Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
File: nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft (raw, json)
Hash identifier: M6zecw/Pec5WUuAFU7+KUJGXxe6cnbUN/j9oulkBI2w=
Subject key identifier: B6:84:A2:99:02:48:89:FC:27:29:EE:A6:FF:83:E1:13:50:F3:6E:10
Authority key identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
Certificate issuer: /CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Certificate serial: 019921E7F3B3018855E99D1A50839A976F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
Manifest number: 0921
Signing time: Sun 07 Sep 2025 02:01:13 +0000
Manifest this update: Sun 07 Sep 2025 02:01:13 +0000
Manifest next update: Mon 08 Sep 2025 02:01:13 +0000
Files and hashes: 1: D6KBZtdhAp7R2Q1YiqESZQ8OeXA.roa (hash: pLl10ejVKSmOKcwrzyb02NjjAckX++6l+yonzmG4CME=)
2: nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl (hash: 3MiE82iyjaGFc9UEq6h+tq1qkAm3f9vThi3GbTySJkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:f3:b3:01:88:55:e9:9d:1a:50:83:9a:97:6f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Validity
Not Before: Sep 7 02:01:13 2025 GMT
Not After : Sep 8 02:01:13 2025 GMT
Subject: CN=b684a299024889fc2729eea6ff83e11350f36e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e4:ab:a3:d1:a2:d6:c1:83:7b:42:53:f0:a2:
ac:38:2c:62:60:30:7b:ae:be:13:72:cd:4f:e6:57:
39:6f:21:74:6d:b4:f7:95:b2:ea:4d:91:5d:81:8f:
13:b2:9e:69:58:96:b9:aa:ca:c4:a8:ab:87:a3:bc:
c8:c5:69:18:55:55:81:84:8c:04:8b:50:fd:8b:e1:
59:4f:da:c3:58:05:12:65:10:a2:18:1a:6b:31:55:
41:db:d4:0e:03:13:66:51:f3:1a:22:13:da:17:76:
5d:9c:85:de:d4:43:76:98:72:de:9c:81:57:a0:26:
e7:44:c3:17:4d:51:57:8b:10:9e:54:3e:e2:0b:7d:
53:db:86:70:06:9a:c4:cd:60:ae:ad:94:73:70:92:
72:d1:b1:47:6e:c8:68:16:f8:2f:bf:d4:9b:81:ea:
89:8f:64:46:68:ad:88:69:f3:60:b2:f1:65:cf:00:
cc:f8:da:89:87:94:62:2b:25:a1:3b:0f:f5:e4:12:
81:06:43:ce:1b:8f:83:87:dc:03:69:c6:4c:b0:ba:
6a:df:ee:7c:72:e0:62:70:f7:ad:d5:10:82:62:f6:
5c:96:59:fe:29:df:05:55:e8:34:2b:29:76:2a:7d:
94:35:95:67:71:14:43:1e:4d:8a:81:e0:57:12:0f:
d6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:84:A2:99:02:48:89:FC:27:29:EE:A6:FF:83:E1:13:50:F3:6E:10
X509v3 Authority Key Identifier:
keyid:9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:7f:c6:23:2b:55:68:8c:d4:34:a2:c3:94:47:ed:dc:d2:7b:
41:2d:20:8a:31:68:d6:c6:f7:dc:02:61:20:92:d4:e4:ec:b5:
c4:57:4b:8e:58:da:e9:ca:13:d4:ca:73:99:0f:45:d3:33:2e:
07:9e:80:60:ca:e0:be:b6:33:2b:18:d2:fb:f2:ee:a4:6f:fe:
78:90:60:d8:33:58:59:50:34:81:5d:3b:af:27:9a:3f:c8:74:
98:2a:ef:57:f4:0b:49:c5:a1:37:a2:85:92:55:c0:24:8b:da:
7a:6d:52:cb:bf:2b:bc:db:91:a3:72:59:8d:b4:f9:2a:c0:66:
f7:70:09:d6:db:c5:c7:d8:97:5f:08:3d:4c:5d:de:78:da:0b:
fb:2a:6c:30:c3:d2:2b:d4:ff:e2:c1:bf:ca:72:d3:b8:1a:47:
46:fe:5d:cd:e4:38:45:f6:30:d9:db:96:c9:be:3b:28:64:f3:
b1:56:be:fe:43:1d:65:3f:6a:ce:2b:74:a4:30:27:69:3e:29:
02:a1:78:ca:a7:9a:ce:58:39:5d:8c:ed:b9:9d:78:f7:aa:16:
bd:02:56:b6:ea:a2:31:a9:ae:e8:f0:da:c7:9e:97:41:76:22:
1d:18:ce:16:d8:da:aa:c1:b5:75:a3:b9:6d:cb:d1:8e:a1:fe:
52:89:e8:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh5/OzAYhV6Z0aUIOal281MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZjI0YWZiZmVjZGY2YTk5YzI4MmJmNTNiMzA0ZjNjMWU4
ZjQ3MGYwHhcNMjUwOTA3MDIwMTEzWhcNMjUwOTA4MDIwMTEzWjAzMTEwLwYDVQQD
EyhiNjg0YTI5OTAyNDg4OWZjMjcyOWVlYTZmZjgzZTExMzUwZjM2ZTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OSro9Gi1sGDe0JT8KKsOCxiYDB7
rr4Tcs1P5lc5byF0bbT3lbLqTZFdgY8Tsp5pWJa5qsrEqKuHo7zIxWkYVVWBhIwE
i1D9i+FZT9rDWAUSZRCiGBprMVVB29QOAxNmUfMaIhPaF3ZdnIXe1EN2mHLenIFX
oCbnRMMXTVFXixCeVD7iC31T24ZwBprEzWCurZRzcJJy0bFHbshoFvgvv9SbgeqJ
j2RGaK2IafNgsvFlzwDM+NqJh5RiKyWhOw/15BKBBkPOG4+Dh9wDacZMsLpq3+58
cuBicPet1RCCYvZclln+Kd8FVeg0Kyl2Kn2UNZVncRRDHk2KgeBXEg/WnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaEopkCSIn8Jynupv+D4RNQ824QMB8GA1UdIwQY
MBaAFJ3ySvv+zfapnCgr9TswTzwej0cPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lYTljNTktOWUxNC00ZjI1LTg2YmQt
N2VlZGY0ZGQ2YzEzLzEvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lYTljNTktOWUxNC00ZjI1LTg2YmQtN2VlZGY0ZGQ2YzEz
LzEvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3/GIytV
aIzUNKLDlEft3NJ7QS0gijFo1sb33AJhIJLU5Oy1xFdLjlja6coT1MpzmQ9F0zMu
B56AYMrgvrYzKxjS+/LupG/+eJBg2DNYWVA0gV07ryeaP8h0mCrvV/QLScWhN6KF
klXAJIvaem1Sy78rvNuRo3JZjbT5KsBm93AJ1tvFx9iXXwg9TF3eeNoL+ypsMMPS
K9T/4sG/ynLTuBpHRv5dzeQ4RfYw2duWyb47KGTzsVa+/kMdZT9qzit0pDAnaT4p
AqF4yqeazlg5XYztuZ1496oWvQJWtuqiMamu6PDax56XQXYiHRjOFtjaqsG1daO5
bcvRjqH+UonoNQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:32 2025 by rpki-client