Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
File: nDz83hO2YLXIMdr74b-_aN-fvjk.mft (raw, json)
Hash identifier: FYFOULf8YZxi0yFbi/sCEj4F1rul0AesPwM81WvYt9Q=
Subject key identifier: 1F:63:7F:B2:32:F3:D0:8C:0A:CE:60:CC:5A:68:F7:DB:25:19:05:69
Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Certificate serial: 0198443ED32C6B0AD293DDB6622D68C2BF3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
Manifest number: 05BB
Signing time: Sat 26 Jul 2025 01:00:24 +0000
Manifest this update: Sat 26 Jul 2025 01:00:24 +0000
Manifest next update: Sun 27 Jul 2025 01:00:24 +0000
Files and hashes: 1: 1-o7g3L28fO-PQjnRpt-UgWkTHQw.roa (hash: eDwV2kux0bA6vYCRB0ZxUOPv76wEVLU7G2rZyoTStqs=)
2: nDz83hO2YLXIMdr74b-_aN-fvjk.crl (hash: JjLW9WzLQncGp7DDFucGSAnuj2J2QBc7uXIVG55r1pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3e:d3:2c:6b:0a:d2:93:dd:b6:62:2d:68:c2:bf:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Validity
Not Before: Jul 26 01:00:24 2025 GMT
Not After : Jul 27 01:00:24 2025 GMT
Subject: CN=1f637fb232f3d08c0ace60cc5a68f7db25190569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:ce:57:32:c4:00:78:c1:eb:8d:2b:cd:07:
9c:c3:c0:b9:d9:8e:a5:a7:29:14:0e:c2:de:3c:08:
d5:63:a8:26:68:90:28:d1:eb:1d:74:fb:31:7f:20:
12:c3:5e:46:bc:71:f2:25:b5:2f:97:c4:1b:ed:10:
d0:56:08:9b:c6:79:18:92:dc:d6:16:df:42:fb:0a:
c1:0e:a2:20:8c:7e:71:49:6e:b4:39:b6:21:1b:6b:
af:5d:b5:5a:03:73:f4:b3:c4:55:99:2e:f6:32:a5:
65:a7:f4:d4:49:26:cd:a7:dd:e2:48:85:62:73:26:
fc:dc:5f:4b:b2:e1:21:9e:89:c8:7b:c0:69:5e:78:
17:6a:85:dc:72:1d:64:77:28:45:32:57:11:16:cc:
9e:f4:1d:85:ca:62:98:aa:10:51:10:80:89:8d:bd:
ea:46:f8:f7:9e:b6:a8:97:10:99:14:7f:82:ea:2a:
66:57:63:45:54:dc:c3:5a:a2:6c:26:40:39:22:a1:
a7:af:40:18:3b:07:72:f9:86:19:47:e0:85:08:92:
cd:7d:e7:96:6c:35:8d:9e:98:5c:0b:70:ad:85:66:
6d:59:70:9e:d8:b0:c3:48:d4:2e:f0:b0:e1:b7:86:
54:1d:d9:86:cc:39:f4:70:69:9f:94:35:e6:c0:54:
d7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:63:7F:B2:32:F3:D0:8C:0A:CE:60:CC:5A:68:F7:DB:25:19:05:69
X509v3 Authority Key Identifier:
keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a6:08:27:c4:97:66:f1:f7:e8:9c:7f:77:36:78:94:1e:2e:
85:3b:6b:82:26:b3:9e:62:6b:eb:29:4f:c2:83:12:cd:ec:b8:
03:4d:b2:c3:46:75:8f:02:ea:f6:59:a6:0c:e6:ac:05:2b:22:
41:af:df:c9:ab:88:5c:b7:7f:ca:37:29:2b:2b:59:cd:bb:e5:
aa:e2:84:4e:eb:0d:0c:ef:6f:62:4e:5a:fc:e8:0a:7c:75:3b:
6f:5d:d5:50:b4:f0:68:3f:d6:7a:13:e9:e4:1f:a6:95:3f:b0:
01:7e:82:09:c7:76:cf:a8:1b:ee:91:28:16:77:c6:a6:44:42:
00:4d:d0:7d:9a:10:c3:3f:7b:fa:72:a6:52:12:0d:55:68:9e:
e1:fb:6f:0a:95:1b:ac:76:3a:95:19:3f:95:5b:50:1f:4d:ed:
af:28:4e:ae:42:39:5d:78:a0:59:41:65:e0:61:54:9d:5c:58:
a6:31:6c:1f:7d:aa:89:57:1d:f6:f1:69:87:df:93:45:2d:a9:
a5:3a:42:46:77:29:97:41:0a:92:7e:84:3a:b1:03:16:a7:0d:
38:e5:87:8d:46:7f:87:b5:3d:c8:a2:36:3c:7a:89:4c:41:44:
8a:30:47:e5:96:b3:9f:f0:ae:7c:8a:d2:a4:60:be:e0:b2:bf:
1a:bf:10:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhEPtMsawrSk922Yi1owr88MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljM2NmY2RlMTNiNjYwYjVjODMxZGFmYmUxYmZiZjY4ZGY5
ZmJlMzkwHhcNMjUwNzI2MDEwMDI0WhcNMjUwNzI3MDEwMDI0WjAzMTEwLwYDVQQD
EygxZjYzN2ZiMjMyZjNkMDhjMGFjZTYwY2M1YTY4ZjdkYjI1MTkwNTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRDOVzLEAHjB640rzQecw8C52Y6l
pykUDsLePAjVY6gmaJAo0esddPsxfyASw15GvHHyJbUvl8Qb7RDQVgibxnkYktzW
Ft9C+wrBDqIgjH5xSW60ObYhG2uvXbVaA3P0s8RVmS72MqVlp/TUSSbNp93iSIVi
cyb83F9LsuEhnonIe8BpXngXaoXcch1kdyhFMlcRFsye9B2FymKYqhBREICJjb3q
Rvj3nraolxCZFH+C6ipmV2NFVNzDWqJsJkA5IqGnr0AYOwdy+YYZR+CFCJLNfeeW
bDWNnphcC3CthWZtWXCe2LDDSNQu8LDht4ZUHdmGzDn0cGmflDXmwFTXbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9jf7Iy89CMCs5gzFpo99slGQVpMB8GA1UdIwQY
MBaAFJw8/N4TtmC1yDHa++G/v2jfn745MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zYzAzNGYtYzI0My00YTg4LTkwNzAt
Njg3OWNjMjZkN2I2LzEvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8zYzAzNGYtYzI0My00YTg4LTkwNzAtNjg3OWNjMjZkN2I2
LzEvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqYIJ8SX
ZvH36Jx/dzZ4lB4uhTtrgiaznmJr6ylPwoMSzey4A02yw0Z1jwLq9lmmDOasBSsi
Qa/fyauIXLd/yjcpKytZzbvlquKETusNDO9vYk5a/OgKfHU7b13VULTwaD/WehPp
5B+mlT+wAX6CCcd2z6gb7pEoFnfGpkRCAE3QfZoQwz97+nKmUhINVWie4ftvCpUb
rHY6lRk/lVtQH03tryhOrkI5XXigWUFl4GFUnVxYpjFsH32qiVcd9vFph9+TRS2p
pTpCRncpl0EKkn6EOrEDFqcNOOWHjUZ/h7U9yKI2PHqJTEFEijBH5Zazn/CufIrS
pGC+4LK/Gr8QAQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 09:48:12 2025 by rpki-client