Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
File: nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft (raw, json)
Hash identifier: NJe3pUdoGYwysrb9qDj6jaCVvxVx70D6S4IAadlk3PA=
Subject key identifier: 95:E6:E5:DC:65:DC:2E:1D:2C:CA:A9:88:2C:72:B0:8B:7A:AA:35:E4
Authority key identifier: 9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
Certificate issuer: /CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
Certificate serial: 01984664AA571D2CE48EC7C37C7AA87E87B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
Manifest number: 0DC1
Signing time: Sat 26 Jul 2025 11:00:59 +0000
Manifest this update: Sat 26 Jul 2025 11:00:59 +0000
Manifest next update: Sun 27 Jul 2025 11:00:59 +0000
Files and hashes: 1: SJakYTj9pb3r41qOMQrQf_YPYbc.roa (hash: tab9yW3GhAbdQLvfn40C4/W+qyYm4f+BamJUC4exFC4=)
2: nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl (hash: FnYoM6QHzLcPIp1j8HPFoP/qiRYpHF/PayHTmamAFBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:aa:57:1d:2c:e4:8e:c7:c3:7c:7a:a8:7e:87:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
Validity
Not Before: Jul 26 11:00:59 2025 GMT
Not After : Jul 27 11:00:59 2025 GMT
Subject: CN=95e6e5dc65dc2e1d2ccaa9882c72b08b7aaa35e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1e:e6:cc:98:fe:23:b9:9f:f4:a1:38:92:52:
fc:78:f5:91:ae:e2:45:80:a7:3a:57:2a:94:6b:3c:
e1:ca:01:3a:70:f1:d2:65:44:c6:82:c7:c2:26:28:
60:cf:53:72:90:75:3b:80:ac:1f:e7:8b:89:e6:28:
38:21:ba:ae:bd:52:77:cb:98:27:51:d8:ee:f4:d9:
f3:2d:c3:45:0f:46:7f:0d:0f:55:c8:d2:85:61:e6:
37:d6:e6:12:50:19:4b:96:d8:a1:ea:4a:0f:89:2f:
d2:30:90:31:29:b3:02:36:1e:e6:8e:54:b1:ec:a8:
40:4b:35:ac:a2:93:ad:51:b5:48:bd:60:df:5b:3f:
23:be:a5:75:78:95:56:b2:29:04:bb:dd:22:3d:71:
1b:ad:c1:7a:50:a6:c9:ef:24:fe:35:d7:93:ad:2f:
03:0d:df:26:6d:72:88:a2:2a:73:e6:ce:bb:54:9a:
18:fb:90:a4:b3:92:75:c3:d2:98:7f:bc:96:64:81:
72:5b:0d:d5:d6:ee:84:5c:9f:e5:8a:32:85:c3:f2:
9c:83:af:ec:ec:4f:2d:c9:bf:c6:08:61:45:a0:d2:
1a:7a:20:f1:4c:51:5e:a9:56:57:44:9b:ed:55:45:
22:77:06:d9:eb:42:f1:29:5f:77:d5:9e:52:9b:62:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E6:E5:DC:65:DC:2E:1D:2C:CA:A9:88:2C:72:B0:8B:7A:AA:35:E4
X509v3 Authority Key Identifier:
keyid:9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:71:87:cd:8a:73:9e:c2:4f:72:f0:72:6e:72:04:ca:0e:19:
19:84:da:09:32:6f:b4:81:76:1f:18:c6:ac:f2:cc:22:48:a1:
03:65:c0:1c:91:ad:ef:ed:49:11:34:96:50:33:63:a8:a1:59:
55:30:19:d2:3b:1b:4f:4f:64:fc:c2:ba:bf:6b:df:ee:4e:ba:
2e:76:db:b4:cb:ff:1e:ee:1b:c1:47:eb:f8:b8:65:c0:27:f6:
88:c7:28:23:d0:4f:fb:ec:1a:2a:66:88:51:63:6e:8e:56:82:
9e:cb:cc:d0:66:76:3d:22:76:ea:43:7c:58:db:50:62:d6:43:
eb:1f:1a:8f:20:c7:18:7f:14:03:c3:27:10:89:4e:f5:83:9e:
37:0c:eb:2f:9d:f9:b5:04:da:ef:ae:3e:9e:8f:d7:ca:88:23:
a3:2c:d2:92:d8:49:a5:ab:71:a5:72:08:88:45:b1:0c:18:f9:
11:65:79:10:03:9b:27:3a:80:24:9a:4c:fd:10:81:2c:90:32:
41:e5:b3:f1:1c:72:87:a6:3d:f1:56:d3:ba:61:3e:4e:d0:cc:
6c:1c:26:ad:87:63:f8:aa:42:2f:92:94:c0:06:16:5a:c1:4a:
62:13:6e:1d:ae:82:f4:a0:8a:89:f3:17:22:fc:95:ef:1c:3c:
19:75:41:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGZKpXHSzkjsfDfHqofoe1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljN2ZhOWVhZjM4NTZjYTRlNzUwNDE0MTRlNTFkODYwMTgw
YzkyNmYwHhcNMjUwNzI2MTEwMDU5WhcNMjUwNzI3MTEwMDU5WjAzMTEwLwYDVQQD
Eyg5NWU2ZTVkYzY1ZGMyZTFkMmNjYWE5ODgyYzcyYjA4YjdhYWEzNWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph7mzJj+I7mf9KE4klL8ePWRruJF
gKc6VyqUazzhygE6cPHSZUTGgsfCJihgz1NykHU7gKwf54uJ5ig4IbquvVJ3y5gn
Udju9NnzLcNFD0Z/DQ9VyNKFYeY31uYSUBlLltih6koPiS/SMJAxKbMCNh7mjlSx
7KhASzWsopOtUbVIvWDfWz8jvqV1eJVWsikEu90iPXEbrcF6UKbJ7yT+NdeTrS8D
Dd8mbXKIoipz5s67VJoY+5Cks5J1w9KYf7yWZIFyWw3V1u6EXJ/lijKFw/Kcg6/s
7E8tyb/GCGFFoNIaeiDxTFFeqVZXRJvtVUUidwbZ60LxKV931Z5Sm2JqYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXm5dxl3C4dLMqpiCxysIt6qjXkMB8GA1UdIwQY
MBaAFJx/qerzhWyk51BBQU5R2GAYDJJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkgtcDZ2T0ZiS1RuVUVGQlRsSFlZQmdNa204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83ZmJjYzYtNjRmZC00ODc0LWFiNDkt
ODI1YjQ3YzE1NDMwLzEvbkgtcDZ2T0ZiS1RuVUVGQlRsSFlZQmdNa204Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83ZmJjYzYtNjRmZC00ODc0LWFiNDktODI1YjQ3YzE1NDMw
LzEvbkgtcDZ2T0ZiS1RuVUVGQlRsSFlZQmdNa204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXGHzYpz
nsJPcvBybnIEyg4ZGYTaCTJvtIF2HxjGrPLMIkihA2XAHJGt7+1JETSWUDNjqKFZ
VTAZ0jsbT09k/MK6v2vf7k66LnbbtMv/Hu4bwUfr+LhlwCf2iMcoI9BP++waKmaI
UWNujlaCnsvM0GZ2PSJ26kN8WNtQYtZD6x8ajyDHGH8UA8MnEIlO9YOeNwzrL535
tQTa764+no/XyogjoyzSkthJpatxpXIIiEWxDBj5EWV5EAObJzqAJJpM/RCBLJAy
QeWz8Rxyh6Y98VbTumE+TtDMbBwmrYdj+KpCL5KUwAYWWsFKYhNuHa6C9KCKifMX
IvyV7xw8GXVBcA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 14:35:46 2025 by rpki-client