Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
File: nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft (raw, json)
Hash identifier: JciUypudh1LpePFV3GnmY5YXJQRf/KGsk6BhjSyhFJI=
Subject key identifier: F8:E1:94:B3:DF:16:F5:1F:BE:54:6F:1D:C3:EF:D5:86:D9:44:B0:79
Authority key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
Certificate issuer: /CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Certificate serial: 0198D65F3666E740B100F845E8D1E4FFB939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
Manifest number: 11D0
Signing time: Sat 23 Aug 2025 10:00:20 +0000
Manifest this update: Sat 23 Aug 2025 10:00:20 +0000
Manifest next update: Sun 24 Aug 2025 10:00:20 +0000
Files and hashes: 1: nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl (hash: 3joV8HY/tY01PahwUHzGk2y3Qjl40v+aMAOBvIDCaG4=)
2: rbFhRWy7PnH1-c74EqjQ8O_SsH8.roa (hash: +OgMhgDQLZldm2bdOQKGi3uI3dnjtK1GBopk2ba9vPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:36:66:e7:40:b1:00:f8:45:e8:d1:e4:ff:b9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Validity
Not Before: Aug 23 10:00:20 2025 GMT
Not After : Aug 24 10:00:20 2025 GMT
Subject: CN=f8e194b3df16f51fbe546f1dc3efd586d944b079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ce:14:01:30:8d:db:36:be:a8:b2:63:e4:1b:
a7:eb:d2:38:8e:3c:f3:7c:80:87:26:42:4c:71:2a:
bc:28:df:94:7f:22:71:1f:db:6d:58:f0:30:14:45:
7e:86:3d:b7:47:fc:87:6d:71:bb:06:27:52:21:76:
e4:7d:11:9f:13:a6:83:35:54:8e:70:24:67:27:1f:
06:80:78:0a:79:8b:4a:ad:62:f1:19:a6:e8:45:e3:
7f:d9:94:0a:e3:ce:25:a0:5d:c4:5a:82:86:8b:49:
b0:74:53:52:58:96:3a:9d:d8:ae:94:d7:42:e4:7a:
57:d2:34:bc:16:f4:69:07:46:c4:8d:76:db:2c:e5:
7a:a9:0b:d8:60:ec:e9:f9:4a:34:57:10:0f:00:78:
a9:59:1f:b2:95:0c:4f:0b:05:cf:71:d4:00:83:8e:
6b:68:ec:ba:73:d2:42:53:c4:81:ae:2a:fd:3c:63:
f3:d7:45:3c:b3:35:8b:63:77:ae:ea:46:33:14:0b:
e3:1b:8c:0f:b6:4f:a9:8e:a7:4b:2f:06:41:08:44:
44:f6:ea:91:02:c9:d2:26:c5:a3:52:f2:a6:9a:9c:
5e:b6:89:b4:c5:60:99:ae:c5:ef:52:29:ea:a0:18:
2c:df:0b:60:d7:9d:67:a1:19:70:81:0c:2f:53:5b:
65:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E1:94:B3:DF:16:F5:1F:BE:54:6F:1D:C3:EF:D5:86:D9:44:B0:79
X509v3 Authority Key Identifier:
keyid:9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:bd:37:81:24:48:f6:a4:03:81:e4:ef:df:16:ea:de:66:ff:
4a:1b:a1:eb:05:6f:40:47:fb:84:67:48:7c:aa:e4:c4:be:6a:
20:30:85:34:ba:01:ef:1c:39:cf:74:1b:00:ef:73:73:5d:d3:
3a:c4:39:a7:da:41:1f:05:da:8f:bc:90:63:9a:f5:41:bc:5a:
09:8e:2a:97:12:ed:b6:e5:03:45:58:76:58:91:a3:3e:ec:d0:
16:62:b6:af:db:13:6c:20:79:5a:62:19:cc:a6:26:69:bc:02:
74:b5:53:40:c1:95:a7:eb:36:7f:fb:11:56:99:e5:6a:c0:1a:
8e:9e:43:9f:d4:bf:e9:7f:51:41:f2:5a:3d:de:d0:fa:7d:5d:
d2:ab:af:2e:02:2d:57:91:fa:d3:50:41:e4:6a:ce:e8:31:ea:
5f:7b:2c:4e:88:e1:38:b4:13:24:94:90:16:b7:d6:86:06:49:
af:30:87:0c:d8:05:e0:21:1e:a6:60:9d:69:8e:2d:d1:bb:80:
98:00:fd:9c:a9:df:c0:53:c6:8b:53:21:eb:74:5a:73:46:1d:
67:a8:ff:98:27:6e:49:2d:5a:7a:37:a9:c0:d9:a4:b8:fe:90:
03:80:a3:04:d1:87:57:c5:4a:2f:28:80:a6:31:6d:7e:cd:23:
38:eb:34:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXzZm50CxAPhF6NHk/7k5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYTkwZTdkYWYxNWMxN2MxYjlhYmM1NzIxNTdiYzdkOTE3
YjM5OTEwHhcNMjUwODIzMTAwMDIwWhcNMjUwODI0MTAwMDIwWjAzMTEwLwYDVQQD
EyhmOGUxOTRiM2RmMTZmNTFmYmU1NDZmMWRjM2VmZDU4NmQ5NDRiMDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4M4UATCN2za+qLJj5Bun69I4jjzz
fICHJkJMcSq8KN+UfyJxH9ttWPAwFEV+hj23R/yHbXG7BidSIXbkfRGfE6aDNVSO
cCRnJx8GgHgKeYtKrWLxGaboReN/2ZQK484loF3EWoKGi0mwdFNSWJY6ndiulNdC
5HpX0jS8FvRpB0bEjXbbLOV6qQvYYOzp+Uo0VxAPAHipWR+ylQxPCwXPcdQAg45r
aOy6c9JCU8SBrir9PGPz10U8szWLY3eu6kYzFAvjG4wPtk+pjqdLLwZBCERE9uqR
AsnSJsWjUvKmmpxetom0xWCZrsXvUinqoBgs3wtg151noRlwgQwvU1tlMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjhlLPfFvUfvlRvHcPv1YbZRLB5MB8GA1UdIwQY
MBaAFJypDn2vFcF8G5q8VyFXvH2RezmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbktrT2ZhOFZ3WHdibXJ4WElWZThmWkY3T1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNWYzNzUtMTQwZi00NmU5LTk2N2Ut
NmU0NTlhNThlMWQ2LzEvbktrT2ZhOFZ3WHdibXJ4WElWZThmWkY3T1pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8yNWYzNzUtMTQwZi00NmU5LTk2N2UtNmU0NTlhNThlMWQ2
LzEvbktrT2ZhOFZ3WHdibXJ4WElWZThmWkY3T1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcL03gSRI
9qQDgeTv3xbq3mb/Shuh6wVvQEf7hGdIfKrkxL5qIDCFNLoB7xw5z3QbAO9zc13T
OsQ5p9pBHwXaj7yQY5r1QbxaCY4qlxLttuUDRVh2WJGjPuzQFmK2r9sTbCB5WmIZ
zKYmabwCdLVTQMGVp+s2f/sRVpnlasAajp5Dn9S/6X9RQfJaPd7Q+n1d0quvLgIt
V5H601BB5GrO6DHqX3ssTojhOLQTJJSQFrfWhgZJrzCHDNgF4CEepmCdaY4t0buA
mAD9nKnfwFPGi1Mh63Rac0YdZ6j/mCduSS1aejepwNmkuP6QA4CjBNGHV8VKLyiA
pjFtfs0jOOs07w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:26 2025 by rpki-client