Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
File: nVK4OxL6igcTLMgIM6ED4J2L0E8.mft (raw, json)
Hash identifier: PrPtZZhQw7uiWAicEm1Cu5R+JYLOeULb05Mgt3PwXjM=
Subject key identifier: AB:2D:19:00:4A:DA:9B:D7:75:2D:07:F3:10:A0:4E:09:E0:46:1C:7E
Authority key identifier: 9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F
Certificate issuer: /CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
Certificate serial: 019849D2DA5DFBA071AAC8456128ED4FB072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
Manifest number: 02F9
Signing time: Sun 27 Jul 2025 03:00:11 +0000
Manifest this update: Sun 27 Jul 2025 03:00:11 +0000
Manifest next update: Mon 28 Jul 2025 03:00:11 +0000
Files and hashes: 1: 38Ols_fwuqUro_09-_uv-_Ul2jA.roa (hash: QymLTZTAomDxu/BGko1S2mbZfpR+LRurtzVVTfHo8uA=)
2: nVK4OxL6igcTLMgIM6ED4J2L0E8.crl (hash: S1PupUehtANTAOBxcPwquASOb8SI1AIYzcz6d2ikH00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:da:5d:fb:a0:71:aa:c8:45:61:28:ed:4f:b0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
Validity
Not Before: Jul 27 03:00:11 2025 GMT
Not After : Jul 28 03:00:11 2025 GMT
Subject: CN=ab2d19004ada9bd7752d07f310a04e09e0461c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fa:ea:2a:ba:55:69:00:5c:66:01:a2:e5:7f:
60:90:11:11:53:5b:33:13:40:ff:ad:fe:20:14:e1:
99:5b:bb:f5:10:7c:83:d0:8b:73:8c:d1:9f:eb:85:
cf:cf:fb:ea:6a:f5:64:4b:db:bb:6a:44:c5:c1:02:
8e:61:04:39:8c:67:02:a7:b6:1d:11:31:b8:a9:92:
e7:39:1f:39:17:dd:e9:53:98:8a:21:96:2b:d2:50:
a6:e6:87:3b:22:ba:6b:64:25:c1:97:cd:c5:5b:2b:
a9:3f:20:1e:90:5b:32:c2:59:6b:ab:08:a7:8a:80:
aa:84:05:22:99:9e:e3:a0:48:b1:9d:ee:c1:22:37:
87:11:97:59:bf:19:63:4e:b2:db:f9:b1:1e:34:fb:
e9:df:54:56:4e:ce:07:c8:df:25:8d:17:e0:3b:78:
f2:40:dc:7c:c2:a9:4e:b1:7f:8e:9d:9e:fa:bb:fd:
12:b4:42:c1:6a:bb:9b:e0:54:1f:59:dc:80:0b:80:
b5:13:91:5f:95:c5:af:79:66:50:a4:76:54:a5:26:
67:f0:3e:c2:fd:94:26:05:d7:ad:64:f6:31:c9:9e:
a7:27:3d:eb:49:f5:6e:01:74:53:49:15:27:73:6b:
1a:12:19:e6:b2:66:d0:df:2f:30:38:58:59:c1:92:
74:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2D:19:00:4A:DA:9B:D7:75:2D:07:F3:10:A0:4E:09:E0:46:1C:7E
X509v3 Authority Key Identifier:
keyid:9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b1:fa:51:58:ad:fa:e8:3c:f3:18:8c:3f:df:6f:8e:86:e1:
3c:88:bd:07:18:7d:e0:7e:9e:4f:4a:f1:b4:b3:be:b8:93:c1:
9c:29:03:47:f1:29:17:50:7e:5b:c9:a8:2d:88:7b:ec:8d:58:
9f:90:f4:f7:22:25:d1:65:b9:2d:7a:ac:8e:73:47:99:a8:7a:
09:ae:86:59:d8:b2:0f:21:4a:f7:b6:b3:3e:11:c9:f0:ed:21:
66:43:06:a9:4f:53:49:74:48:15:cc:cc:f5:c8:4b:72:5d:0a:
1b:b9:66:db:05:55:57:d0:df:2d:a1:95:93:22:8b:bc:67:5e:
f3:da:49:26:19:90:aa:e6:51:0e:c7:81:c9:f4:6d:d7:57:fb:
67:93:bf:89:bb:8e:2c:f6:05:d7:54:9e:76:16:e0:22:33:70:
23:54:e4:bb:37:22:7d:cc:94:58:33:d4:34:51:ee:94:f1:47:
80:97:b6:1a:47:21:ca:da:51:b8:a8:df:fc:eb:23:cf:d0:e4:
ce:54:bb:1e:ce:ab:5c:ad:1f:b6:da:67:2a:05:70:d9:3c:6b:
92:d8:e3:09:86:89:0f:bf:f4:4c:74:98:0d:f0:aa:f9:3a:2f:
30:94:5e:de:fd:83:fd:e4:d2:c9:22:8b:8d:49:9c:ed:a8:7b:
1d:64:6b:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0tpd+6BxqshFYSjtT7ByMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNTJiODNiMTJmYThhMDcxMzJjYzgwODMzYTEwM2UwOWQ4
YmQwNGYwHhcNMjUwNzI3MDMwMDExWhcNMjUwNzI4MDMwMDExWjAzMTEwLwYDVQQD
EyhhYjJkMTkwMDRhZGE5YmQ3NzUyZDA3ZjMxMGEwNGUwOWUwNDYxYzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfrqKrpVaQBcZgGi5X9gkBERU1sz
E0D/rf4gFOGZW7v1EHyD0ItzjNGf64XPz/vqavVkS9u7akTFwQKOYQQ5jGcCp7Yd
ETG4qZLnOR85F93pU5iKIZYr0lCm5oc7IrprZCXBl83FWyupPyAekFsywllrqwin
ioCqhAUimZ7joEixne7BIjeHEZdZvxljTrLb+bEeNPvp31RWTs4HyN8ljRfgO3jy
QNx8wqlOsX+OnZ76u/0StELBarub4FQfWdyAC4C1E5FflcWveWZQpHZUpSZn8D7C
/ZQmBdetZPYxyZ6nJz3rSfVuAXRTSRUnc2saEhnmsmbQ3y8wOFhZwZJ06wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKstGQBK2pvXdS0H8xCgTgngRhx+MB8GA1UdIwQY
MBaAFJ1SuDsS+ooHEyzICDOhA+Cdi9BPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YmEyMzItODkyOS00MTBkLWJkZGQt
ZTRiNmE5ZGY5YTM0LzEvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83YmEyMzItODkyOS00MTBkLWJkZGQtZTRiNmE5ZGY5YTM0
LzEvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7H6UVit
+ug88xiMP99vjobhPIi9Bxh94H6eT0rxtLO+uJPBnCkDR/EpF1B+W8moLYh77I1Y
n5D09yIl0WW5LXqsjnNHmah6Ca6GWdiyDyFK97azPhHJ8O0hZkMGqU9TSXRIFczM
9chLcl0KG7lm2wVVV9DfLaGVkyKLvGde89pJJhmQquZRDseByfRt11f7Z5O/ibuO
LPYF11SedhbgIjNwI1TkuzcifcyUWDPUNFHulPFHgJe2GkchytpRuKjf/Osjz9Dk
zlS7Hs6rXK0fttpnKgVw2TxrktjjCYaJD7/0THSYDfCq+TovMJRe3v2D/eTSySKL
jUmc7ah7HWRrMA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:33:07 2025 by rpki-client