Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json)
Hash identifier: T1XFILFhdm4YphcIxJeBU9hQLjYRVWH7a5ps5+fwGdY=
Subject key identifier: 63:F4:24:87:13:32:14:E4:40:6B:F3:9D:77:FA:40:1A:C0:46:E5:13
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 01982ECA99F12F24EEEC963CBC3B99E652AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
Manifest number: 0F1D
Signing time: Mon 21 Jul 2025 21:01:26 +0000
Manifest this update: Mon 21 Jul 2025 21:01:26 +0000
Manifest next update: Tue 22 Jul 2025 21:01:26 +0000
Files and hashes: 1: 1-0vipuRl0AJvwZtEBk-maQes6Cg.roa (hash: DSWGxdza7oD2/3uUVZoXyDrmHTWT++tTuwdDtQTvs4k=)
2: Dp9S7DtPUM200gi6O6yBPEaasas.roa (hash: nHFRQ6xLBtePKwuFF9sGQ8KR62EZEyHkOj5R88bM4qI=)
3: F6eX9oz_j-ZT8QfPBURiHjJkBos.roa (hash: 9C2+49g0ve8uLFJHYFMwlwYj/+2J3SnLoalOE2MN4Mk=)
4: Hiu-YkREzGKKTtSRBgf6M5S0mUM.roa (hash: fxvguMnjN9xF6RFcgtEIfOjUPdwUBHDkuyyelgRCorQ=)
5: U4lJvipYbr4AZQbw3vQ4rpXfXN4.roa (hash: J4umHHc1mv/sPeURzjqZJEkjClmBGK0Hvn8O5Rexq5Y=)
6: YhZQFWzwDUGT-HjSfFHnpvcFMTY.roa (hash: /ssHfW4YZnp/Q+YD/IpItVTTmqCd5HemhWXsBRiqt1A=)
7: ZeYihmicLm5VKfWSSFIon1HTDC4.roa (hash: skxZCw+YKxKcl1188es30U08xjm3mZlLt8pygJEcJ10=)
8: jdKmvZ_WGiUDxDAHKJg_Wed6rVo.roa (hash: CRiOfMtNCT5H0OJU8c1YHET8V3YfGy03z8wKH951O6Y=)
9: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: pOb5Wi24oui5V6LWLqa6ljhYpjRCgdO/vE/1aIvh0/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 20:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2e:ca:99:f1:2f:24:ee:ec:96:3c:bc:3b:99:e6:52:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jul 21 21:01:26 2025 GMT
Not After : Jul 22 21:01:26 2025 GMT
Subject: CN=63f42487133214e4406bf39d77fa401ac046e513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:70:53:6a:bb:cb:04:9f:c4:ab:0a:5e:f4:69:
bf:8c:1c:36:53:98:33:09:83:7e:83:66:d7:e8:e9:
73:e7:c1:7b:4b:64:5f:f0:af:b7:ea:b4:a7:93:d8:
57:49:db:ac:d1:7c:8e:ea:3a:1c:8f:d5:3b:a8:12:
b5:ba:14:6c:cf:d0:7f:9c:c6:d1:73:f3:42:47:d0:
6e:d5:bd:27:26:c6:b7:d7:04:eb:87:52:a7:95:f0:
86:f9:77:96:38:57:61:39:e1:85:46:73:ec:da:dc:
51:4b:8e:9b:dd:bf:c1:a6:e8:00:0d:b5:ab:5b:be:
36:f9:0f:29:97:bb:6d:df:1b:af:6e:e9:e8:37:02:
57:5d:bd:83:1b:fb:f4:1a:35:af:ee:03:92:86:a8:
e3:85:40:5f:a8:1e:31:f6:21:d9:87:88:6c:8d:a4:
58:f0:aa:45:7d:3f:1a:a4:ef:48:74:a8:8a:5e:b4:
c5:b5:24:6d:84:1b:51:7b:54:1e:76:c6:8b:f7:0f:
1d:16:7d:6c:7b:a8:a4:52:e6:f9:8e:ab:a0:07:c6:
3f:04:55:5e:ec:b4:cb:26:d6:2e:70:c3:03:f0:2a:
37:22:46:19:17:e4:b9:67:fe:19:d2:57:c3:78:8b:
ac:73:9e:e1:b9:22:75:4d:cb:b5:c5:05:ab:d0:1a:
3e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F4:24:87:13:32:14:E4:40:6B:F3:9D:77:FA:40:1A:C0:46:E5:13
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6a:0c:27:de:c1:61:f1:af:82:a0:8d:b1:9c:c6:91:50:24:
3f:9a:9e:a4:4b:d3:9d:f9:6d:c0:d6:2b:ea:8b:70:56:a5:89:
c9:eb:7a:0f:36:2e:ea:ff:ae:cd:b0:82:15:a8:25:30:b7:e3:
40:ec:2b:ea:24:50:a5:c2:d2:33:d0:aa:da:75:c6:6d:ff:ac:
99:4a:1c:6e:d9:b2:18:00:7d:77:c4:e3:4f:2b:1f:28:0e:f6:
1d:2c:83:72:ac:5c:a8:b9:cf:70:36:e6:85:dc:7b:14:7e:ed:
9a:dd:d4:af:fb:57:4a:b5:ce:03:63:d4:f4:f6:44:57:9f:ab:
d2:27:ee:7a:ba:2d:ec:78:b4:11:cb:81:e2:7c:6e:f7:b8:07:
43:e5:48:ef:39:6f:76:ed:6d:50:36:ae:01:a5:e2:5b:89:a7:
b0:be:af:9a:2d:03:0b:a0:86:a7:0e:8e:45:11:b6:27:9a:15:
74:fd:83:69:f1:4d:f2:e1:18:0b:72:c9:c1:44:48:d2:52:a5:
55:5e:f5:33:a6:d1:53:83:ba:47:7f:6c:66:dc:66:d0:53:c5:
e7:fb:4b:eb:03:f6:70:fe:aa:44:14:cc:7a:db:c0:e8:59:40:
96:a5:69:1d:f7:9d:69:47:19:18:c1:15:04:b7:18:cc:2e:c7:
10:69:48:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZguypnxLyTu7JY8vDuZ5lKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2
OTQ1NDEwHhcNMjUwNzIxMjEwMTI2WhcNMjUwNzIyMjEwMTI2WjAzMTEwLwYDVQQD
Eyg2M2Y0MjQ4NzEzMzIxNGU0NDA2YmYzOWQ3N2ZhNDAxYWMwNDZlNTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXBTarvLBJ/Eqwpe9Gm/jBw2U5gz
CYN+g2bX6Olz58F7S2Rf8K+36rSnk9hXSdus0XyO6jocj9U7qBK1uhRsz9B/nMbR
c/NCR9Bu1b0nJsa31wTrh1KnlfCG+XeWOFdhOeGFRnPs2txRS46b3b/BpugADbWr
W742+Q8pl7tt3xuvbunoNwJXXb2DG/v0GjWv7gOShqjjhUBfqB4x9iHZh4hsjaRY
8KpFfT8apO9IdKiKXrTFtSRthBtRe1QedsaL9w8dFn1se6ikUub5jqugB8Y/BFVe
7LTLJtYucMMD8Co3IkYZF+S5Z/4Z0lfDeIusc57huSJ1Tcu1xQWr0Bo+MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGP0JIcTMhTkQGvznXf6QBrARuUTMB8GA1UdIwQY
MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt
MTkyY2JkMDhkYjUxLzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx
LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWoMJ97B
YfGvgqCNsZzGkVAkP5qepEvTnfltwNYr6otwVqWJyet6DzYu6v+uzbCCFaglMLfj
QOwr6iRQpcLSM9Cq2nXGbf+smUocbtmyGAB9d8TjTysfKA72HSyDcqxcqLnPcDbm
hdx7FH7tmt3Ur/tXSrXOA2PU9PZEV5+r0ifuerot7Hi0EcuB4nxu97gHQ+VI7zlv
du1tUDauAaXiW4mnsL6vmi0DC6CGpw6ORRG2J5oVdP2DafFN8uEYC3LJwURI0lKl
VV71M6bRU4O6R39sZtxm0FPF5/tL6wP2cP6qRBTMetvA6FlAlqVpHfedaUcZGMEV
BLcYzC7HEGlI6w==
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:21:33 2025 by rpki-client