Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
File: 9NavTeibuoEYlTzO6_s59FqO0bw.mft (raw, json)
Hash identifier: KVEhpW7ZkIYAkpUQ2flBbqu6flXk80GbKM8lXci+UOo=
Subject key identifier: 5A:99:DA:6D:F5:56:7B:AB:80:9A:66:07:35:34:42:BA:37:7F:20:E3
Authority key identifier: F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC
Certificate issuer: /CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
Certificate serial: 0198D65F70B89FFFFEF86D6865B45D9CD747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:35 +0000
Manifest this update: Sat 23 Aug 2025 10:00:35 +0000
Manifest next update: Sun 24 Aug 2025 10:00:35 +0000
Files and hashes: 1: 9NavTeibuoEYlTzO6_s59FqO0bw.crl (hash: m3HvHQ5NQZCK6fpGqBZt6YdNNEZJOknmAPm1qXctAKY=)
2: RSBqMA8SK5hkaH899w74rpWOWzA.roa (hash: ZarbLd1gWH81UzY1+uoaATMpd5XCQStSn4LP/xfm248=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:70:b8:9f:ff:fe:f8:6d:68:65:b4:5d:9c:d7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
Validity
Not Before: Aug 23 10:00:35 2025 GMT
Not After : Aug 24 10:00:35 2025 GMT
Subject: CN=5a99da6df5567bab809a6607353442ba377f20e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:c5:06:79:17:66:5f:b5:82:16:d7:ba:80:
f8:60:ba:d8:0d:18:6d:f8:03:6a:4c:19:32:9a:a3:
23:f9:28:f8:af:89:43:ad:2c:a8:08:59:f3:5b:f4:
23:36:25:45:1d:e3:79:fd:35:e3:9f:7e:e4:01:d4:
7f:7a:16:7a:c7:b0:b5:dd:cd:7b:14:85:66:37:41:
81:c7:e1:cb:78:a7:7a:c0:98:67:ae:0e:cb:f8:2b:
b8:2b:53:62:1a:44:d2:f5:9a:6c:bb:21:75:83:07:
7b:74:4f:9c:79:7f:29:23:dc:84:53:73:41:78:b6:
bd:9c:c0:a6:32:57:e8:f5:6d:89:71:87:39:92:d8:
3c:3a:dd:44:95:08:20:d9:ce:8a:74:60:65:35:e3:
17:7b:37:ce:25:8e:30:f9:4b:a0:4a:fb:b5:12:79:
fb:62:27:72:43:c9:b3:21:7d:0d:c6:d4:82:73:2c:
63:a5:42:da:e5:d8:3c:e4:9b:77:1b:91:f2:d8:f9:
1c:ac:16:db:84:3f:d4:2f:d1:9c:48:30:1b:35:21:
b5:f1:ae:fc:c5:92:2e:e3:a5:2c:1f:1c:88:06:23:
88:26:5d:56:40:5b:b1:bc:eb:04:4c:ca:e5:24:af:
bd:f9:17:a3:dd:36:c2:a6:d9:15:ef:77:d0:ad:4d:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:99:DA:6D:F5:56:7B:AB:80:9A:66:07:35:34:42:BA:37:7F:20:E3
X509v3 Authority Key Identifier:
keyid:F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f0:95:a0:51:d2:16:dc:c4:e1:1f:87:f1:4c:d2:52:ff:d9:
1a:43:7c:8b:4d:d4:0d:2f:bd:b6:53:7a:f7:c0:9f:9d:b0:9f:
90:92:61:8e:21:aa:04:60:07:f1:eb:46:e6:6a:c7:61:e3:98:
3d:43:01:52:db:c7:7a:bd:ce:17:ac:4f:43:30:30:c2:4a:99:
7d:fb:6c:a5:81:5e:10:9a:ac:93:62:d8:dd:39:91:a7:41:e2:
3c:a0:52:d2:c7:fb:24:11:2b:e1:c8:61:de:0c:8a:04:2f:e4:
3c:13:e9:5b:59:71:f3:7e:51:4a:89:29:b3:60:95:3e:97:a3:
9b:16:42:9b:e7:7e:10:44:f0:a8:ec:64:35:0b:25:a3:c5:aa:
22:69:fc:f7:c2:df:7e:d6:65:0c:99:dd:e9:43:2a:b9:ef:bb:
87:fb:52:d3:68:ac:5a:dd:a6:3b:f4:2a:c5:c3:07:65:a3:d2:
b7:b0:90:2f:d4:2e:f6:1b:ba:92:0e:89:03:0a:92:96:dc:9d:
42:49:a6:82:42:e1:18:aa:06:e4:07:a9:2c:26:01:db:21:f5:
38:10:2c:52:18:da:5b:0c:6a:64:67:bc:87:67:55:76:27:c2:
e5:75:50:0d:78:14:cf:b0:cf:f4:05:c2:aa:17:db:ed:51:d7:
59:4e:2f:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX3C4n//++G1oZbRdnNdHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZDZhZjRkZTg5YmJhODExODk1M2NjZWViZmIzOWY0NWE4
ZWQxYmMwHhcNMjUwODIzMTAwMDM1WhcNMjUwODI0MTAwMDM1WjAzMTEwLwYDVQQD
Eyg1YTk5ZGE2ZGY1NTY3YmFiODA5YTY2MDczNTM0NDJiYTM3N2YyMGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9rFBnkXZl+1ghbXuoD4YLrYDRht
+ANqTBkymqMj+Sj4r4lDrSyoCFnzW/QjNiVFHeN5/TXjn37kAdR/ehZ6x7C13c17
FIVmN0GBx+HLeKd6wJhnrg7L+Cu4K1NiGkTS9ZpsuyF1gwd7dE+ceX8pI9yEU3NB
eLa9nMCmMlfo9W2JcYc5ktg8Ot1ElQgg2c6KdGBlNeMXezfOJY4w+UugSvu1Enn7
YidyQ8mzIX0NxtSCcyxjpULa5dg85Jt3G5Hy2PkcrBbbhD/UL9GcSDAbNSG18a78
xZIu46UsHxyIBiOIJl1WQFuxvOsETMrlJK+9+Rej3TbCptkV73fQrU1I+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqZ2m31VnurgJpmBzU0Qro3fyDjMB8GA1UdIwQY
MBaAFPTWr03om7qBGJU8zuv7OfRajtG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU5hdlRlaWJ1b0VZbFR6TzZfczU5RnFPMGJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kZDM3Y2YtYTQ2Ni00MzU0LWExNzEt
ZDhkZjhlNGM2NWZlLzEvOU5hdlRlaWJ1b0VZbFR6TzZfczU5RnFPMGJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9kZDM3Y2YtYTQ2Ni00MzU0LWExNzEtZDhkZjhlNGM2NWZl
LzEvOU5hdlRlaWJ1b0VZbFR6TzZfczU5RnFPMGJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPCVoFHS
FtzE4R+H8UzSUv/ZGkN8i03UDS+9tlN698CfnbCfkJJhjiGqBGAH8etG5mrHYeOY
PUMBUtvHer3OF6xPQzAwwkqZfftspYFeEJqsk2LY3TmRp0HiPKBS0sf7JBEr4chh
3gyKBC/kPBPpW1lx835RSokps2CVPpejmxZCm+d+EETwqOxkNQslo8WqImn898Lf
ftZlDJnd6UMque+7h/tS02isWt2mO/QqxcMHZaPSt7CQL9Qu9hu6kg6JAwqSltyd
QkmmgkLhGKoG5AepLCYB2yH1OBAsUhjaWwxqZGe8h2dVdifC5XVQDXgUz7DP9AXC
qhfb7VHXWU4v/g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:42:32 2025 by rpki-client