Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: hsCbhQOn96DHPn6t5StbQIMz78V5mlsserNOLBMkA5Q=
Subject key identifier: 2C:6C:A0:A3:C8:E5:D9:36:34:80:3F:04:D9:8F:2F:7B:F9:A3:C5:FC
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 0198D73B80B5EB7F1D3968137407749F10DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 097D
Signing time: Sat 23 Aug 2025 14:00:57 +0000
Manifest this update: Sat 23 Aug 2025 14:00:57 +0000
Manifest next update: Sun 24 Aug 2025 14:00:57 +0000
Files and hashes: 1: TyWL3xFpNven7KrNlaJ8v9k5JK8.roa (hash: E2+AhRY0pqwsVnmj4TP+MVDZiHT3sKt+kF6lunLkhqE=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: JhN1IOWGVGcGGVDmcKqirzmKx9guleVYApE+F+r+fK0=)
3: rQIqx2DMPN6bSwaHOzgkZ_qEsQE.roa (hash: Swuw4n85YJ/hs+bpmj8GLz668D6BJf6uL+FQMZ1q+FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:80:b5:eb:7f:1d:39:68:13:74:07:74:9f:10:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Aug 23 14:00:57 2025 GMT
Not After : Aug 24 14:00:57 2025 GMT
Subject: CN=2c6ca0a3c8e5d93634803f04d98f2f7bf9a3c5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e9:b1:fe:d1:44:fe:2d:65:66:d5:0e:45:13:
24:f5:7c:ac:fc:19:eb:15:b8:37:7c:2d:c7:11:1e:
74:69:88:95:25:62:d2:87:a4:d8:86:4d:f5:16:8d:
59:cc:8e:e6:65:c3:df:b3:a4:52:21:0b:c7:66:53:
d5:ff:35:36:32:11:8c:c5:39:55:e6:7a:c2:f8:1e:
f2:81:0e:8f:81:76:52:2c:62:ca:20:b7:cc:7e:44:
71:03:06:a5:4f:28:5f:44:80:eb:d1:7c:48:95:d1:
91:09:b8:88:38:5f:15:d1:51:f3:ca:c1:e5:d8:fa:
b0:b0:9a:52:91:1a:c6:b8:a6:bf:90:38:6f:d0:48:
6b:e6:8c:de:6f:1d:4d:a4:fc:d1:56:14:6e:c0:ae:
56:cc:00:47:6f:92:3f:6b:d9:8d:87:1e:16:de:37:
12:9e:48:64:83:f2:0c:a5:31:f0:b5:5d:1a:aa:df:
92:dd:a8:f4:1b:cc:48:50:c3:d4:ee:c4:3c:81:9c:
8b:ef:04:24:5e:ea:00:16:d8:68:fb:d8:29:d7:f8:
fc:5c:66:3c:7e:23:eb:c7:72:64:52:9e:1a:91:94:
3f:59:a5:a1:fb:42:e2:5a:0a:c4:09:83:84:92:a7:
75:4b:37:b9:b8:49:0c:0b:95:a9:a0:ce:6b:16:b6:
55:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6C:A0:A3:C8:E5:D9:36:34:80:3F:04:D9:8F:2F:7B:F9:A3:C5:FC
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:18:a6:b1:a7:67:df:89:83:83:99:a4:d9:76:7a:b3:80:5a:
70:19:62:ca:30:96:e1:d0:ed:87:99:c3:42:db:93:f6:8c:cd:
c4:9c:79:10:a9:40:fd:88:f7:4a:97:7d:6e:49:46:5a:15:db:
d8:3a:01:4f:da:4b:29:7e:a8:84:fe:2e:82:7e:b9:08:dc:e1:
37:9e:80:d3:cc:6f:2f:1b:67:a5:81:8c:28:f0:64:32:8b:d6:
40:f4:2a:98:ec:77:74:fa:d6:eb:d8:55:02:27:9f:38:6c:65:
3f:c2:1f:3c:84:e3:dd:67:64:49:98:40:7e:66:27:6b:03:35:
4c:5f:90:23:b3:40:b2:2f:c7:4b:ca:ba:14:0d:7f:10:e3:bd:
d7:ec:4e:de:0f:d8:05:50:89:58:36:d4:b8:32:b4:dd:b2:55:
f2:8f:65:86:3e:72:3b:c4:e4:a7:4c:cd:26:f5:5a:d3:f7:f5:
bf:d9:d7:7a:58:0d:f0:3a:d9:e8:aa:85:ed:f5:f1:b9:fb:26:
44:7e:7b:ee:06:4e:77:a1:81:3f:3f:8d:2f:87:37:14:7f:50:
c6:18:38:95:5f:cb:d4:07:61:ec:9c:50:57:ec:ca:69:95:27:
fb:22:e9:f3:f9:87:e8:50:2b:a3:de:be:c2:9e:8f:14:da:89:
78:f8:5d:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO4C1638dOWgTdAd0nxDdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMjFhNWU0Y2Y2ZTllMmU3MDMzOGFlZWJmYTBkMTU4OGQ3
M2I2ZWYwHhcNMjUwODIzMTQwMDU3WhcNMjUwODI0MTQwMDU3WjAzMTEwLwYDVQQD
EygyYzZjYTBhM2M4ZTVkOTM2MzQ4MDNmMDRkOThmMmY3YmY5YTNjNWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+mx/tFE/i1lZtUORRMk9Xys/Bnr
Fbg3fC3HER50aYiVJWLSh6TYhk31Fo1ZzI7mZcPfs6RSIQvHZlPV/zU2MhGMxTlV
5nrC+B7ygQ6PgXZSLGLKILfMfkRxAwalTyhfRIDr0XxIldGRCbiIOF8V0VHzysHl
2PqwsJpSkRrGuKa/kDhv0Ehr5ozebx1NpPzRVhRuwK5WzABHb5I/a9mNhx4W3jcS
nkhkg/IMpTHwtV0aqt+S3aj0G8xIUMPU7sQ8gZyL7wQkXuoAFtho+9gp1/j8XGY8
fiPrx3JkUp4akZQ/WaWh+0LiWgrECYOEkqd1Sze5uEkMC5WpoM5rFrZVqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxsoKPI5dk2NIA/BNmPL3v5o8X8MB8GA1UdIwQY
MBaAFJwhpeTPbp4ucDOK7r+g0ViNc7bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi84Y2NlODYtYjBhZS00MTY2LTkwNDIt
NTI4ZWZmNTJmZWJkLzEvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi84Y2NlODYtYjBhZS00MTY2LTkwNDItNTI4ZWZmNTJmZWJk
LzEvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYximsadn
34mDg5mk2XZ6s4BacBliyjCW4dDth5nDQtuT9ozNxJx5EKlA/Yj3Spd9bklGWhXb
2DoBT9pLKX6ohP4ugn65CNzhN56A08xvLxtnpYGMKPBkMovWQPQqmOx3dPrW69hV
AiefOGxlP8IfPITj3WdkSZhAfmYnawM1TF+QI7NAsi/HS8q6FA1/EOO91+xO3g/Y
BVCJWDbUuDK03bJV8o9lhj5yO8Tkp0zNJvVa0/f1v9nXelgN8DrZ6KqF7fXxufsm
RH577gZOd6GBPz+NL4c3FH9Qxhg4lV/L1Adh7JxQV+zKaZUn+yLp8/mH6FAro96+
wp6PFNqJePhdxw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:00:19 2025 by rpki-client