46:c0:3a:e5:c8:1d:3c:59:73:33:
50:61:7c:0b:93:22:77:59:76:31:05:44:c3:63:7f:
ee:c5:92:d3:5b:59:a1:50:ee:c1:5b:b6:da:15:17:
b4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AF:9F:6F:73:34:75:56:1E:C0:63:6C:AA:25:EF:5C:05:79:8E:63
X509v3 Authority Key Identifier:
keyid:70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:df:85:41:9c:bb:60:0e:a7:4c:b1:99:be:4c:5e:bd:6c:19:
ad:e6:7a:a5:3b:54:96:ed:30:b7:b3:04:a1:67:a4:18:da:ad:
cb:43:d3:17:a2:72:77:3a:fb:2b:67:98:a9:36:ec:77:bc:73:
80:80:c6:e1:e5:56:ab:0f:b4:fe:cd:be:76:25:1a:8c:b3:89:
7c:e5:6c:7e:05:e5:88:af:4c:d1:47:1b:77:eb:00:bb:4e:1a:
73:64:de:ac:3c:c9:fb:49:e9:46:7b:fd:78:79:01:3b:97:71:
d4:18:3f:68:d7:ac:88:65:1d:06:19:f5:fa:82:5e:85:83:ec:
ed:26:69:9b:38:62:ae:d1:e9:d2:59:b2:43:fe:1b:d9:e8:14:
5f:39:35:a0:10:29:41:ed:20:a3:54:d6:51:ed:82:3e:71:cc:
f5:b4:df:0a:6d:33:43:f2:cf:76:4e:9b:51:4d:5a:d1:25:4f:
f5:a3:ff:56:3e:07:e3:3c:89:c5:21:de:de:f8:a8:a7:ce:3e:
d9:f0:fd:46:22:f3:e7:6f:59:ef:e1:73:44:32:d0:43:8b:5d:
62:63:0c:e9:f2:07:fc:a2:93:17:a5:e9:6d:fd:7c:e4:b9:d2:
b1:f8:7c:d5:07:18:66:5d:c6:d1:a5:5e:0d:4d:43:c3:9d:e7:
47:03:3b:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu+cV2Gf0Ukj+e8F0RpMAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZGM5Mjc4MDhiOWE2N2U3Y2JhMWJhNzRlZmI1YmY2YzEy
Yzg5NWIwHhcNMjUwODIzMDcwMTU4WhcNMjUwODI0MDcwMTU4WjAzMTEwLwYDVQQD
EygwOWFmOWY2ZjczMzQ3NTU2MWVjMDYzNmNhYTI1ZWY1YzA1Nzk4ZTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXlJ9dL9g6iePmpZXF4cd5RChxyR
NNJtIushSkfRd5Tsm1c2NP/woJr3nAwIdQHcxHv3JojaqwlqtP2vA9ul9/PTfuuX
wsl634T0xoYdN9nLaXN+NH26LmWSoHiD+T5D2jrsw/et6wlsk+9P9f1r2W1YXn1d
5UvlXQCnAcjZxt4jcNMiCaLlGgAE+6TzJs8Qd9NDjIQdGWuMtIA4wfHT+JFl3GMd
VWepHiq+EaPIlKzquzG7CkeBo6EAM3YrN0euInPSoRuZ+5RizcIem52XuY4xTQk9
BUbAOuXIHTxZczNQYXwLkyJ3WXYxBUTDY3/uxZLTW1mhUO7BW7baFRe0KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmvn29zNHVWHsBjbKol71wFeY5jMB8GA1UdIwQY
MBaAFHDckngIuaZ+fLobp077W/bBLIlbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY055U2VBaTVwbjU4dWh1blR2dGI5c0VzaVZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGE1ODAtNWRjMS00Yzg2LTkyYzUt
NWVlYmIxMjU5ZGM5LzEvY055U2VBaTVwbjU4dWh1blR2dGI5c0VzaVZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84OGE1ODAtNWRjMS00Yzg2LTkyYzUtNWVlYmIxMjU5ZGM5
LzEvY055U2VBaTVwbjU4dWh1blR2dGI5c0VzaVZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUd+FQZy7
YA6nTLGZvkxevWwZreZ6pTtUlu0wt7MEoWekGNqty0PTF6Jydzr7K2eYqTbsd7xz
gIDG4eVWqw+0/s2+diUajLOJfOVsfgXliK9M0Ucbd+sAu04ac2TerDzJ+0npRnv9
eHkBO5dx1Bg/aNesiGUdBhn1+oJehYPs7SZpmzhirtHp0lmyQ/4b2egUXzk1oBAp
Qe0go1TWUe2CPnHM9bTfCm0zQ/LPdk6bUU1a0SVP9aP/Vj4H4zyJxSHe3viop84+
2fD9RiLz529Z7+FzRDLQQ4tdYmMM6fIH/KKTF6Xpbf185LnSsfh81QcYZl3G0aVe
DU1Dw53nRwM70A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:16 2025 by rpki-client