Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
File: 1-nRo3MrkPCOfhTDoI146LU_NPnM.mft (raw, json)
Hash identifier: SnSgOJIWfeDKaQhab9GI5cqA5vdljirgnP7F4sVOvRo=
Subject key identifier: E9:E8:C2:41:31:64:15:6F:BE:C1:4A:AE:F1:6D:2F:DA:2F:67:84:34
Authority key identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
Certificate issuer: /CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Certificate serial: 0199240DB3E1044DC3B7312A7AB0D3C80078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
Manifest number: 080D
Signing time: Sun 07 Sep 2025 12:01:41 +0000
Manifest this update: Sun 07 Sep 2025 12:01:41 +0000
Manifest next update: Mon 08 Sep 2025 12:01:41 +0000
Files and hashes: 1: 1-nRo3MrkPCOfhTDoI146LU_NPnM.crl (hash: RO+6TUyDe9UsFk3GBAPIteI/0Vn+a1oC0jW3t+k4y5E=)
2: uCvD8eRBUAPr7t4AKxbWS0eik-M.roa (hash: S3XQTQGpmea5gdNAFZSLFW2D1IWdCXJx15hLcxcR7CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:b3:e1:04:4d:c3:b7:31:2a:7a:b0:d3:c8:00:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Validity
Not Before: Sep 7 12:01:41 2025 GMT
Not After : Sep 8 12:01:41 2025 GMT
Subject: CN=e9e8c2413164156fbec14aaef16d2fda2f678434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:e9:54:a9:73:6a:3b:af:73:a7:0a:d4:60:ee:
0d:81:0e:a8:e2:93:f0:e3:ca:1a:d3:ae:fb:f5:24:
64:97:09:20:c8:95:8c:b6:8b:34:c6:fc:92:e6:bb:
b7:cc:b9:4f:09:7d:f8:c8:56:66:43:71:9c:65:81:
97:46:7b:93:3e:de:aa:65:4a:d0:b8:36:b7:98:2a:
19:07:14:37:78:62:e8:02:40:62:6f:45:e8:fe:f3:
da:ae:39:fc:e9:95:7d:fd:19:e4:32:6b:aa:38:e8:
b5:fc:b7:dd:25:0a:b6:fa:ba:cf:8b:23:5b:be:e6:
74:a3:7b:98:df:58:02:bc:78:bb:9d:a6:d0:71:1a:
2d:6a:15:80:7a:d0:5b:68:c3:15:70:5d:8f:6a:df:
2d:16:9c:08:de:bd:1b:d7:97:97:6b:49:3b:2e:0e:
04:2f:31:f7:ba:d2:04:ba:f2:90:29:99:56:7b:ce:
c1:26:66:05:1d:10:94:9e:59:ef:13:02:2f:53:3e:
b3:7b:3e:21:b8:bc:2b:cd:7b:cd:6b:e7:73:0c:ef:
e2:f0:df:3c:3e:71:07:07:b6:e3:dd:0e:3b:00:63:
58:20:fe:26:0e:ec:d4:08:fa:39:da:ed:f7:f7:11:
7b:ad:6d:91:16:fc:99:99:18:eb:d6:83:db:9c:fd:
25:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E8:C2:41:31:64:15:6F:BE:C1:4A:AE:F1:6D:2F:DA:2F:67:84:34
X509v3 Authority Key Identifier:
keyid:FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:62:ce:71:58:fe:c9:40:03:88:11:01:19:ed:a9:a3:a2:30:
3c:82:74:53:e3:6e:f1:01:7d:79:08:92:b0:4b:cb:15:ae:f3:
6f:ed:e5:92:16:96:98:51:a4:c4:bc:bb:ce:b3:eb:5f:32:1c:
13:9b:67:28:d0:e2:82:8b:3c:38:bf:de:14:f6:69:b2:3c:ac:
4f:55:b9:3c:54:52:8d:1a:62:b8:51:e0:52:d8:b2:96:66:d9:
a4:a2:40:90:ed:98:86:19:dd:2e:00:2b:57:55:31:53:2b:02:
c0:fa:d3:5a:1f:e6:ae:ae:1b:fe:73:e7:02:c0:15:b1:aa:52:
61:4f:36:f7:59:ac:9d:a7:19:9f:29:24:5b:78:ca:be:83:dc:
2c:10:f7:7c:41:42:d8:14:af:ce:71:aa:7e:bb:26:64:a2:e1:
d5:8a:85:40:94:57:54:28:c1:a6:60:07:18:df:dc:bc:b5:28:
e1:f6:d9:14:19:68:04:b1:b0:f7:04:60:12:5e:8b:e1:8b:5f:
66:07:70:af:68:4f:24:28:98:99:da:6a:68:aa:d5:b2:3a:88:
b0:36:9e:7b:e4:50:4c:30:a7:8b:e2:36:9c:3f:aa:d7:1f:ba:
ce:80:70:8d:b2:e6:03:3b:fa:e7:85:8d:c2:06:c9:78:8f:da:
6b:0c:e1:3a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZkkDbPhBE3DtzEqerDTyAB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNzQ2OGRjY2FlNDNjMjM5Zjg1MzBlODIzNWUzYTJkNGZj
ZDNlNzMwHhcNMjUwOTA3MTIwMTQxWhcNMjUwOTA4MTIwMTQxWjAzMTEwLwYDVQQD
EyhlOWU4YzI0MTMxNjQxNTZmYmVjMTRhYWVmMTZkMmZkYTJmNjc4NDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/elUqXNqO69zpwrUYO4NgQ6o4pPw
48oa06779SRklwkgyJWMtos0xvyS5ru3zLlPCX34yFZmQ3GcZYGXRnuTPt6qZUrQ
uDa3mCoZBxQ3eGLoAkBib0Xo/vParjn86ZV9/RnkMmuqOOi1/LfdJQq2+rrPiyNb
vuZ0o3uY31gCvHi7nabQcRotahWAetBbaMMVcF2Pat8tFpwI3r0b15eXa0k7Lg4E
LzH3utIEuvKQKZlWe87BJmYFHRCUnlnvEwIvUz6zez4huLwrzXvNa+dzDO/i8N88
PnEHB7bj3Q47AGNYIP4mDuzUCPo52u339xF7rW2RFvyZmRjr1oPbnP0lvQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOnowkExZBVvvsFKrvFtL9ovZ4Q0MB8GA1UdIwQY
MBaAFPp0aNzK5Dwjn4Uw6CNeOi1PzT5zMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1uUm8zTXJrUENPZmhURG9JMTQ2TFVfTlBuTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvYTBjODE2LTc2NWUtNGQxYS04NjZi
LWIzZjA5NDJlNjllYy8xLzEtblJvM01ya1BDT2ZoVERvSTE0NkxVX05Qbk0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE2L2EwYzgxNi03NjVlLTRkMWEtODY2Yi1iM2YwOTQyZTY5
ZWMvMS8xLW5SbzNNcmtQQ09maFREb0kxNDZMVV9OUG5NLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArGLO
cVj+yUADiBEBGe2po6IwPIJ0U+Nu8QF9eQiSsEvLFa7zb+3lkhaWmFGkxLy7zrPr
XzIcE5tnKNDigos8OL/eFPZpsjysT1W5PFRSjRpiuFHgUtiylmbZpKJAkO2Yhhnd
LgArV1UxUysCwPrTWh/mrq4b/nPnAsAVsapSYU8291msnacZnykkW3jKvoPcLBD3
fEFC2BSvznGqfrsmZKLh1YqFQJRXVCjBpmAHGN/cvLUo4fbZFBloBLGw9wRgEl6L
4YtfZgdwr2hPJCiYmdpqaKrVsjqIsDaee+RQTDCni+I2nD+q1x+6zoBwjbLmAzv6
54WNwgbJeI/aawzhOg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 16:14:43 2025 by rpki-client