Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
File: nOItyiotsKWf5WaByNHEBnenRbU.mft (raw, json)
Hash identifier: gdvk9GIOzTPS4WRWi6Hu1SCfDA5mn4pWqz0y0TlrRmU=
Subject key identifier: 72:58:69:2A:FC:D1:A7:FF:6F:B2:5F:BE:9C:97:C5:0A:E9:7A:B2:8B
Authority key identifier: 9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
Certificate issuer: /CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Certificate serial: 0198D850021C8E400965E91D0400AD452513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
Manifest number: 1209
Signing time: Sat 23 Aug 2025 19:02:58 +0000
Manifest this update: Sat 23 Aug 2025 19:02:58 +0000
Manifest next update: Sun 24 Aug 2025 19:02:58 +0000
Files and hashes: 1: SgrL7DiM5GSLyUl02rPic8LO2xM.roa (hash: mfGk2oXMS3Dskm6xFi6bjI6ao91mV5GgJuEh/2dC5PU=)
2: nOItyiotsKWf5WaByNHEBnenRbU.crl (hash: 37EWY0/cx7gGkQ0QcVUAPgubmDODXvQPyZ95h6v3nkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 19:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:02:1c:8e:40:09:65:e9:1d:04:00:ad:45:25:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Validity
Not Before: Aug 23 19:02:58 2025 GMT
Not After : Aug 24 19:02:58 2025 GMT
Subject: CN=7258692afcd1a7ff6fb25fbe9c97c50ae97ab28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:c0:fa:dc:7f:99:29:9f:a3:73:a5:39:30:
57:28:fe:e9:ec:36:96:d1:df:06:96:9e:16:fc:11:
21:2e:66:4f:1a:72:23:ef:d9:33:f9:42:96:0c:5c:
31:3c:22:c6:a1:21:6b:1a:18:03:4c:48:11:58:ef:
9c:fd:c5:f3:9d:6b:59:b4:5f:8c:43:1d:5b:15:5a:
9e:f0:a1:d1:b7:da:6e:56:28:c9:1f:6e:1e:b0:e9:
1e:d0:0f:90:d8:ea:d3:f0:4a:74:bb:40:3e:8c:7f:
f8:c2:65:55:8d:4e:c9:e2:49:42:7b:f7:1d:d4:f0:
ca:0c:10:7c:8e:98:3b:87:c9:7c:8f:36:2b:0f:61:
7c:a9:47:09:ad:66:43:dd:3e:89:3f:49:21:c1:6e:
60:e2:76:a9:1e:45:cd:e1:3f:74:ca:60:71:48:c6:
64:20:ad:b1:e8:d9:e6:38:4f:26:4c:a6:30:75:3d:
f6:14:dc:4d:c6:42:67:79:80:c8:45:9c:4f:e6:d1:
63:42:b5:65:1b:10:b0:23:f2:ba:6a:88:0c:cc:60:
42:0c:4b:a7:09:69:e3:d5:db:4f:69:54:07:d1:7b:
69:97:3a:ad:06:0d:48:7c:e3:0c:7d:96:53:1f:37:
13:55:48:c3:fd:55:8e:c3:a1:20:9f:cc:27:e3:9d:
a3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:58:69:2A:FC:D1:A7:FF:6F:B2:5F:BE:9C:97:C5:0A:E9:7A:B2:8B
X509v3 Authority Key Identifier:
keyid:9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:dc:71:c2:b4:26:78:80:4c:de:80:97:7a:12:5e:14:bd:c7:
f8:a3:1e:e6:c7:6d:96:58:95:de:42:71:88:dd:c7:a9:9c:7c:
1a:54:72:ee:78:37:c5:c0:03:8b:2d:d3:db:cc:50:17:d1:34:
e3:c4:25:4a:d1:6e:b0:32:b6:b1:f6:b4:e8:79:b2:7b:49:5e:
bb:41:e8:98:71:a5:b6:bf:9d:7a:84:90:30:ed:e8:4a:f6:5c:
e4:66:ee:5c:42:65:ff:54:8c:73:97:c1:f0:65:70:72:89:14:
f4:ac:07:58:48:28:88:b2:48:95:1c:83:ad:79:e6:e8:28:98:
86:14:17:ec:f2:bf:2c:0b:56:db:10:e3:1c:a1:17:f7:5b:f9:
bb:74:27:7d:69:92:77:af:ac:89:6b:37:b2:c6:24:6a:d7:ba:
0b:7a:08:b5:82:5d:f8:ff:1d:7c:fe:52:a5:d1:c8:bc:7b:ba:
c6:e3:0d:38:fa:92:57:af:e3:5b:e9:ff:15:4a:5c:76:43:a2:
ad:7e:64:b4:df:0e:93:83:58:85:64:b6:f7:c9:d3:a3:19:b2:
f7:4f:20:20:ad:38:f5:2f:2f:ab:31:50:e2:a4:45:fa:a6:04:
70:57:5c:97:62:a2:f5:01:2f:51:22:b0:d4:2e:16:c5:1f:6f:
b6:44:34:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYUAIcjkAJZekdBACtRSUTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZTIyZGNhMmEyZGIwYTU5ZmU1NjY4MWM4ZDFjNDA2Nzdh
NzQ1YjUwHhcNMjUwODIzMTkwMjU4WhcNMjUwODI0MTkwMjU4WjAzMTEwLwYDVQQD
Eyg3MjU4NjkyYWZjZDFhN2ZmNmZiMjVmYmU5Yzk3YzUwYWU5N2FiMjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3jA+tx/mSmfo3OlOTBXKP7p7DaW
0d8Glp4W/BEhLmZPGnIj79kz+UKWDFwxPCLGoSFrGhgDTEgRWO+c/cXznWtZtF+M
Qx1bFVqe8KHRt9puVijJH24esOke0A+Q2OrT8Ep0u0A+jH/4wmVVjU7J4klCe/cd
1PDKDBB8jpg7h8l8jzYrD2F8qUcJrWZD3T6JP0khwW5g4napHkXN4T90ymBxSMZk
IK2x6NnmOE8mTKYwdT32FNxNxkJneYDIRZxP5tFjQrVlGxCwI/K6aogMzGBCDEun
CWnj1dtPaVQH0XtplzqtBg1IfOMMfZZTHzcTVUjD/VWOw6Egn8wn452jDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJYaSr80af/b7JfvpyXxQrperKLMB8GA1UdIwQY
MBaAFJziLcoqLbCln+VmgcjRxAZ3p0W1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk9JdHlpb3RzS1dmNVdhQnlOSEVCbmVuUmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82YjBlMGUtOGJlNS00YmY5LWI0Mjct
NzBkNjMxMDdkMDVkLzEvbk9JdHlpb3RzS1dmNVdhQnlOSEVCbmVuUmJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC82YjBlMGUtOGJlNS00YmY5LWI0MjctNzBkNjMxMDdkMDVk
LzEvbk9JdHlpb3RzS1dmNVdhQnlOSEVCbmVuUmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9xxwrQm
eIBM3oCXehJeFL3H+KMe5sdtlliV3kJxiN3HqZx8GlRy7ng3xcADiy3T28xQF9E0
48QlStFusDK2sfa06Hmye0leu0HomHGltr+deoSQMO3oSvZc5GbuXEJl/1SMc5fB
8GVwcokU9KwHWEgoiLJIlRyDrXnm6CiYhhQX7PK/LAtW2xDjHKEX91v5u3QnfWmS
d6+siWs3ssYkate6C3oItYJd+P8dfP5SpdHIvHu6xuMNOPqSV6/jW+n/FUpcdkOi
rX5ktN8Ok4NYhWS298nToxmy908gIK049S8vqzFQ4qRF+qYEcFdcl2Ki9QEvUSKw
1C4WxR9vtkQ03Q==
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:23:16 2025 by rpki-client