Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
File: n-mO5s-z-6g7lyrhJlO12fxwcC4.mft (raw, json)
Hash identifier: cA7J6k8pbk4DETjlywoKU+7pvHLiI8mk5NCXLe0IvPg=
Subject key identifier: EF:99:B5:88:2A:88:83:38:54:65:D0:95:AC:7B:0B:8F:1E:85:47:F7
Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Certificate serial: 0198D54DF20EAAE15CBDD2C0BA28F1862B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
Manifest number: 0D1D
Signing time: Sat 23 Aug 2025 05:01:51 +0000
Manifest this update: Sat 23 Aug 2025 05:01:51 +0000
Manifest next update: Sun 24 Aug 2025 05:01:51 +0000
Files and hashes: 1: 1rNQC9Pmf5K1eRYu1hkhr5zZk2Q.roa (hash: x5fQIv4POV9mBCJLuhdzQlSn9HXra5gwr9JL2VOeY1M=)
2: n-mO5s-z-6g7lyrhJlO12fxwcC4.crl (hash: Piy2+VLNVMYx5dPMSFoK7e+Bd7QUtKiyjGqeIWdoTlw=)
3: wILLHD-thZnbY2_hVwSd8tKmVuU.roa (hash: 2k1puHfj5prqotEB5UejW81dxBofSqdytblBomrOVEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f2:0e:aa:e1:5c:bd:d2:c0:ba:28:f1:86:2b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Validity
Not Before: Aug 23 05:01:51 2025 GMT
Not After : Aug 24 05:01:51 2025 GMT
Subject: CN=ef99b5882a8883385465d095ac7b0b8f1e8547f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e2:5c:b8:bf:dd:41:02:25:55:94:1a:c9:bf:
38:1c:fb:e8:c7:99:2c:60:23:da:47:97:08:45:50:
a8:78:7f:2a:3a:c6:46:55:d9:39:95:f7:7f:c1:1e:
08:67:a6:24:5b:22:fc:d2:bc:74:32:d3:d7:53:f8:
bc:c0:de:3a:83:b5:40:ec:8f:f4:6c:6f:dd:36:51:
29:fb:db:a3:18:4c:c5:72:ba:31:d6:d7:10:d5:c7:
54:57:7e:93:81:fc:1d:c9:ac:7b:d6:e9:b9:67:92:
ad:46:93:d0:ae:72:9a:90:d2:c3:8f:0b:76:1f:f6:
7b:d7:8b:ad:44:2f:cc:ca:45:39:67:d7:d9:24:08:
ae:b6:1b:b5:5d:1b:7b:d6:d1:ff:bb:46:63:82:e4:
68:27:fe:c9:f1:1d:03:0a:a3:66:2c:cb:bf:f7:4e:
0f:43:da:ab:48:bc:7a:20:08:85:fc:2d:61:ab:e1:
55:27:fa:e4:df:28:16:87:19:37:ad:9b:56:a7:b0:
eb:6e:d2:18:89:45:0e:be:2d:49:ea:89:72:83:15:
c4:f9:d9:25:b6:cb:92:3b:b2:64:cd:28:58:9d:16:
da:ce:c2:95:c1:bd:6d:dd:ca:b3:a1:16:e7:19:3c:
4e:82:bc:81:ca:dd:06:89:92:72:99:07:9f:29:d7:
52:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:99:B5:88:2A:88:83:38:54:65:D0:95:AC:7B:0B:8F:1E:85:47:F7
X509v3 Authority Key Identifier:
keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:03:4e:f1:0d:98:7c:6e:f5:82:2b:55:64:d2:00:ea:09:ad:
7a:3d:d2:e4:d8:9b:b4:b5:8e:85:e7:db:17:fa:b6:cd:3e:75:
35:54:d3:c6:95:eb:a8:cf:16:87:6e:9d:11:ea:63:ee:05:49:
32:26:d1:47:0f:dd:ea:ec:17:26:21:dd:9a:41:b5:7d:be:34:
bd:3b:0d:5c:80:ed:a1:bb:12:b9:ab:4e:45:06:6f:af:55:63:
9f:db:1c:eb:f0:72:ca:03:1c:46:93:3b:67:f5:c9:5f:9a:31:
15:52:bb:a0:57:47:42:01:46:91:08:17:e1:7d:5f:8d:08:37:
0c:fc:63:26:20:e2:ca:61:63:2c:d7:88:d0:f5:31:fe:f3:99:
b5:4a:35:a3:cc:3d:6c:49:bd:01:85:33:b0:c7:bd:14:d6:a4:
f2:f4:49:4c:6f:4b:da:0e:6e:09:af:2d:cd:3d:fe:49:f8:15:
21:6e:b1:48:61:fd:a2:64:a3:2b:24:a9:0e:06:c2:3b:b7:b8:
64:e4:f6:0d:df:24:57:08:c6:ab:25:59:c9:c6:93:bf:49:ab:
23:ee:2c:4f:2b:9b:ea:a7:66:c6:b2:04:11:ba:c4:f8:02:e1:
77:29:c6:8b:f0:d0:71:36:2b:62:4c:d0:76:68:01:fa:fd:97:
3f:98:d2:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTfIOquFcvdLAuijxhisjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZTk4ZWU2Y2ZiM2ZiYTgzYjk3MmFlMTI2NTNiNWQ5ZmM3
MDcwMmUwHhcNMjUwODIzMDUwMTUxWhcNMjUwODI0MDUwMTUxWjAzMTEwLwYDVQQD
EyhlZjk5YjU4ODJhODg4MzM4NTQ2NWQwOTVhYzdiMGI4ZjFlODU0N2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleJcuL/dQQIlVZQayb84HPvox5ks
YCPaR5cIRVCoeH8qOsZGVdk5lfd/wR4IZ6YkWyL80rx0MtPXU/i8wN46g7VA7I/0
bG/dNlEp+9ujGEzFcrox1tcQ1cdUV36Tgfwdyax71um5Z5KtRpPQrnKakNLDjwt2
H/Z714utRC/MykU5Z9fZJAiuthu1XRt71tH/u0ZjguRoJ/7J8R0DCqNmLMu/904P
Q9qrSLx6IAiF/C1hq+FVJ/rk3ygWhxk3rZtWp7DrbtIYiUUOvi1J6olygxXE+dkl
tsuSO7JkzShYnRbazsKVwb1t3cqzoRbnGTxOgryByt0GiZJymQefKddSBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+ZtYgqiIM4VGXQlax7C48ehUf3MB8GA1UdIwQY
MBaAFJ/pjubPs/uoO5cq4SZTtdn8cHAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgt
MTNmODk4YmM3ZDBlLzEvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgtMTNmODk4YmM3ZDBl
LzEvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwNO8Q2Y
fG71gitVZNIA6gmtej3S5NibtLWOhefbF/q2zT51NVTTxpXrqM8Wh26dEepj7gVJ
MibRRw/d6uwXJiHdmkG1fb40vTsNXIDtobsSuatORQZvr1Vjn9sc6/ByygMcRpM7
Z/XJX5oxFVK7oFdHQgFGkQgX4X1fjQg3DPxjJiDiymFjLNeI0PUx/vOZtUo1o8w9
bEm9AYUzsMe9FNak8vRJTG9L2g5uCa8tzT3+SfgVIW6xSGH9omSjKySpDgbCO7e4
ZOT2Dd8kVwjGqyVZycaTv0mrI+4sTyub6qdmxrIEEbrE+ALhdynGi/DQcTYrYkzQ
dmgB+v2XP5jSpw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:42 2025 by rpki-client