Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
File: nIMTOn4Fk7s5jq25J1jLySydZaU.mft (raw, json)
Hash identifier: TOS/LjJdXU0GfOnv+q2kD7ALmeLwIgdvGjPnOEMVIWY=
Subject key identifier: 82:1B:32:2C:63:09:69:31:18:03:EF:38:F9:4A:35:EC:C1:35:D0:11
Authority key identifier: 9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
Certificate issuer: /CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Certificate serial: 0197D2BC6171906FE8CB585446B72A6E55C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
Manifest number: 10F8
Signing time: Fri 04 Jul 2025 00:00:50 +0000
Manifest this update: Fri 04 Jul 2025 00:00:50 +0000
Manifest next update: Sat 05 Jul 2025 00:00:50 +0000
Files and hashes: 1: ekhJmeQnAobhvtQLQDb4UB8M1mE.roa (hash: 6CiHXbuoqrzSCFBPUfq3RLFxMNDauAW0jWPQmmN8RFM=)
2: nIMTOn4Fk7s5jq25J1jLySydZaU.crl (hash: lFBOUXSmHthc1pL0toKsnokeTYjqYHwilthaTdcHO58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 17:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:bc:61:71:90:6f:e8:cb:58:54:46:b7:2a:6e:55:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Validity
Not Before: Jul 4 00:00:50 2025 GMT
Not After : Jul 5 00:00:50 2025 GMT
Subject: CN=821b322c630969311803ef38f94a35ecc135d011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9d:df:09:1d:c4:3a:86:43:23:73:7f:b2:3f:
c2:6c:73:41:1c:b5:42:dc:6c:47:9d:a1:0f:7c:d4:
15:f3:b8:ff:8f:18:1b:85:34:c3:1a:41:28:6f:a4:
bc:df:bd:f5:32:0c:94:16:04:d3:c4:56:13:d2:fc:
bf:26:71:f4:e6:95:03:7b:e3:54:a8:e5:ab:ca:78:
ba:d4:b3:cc:72:7e:d5:89:d6:2e:3f:53:0b:29:d7:
f7:a7:36:41:ff:e1:b7:c0:c7:25:18:3a:86:b1:e2:
63:8b:e2:8b:d9:57:fe:76:68:c3:37:0e:3e:03:2d:
f8:c0:7b:54:77:3f:28:56:54:56:06:c6:1a:50:73:
6a:36:77:43:5b:3c:b8:51:f5:29:26:06:aa:f4:d0:
b6:d2:d0:41:3a:6d:e3:92:52:7d:36:c4:73:ae:e7:
4c:6d:cd:b9:f7:12:b1:39:cf:43:53:f5:7d:21:3a:
e1:db:f5:63:17:ce:27:95:da:b7:42:c5:2a:cf:70:
39:7b:7d:ac:5f:de:bd:b5:cf:13:8e:e2:82:1c:0c:
91:c1:d5:75:e6:19:b0:2c:08:48:b4:b6:10:20:bc:
6b:d2:ce:a3:98:53:0c:e7:b7:65:06:80:8c:0f:02:
1a:c3:d2:8e:cd:22:ff:67:ac:b7:81:33:3b:31:fa:
cf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1B:32:2C:63:09:69:31:18:03:EF:38:F9:4A:35:EC:C1:35:D0:11
X509v3 Authority Key Identifier:
keyid:9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b6:8b:9b:08:7e:e9:d9:fb:67:24:f9:6d:df:0f:8f:39:cf:
da:bf:b1:9b:46:fa:89:dd:a9:4d:9b:1a:95:31:43:a2:c5:93:
44:09:6a:cd:48:88:e3:6b:65:2d:9c:8d:70:cf:4e:d2:bc:b2:
c9:74:9b:57:a5:2c:c3:26:44:03:b9:c7:34:53:9c:c7:e1:0c:
d4:0f:ac:89:27:ba:30:0d:eb:78:71:ab:18:e9:ea:4c:5d:25:
55:bd:f0:3e:d1:47:12:b2:d3:43:eb:b0:3d:43:b1:05:f5:05:
9e:52:81:a4:c6:e3:30:9f:d1:4e:fa:91:24:d5:0e:6c:12:ff:
ab:08:87:c3:52:30:6d:62:75:86:b1:f6:03:0f:b8:53:ee:42:
26:c5:28:32:c4:5f:10:08:3a:f1:3f:03:d4:4a:cf:87:0f:bf:
f6:fb:dd:6a:0f:28:c2:83:3a:f8:d7:66:9f:e0:33:cc:58:bb:
86:8c:a1:4b:b7:29:f7:d2:b9:c6:45:9c:2c:10:bd:56:5d:a8:
c1:39:0c:2d:64:c4:22:a9:b2:dd:47:62:3a:4b:66:d5:eb:8c:
14:e4:49:b6:eb:6e:3c:c4:e7:02:9f:f2:7d:e5:03:f9:42:41:
01:1e:85:eb:04:93:4b:3a:b3:11:f6:19:3a:bd:ef:ec:2f:00:
64:51:24:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfSvGFxkG/oy1hURrcqblXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljODMxMzNhN2UwNTkzYmIzOThlYWRiOTI3NThjYmM5MmM5
ZDY1YTUwHhcNMjUwNzA0MDAwMDUwWhcNMjUwNzA1MDAwMDUwWjAzMTEwLwYDVQQD
Eyg4MjFiMzIyYzYzMDk2OTMxMTgwM2VmMzhmOTRhMzVlY2MxMzVkMDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp3fCR3EOoZDI3N/sj/CbHNBHLVC
3GxHnaEPfNQV87j/jxgbhTTDGkEob6S83731MgyUFgTTxFYT0vy/JnH05pUDe+NU
qOWryni61LPMcn7VidYuP1MLKdf3pzZB/+G3wMclGDqGseJji+KL2Vf+dmjDNw4+
Ay34wHtUdz8oVlRWBsYaUHNqNndDWzy4UfUpJgaq9NC20tBBOm3jklJ9NsRzrudM
bc259xKxOc9DU/V9ITrh2/VjF84nldq3QsUqz3A5e32sX969tc8TjuKCHAyRwdV1
5hmwLAhItLYQILxr0s6jmFMM57dlBoCMDwIaw9KOzSL/Z6y3gTM7MfrPQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIbMixjCWkxGAPvOPlKNezBNdARMB8GA1UdIwQY
MBaAFJyDEzp+BZO7OY6tuSdYy8ksnWWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbklNVE9uNEZrN3M1anEyNUoxakx5U3lkWmFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9lZGExNWEtMDQyMy00NmJkLWIzMmEt
NTIxNDdhYWUwZWI0LzEvbklNVE9uNEZrN3M1anEyNUoxakx5U3lkWmFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9lZGExNWEtMDQyMy00NmJkLWIzMmEtNTIxNDdhYWUwZWI0
LzEvbklNVE9uNEZrN3M1anEyNUoxakx5U3lkWmFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLaLmwh+
6dn7ZyT5bd8PjznP2r+xm0b6id2pTZsalTFDosWTRAlqzUiI42tlLZyNcM9O0ryy
yXSbV6UswyZEA7nHNFOcx+EM1A+siSe6MA3reHGrGOnqTF0lVb3wPtFHErLTQ+uw
PUOxBfUFnlKBpMbjMJ/RTvqRJNUObBL/qwiHw1IwbWJ1hrH2Aw+4U+5CJsUoMsRf
EAg68T8D1ErPhw+/9vvdag8owoM6+Ndmn+AzzFi7hoyhS7cp99K5xkWcLBC9Vl2o
wTkMLWTEIqmy3UdiOktm1euMFORJtutuPMTnAp/yfeUD+UJBAR6F6wSTSzqzEfYZ
Or3v7C8AZFEkfg==
-----END CERTIFICATE-----
Generated at Fri Jul 4 02:48:51 2025 by rpki-client