Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
File: n5FENjC-1KQYJ6zlcHmpR6yHy74.mft (raw, json)
Hash identifier: KdUO1PAQgb5BARkvFC/R4u/rwL05eCDfI9XOkl3Jz8M=
Subject key identifier: 0E:C5:A7:9D:67:28:28:11:71:E6:1C:14:E3:20:6B:95:B0:A1:CC:20
Authority key identifier: 9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE
Certificate issuer: /CN=9f91443630bed4a41827ace57079a947ac87cbbe
Certificate serial: 0198D4A84B3E2910637999FE28493FF50036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
Manifest number: 0149
Signing time: Sat 23 Aug 2025 02:00:55 +0000
Manifest this update: Sat 23 Aug 2025 02:00:55 +0000
Manifest next update: Sun 24 Aug 2025 02:00:55 +0000
Files and hashes: 1: FTz3I1LwzTnAWMfdkHFOvWrYtnw.roa (hash: ON7nD9k8gZbbUe0iuDqX0lxMxjEVRpGMdIVVvIAhjDg=)
2: n5FENjC-1KQYJ6zlcHmpR6yHy74.crl (hash: RMpl+xGd6Jd6RDs7Bh6i8Hxep/NgqV8WGPstlhiUY1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:4b:3e:29:10:63:79:99:fe:28:49:3f:f5:00:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f91443630bed4a41827ace57079a947ac87cbbe
Validity
Not Before: Aug 23 02:00:55 2025 GMT
Not After : Aug 24 02:00:55 2025 GMT
Subject: CN=0ec5a79d6728281171e61c14e3206b95b0a1cc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5f:2e:44:1b:4d:23:5a:4d:4b:48:3c:64:13:
6c:01:a8:d7:89:c1:3f:d7:72:c2:28:eb:b6:c0:9a:
77:51:24:9f:05:b4:4b:58:5a:53:18:42:61:d8:38:
4d:81:90:75:7a:99:e8:a1:b2:b4:6e:b5:7e:a8:1a:
ba:46:41:8a:a4:89:51:24:7f:ab:17:72:dc:df:dc:
d2:24:dd:f6:80:7a:d7:6d:f1:ee:de:ef:fc:25:b9:
f8:4e:c7:86:58:fd:80:9f:26:f8:83:c6:b3:12:1b:
48:8f:83:a2:ea:01:3b:bf:03:3d:01:6f:5e:b7:9e:
f1:25:7b:27:a2:b5:0e:85:2c:7d:3f:fe:82:92:0c:
e8:5c:24:05:1e:6d:d5:d1:fa:f1:60:97:43:7e:a2:
2f:27:77:87:93:bd:9b:50:5a:9d:96:3c:15:3b:11:
b9:fe:fb:8d:d3:cb:fe:d7:84:89:62:a6:ac:4d:8f:
d2:9a:6a:7d:1c:27:16:90:55:41:fd:af:1f:e7:f0:
c8:37:e3:87:6a:67:64:f2:bc:64:8e:d8:90:8a:ca:
1b:d4:5f:55:9e:05:00:04:dc:f8:d8:0e:8d:ff:3e:
ad:1a:2b:42:82:be:53:17:c9:74:94:ef:4a:4d:ae:
33:b8:1a:9f:f2:52:ae:e3:ec:56:14:ec:c2:06:74:
42:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C5:A7:9D:67:28:28:11:71:E6:1C:14:E3:20:6B:95:B0:A1:CC:20
X509v3 Authority Key Identifier:
keyid:9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2d:6e:9f:6e:ca:16:b6:4d:ac:7f:1e:a8:f7:e9:43:81:56:
19:02:b1:30:90:53:5e:b8:02:a2:4d:94:f0:c5:79:21:34:55:
f2:63:ca:23:12:dd:5a:41:b5:10:d7:8c:59:4b:94:cd:a8:f4:
4b:b6:70:8f:15:5d:2d:fa:1c:23:63:c3:ac:85:6c:08:91:ca:
8c:f9:5b:bc:13:d0:89:79:c9:ce:87:32:76:b4:f1:71:92:f0:
1d:fa:c9:3d:80:9d:0c:8b:ca:8b:b3:b1:6b:b2:f2:81:04:8a:
26:1e:a0:9b:a5:bc:cf:0c:69:08:ac:61:4c:7c:3f:cf:18:d0:
bb:21:42:93:99:bc:0d:84:bd:ad:a0:0e:55:eb:d3:5f:68:1a:
2f:62:ec:6b:f8:93:09:b7:04:98:1c:77:fa:52:54:d5:fc:4b:
90:c5:78:82:6c:e0:96:05:af:ac:64:c3:7a:3b:fd:ba:3b:2b:
fa:6f:f7:e4:ce:72:5d:9c:77:99:3e:4f:20:0b:90:7a:20:81:
f2:69:e9:a2:23:25:d0:51:53:ef:4c:b8:0e:6a:1d:0e:b8:c7:
ba:27:3b:b0:23:0d:41:94:e5:1d:92:c4:c6:38:63:91:84:ed:
c1:aa:43:7b:03:46:aa:41:e1:ed:c7:bd:80:55:d6:d0:78:d1:
bd:e8:d0:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqEs+KRBjeZn+KEk/9QA2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmOTE0NDM2MzBiZWQ0YTQxODI3YWNlNTcwNzlhOTQ3YWM4
N2NiYmUwHhcNMjUwODIzMDIwMDU1WhcNMjUwODI0MDIwMDU1WjAzMTEwLwYDVQQD
EygwZWM1YTc5ZDY3MjgyODExNzFlNjFjMTRlMzIwNmI5NWIwYTFjYzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl8uRBtNI1pNS0g8ZBNsAajXicE/
13LCKOu2wJp3USSfBbRLWFpTGEJh2DhNgZB1epnoobK0brV+qBq6RkGKpIlRJH+r
F3Lc39zSJN32gHrXbfHu3u/8Jbn4TseGWP2Anyb4g8azEhtIj4Oi6gE7vwM9AW9e
t57xJXsnorUOhSx9P/6CkgzoXCQFHm3V0frxYJdDfqIvJ3eHk72bUFqdljwVOxG5
/vuN08v+14SJYqasTY/Smmp9HCcWkFVB/a8f5/DIN+OHamdk8rxkjtiQisob1F9V
ngUABNz42A6N/z6tGitCgr5TF8l0lO9KTa4zuBqf8lKu4+xWFOzCBnRCVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7Fp51nKCgRceYcFOMga5WwocwgMB8GA1UdIwQY
MBaAFJ+RRDYwvtSkGCes5XB5qUesh8u+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjVGRU5qQy0xS1FZSjZ6bGNIbXBSNnlIeTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZjdkMzAtNmYyNC00YjhjLWI3NWMt
NjE3MDBkZGU3NjkyLzEvbjVGRU5qQy0xS1FZSjZ6bGNIbXBSNnlIeTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wZjdkMzAtNmYyNC00YjhjLWI3NWMtNjE3MDBkZGU3Njky
LzEvbjVGRU5qQy0xS1FZSjZ6bGNIbXBSNnlIeTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFi1un27K
FrZNrH8eqPfpQ4FWGQKxMJBTXrgCok2U8MV5ITRV8mPKIxLdWkG1ENeMWUuUzaj0
S7ZwjxVdLfocI2PDrIVsCJHKjPlbvBPQiXnJzocydrTxcZLwHfrJPYCdDIvKi7Ox
a7LygQSKJh6gm6W8zwxpCKxhTHw/zxjQuyFCk5m8DYS9raAOVevTX2gaL2Lsa/iT
CbcEmBx3+lJU1fxLkMV4gmzglgWvrGTDejv9ujsr+m/35M5yXZx3mT5PIAuQeiCB
8mnpoiMl0FFT70y4DmodDrjHuic7sCMNQZTlHZLExjhjkYTtwapDewNGqkHh7ce9
gFXW0HjRvejQVw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:21 2025 by rpki-client