Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
File: nc9e3E5q7cjfQkWmL6N_oipiDqo.mft (raw, json)
Hash identifier: FZZzeXdhqNIbDyn5hfEIfisALPRn8hWqe3CfxYF8Rzc=
Subject key identifier: 0B:D1:4A:46:81:BE:E8:85:D5:88:9D:59:27:19:A2:79:55:02:F8:CA
Authority key identifier: 9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
Certificate issuer: /CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Certificate serial: 0198D69853C31FB83BD77FC07AA5EE3B1549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
Manifest number: 13B6
Signing time: Sat 23 Aug 2025 11:02:43 +0000
Manifest this update: Sat 23 Aug 2025 11:02:43 +0000
Manifest next update: Sun 24 Aug 2025 11:02:43 +0000
Files and hashes: 1: 6mwpgZ5jMyOU3uGB0qn2Rbl29vU.roa (hash: zgnUk23gS2UF4J68R+bIiwgYj0q0EdWy/Z/fr9n8soc=)
2: nc9e3E5q7cjfQkWmL6N_oipiDqo.crl (hash: tC953mraiqupNp9T1NpRuNeKHYKaWASRj9BuddbiEv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:53:c3:1f:b8:3b:d7:7f:c0:7a:a5:ee:3b:15:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Validity
Not Before: Aug 23 11:02:43 2025 GMT
Not After : Aug 24 11:02:43 2025 GMT
Subject: CN=0bd14a4681bee885d5889d592719a2795502f8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:9c:5b:78:5f:43:e7:92:ac:68:b5:8b:17:
9a:94:be:0e:ab:15:14:a2:4d:42:2e:75:f7:65:d0:
ca:28:b0:3a:63:91:2e:84:53:a8:2c:ae:b4:90:85:
e8:18:4e:9a:d5:18:eb:3b:0a:c3:b5:bb:60:cf:a9:
e7:68:89:da:11:59:73:54:da:71:5b:a2:b0:d1:c4:
10:d1:1c:95:fb:64:cc:db:e3:f0:4d:28:6e:22:80:
87:ca:e4:51:b5:ef:f6:10:89:8f:6f:93:33:3f:59:
34:36:f1:2d:92:e1:46:83:c7:19:77:2f:a2:a5:3a:
e7:66:76:4b:38:d1:9c:93:4d:33:2d:d2:02:d5:7f:
62:f1:06:dc:2c:c3:23:c0:3d:e1:3f:37:73:b9:5a:
15:29:09:f2:e4:5c:9f:df:0c:35:3a:27:e2:5d:5b:
f9:bf:16:5a:43:27:30:c6:bb:b6:64:9b:66:ec:bd:
b2:04:95:5e:97:a7:e8:77:65:5d:a9:ab:62:62:d2:
62:5e:5b:6f:d5:89:52:72:1c:3c:ce:ae:65:ba:4a:
e1:13:da:40:14:13:6e:03:64:9c:99:df:a0:15:3a:
68:b2:8e:75:72:98:37:7f:3d:49:4b:8f:a8:f7:53:
f0:fa:d2:6a:b2:fb:5e:c3:e8:95:b1:53:49:65:8f:
ba:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D1:4A:46:81:BE:E8:85:D5:88:9D:59:27:19:A2:79:55:02:F8:CA
X509v3 Authority Key Identifier:
keyid:9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d2:89:93:6e:6f:3f:ef:6f:79:c0:10:2e:24:c7:b5:3b:85:
fd:70:d9:4e:cf:4e:d0:e9:09:59:64:77:26:43:e2:5b:26:72:
05:3d:4c:f5:8f:e6:f2:88:a4:33:10:ed:4e:95:c2:8f:0c:db:
ce:6c:f0:14:38:99:b2:de:11:fe:bf:1f:50:53:a4:15:b5:85:
83:99:99:8d:f0:98:43:d5:70:4d:94:2f:cd:ab:b1:23:49:fa:
cc:25:98:e0:56:cb:a3:82:47:4e:1d:0c:ce:34:40:4f:78:ea:
c1:ae:67:fb:25:b3:9b:69:71:d0:99:1d:52:3c:b2:8b:02:df:
2b:fc:27:00:77:f1:35:4b:3b:d4:bd:b4:7a:c6:7d:26:24:60:
7e:5d:ef:2a:7f:1e:a3:87:f6:ca:79:85:72:a2:68:a1:7a:a6:
41:0f:e5:c3:aa:8f:52:d4:e4:74:96:74:25:8f:5d:e3:5f:1c:
99:0f:f7:67:c2:5c:a2:ec:fe:d5:06:56:32:da:d5:a7:ce:e2:
83:80:21:39:51:0c:5c:7c:f9:a6:97:0f:09:0a:c0:f1:d5:f0:
72:d8:58:76:d3:0e:f0:30:fb:dc:7e:9b:0d:e6:f6:4d:f6:35:
05:3c:41:94:cd:24:88:4e:6f:c2:74:d9:da:60:2d:b5:3d:39:
4b:dd:5f:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmFPDH7g713/AeqXuOxVJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkY2Y1ZWRjNGU2YWVkYzhkZjQyNDVhNjJmYTM3ZmEyMmE2
MjBlYWEwHhcNMjUwODIzMTEwMjQzWhcNMjUwODI0MTEwMjQzWjAzMTEwLwYDVQQD
EygwYmQxNGE0NjgxYmVlODg1ZDU4ODlkNTkyNzE5YTI3OTU1MDJmOGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi2cW3hfQ+eSrGi1ixealL4OqxUU
ok1CLnX3ZdDKKLA6Y5EuhFOoLK60kIXoGE6a1RjrOwrDtbtgz6nnaInaEVlzVNpx
W6Kw0cQQ0RyV+2TM2+PwTShuIoCHyuRRte/2EImPb5MzP1k0NvEtkuFGg8cZdy+i
pTrnZnZLONGck00zLdIC1X9i8QbcLMMjwD3hPzdzuVoVKQny5Fyf3ww1OifiXVv5
vxZaQycwxru2ZJtm7L2yBJVel6fod2VdqatiYtJiXltv1YlSchw8zq5lukrhE9pA
FBNuA2Scmd+gFTposo51cpg3fz1JS4+o91Pw+tJqsvtew+iVsVNJZY+6kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvRSkaBvuiF1YidWScZonlVAvjKMB8GA1UdIwQY
MBaAFJ3PXtxOau3I30JFpi+jf6IqYg6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmM5ZTNFNXE3Y2pmUWtXbUw2Tl9vaXBpRHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xZDFiNDUtODZlOS00NmVlLTk5MWMt
MGVkZGViNDhlM2FlLzEvbmM5ZTNFNXE3Y2pmUWtXbUw2Tl9vaXBpRHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xZDFiNDUtODZlOS00NmVlLTk5MWMtMGVkZGViNDhlM2Fl
LzEvbmM5ZTNFNXE3Y2pmUWtXbUw2Tl9vaXBpRHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9KJk25v
P+9vecAQLiTHtTuF/XDZTs9O0OkJWWR3JkPiWyZyBT1M9Y/m8oikMxDtTpXCjwzb
zmzwFDiZst4R/r8fUFOkFbWFg5mZjfCYQ9VwTZQvzauxI0n6zCWY4FbLo4JHTh0M
zjRAT3jqwa5n+yWzm2lx0JkdUjyyiwLfK/wnAHfxNUs71L20esZ9JiRgfl3vKn8e
o4f2ynmFcqJooXqmQQ/lw6qPUtTkdJZ0JY9d418cmQ/3Z8Jcouz+1QZWMtrVp87i
g4AhOVEMXHz5ppcPCQrA8dXwcthYdtMO8DD73H6bDeb2TfY1BTxBlM0kiE5vwnTZ
2mAttT05S91fxA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:46:15 2025 by rpki-client