Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
File: pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft (raw, json)
Hash identifier: QYE3HlLFr87+jALQGqC11R6uXQspabw02fa7+P0qSGQ=
Subject key identifier: 7B:E4:20:90:BC:D6:A2:00:2D:F8:0E:14:BA:07:D5:BE:66:33:F5:E4
Authority key identifier: A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
Certificate issuer: /CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Certificate serial: 01984852BF8C1BDB620ACE15AB9185F652D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
Manifest number: 0EE6
Signing time: Sat 26 Jul 2025 20:00:39 +0000
Manifest this update: Sat 26 Jul 2025 20:00:39 +0000
Manifest next update: Sun 27 Jul 2025 20:00:39 +0000
Files and hashes: 1: WhtcuJJ0NSWsio8f8rQNMbqqeD8.roa (hash: uBIazeW9ZJrIEfawzpjRmH4sNuGdOT1AiFSbiZsPXDU=)
2: pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl (hash: wcUKVDzcc2RnLPVxN47SDCbpX0g1WeiK50KJsL2Gois=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:bf:8c:1b:db:62:0a:ce:15:ab:91:85:f6:52:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Validity
Not Before: Jul 26 20:00:39 2025 GMT
Not After : Jul 27 20:00:39 2025 GMT
Subject: CN=7be42090bcd6a2002df80e14ba07d5be6633f5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:98:04:3a:93:e7:79:30:9c:3b:b5:4e:77:
8a:ed:9e:75:a4:3b:f1:e5:0e:48:72:a0:b9:7d:4c:
a9:3e:2e:00:a7:be:9e:4f:ad:49:b2:d1:a8:75:74:
8c:1f:b9:f0:6f:33:57:fa:c0:9f:16:3a:d0:d9:70:
6f:b1:b3:6f:c2:96:67:ed:e5:88:44:87:b3:32:a3:
a6:f4:b0:88:82:63:90:4f:72:2c:9b:9e:ab:4e:36:
a8:ba:15:f6:21:b1:e9:41:8d:a6:fd:11:46:33:a7:
c4:6c:55:f3:c1:6d:74:8e:02:33:bb:26:b3:36:39:
f6:af:a8:f0:27:3d:bd:7d:91:eb:97:5f:67:de:71:
63:a1:41:0c:d8:6e:84:22:7c:23:e3:de:65:92:da:
d9:cd:a9:0f:6e:4e:6d:b0:79:ac:c8:15:9c:86:76:
37:50:75:d2:6c:0b:e2:b5:84:4d:64:23:b0:53:45:
6d:f3:ca:2b:88:e2:df:12:de:ce:46:f7:f1:a9:6b:
0a:6f:e5:26:f1:a3:31:bf:29:66:8b:ae:62:32:fb:
f7:57:c4:71:41:b9:4d:48:99:b2:28:fa:3a:3e:4a:
c9:e0:e1:7d:5f:ae:33:c6:8c:4e:af:16:f5:1e:61:
ea:06:3c:09:6d:26:31:d0:e6:35:b9:5f:ae:19:ed:
a8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E4:20:90:BC:D6:A2:00:2D:F8:0E:14:BA:07:D5:BE:66:33:F5:E4
X509v3 Authority Key Identifier:
keyid:A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ed:15:1f:19:22:2e:68:07:13:b1:ef:13:44:b5:2f:41:cb:
2e:07:10:9c:1e:a6:14:46:a0:58:15:4a:4b:65:3e:60:7d:a3:
62:7c:6e:a4:e4:fd:60:a2:48:99:0b:e2:94:0b:2f:98:51:d9:
1d:1f:f7:a1:a3:f7:f8:63:80:99:44:95:32:37:09:55:8c:dc:
71:96:58:e9:c4:66:f7:2f:c2:7f:90:55:26:a1:ce:1b:2a:75:
49:97:12:fe:94:cb:33:58:d6:57:9f:a7:df:a6:1a:34:6f:20:
28:af:2a:10:d3:a7:c7:c7:e4:69:fc:8b:ba:55:7a:15:7c:d7:
e4:d9:5e:e2:aa:5c:e5:bb:bd:02:b2:d6:1a:89:84:4d:0d:a1:
6c:3e:fb:89:fe:7b:e4:45:b8:66:1b:06:9d:2f:ce:c0:f0:cc:
69:8c:45:9d:9f:5d:f2:67:f9:e8:eb:1a:e5:bd:cd:fd:eb:02:
bc:27:f8:7f:2a:13:49:91:86:b3:94:4a:82:d7:68:6c:7b:56:
d5:db:2b:5d:bb:64:e3:66:71:a5:ae:68:14:53:d9:36:e6:b3:
46:91:a4:b2:e2:86:54:67:8f:13:cf:04:88:19:8e:82:ee:92:
6e:4d:c0:27:a6:3b:d6:aa:58:e0:52:5b:fd:de:a8:02:cf:da:
3b:4e:2d:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUr+MG9tiCs4Vq5GF9lLWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZDMyMjY5MzAyZTFjYmNjYmFhYzBlMGU1YWY4YTg2NDQ5
OGExMzUwHhcNMjUwNzI2MjAwMDM5WhcNMjUwNzI3MjAwMDM5WjAzMTEwLwYDVQQD
Eyg3YmU0MjA5MGJjZDZhMjAwMmRmODBlMTRiYTA3ZDViZTY2MzNmNWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtSYBDqT53kwnDu1TneK7Z51pDvx
5Q5IcqC5fUypPi4Ap76eT61JstGodXSMH7nwbzNX+sCfFjrQ2XBvsbNvwpZn7eWI
RIezMqOm9LCIgmOQT3Ism56rTjaouhX2IbHpQY2m/RFGM6fEbFXzwW10jgIzuyaz
Njn2r6jwJz29fZHrl19n3nFjoUEM2G6EInwj495lktrZzakPbk5tsHmsyBWchnY3
UHXSbAvitYRNZCOwU0Vt88oriOLfEt7ORvfxqWsKb+Um8aMxvylmi65iMvv3V8Rx
QblNSJmyKPo6PkrJ4OF9X64zxoxOrxb1HmHqBjwJbSYx0OY1uV+uGe2oUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvkIJC81qIALfgOFLoH1b5mM/XkMB8GA1UdIwQY
MBaAFKTTImkwLhy8y6rA4OWvioZEmKE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE5NaWFUQXVITHpMcXNEZzVhLUtoa1NZb1RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85NjE2ZWUtMzgxZC00YWZlLTg5MGMt
NmVlNTE0YjI5MTE1LzEvcE5NaWFUQXVITHpMcXNEZzVhLUtoa1NZb1RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85NjE2ZWUtMzgxZC00YWZlLTg5MGMtNmVlNTE0YjI5MTE1
LzEvcE5NaWFUQXVITHpMcXNEZzVhLUtoa1NZb1RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+0VHxki
LmgHE7HvE0S1L0HLLgcQnB6mFEagWBVKS2U+YH2jYnxupOT9YKJImQvilAsvmFHZ
HR/3oaP3+GOAmUSVMjcJVYzccZZY6cRm9y/Cf5BVJqHOGyp1SZcS/pTLM1jWV5+n
36YaNG8gKK8qENOnx8fkafyLulV6FXzX5Nle4qpc5bu9ArLWGomETQ2hbD77if57
5EW4ZhsGnS/OwPDMaYxFnZ9d8mf56Osa5b3N/esCvCf4fyoTSZGGs5RKgtdobHtW
1dsrXbtk42Zxpa5oFFPZNuazRpGksuKGVGePE88EiBmOgu6Sbk3AJ6Y71qpY4FJb
/d6oAs/aO04tWw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:28:14 2025 by rpki-client