Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
File: nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json)
Hash identifier: 1NEYL2MXu3w0wdd884j8OgOVBXqKx6ZZPRI0vvFtJuQ=
Subject key identifier: 4F:9F:94:0E:5B:34:F1:6D:D4:87:C2:0B:E1:90:CC:53:80:51:7D:B3
Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Certificate serial: 0198451A415B96A186D1FB32F239017E5AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
Manifest number: 13D9
Signing time: Sat 26 Jul 2025 05:00:05 +0000
Manifest this update: Sat 26 Jul 2025 05:00:05 +0000
Manifest next update: Sun 27 Jul 2025 05:00:05 +0000
Files and hashes: 1: EovVJfg3z9mSoPRLqdQrySDONz0.roa (hash: oZlmneGtk7nFcNF1eQjRZHNEgK8ZEfrOqUTxDl2I1wI=)
2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: HQGK1YF7ixSmD7oYYVXlV6jNCENPzH9cwNsb3+UyQ7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:41:5b:96:a1:86:d1:fb:32:f2:39:01:7e:5a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Validity
Not Before: Jul 26 05:00:05 2025 GMT
Not After : Jul 27 05:00:05 2025 GMT
Subject: CN=4f9f940e5b34f16dd487c20be190cc5380517db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:57:49:18:8c:7d:e9:28:4a:c8:e9:c6:4c:be:
1b:0d:53:2e:1c:0f:ee:45:e2:4e:ca:63:8a:d8:42:
5e:7a:d0:00:23:8a:f2:86:21:10:4b:46:ba:e8:d0:
03:83:a3:0b:66:ec:8c:f9:80:42:66:49:6c:cf:c9:
6a:db:85:5d:bd:df:a5:28:6d:ef:14:ef:f9:55:c7:
ab:dc:5c:a1:eb:12:3d:2b:bb:32:5f:af:f3:de:97:
5b:16:fc:e6:1c:1f:a9:62:d3:88:8e:6c:90:a7:57:
32:7d:14:08:8d:f4:72:d6:cb:d9:15:5d:c5:58:6d:
1e:bc:c5:bb:9e:e5:84:e3:e4:87:93:17:46:db:6c:
e6:e2:3d:2d:16:2b:d9:93:1f:73:07:ad:62:c3:8b:
f6:17:23:79:da:39:04:43:57:e3:41:4b:54:9b:08:
33:22:fa:74:31:41:82:e9:22:d0:24:b2:87:15:be:
3d:e2:15:d8:14:29:1f:13:5d:b9:ab:92:e9:b9:71:
d8:31:3e:13:76:be:d5:91:84:18:c5:25:d8:4c:c6:
9f:37:d9:e2:8f:6c:93:f2:82:fa:e1:23:20:57:5d:
f2:7d:6e:f2:24:6b:69:38:7a:3d:20:2d:e3:ec:d9:
96:e9:07:f9:50:0c:fe:04:bd:c0:bd:16:af:5e:43:
d4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9F:94:0E:5B:34:F1:6D:D4:87:C2:0B:E1:90:CC:53:80:51:7D:B3
X509v3 Authority Key Identifier:
keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:4c:75:7a:03:a0:b3:3c:a0:98:90:25:9d:b4:73:e4:58:c9:
e9:d9:33:e4:cb:58:5d:a2:24:1a:f8:92:4a:af:9d:60:95:89:
f2:b2:30:34:31:e7:dd:e6:50:b8:4c:10:a4:43:55:e1:fe:18:
79:e5:f4:09:e7:5c:64:7f:8d:c1:c6:0e:66:16:09:f3:81:21:
71:9e:e4:29:bd:d9:fa:a8:8d:b1:08:21:ac:c2:a7:0a:34:06:
72:b7:66:62:e8:6a:3d:22:b0:27:df:40:57:95:3a:67:79:81:
3a:b8:8d:38:28:68:14:fd:19:be:a8:e6:ea:f4:fb:7a:f5:b7:
b3:e6:f2:37:26:9c:cd:00:a3:5d:d5:15:f3:98:1f:99:37:6b:
a8:a9:2e:d9:19:dc:3f:a7:b1:cf:ce:0a:0f:9f:4d:aa:6c:bd:
3c:9a:0b:f9:76:90:ed:f0:67:e5:c4:af:ee:25:77:fc:90:1d:
2b:bd:f8:29:f6:0f:09:45:3f:4e:91:7e:95:c5:0e:0a:c1:ea:
25:10:d8:de:6d:26:84:ce:3a:cf:94:ff:10:d5:f1:cd:ce:64:
4d:5b:45:93:02:1d:3d:90:f3:93:0d:e8:13:89:3c:31:ed:93:
c8:f7:5c:ea:a7:0c:2e:8a:16:08:7a:4d:84:4d:80:b2:d7:04:
a8:db:14:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFGkFblqGG0fsy8jkBflq0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNDBlMzA3ZDEyY2UwNTY4YzI5OWUxN2NkNjVhNjZiMjZj
ZGIwNGQwHhcNMjUwNzI2MDUwMDA1WhcNMjUwNzI3MDUwMDA1WjAzMTEwLwYDVQQD
Eyg0ZjlmOTQwZTViMzRmMTZkZDQ4N2MyMGJlMTkwY2M1MzgwNTE3ZGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1dJGIx96ShKyOnGTL4bDVMuHA/u
ReJOymOK2EJeetAAI4ryhiEQS0a66NADg6MLZuyM+YBCZklsz8lq24Vdvd+lKG3v
FO/5Vcer3Fyh6xI9K7syX6/z3pdbFvzmHB+pYtOIjmyQp1cyfRQIjfRy1svZFV3F
WG0evMW7nuWE4+SHkxdG22zm4j0tFivZkx9zB61iw4v2FyN52jkEQ1fjQUtUmwgz
Ivp0MUGC6SLQJLKHFb494hXYFCkfE125q5LpuXHYMT4Tdr7VkYQYxSXYTMafN9ni
j2yT8oL64SMgV13yfW7yJGtpOHo9IC3j7NmW6Qf5UAz+BL3AvRavXkPUoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+flA5bNPFt1IfCC+GQzFOAUX2zMB8GA1UdIwQY
MBaAFJxA4wfRLOBWjCmeF81lpmsmzbBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mYWYyYWUtNmE4My00NDViLTk3NGIt
OGZiMzc3OWI4NzA0LzEvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mYWYyYWUtNmE4My00NDViLTk3NGItOGZiMzc3OWI4NzA0
LzEvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUx1egOg
szygmJAlnbRz5FjJ6dkz5MtYXaIkGviSSq+dYJWJ8rIwNDHn3eZQuEwQpENV4f4Y
eeX0CedcZH+NwcYOZhYJ84EhcZ7kKb3Z+qiNsQghrMKnCjQGcrdmYuhqPSKwJ99A
V5U6Z3mBOriNOChoFP0Zvqjm6vT7evW3s+byNyaczQCjXdUV85gfmTdrqKku2Rnc
P6exz84KD59Nqmy9PJoL+XaQ7fBn5cSv7iV3/JAdK734KfYPCUU/TpF+lcUOCsHq
JRDY3m0mhM46z5T/ENXxzc5kTVtFkwIdPZDzkw3oE4k8Me2TyPdc6qcMLooWCHpN
hE2AstcEqNsU7A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 10:07:06 2025 by rpki-client