Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
File: nJGTyUKgcOtue3bTPBFwwauqq8A.mft (raw, json)
Hash identifier: 3r0664JyhSKTO+4j7Pc4wOLmMgQK7mvoJXwM613klyI=
Subject key identifier: FB:BA:32:18:33:AC:02:FF:CF:90:05:F9:D4:7C:94:36:FC:19:8B:89
Authority key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
Certificate issuer: /CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Certificate serial: 0198D5F1A091FBD8090D2C3EC95241E07934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
Manifest number: 014F
Signing time: Sat 23 Aug 2025 08:00:38 +0000
Manifest this update: Sat 23 Aug 2025 08:00:38 +0000
Manifest next update: Sun 24 Aug 2025 08:00:38 +0000
Files and hashes: 1: nJGTyUKgcOtue3bTPBFwwauqq8A.crl (hash: yytdbaMT4hznyivZ/ydZVmzBpZ/yD4GoQvmwR+UiJUI=)
2: zsKGqfleCvDMwN0xjyFpS4xkenw.roa (hash: i/u/9VVtT03r4id3fmUnH+SfZ7Nvzq19dchi8Dl+uKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:a0:91:fb:d8:09:0d:2c:3e:c9:52:41:e0:79:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Validity
Not Before: Aug 23 08:00:38 2025 GMT
Not After : Aug 24 08:00:38 2025 GMT
Subject: CN=fbba321833ac02ffcf9005f9d47c9436fc198b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b5:04:4d:ed:bc:b8:c7:70:24:be:56:45:d4:
d4:2c:98:9d:ae:b2:f0:ca:e4:78:4e:b0:91:6d:cf:
11:8b:0e:a9:fe:6a:4e:ff:be:ef:06:ff:1e:5e:ca:
2f:3c:70:eb:ca:30:33:33:dd:ce:4d:14:30:0e:1b:
1b:8e:96:ca:4a:48:72:08:9c:e1:1b:a7:ef:46:03:
24:d4:ee:d3:4b:c6:a5:47:d2:cf:0b:89:ac:ad:65:
4b:38:aa:c4:f1:4e:d3:5f:8d:fa:0f:6e:69:5f:cb:
20:66:06:0e:5f:f9:5a:09:29:11:ef:c4:64:5f:3b:
d7:82:29:fa:1a:09:05:62:4a:70:f8:f8:c2:dc:57:
82:78:5a:92:d9:99:7a:0d:b1:62:65:a7:01:c6:80:
8b:4e:f3:d6:88:5c:4b:ab:66:89:56:47:37:37:cb:
9e:27:6c:e8:9d:e5:a9:33:92:bd:2a:23:13:68:99:
8d:76:f1:ef:5a:76:d0:80:b7:b4:87:d4:15:b6:ed:
a0:19:5a:58:15:ef:92:ce:a5:f4:e4:22:d8:86:8b:
14:12:a4:09:b8:1d:40:eb:51:1d:a5:30:d1:a5:ae:
66:c0:59:aa:b3:43:7c:e4:e1:bb:1a:0d:37:dd:b6:
8c:9a:67:5d:1a:7d:50:d1:aa:5d:4a:97:b4:16:30:
31:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BA:32:18:33:AC:02:FF:CF:90:05:F9:D4:7C:94:36:FC:19:8B:89
X509v3 Authority Key Identifier:
keyid:9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:3a:a2:4f:a4:48:17:de:05:40:94:5c:22:59:ad:d7:70:99:
a7:8e:fe:6b:14:d5:76:37:95:d8:fc:b8:98:86:2c:25:76:db:
82:6e:e0:a1:a3:c0:ae:a7:30:f8:de:ea:a6:44:ab:8c:33:62:
14:a3:ad:9b:1f:b5:17:55:8b:6b:67:21:40:52:e5:d3:b8:7d:
95:35:b1:67:4e:b1:52:8e:80:9b:88:9f:af:6f:a2:41:fc:d6:
ee:9b:17:12:09:c1:27:86:c2:d5:89:85:dc:dd:ed:e9:01:0a:
01:e1:7b:4b:06:9a:5b:e0:2f:c3:6e:dc:0e:d6:37:90:a8:7c:
03:2d:d1:8c:68:13:85:72:83:78:9a:69:82:d0:42:0c:82:18:
6d:60:d4:44:47:87:17:20:2e:87:c1:b3:57:d1:bd:27:f0:45:
56:77:53:c5:0c:29:a2:80:cb:98:72:a5:ee:8d:5e:24:a9:a7:
5d:c5:61:76:63:a3:c5:23:f4:5c:b9:7a:d3:f9:b6:69:0a:4f:
e0:49:b2:1c:bc:ee:3a:fb:95:a6:d7:eb:05:ed:33:4c:6f:3a:
ca:ae:57:46:62:6c:2e:26:69:9c:5a:6a:e3:07:6b:af:55:0f:
ab:5c:c3:63:12:50:11:12:5b:58:8e:4c:ad:7d:59:3b:96:35:
09:c2:93:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8aCR+9gJDSw+yVJB4Hk0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOTE5M2M5NDJhMDcwZWI2ZTdiNzZkMzNjMTE3MGMxYWJh
YWFiYzAwHhcNMjUwODIzMDgwMDM4WhcNMjUwODI0MDgwMDM4WjAzMTEwLwYDVQQD
EyhmYmJhMzIxODMzYWMwMmZmY2Y5MDA1ZjlkNDdjOTQzNmZjMTk4Yjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bUETe28uMdwJL5WRdTULJidrrLw
yuR4TrCRbc8Riw6p/mpO/77vBv8eXsovPHDryjAzM93OTRQwDhsbjpbKSkhyCJzh
G6fvRgMk1O7TS8alR9LPC4msrWVLOKrE8U7TX436D25pX8sgZgYOX/laCSkR78Rk
XzvXgin6GgkFYkpw+PjC3FeCeFqS2Zl6DbFiZacBxoCLTvPWiFxLq2aJVkc3N8ue
J2zoneWpM5K9KiMTaJmNdvHvWnbQgLe0h9QVtu2gGVpYFe+SzqX05CLYhosUEqQJ
uB1A61EdpTDRpa5mwFmqs0N85OG7Gg033baMmmddGn1Q0apdSpe0FjAxwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPu6MhgzrAL/z5AF+dR8lDb8GYuJMB8GA1UdIwQY
MBaAFJyRk8lCoHDrbnt20zwRcMGrqqvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkpHVHlVS2djT3R1ZTNiVFBCRnd3YXVxcThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lNjdlODItNzRkMS00NTk4LTgwZWUt
Y2UwZTk3YmFiNmE3LzEvbkpHVHlVS2djT3R1ZTNiVFBCRnd3YXVxcThBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lNjdlODItNzRkMS00NTk4LTgwZWUtY2UwZTk3YmFiNmE3
LzEvbkpHVHlVS2djT3R1ZTNiVFBCRnd3YXVxcThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAujqiT6RI
F94FQJRcIlmt13CZp47+axTVdjeV2Py4mIYsJXbbgm7goaPArqcw+N7qpkSrjDNi
FKOtmx+1F1WLa2chQFLl07h9lTWxZ06xUo6Am4ifr2+iQfzW7psXEgnBJ4bC1YmF
3N3t6QEKAeF7SwaaW+Avw27cDtY3kKh8Ay3RjGgThXKDeJppgtBCDIIYbWDUREeH
FyAuh8GzV9G9J/BFVndTxQwpooDLmHKl7o1eJKmnXcVhdmOjxSP0XLl60/m2aQpP
4EmyHLzuOvuVptfrBe0zTG86yq5XRmJsLiZpnFpq4wdrr1UPq1zDYxJQERJbWI5M
rX1ZO5Y1CcKTQg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:22:48 2025 by rpki-client