Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: jUweZwiSDSWp2qtqEl33+89WqjvFGRRa/AZc8qk7aew=
Subject key identifier: B7:BD:7C:41:36:15:BA:32:A1:31:2D:21:1B:E5:8E:AB:0F:1A:96:13
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 0198D5839FAC9CFAECAC51DE0292117CC56E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 026C
Signing time: Sat 23 Aug 2025 06:00:29 +0000
Manifest this update: Sat 23 Aug 2025 06:00:29 +0000
Manifest next update: Sun 24 Aug 2025 06:00:29 +0000
Files and hashes: 1: BqZIe6gQs5PVIE84eQo2_DOFBSU.roa (hash: U/7+ugA60UPkZBbdU298MJ3Zk+Vay3cife8TG24P130=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: fjEx+weM+y80gK2kidILPejHSIlnfmEHZlpxAV7UsYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:9f:ac:9c:fa:ec:ac:51:de:02:92:11:7c:c5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: Aug 23 06:00:29 2025 GMT
Not After : Aug 24 06:00:29 2025 GMT
Subject: CN=b7bd7c413615ba32a1312d211be58eab0f1a9613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:47:ae:dd:ef:96:18:4c:ae:9c:5d:f3:9d:3c:
b5:e4:b7:88:99:7c:73:28:7a:ac:eb:97:b3:37:70:
49:82:ca:09:f6:e6:6d:86:53:8a:ef:e9:d0:78:8f:
d8:c7:5a:23:15:5e:dd:c4:6d:26:93:19:e4:2f:96:
c5:16:27:59:6c:9c:b3:35:c6:ca:92:5e:45:62:29:
35:f9:92:26:e4:17:40:fc:f2:17:41:4c:ae:e0:8f:
c6:d9:d6:55:90:7f:29:80:0b:c4:37:77:3a:b9:ee:
cc:f7:99:5f:5a:e0:91:4c:e4:87:4f:6b:22:de:1b:
15:db:93:9f:5a:b5:52:20:0a:25:41:fa:a5:18:9f:
c4:eb:a6:57:83:76:1b:75:30:47:0b:47:1e:0f:ba:
14:60:df:0d:03:e4:c6:39:23:c7:ed:ed:2b:36:f0:
00:41:3a:0c:ac:9d:3f:1b:4e:db:5c:28:80:b9:e0:
de:ef:6c:7f:05:0c:87:78:90:ce:d5:7d:e6:39:a0:
67:5c:fa:d5:81:d9:66:eb:61:24:95:4d:0d:83:a0:
06:80:2a:1e:71:b2:1f:a9:cb:04:46:70:26:6d:6f:
27:9f:6f:ab:b5:26:c3:c5:76:9e:d6:db:fe:5b:71:
db:0d:34:83:cf:d6:62:3f:38:fc:49:c2:c0:9e:0d:
70:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BD:7C:41:36:15:BA:32:A1:31:2D:21:1B:E5:8E:AB:0F:1A:96:13
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:34:8b:c9:d7:6e:7f:2b:66:68:02:58:3b:12:87:83:de:bc:
b6:64:3b:37:98:59:31:e8:1c:72:ae:80:88:11:a7:4f:ef:cb:
e6:b9:ea:bb:93:c2:93:57:97:dc:4b:6c:2a:16:6a:ca:32:90:
14:db:80:9b:b7:f8:70:85:5c:b9:05:b3:b9:6d:ba:cf:bf:4e:
77:b9:92:d1:98:0e:dc:97:77:ac:4c:49:ec:3e:6f:c2:d6:4a:
5e:7a:c4:31:02:58:a3:4c:63:a3:eb:b7:d6:d7:c7:16:41:aa:
40:eb:e5:32:4b:0f:0b:ac:d7:a4:2a:5c:96:4c:50:e9:cf:64:
4f:80:ca:f7:e4:f1:c9:62:56:ca:f6:1b:69:b3:cf:87:85:1f:
a3:3b:aa:06:81:e3:a3:1b:30:2f:5e:54:34:e8:e8:4c:a1:56:
0f:72:28:39:ed:3e:3f:e6:08:92:77:c0:44:94:4a:e2:43:fe:
86:65:11:ba:66:a0:04:ea:83:80:04:75:e1:a5:40:8f:37:1d:
ea:8e:83:94:8c:8a:24:b5:a2:b8:c0:3d:38:e5:a3:61:a3:71:
d7:ff:23:54:cd:f3:80:f0:f7:f5:b7:91:3d:a4:7d:d9:3e:bc:
87:c5:b9:25:a6:2f:b2:40:42:6a:4e:5e:92:c6:d5:bf:92:fa:
22:d8:b3:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg5+snPrsrFHeApIRfMVuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYzVjMzVkOTg2ODZmM2Q4YTM4NzQxNzFiMTQzMjg3ZjVl
M2U3MzMwHhcNMjUwODIzMDYwMDI5WhcNMjUwODI0MDYwMDI5WjAzMTEwLwYDVQQD
EyhiN2JkN2M0MTM2MTViYTMyYTEzMTJkMjExYmU1OGVhYjBmMWE5NjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ueu3e+WGEyunF3znTy15LeImXxz
KHqs65ezN3BJgsoJ9uZthlOK7+nQeI/Yx1ojFV7dxG0mkxnkL5bFFidZbJyzNcbK
kl5FYik1+ZIm5BdA/PIXQUyu4I/G2dZVkH8pgAvEN3c6ue7M95lfWuCRTOSHT2si
3hsV25OfWrVSIAolQfqlGJ/E66ZXg3YbdTBHC0ceD7oUYN8NA+TGOSPH7e0rNvAA
QToMrJ0/G07bXCiAueDe72x/BQyHeJDO1X3mOaBnXPrVgdlm62EklU0Ng6AGgCoe
cbIfqcsERnAmbW8nn2+rtSbDxXae1tv+W3HbDTSDz9ZiPzj8ScLAng1whwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLe9fEE2FboyoTEtIRvljqsPGpYTMB8GA1UdIwQY
MBaAFJzFw12YaG89ijh0FxsUMof14+czMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEt
ZTg3NTEwM2ZhZjEyLzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEtZTg3NTEwM2ZhZjEy
LzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjSLyddu
fytmaAJYOxKHg968tmQ7N5hZMegccq6AiBGnT+/L5rnqu5PCk1eX3EtsKhZqyjKQ
FNuAm7f4cIVcuQWzuW26z79Od7mS0ZgO3Jd3rExJ7D5vwtZKXnrEMQJYo0xjo+u3
1tfHFkGqQOvlMksPC6zXpCpclkxQ6c9kT4DK9+TxyWJWyvYbabPPh4UfozuqBoHj
oxswL15UNOjoTKFWD3IoOe0+P+YIknfARJRK4kP+hmURumagBOqDgAR14aVAjzcd
6o6DlIyKJLWiuMA9OOWjYaNx1/8jVM3zgPD39beRPaR92T68h8W5JaYvskBCak5e
ksbVv5L6ItizvQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:34 2025 by rpki-client