Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
File: nJKqU9MpCqgDeZNTNdufzD_9Kao.mft (raw, json)
Hash identifier: WfDETW8xmxTmioVdrWtCVddP7j+Pkie7MMqkhU0GlEg=
Subject key identifier: 7F:01:1C:B3:53:70:DC:06:4C:D4:21:A2:41:A8:F1:17:AE:EA:0D:E7
Authority key identifier: 9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
Certificate issuer: /CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Certificate serial: 01976D065BCABD3F8429FFC55837B97669BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
Manifest number: 0277
Signing time: Sat 14 Jun 2025 06:00:22 +0000
Manifest this update: Sat 14 Jun 2025 06:00:22 +0000
Manifest next update: Sun 15 Jun 2025 06:00:22 +0000
Files and hashes: 1: If4EKlwd9K1sFMswbVmwiqIL9EU.roa (hash: Xi+2lm3juwWtv3l4CgI611xVpcAT1z+T6D2yne87CLU=)
2: nJKqU9MpCqgDeZNTNdufzD_9Kao.crl (hash: iZte8SdxQGzYj17877clElB/uRi+azTUYlrj43CNDtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:5b:ca:bd:3f:84:29:ff:c5:58:37:b9:76:69:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Validity
Not Before: Jun 14 06:00:22 2025 GMT
Not After : Jun 15 06:00:22 2025 GMT
Subject: CN=7f011cb35370dc064cd421a241a8f117aeea0de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:08:42:d2:d5:8f:4c:f5:89:7b:7d:73:97:20:
e0:c5:9f:89:03:80:2f:1f:6a:1d:6d:f0:6d:0e:34:
7e:07:5a:d5:8b:97:23:20:9d:ab:a9:24:00:20:41:
b5:24:50:09:a3:95:ad:7e:03:6e:42:18:88:90:b5:
62:00:96:4e:d4:b8:f4:77:e5:d8:1b:bd:fa:ee:8e:
88:19:ef:0c:e4:d7:60:83:f6:2c:a8:03:99:5e:60:
67:aa:2a:8c:cf:ec:e4:ca:ac:73:ba:8e:80:a6:e7:
ac:67:8c:ba:fb:7f:bb:34:2d:bc:9f:2e:56:b4:a5:
18:c4:94:8a:9e:1e:d0:aa:af:e9:f9:ea:2e:1e:f0:
eb:02:98:4c:1e:4e:29:dd:6c:ab:e0:6d:cb:86:44:
e4:c1:f7:cc:71:5f:c7:ba:7c:d4:a5:7f:d0:57:3f:
cd:12:f0:0d:a3:b3:82:b8:76:6f:bb:28:ac:28:e8:
9b:8e:a7:3e:f4:ad:7b:b4:1a:9c:a2:27:ea:01:90:
c7:c3:77:07:aa:c0:76:c6:3a:e5:af:11:52:11:f0:
58:4a:34:a8:44:c0:75:dd:79:31:9d:62:e6:b5:90:
c2:ad:d4:fa:17:e5:00:04:46:45:f6:47:33:d4:7d:
b7:60:6b:02:a3:5c:5c:52:bf:47:37:2c:e1:b8:aa:
07:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:01:1C:B3:53:70:DC:06:4C:D4:21:A2:41:A8:F1:17:AE:EA:0D:E7
X509v3 Authority Key Identifier:
keyid:9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e6:eb:af:62:02:ed:fe:ab:da:76:d4:f9:82:79:19:0b:54:
0c:5c:21:d8:9e:31:be:17:5d:e8:8c:d0:d7:28:15:e8:e2:fa:
90:9d:37:c8:87:7f:e4:2f:c1:57:cf:90:3e:77:cc:1a:1e:be:
84:1e:c2:1d:b5:67:cc:65:c0:23:bb:00:80:75:63:82:a8:76:
d2:b1:b7:3c:46:83:a2:ef:1a:22:bf:75:d4:d0:b2:a3:e7:00:
0a:9b:2b:c6:1a:0a:e6:4c:a6:0f:2d:2e:d9:ba:15:ab:6e:fb:
8a:ec:c1:a1:08:a6:d6:f2:43:92:01:df:59:d5:d6:2f:51:f5:
bd:f7:6d:66:59:f4:cb:11:64:ae:a9:67:4a:04:28:4f:35:df:
b7:06:93:df:e6:15:2b:a2:3b:63:f8:ca:be:e9:e3:d3:d8:df:
3f:5e:b7:57:9d:a4:23:7e:97:04:bb:e7:fa:bb:92:5a:57:57:
be:c6:e7:ad:ab:31:12:05:7b:44:57:f7:9e:f3:05:6f:61:d6:
66:99:59:c6:c8:76:97:ee:b8:71:83:87:26:13:a2:28:83:a9:
b5:f6:17:6a:aa:8b:83:55:3d:8d:cb:e8:ec:18:37:3a:f4:8b:
00:d1:6f:b7:9e:f6:27:1a:d0:df:7a:35:fd:2f:62:3b:fd:e3:
ff:1e:6e:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBlvKvT+EKf/FWDe5dmm+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOTJhYTUzZDMyOTBhYTgwMzc5OTM1MzM1ZGI5ZmNjM2Zm
ZDI5YWEwHhcNMjUwNjE0MDYwMDIyWhcNMjUwNjE1MDYwMDIyWjAzMTEwLwYDVQQD
Eyg3ZjAxMWNiMzUzNzBkYzA2NGNkNDIxYTI0MWE4ZjExN2FlZWEwZGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AhC0tWPTPWJe31zlyDgxZ+JA4Av
H2odbfBtDjR+B1rVi5cjIJ2rqSQAIEG1JFAJo5WtfgNuQhiIkLViAJZO1Lj0d+XY
G7367o6IGe8M5Ndgg/YsqAOZXmBnqiqMz+zkyqxzuo6ApuesZ4y6+3+7NC28ny5W
tKUYxJSKnh7Qqq/p+eouHvDrAphMHk4p3Wyr4G3LhkTkwffMcV/HunzUpX/QVz/N
EvANo7OCuHZvuyisKOibjqc+9K17tBqcoifqAZDHw3cHqsB2xjrlrxFSEfBYSjSo
RMB13XkxnWLmtZDCrdT6F+UABEZF9kcz1H23YGsCo1xcUr9HNyzhuKoHqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8BHLNTcNwGTNQhokGo8Reu6g3nMB8GA1UdIwQY
MBaAFJySqlPTKQqoA3mTUzXbn8w//SmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkpLcVU5TXBDcWdEZVpOVE5kdWZ6RF85S2FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lYWE0ZDAtOGQxZC00Y2MxLThiMjIt
NDUwMzk1ZmI4OGZhLzEvbkpLcVU5TXBDcWdEZVpOVE5kdWZ6RF85S2FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lYWE0ZDAtOGQxZC00Y2MxLThiMjItNDUwMzk1ZmI4OGZh
LzEvbkpLcVU5TXBDcWdEZVpOVE5kdWZ6RF85S2FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaebrr2IC
7f6r2nbU+YJ5GQtUDFwh2J4xvhdd6IzQ1ygV6OL6kJ03yId/5C/BV8+QPnfMGh6+
hB7CHbVnzGXAI7sAgHVjgqh20rG3PEaDou8aIr911NCyo+cACpsrxhoK5kymDy0u
2boVq277iuzBoQim1vJDkgHfWdXWL1H1vfdtZln0yxFkrqlnSgQoTzXftwaT3+YV
K6I7Y/jKvunj09jfP163V52kI36XBLvn+ruSWldXvsbnrasxEgV7RFf3nvMFb2HW
ZplZxsh2l+64cYOHJhOiKIOptfYXaqqLg1U9jcvo7Bg3OvSLANFvt572JxrQ33o1
/S9iO/3j/x5uDQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:37:42 2025 by rpki-client