Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
File: nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json)
Hash identifier: yuJSbnN3+OSZ8tJ2P5EMzig1TUZqM3SDaLsR0A1K7vk=
Subject key identifier: 0E:8E:AA:61:B7:C2:85:B1:24:EB:90:A0:5E:B9:33:DE:20:70:2D:DA
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial: 01996548A454BB26460667EA56E30EB2D3CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
Manifest number: 09C4
Signing time: Sat 20 Sep 2025 04:01:23 +0000
Manifest this update: Sat 20 Sep 2025 04:01:23 +0000
Manifest next update: Sun 21 Sep 2025 04:01:23 +0000
Files and hashes: 1: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: 2sMDS292y4hpoRlbqChg9zuamPRaZUMb1oXGtY2pvtY=)
2: udQIyLLEg9QQXb-UkTqLHg_TlmY.roa (hash: tqfLE5OeUFZI9sRR907kQS3AlAfPN5yiahDFaxm0yMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:65:48:a4:54:bb:26:46:06:67:ea:56:e3:0e:b2:d3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
Validity
Not Before: Sep 20 04:01:23 2025 GMT
Not After : Sep 21 04:01:23 2025 GMT
Subject: CN=0e8eaa61b7c285b124eb90a05eb933de20702dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:cd:18:21:e7:be:f3:24:1c:bc:5c:24:51:
4f:5f:5a:ce:77:97:fb:7a:f7:8a:f6:e1:e1:50:6a:
ac:84:17:ef:52:93:48:72:37:4c:52:d3:db:e2:23:
bf:6f:b7:b1:07:34:b8:fe:ca:46:86:d1:3d:a6:3b:
10:f0:80:3a:81:ed:9f:9a:c2:11:03:27:f6:d7:87:
52:d6:85:d2:cf:32:06:cb:57:ab:a2:91:d1:c1:19:
dd:de:b9:5e:ea:75:81:99:78:9c:e2:49:90:77:0c:
7d:33:01:18:0d:37:0a:49:d9:58:fb:19:29:47:e7:
1f:0a:36:68:7c:1c:77:6e:73:e6:3e:7c:15:62:79:
2e:7b:f7:b7:5d:35:3e:d6:cd:6e:17:09:47:43:53:
87:c5:a0:0b:c9:0e:98:59:ca:84:69:e3:ca:8e:c0:
56:b2:9b:8a:b0:c8:9c:b2:b6:bb:3b:19:8d:7f:a9:
90:99:a2:ee:e1:26:8d:84:56:a5:b0:a0:a1:4c:06:
aa:c8:5b:e1:82:09:8c:07:29:9e:2d:be:c3:e6:64:
f0:b4:cc:33:d2:a3:fc:5c:43:76:75:cb:e7:91:53:
54:58:ee:5a:85:b4:8a:47:56:01:82:8b:7a:15:91:
43:e7:7e:96:44:dc:ae:ee:2a:fa:83:a2:cb:7b:21:
32:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8E:AA:61:B7:C2:85:B1:24:EB:90:A0:5E:B9:33:DE:20:70:2D:DA
X509v3 Authority Key Identifier:
keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8c:1b:d2:8b:f6:ef:fc:46:d7:75:18:fa:d1:84:94:9f:05:
61:f2:1e:21:fd:38:81:28:2d:35:0c:73:4b:c8:60:c3:ea:de:
6f:7e:1c:e1:eb:62:eb:c0:93:b2:f7:21:fd:3d:77:89:38:8a:
67:e2:3a:d8:fc:f9:94:57:88:76:f1:3b:b9:cb:76:26:9d:c6:
a1:3c:f3:04:7f:16:45:67:17:7c:43:73:ad:dc:01:9d:84:be:
23:9e:da:86:53:94:78:96:c3:86:60:d4:77:79:c4:a4:7d:a3:
e6:f1:bd:2a:3d:00:c7:98:5d:73:92:14:36:8c:74:50:c9:6a:
c5:f7:25:0a:c1:19:60:03:fc:b5:5d:6f:00:63:6d:ae:07:d1:
56:c8:f7:d2:9f:76:c1:ec:99:0b:8e:01:44:cd:f1:e7:66:ac:
44:64:a7:14:20:e6:0a:70:67:1c:e5:51:11:14:ed:3d:47:94:
8b:9a:c6:65:f6:da:48:a0:9b:04:61:b2:6c:44:24:bb:4c:c4:
41:69:3a:38:a4:a6:13:c0:67:ee:a4:3b:89:a6:2c:bf:e4:44:
47:0b:f6:f9:b8:45:c1:20:18:ce:ea:de:0e:7d:06:31:01:7b:
12:06:29:22:a8:db:cf:a1:61:ee:b1:67:f8:93:56:00:8b:e5:
9d:93:d5:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZllSKRUuyZGBmfqVuMOstPOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNjgzNGFlMzU2MzBhMDRjNzhmMjc3NjA1MjUyNjc4ZmI2
NDVjNDUwHhcNMjUwOTIwMDQwMTIzWhcNMjUwOTIxMDQwMTIzWjAzMTEwLwYDVQQD
EygwZThlYWE2MWI3YzI4NWIxMjRlYjkwYTA1ZWI5MzNkZTIwNzAyZGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu/NGCHnvvMkHLxcJFFPX1rOd5f7
eveK9uHhUGqshBfvUpNIcjdMUtPb4iO/b7exBzS4/spGhtE9pjsQ8IA6ge2fmsIR
Ayf214dS1oXSzzIGy1eropHRwRnd3rle6nWBmXic4kmQdwx9MwEYDTcKSdlY+xkp
R+cfCjZofBx3bnPmPnwVYnkue/e3XTU+1s1uFwlHQ1OHxaALyQ6YWcqEaePKjsBW
spuKsMicsra7OxmNf6mQmaLu4SaNhFalsKChTAaqyFvhggmMBymeLb7D5mTwtMwz
0qP8XEN2dcvnkVNUWO5ahbSKR1YBgot6FZFD536WRNyu7ir6g6LLeyEyaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6OqmG3woWxJOuQoF65M94gcC3aMB8GA1UdIwQY
MBaAFJ5oNK41YwoEx48ndgUlJnj7ZFxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYjk3YzgtOTU3Ni00MjQ3LTk2ZTYt
NTI3OTg0ZmMxMTgxLzEvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zYjk3YzgtOTU3Ni00MjQ3LTk2ZTYtNTI3OTg0ZmMxMTgx
LzEvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKowb0ov2
7/xG13UY+tGElJ8FYfIeIf04gSgtNQxzS8hgw+reb34c4eti68CTsvch/T13iTiK
Z+I62Pz5lFeIdvE7uct2Jp3GoTzzBH8WRWcXfENzrdwBnYS+I57ahlOUeJbDhmDU
d3nEpH2j5vG9Kj0Ax5hdc5IUNox0UMlqxfclCsEZYAP8tV1vAGNtrgfRVsj30p92
weyZC44BRM3x52asRGSnFCDmCnBnHOVRERTtPUeUi5rGZfbaSKCbBGGybEQku0zE
QWk6OKSmE8Bn7qQ7iaYsv+RERwv2+bhFwSAYzureDn0GMQF7EgYpIqjbz6Fh7rFn
+JNWAIvlnZPVSQ==
-----END CERTIFICATE-----
Generated at Sat Sep 20 10:37:39 2025 by rpki-client