Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
File: nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft (raw, json)
Hash identifier: kx2ci45vuzsshtvXQhg3BVbJAMfAbGxR92jJ/ndzCyw=
Subject key identifier: ED:80:D2:BF:2D:89:A3:2E:3A:C0:99:F5:D2:4D:22:1E:83:C9:B3:FC
Authority key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
Certificate issuer: /CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Certificate serial: 019849653FD088DA4362D32E35BC1515EF66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
Manifest number: 1187
Signing time: Sun 27 Jul 2025 01:00:28 +0000
Manifest this update: Sun 27 Jul 2025 01:00:28 +0000
Manifest next update: Mon 28 Jul 2025 01:00:28 +0000
Files and hashes: 1: nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl (hash: yiW3uea9OvIGWovDDF/dj0t9MUWj0tbt569CasYQljE=)
2: rbFhRWy7PnH1-c74EqjQ8O_SsH8.roa (hash: +OgMhgDQLZldm2bdOQKGi3uI3dnjtK1GBopk2ba9vPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:3f:d0:88:da:43:62:d3:2e:35:bc:15:15:ef:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Validity
Not Before: Jul 27 01:00:28 2025 GMT
Not After : Jul 28 01:00:28 2025 GMT
Subject: CN=ed80d2bf2d89a32e3ac099f5d24d221e83c9b3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:bf:c8:c7:2e:b2:86:62:1a:33:6b:6c:4c:
93:27:bd:61:2a:4d:20:11:4b:34:05:b0:6a:7b:25:
55:0e:7a:13:b5:12:a9:4a:c3:2e:25:4b:2e:ef:d9:
ae:8f:5d:d2:f4:39:c7:62:dd:12:54:ce:51:5c:28:
c6:31:04:74:b8:8e:c2:db:8d:9b:b3:6b:6b:0f:68:
6a:9b:11:44:36:8b:93:41:d5:22:66:33:c1:a4:61:
d1:8a:7a:88:5c:41:b3:bc:35:e5:ce:8f:ca:53:07:
f3:bc:c6:93:36:c5:fe:11:95:d1:c4:1f:63:e4:a9:
a4:b3:f3:f8:ac:cf:98:e8:9e:e6:59:06:cd:78:05:
9f:68:9a:cd:58:28:fd:d5:36:4f:82:c7:33:8a:16:
31:2a:3a:77:4d:14:bc:ca:95:3c:c0:c3:d4:50:e0:
1b:36:c0:4b:32:a1:52:32:8b:e0:07:02:77:94:52:
9c:a8:0f:17:ae:09:30:39:15:29:f1:ed:b3:cb:a3:
e6:5e:93:f3:e4:e8:60:d6:64:03:1d:8b:65:7d:23:
cc:91:11:a4:eb:42:f5:69:b2:64:12:83:41:dd:60:
f2:e4:ab:6a:ce:70:0d:a5:71:b7:c1:45:c6:d7:ae:
a8:46:50:1e:c6:9f:7c:8f:51:50:46:49:a3:68:ae:
3a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:80:D2:BF:2D:89:A3:2E:3A:C0:99:F5:D2:4D:22:1E:83:C9:B3:FC
X509v3 Authority Key Identifier:
keyid:9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a3:98:3c:2f:b3:52:cf:86:7b:3e:cb:92:94:36:ee:49:57:
f3:ff:55:bc:a7:80:69:e3:d3:6d:f5:61:47:00:bb:6a:76:e8:
87:cb:6c:84:92:e4:39:b5:51:ea:af:99:47:06:4b:29:c3:08:
eb:95:d5:6f:cc:b9:4f:ba:99:15:fa:7b:46:79:d1:2f:e0:e4:
e3:fb:1c:d2:47:07:7f:fc:05:f8:5d:11:3d:9c:8d:a9:fe:b8:
17:0e:59:1f:9f:77:ab:4e:90:0d:a6:61:59:b6:16:2c:bd:b0:
d5:a5:72:ad:d8:87:f6:10:d7:01:aa:c4:f5:87:d4:da:23:78:
22:f2:e6:db:9c:46:5e:d4:06:52:67:8b:24:3c:d0:a4:f9:d0:
d4:84:fe:2e:9d:12:9c:55:c8:6b:63:be:94:08:0e:8b:82:eb:
42:83:b8:a0:50:a5:6c:08:af:4a:a1:1f:dd:64:74:3a:bd:3f:
3e:fe:fc:78:72:b6:59:c1:e1:e9:0b:4d:9c:8f:9e:52:79:42:
fd:e5:13:4b:76:4b:ce:0a:b3:06:d7:ac:2a:7c:31:68:e1:7e:
4c:89:bb:11:cd:ab:d3:73:d1:ae:15:af:6c:7e:66:78:74:72:
08:41:cd:b4:2c:76:ad:ff:45:11:f8:09:84:6d:2e:f4:80:29:
ab:36:d7:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZT/QiNpDYtMuNbwVFe9mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYTkwZTdkYWYxNWMxN2MxYjlhYmM1NzIxNTdiYzdkOTE3
YjM5OTEwHhcNMjUwNzI3MDEwMDI4WhcNMjUwNzI4MDEwMDI4WjAzMTEwLwYDVQQD
EyhlZDgwZDJiZjJkODlhMzJlM2FjMDk5ZjVkMjRkMjIxZTgzYzliM2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf+/yMcusoZiGjNrbEyTJ71hKk0g
EUs0BbBqeyVVDnoTtRKpSsMuJUsu79muj13S9DnHYt0SVM5RXCjGMQR0uI7C242b
s2trD2hqmxFENouTQdUiZjPBpGHRinqIXEGzvDXlzo/KUwfzvMaTNsX+EZXRxB9j
5Kmks/P4rM+Y6J7mWQbNeAWfaJrNWCj91TZPgsczihYxKjp3TRS8ypU8wMPUUOAb
NsBLMqFSMovgBwJ3lFKcqA8XrgkwORUp8e2zy6PmXpPz5Ohg1mQDHYtlfSPMkRGk
60L1abJkEoNB3WDy5KtqznANpXG3wUXG166oRlAexp98j1FQRkmjaK46awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2A0r8tiaMuOsCZ9dJNIh6DybP8MB8GA1UdIwQY
MBaAFJypDn2vFcF8G5q8VyFXvH2RezmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbktrT2ZhOFZ3WHdibXJ4WElWZThmWkY3T1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNWYzNzUtMTQwZi00NmU5LTk2N2Ut
NmU0NTlhNThlMWQ2LzEvbktrT2ZhOFZ3WHdibXJ4WElWZThmWkY3T1pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8yNWYzNzUtMTQwZi00NmU5LTk2N2UtNmU0NTlhNThlMWQ2
LzEvbktrT2ZhOFZ3WHdibXJ4WElWZThmWkY3T1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZaOYPC+z
Us+Gez7LkpQ27klX8/9VvKeAaePTbfVhRwC7anboh8tshJLkObVR6q+ZRwZLKcMI
65XVb8y5T7qZFfp7RnnRL+Dk4/sc0kcHf/wF+F0RPZyNqf64Fw5ZH593q06QDaZh
WbYWLL2w1aVyrdiH9hDXAarE9YfU2iN4IvLm25xGXtQGUmeLJDzQpPnQ1IT+Lp0S
nFXIa2O+lAgOi4LrQoO4oFClbAivSqEf3WR0Or0/Pv78eHK2WcHh6QtNnI+eUnlC
/eUTS3ZLzgqzBtesKnwxaOF+TIm7Ec2r03PRrhWvbH5meHRyCEHNtCx2rf9FEfgJ
hG0u9IApqzbXpQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:17:34 2025 by rpki-client