
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
File: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft (raw, json)
Hash identifier: XtPn8iCyBcOdO8s1fGYP11VMDJ+QeYYW/CkZONEADO0=
Subject key identifier: D3:59:E8:A0:8B:FC:70:4A:53:5B:B5:8D:8E:4A:0A:1D:16:5E:BE:8E
Authority key identifier: 9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
Certificate issuer: /CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Certificate serial: 01976DAC1111743B5972751EBB20206B32B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 09:01:22 +0000
Manifest this update: Sat 14 Jun 2025 09:01:22 +0000
Manifest next update: Sun 15 Jun 2025 09:01:22 +0000
Files and hashes: 1: 77oIKxIggLvEt0p9QsxiJYQB5eM.roa (hash: Hp3aUI6v9ziixBPGAkVrry5mapxw8BKESYHxJGTP/MA=)
2: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl (hash: 5sKTZYgHNiGkXK3Xw72EMZgBm+KGDNxgEE+7hrrFCZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ac:11:11:74:3b:59:72:75:1e:bb:20:20:6b:32:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Validity
Not Before: Jun 14 09:01:22 2025 GMT
Not After : Jun 15 09:01:22 2025 GMT
Subject: CN=d359e8a08bfc704a535bb58d8e4a0a1d165ebe8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:7b:33:20:0e:70:37:e1:9e:ce:59:1d:e8:
55:42:0e:ae:03:4a:0f:1f:15:04:3c:c5:ff:80:f7:
54:0e:53:16:f4:97:c1:3b:0a:25:e7:12:70:0e:d9:
c7:a8:fa:83:a0:c7:ed:43:cc:ee:26:54:8a:fd:7c:
c7:f7:1b:8c:cf:73:97:26:be:e5:50:ed:d5:da:c0:
9c:a2:91:d9:59:15:5d:ed:e9:99:ba:0a:ac:19:4e:
fa:b8:0b:25:9e:3f:2c:c9:14:51:a3:14:9b:98:4e:
33:a5:79:98:47:f5:26:d8:b3:8f:52:e0:13:31:1a:
f9:9a:06:f7:a6:5a:23:51:09:1b:87:97:55:d8:1f:
46:0a:5e:a8:c9:6e:33:c7:67:4f:1b:c5:c7:a8:1d:
5d:17:a2:08:b7:a7:73:06:6b:c8:90:f4:4d:d9:28:
d9:3d:d0:7d:2b:fb:93:49:63:f2:c6:9b:66:22:6a:
65:76:c6:04:c5:ac:96:bf:6c:69:b2:64:7c:e6:f3:
11:53:8f:75:55:82:e0:e8:ce:1c:1c:b0:e3:75:ba:
81:b3:15:95:54:22:7a:92:88:e9:f0:62:73:65:b7:
9a:42:bf:f3:d8:24:2a:fb:fc:ff:dc:fa:ea:74:c2:
ca:cf:7b:84:df:5e:c4:d3:08:e5:9a:84:b1:89:0e:
94:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:59:E8:A0:8B:FC:70:4A:53:5B:B5:8D:8E:4A:0A:1D:16:5E:BE:8E
X509v3 Authority Key Identifier:
keyid:9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2e:44:69:fd:8c:bf:c8:6e:2e:70:67:a3:05:08:64:84:ef:
74:7e:55:8a:b6:ca:c6:cb:dd:ac:19:45:67:cb:8c:9e:01:fb:
7a:41:9a:32:c3:7d:36:36:87:64:33:2c:e5:ae:a4:21:5d:f5:
02:ea:39:ea:c8:00:e5:01:da:03:bc:75:b9:44:f6:22:de:ce:
99:49:bf:77:ae:0f:64:3d:0f:b4:26:55:75:4d:87:18:8a:4f:
11:f9:a0:07:04:96:fb:cc:04:b9:60:d1:d8:3f:2c:f8:9a:a8:
33:73:bf:bf:60:38:bd:e6:e5:a5:99:4b:0a:fc:c0:6c:1d:39:
59:c4:e8:26:96:e5:5e:f2:58:31:ea:ef:00:19:85:ae:66:bb:
bc:25:82:8a:af:bb:4c:82:01:3f:39:4b:2b:64:0a:2c:c8:c5:
f5:75:24:70:0d:ba:e6:e0:0c:0d:64:2b:06:e6:6f:e1:f3:16:
e1:6e:3e:b0:ec:ac:b8:b5:d6:8e:60:bd:44:be:31:ec:7f:a5:
21:2b:84:4e:1e:e8:b8:53:dd:ed:47:c9:a4:60:7b:94:6f:56:
1a:d2:d7:95:1d:5e:da:19:ef:a0:a1:98:1a:ae:9c:8f:87:1e:
37:e7:23:2e:ec:b1:f7:39:22:10:3c:98:7c:ef:96:6e:76:e0:
00:1b:1e:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtrBERdDtZcnUeuyAgazKyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkOGYxMTI3NTZmMTQ1OGRjZjNlMzg3YTRiZTg5MGYzMGVh
OTQ5YjMwHhcNMjUwNjE0MDkwMTIyWhcNMjUwNjE1MDkwMTIyWjAzMTEwLwYDVQQD
EyhkMzU5ZThhMDhiZmM3MDRhNTM1YmI1OGQ4ZTRhMGExZDE2NWViZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn17MyAOcDfhns5ZHehVQg6uA0oP
HxUEPMX/gPdUDlMW9JfBOwol5xJwDtnHqPqDoMftQ8zuJlSK/XzH9xuMz3OXJr7l
UO3V2sCcopHZWRVd7emZugqsGU76uAslnj8syRRRoxSbmE4zpXmYR/Um2LOPUuAT
MRr5mgb3plojUQkbh5dV2B9GCl6oyW4zx2dPG8XHqB1dF6IIt6dzBmvIkPRN2SjZ
PdB9K/uTSWPyxptmImpldsYExayWv2xpsmR85vMRU491VYLg6M4cHLDjdbqBsxWV
VCJ6kojp8GJzZbeaQr/z2CQq+/z/3PrqdMLKz3uE317E0wjlmoSxiQ6UtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNZ6KCL/HBKU1u1jY5KCh0WXr6OMB8GA1UdIwQY
MBaAFJ2PESdW8UWNzz44ekvokPMOqUmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblk4UkoxYnhSWTNQUGpoNlMtaVE4dzZwU2JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83YTZlMjEtZDQwYi00ZWViLWIzY2It
MDBlZDkwMjY5YmI0LzEvblk4UkoxYnhSWTNQUGpoNlMtaVE4dzZwU2JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC83YTZlMjEtZDQwYi00ZWViLWIzY2ItMDBlZDkwMjY5YmI0
LzEvblk4UkoxYnhSWTNQUGpoNlMtaVE4dzZwU2JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEi5Eaf2M
v8huLnBnowUIZITvdH5VirbKxsvdrBlFZ8uMngH7ekGaMsN9NjaHZDMs5a6kIV31
Auo56sgA5QHaA7x1uUT2It7OmUm/d64PZD0PtCZVdU2HGIpPEfmgBwSW+8wEuWDR
2D8s+JqoM3O/v2A4veblpZlLCvzAbB05WcToJpblXvJYMervABmFrma7vCWCiq+7
TIIBPzlLK2QKLMjF9XUkcA265uAMDWQrBuZv4fMW4W4+sOysuLXWjmC9RL4x7H+l
ISuETh7ouFPd7UfJpGB7lG9WGtLXlR1e2hnvoKGYGq6cj4ceN+cjLuyx9zkiEDyY
fO+WbnbgABsedA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:58:15 2025 by rpki-client