Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
File: n3Qy9pnL0kmy48nFW976-DmGtEI.mft (raw, json)
Hash identifier: uTkthTU+UhUHvx1yVakKWzYDQkNEeUQ8hqLysSQV9HE=
Subject key identifier: 04:14:79:D7:DC:2D:73:F4:D2:60:C5:93:54:17:BD:96:BB:2C:54:0D
Authority key identifier: 9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
Certificate issuer: /CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Certificate serial: 0197B9A1CD5034FCFF3ACA3A32B49833A5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
Manifest number: 107D
Signing time: Sun 29 Jun 2025 03:01:18 +0000
Manifest this update: Sun 29 Jun 2025 03:01:18 +0000
Manifest next update: Mon 30 Jun 2025 03:01:18 +0000
Files and hashes: 1: n3Qy9pnL0kmy48nFW976-DmGtEI.crl (hash: Nm1KRnawmbT/ppWW22yB3iA9cl5F6OwRys7FJjLrQl0=)
2: yY1iNFVSPGpVBCv6e5Q4VD19NB8.roa (hash: Xz+3ntm5iVPl2B9YcE2P65g+xG5FxMjLX4w1n0LEPnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:cd:50:34:fc:ff:3a:ca:3a:32:b4:98:33:a5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Validity
Not Before: Jun 29 03:01:18 2025 GMT
Not After : Jun 30 03:01:18 2025 GMT
Subject: CN=041479d7dc2d73f4d260c5935417bd96bb2c540d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:b5:76:09:ad:f0:e8:d5:fc:0f:3a:fa:dc:
23:66:59:7f:1a:f6:48:1d:75:37:57:17:a3:1e:8e:
87:f7:e9:70:c8:a5:38:14:db:61:a3:4e:44:67:b8:
62:54:52:1f:fe:b6:94:cb:13:77:a3:aa:19:02:31:
e7:4e:f2:86:e2:ca:ae:0a:a3:1a:9e:5d:b3:ee:30:
db:74:58:e7:e6:09:86:ba:a0:d5:97:c3:78:00:b0:
34:28:c9:7b:01:bc:a9:9b:26:5b:6e:8e:9c:6d:e5:
f1:6e:93:ab:29:ee:bf:88:d2:6f:43:19:ec:53:50:
35:d9:e5:e5:a6:3b:b4:85:8a:0e:db:69:2a:c9:88:
fe:c3:4d:4c:0e:6f:47:67:2f:11:9c:ce:df:40:ad:
e8:59:64:75:29:ef:d7:0e:69:d1:1d:c8:46:89:68:
f7:54:f5:b9:70:f5:0a:bd:69:6e:53:84:2f:a5:a8:
d7:f9:1d:43:e8:60:63:cc:59:94:54:fa:c3:c7:27:
fc:8a:39:f2:15:92:69:c4:42:d0:dd:f0:88:fa:85:
7e:d5:0f:68:00:7e:2c:ae:e8:c1:3e:a0:53:98:a3:
53:3f:15:68:56:89:e6:ea:69:25:7d:6c:b0:ac:d7:
74:c3:fd:40:80:65:83:fc:78:35:8d:09:03:32:dc:
23:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:14:79:D7:DC:2D:73:F4:D2:60:C5:93:54:17:BD:96:BB:2C:54:0D
X509v3 Authority Key Identifier:
keyid:9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:83:1b:1b:70:a0:bd:05:d0:91:d9:33:29:e6:45:1c:f2:b5:
83:91:df:26:a1:fd:ee:ac:e9:b2:fd:c4:fb:87:4c:5d:5a:30:
62:73:a2:18:5e:f2:09:13:9d:7d:ff:95:63:b0:67:75:2b:58:
aa:cb:77:0d:03:0a:8e:dc:d1:99:5d:5a:0b:4d:2d:2a:da:59:
fe:f4:f1:e6:9d:e1:11:d4:3d:28:5c:c0:ac:c5:60:33:d1:b5:
bb:a6:26:fd:06:3a:fd:c7:6a:1b:94:67:17:dd:bf:66:83:d9:
e4:e6:4c:d7:00:be:95:4e:49:be:ba:11:01:3a:37:40:1f:b9:
fc:df:aa:8b:0a:a6:63:ac:85:eb:80:5b:47:30:0e:9c:b2:36:
3c:32:8f:95:ef:36:89:35:75:1e:09:54:4a:f6:ef:4c:bb:97:
3b:a7:cf:22:a5:14:fc:d2:89:e4:f6:cc:88:27:92:48:bd:3d:
03:84:c9:ee:91:5c:b2:5a:cb:62:8b:58:35:67:bb:17:9a:d5:
4e:09:8d:6d:eb:e2:c0:8f:c4:21:cc:e7:e1:49:60:49:47:3b:
91:6f:73:73:c4:df:5d:91:f1:b6:ee:a6:8e:03:09:8f:1b:c6:
89:c0:6d:c4:db:83:ae:db:ee:c3:36:21:40:2e:1f:7a:ef:c6:
63:b1:54:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5oc1QNPz/Oso6MrSYM6X4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNzQzMmY2OTljYmQyNDliMmUzYzljNTViZGVmYWY4Mzk4
NmI0NDIwHhcNMjUwNjI5MDMwMTE4WhcNMjUwNjMwMDMwMTE4WjAzMTEwLwYDVQQD
EygwNDE0NzlkN2RjMmQ3M2Y0ZDI2MGM1OTM1NDE3YmQ5NmJiMmM1NDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuee1dgmt8OjV/A86+twjZll/GvZI
HXU3VxejHo6H9+lwyKU4FNtho05EZ7hiVFIf/raUyxN3o6oZAjHnTvKG4squCqMa
nl2z7jDbdFjn5gmGuqDVl8N4ALA0KMl7AbypmyZbbo6cbeXxbpOrKe6/iNJvQxns
U1A12eXlpju0hYoO22kqyYj+w01MDm9HZy8RnM7fQK3oWWR1Ke/XDmnRHchGiWj3
VPW5cPUKvWluU4QvpajX+R1D6GBjzFmUVPrDxyf8ijnyFZJpxELQ3fCI+oV+1Q9o
AH4srujBPqBTmKNTPxVoVonm6mklfWywrNd0w/1AgGWD/Hg1jQkDMtwjKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQUedfcLXP00mDFk1QXvZa7LFQNMB8GA1UdIwQY
MBaAFJ90MvaZy9JJsuPJxVve+vg5hrRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjNReTlwbkwwa215NDhuRlc5NzYtRG1HdEVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wY2YxODctZWNiMy00YjQyLTkxZTQt
NmFkZGZjYjE4Zjk5LzEvbjNReTlwbkwwa215NDhuRlc5NzYtRG1HdEVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8wY2YxODctZWNiMy00YjQyLTkxZTQtNmFkZGZjYjE4Zjk5
LzEvbjNReTlwbkwwa215NDhuRlc5NzYtRG1HdEVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYMbG3Cg
vQXQkdkzKeZFHPK1g5HfJqH97qzpsv3E+4dMXVowYnOiGF7yCROdff+VY7BndStY
qst3DQMKjtzRmV1aC00tKtpZ/vTx5p3hEdQ9KFzArMVgM9G1u6Ym/QY6/cdqG5Rn
F92/ZoPZ5OZM1wC+lU5JvroRATo3QB+5/N+qiwqmY6yF64BbRzAOnLI2PDKPle82
iTV1HglUSvbvTLuXO6fPIqUU/NKJ5PbMiCeSSL09A4TJ7pFcslrLYotYNWe7F5rV
TgmNbeviwI/EIczn4UlgSUc7kW9zc8TfXZHxtu6mjgMJjxvGicBtxNuDrtvuwzYh
QC4feu/GY7FUSA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:32:03 2025 by rpki-client