Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
File: nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json)
Hash identifier: 6DPf/VVC9zACleetfLgrpQufz/dvKny4ryfVzxdmMNU=
Subject key identifier: 9F:EB:56:4B:BB:F4:6B:6F:5B:0B:60:CA:84:10:D7:4E:2E:D1:CF:34
Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Certificate serial: 0198D5BBDBCA4481E24DA0A31023465D961E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
Manifest number: 023F
Signing time: Sat 23 Aug 2025 07:01:55 +0000
Manifest this update: Sat 23 Aug 2025 07:01:55 +0000
Manifest next update: Sun 24 Aug 2025 07:01:55 +0000
Files and hashes: 1: cuJe5r6PJPS-jv29DbSoyr1BYdg.roa (hash: 2tGiauvihDEwDBBUXD4gVcgWbpgeD9AUpt2tKQwt6ew=)
2: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: 40Jr15mefe4uaTpDAnJEJpt+kiIuVM2hT6yka5YGRSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:db:ca:44:81:e2:4d:a0:a3:10:23:46:5d:96:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Validity
Not Before: Aug 23 07:01:55 2025 GMT
Not After : Aug 24 07:01:55 2025 GMT
Subject: CN=9feb564bbbf46b6f5b0b60ca8410d74e2ed1cf34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e9:57:7b:3b:61:9d:e6:50:bd:16:b4:7c:ad:
32:81:d3:e7:a7:88:bd:0a:6e:d1:88:95:d7:f9:8c:
d0:81:d3:83:d0:40:70:a8:be:d5:df:49:f9:da:28:
65:10:0e:2f:a1:06:65:f6:5a:8b:68:ad:eb:81:aa:
51:40:f1:a0:07:45:de:7d:5f:3b:62:49:c1:23:bc:
61:9c:26:2d:0a:af:92:3e:84:02:56:0d:a2:50:22:
36:92:6c:2e:b8:6c:99:8b:75:e5:28:94:e5:5c:0d:
e4:10:6e:2c:11:e7:e6:6b:c7:fb:3e:fa:8c:0a:be:
45:4a:1c:96:2a:76:1f:c1:53:f0:f5:d7:a6:10:b0:
92:48:a9:65:4e:6f:c7:35:c1:3f:0d:1d:07:e8:84:
ce:99:eb:16:0e:5c:c9:8f:b3:68:39:d4:32:e8:66:
59:65:51:b3:6d:a2:d7:75:86:89:b5:d3:a6:63:9d:
10:dc:2d:f5:17:b9:78:af:2c:1f:2b:59:4b:1f:e4:
8f:e7:a8:a2:4b:3c:b8:0c:a0:ec:d6:c8:d6:e5:38:
f7:bb:74:c7:83:35:bf:88:f5:69:49:4b:7e:77:7d:
7c:fa:a4:1e:d5:74:09:0f:40:cc:f8:56:d4:a4:4e:
9d:c9:9c:cf:5b:7b:58:08:2c:ef:fe:c1:7c:11:b7:
be:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EB:56:4B:BB:F4:6B:6F:5B:0B:60:CA:84:10:D7:4E:2E:D1:CF:34
X509v3 Authority Key Identifier:
keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4b:16:65:5e:5c:a3:03:79:f8:78:db:24:3e:cc:a5:6d:1d:
e6:6f:fa:f6:ae:d6:75:ee:11:46:f6:97:23:35:28:c2:e3:8b:
99:78:76:ac:93:16:77:de:76:db:3b:37:fe:0e:18:80:5e:a7:
b2:1c:8c:0e:9a:8f:91:dd:a9:25:c6:02:8d:b0:e7:21:c8:ea:
37:e1:0c:3f:c1:be:c7:ad:ef:cf:28:a9:1e:01:db:86:94:66:
ae:2a:66:13:e6:99:5f:02:b7:45:e3:40:d1:f5:fe:29:a8:98:
fd:42:5c:54:fb:8d:88:c5:89:4d:25:4f:0e:d4:4b:a6:78:44:
45:28:a6:b6:af:a5:aa:6a:ca:87:34:15:cc:7a:5b:38:fb:99:
b9:d4:03:02:97:7f:80:3f:7b:a7:c8:19:77:ba:04:b4:ca:f7:
ac:45:ce:91:98:49:4e:68:12:d7:74:83:2c:e5:10:03:81:8a:
e9:5c:97:4f:ec:8f:e0:a2:0b:17:bc:63:56:97:e8:2e:22:3b:
e3:58:80:60:8e:ab:05:c1:59:b9:8d:c7:7f:d3:d4:50:a2:ed:
76:9c:45:b4:ff:73:c0:bd:8b:7b:58:67:40:b8:1c:53:09:d0:
9f:28:ab:12:43:35:8c:13:75:53:d8:a4:62:3b:3c:93:5b:8e:
7f:0d:f5:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu9vKRIHiTaCjECNGXZYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNmYyNjIyZTY1YzJlZTg2MzUwMWQ3NzIxNDc1YTA1ZWY1
MzQzZmIwHhcNMjUwODIzMDcwMTU1WhcNMjUwODI0MDcwMTU1WjAzMTEwLwYDVQQD
Eyg5ZmViNTY0YmJiZjQ2YjZmNWIwYjYwY2E4NDEwZDc0ZTJlZDFjZjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyelXezthneZQvRa0fK0ygdPnp4i9
Cm7RiJXX+YzQgdOD0EBwqL7V30n52ihlEA4voQZl9lqLaK3rgapRQPGgB0XefV87
YknBI7xhnCYtCq+SPoQCVg2iUCI2kmwuuGyZi3XlKJTlXA3kEG4sEefma8f7PvqM
Cr5FShyWKnYfwVPw9demELCSSKllTm/HNcE/DR0H6ITOmesWDlzJj7NoOdQy6GZZ
ZVGzbaLXdYaJtdOmY50Q3C31F7l4rywfK1lLH+SP56iiSzy4DKDs1sjW5Tj3u3TH
gzW/iPVpSUt+d318+qQe1XQJD0DM+FbUpE6dyZzPW3tYCCzv/sF8Ebe+nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/rVku79GtvWwtgyoQQ104u0c80MB8GA1UdIwQY
MBaAFJ5vJiLmXC7oY1AddyFHWgXvU0P7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81OTNkZDUtYjkwNy00ZGU4LTgwY2Qt
YjFkYjcwMDcxZGRlLzEvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS81OTNkZDUtYjkwNy00ZGU4LTgwY2QtYjFkYjcwMDcxZGRl
LzEvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUsWZV5c
owN5+HjbJD7MpW0d5m/69q7Wde4RRvaXIzUowuOLmXh2rJMWd9522zs3/g4YgF6n
shyMDpqPkd2pJcYCjbDnIcjqN+EMP8G+x63vzyipHgHbhpRmripmE+aZXwK3ReNA
0fX+KaiY/UJcVPuNiMWJTSVPDtRLpnhERSimtq+lqmrKhzQVzHpbOPuZudQDApd/
gD97p8gZd7oEtMr3rEXOkZhJTmgS13SDLOUQA4GK6VyXT+yP4KILF7xjVpfoLiI7
41iAYI6rBcFZuY3Hf9PUUKLtdpxFtP9zwL2Le1hnQLgcUwnQnyirEkM1jBN1U9ik
Yjs8k1uOfw31KQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:56 2025 by rpki-client