Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
File: nM9T8eCub18z28-A6ox0H2gkhf4.mft (raw, json)
Hash identifier: evS/GBK4BqZ225nTqgh9zYd2aHHH2Ph5HjbC8kUw3gQ=
Subject key identifier: D8:80:48:1E:C7:B2:6D:E4:F4:81:2B:86:F9:38:DC:BF:5A:3A:DC:F4
Authority key identifier: 9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
Certificate issuer: /CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Certificate serial: 0199345BCDB1E3E64843C659CA4EEC9DFCDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
Manifest number: 0636
Signing time: Wed 10 Sep 2025 16:00:55 +0000
Manifest this update: Wed 10 Sep 2025 16:00:55 +0000
Manifest next update: Thu 11 Sep 2025 16:00:55 +0000
Files and hashes: 1: nM9T8eCub18z28-A6ox0H2gkhf4.crl (hash: kmoeNGVCW4o7hhgZ/sJO+6eeT8olaRjjMTkm8tpTBVk=)
2: ypZztjZlxetD-72tfNr-C4vUMMo.roa (hash: KOjPZ5JmKNPLP4XD3KiiaO/OQDRjqwb/lVaqB3ewFWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:cd:b1:e3:e6:48:43:c6:59:ca:4e:ec:9d:fc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Validity
Not Before: Sep 10 16:00:55 2025 GMT
Not After : Sep 11 16:00:55 2025 GMT
Subject: CN=d880481ec7b26de4f4812b86f938dcbf5a3adcf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d4:da:6e:30:30:9a:be:a6:2f:73:b3:c5:92:
7f:6e:16:aa:7c:7d:8a:ab:1f:f1:a4:5b:fa:d5:5a:
e7:b4:ce:8c:1f:a6:61:40:97:e2:40:27:e9:74:62:
ac:d4:68:29:11:28:df:86:cf:3c:f0:b9:af:af:41:
c4:b9:37:82:21:60:46:03:26:84:4f:fc:b7:86:51:
8c:00:8e:7b:64:95:7b:52:5c:51:80:17:aa:6a:a2:
ba:3e:95:e8:1e:9c:a6:6d:ed:fd:06:9c:62:8e:80:
c9:78:c7:b6:20:cc:73:bb:87:04:ec:33:da:2b:1e:
50:a0:81:b5:71:3f:fd:1a:d5:cc:36:e3:20:24:e3:
f9:40:39:3d:4b:58:bd:1e:cd:0a:90:8b:67:6c:94:
d6:d8:ff:e5:56:90:ca:24:a4:7b:6b:43:f0:a8:7e:
d6:18:5e:05:51:ab:98:c2:1b:da:35:c6:03:9e:41:
92:f4:6e:e1:53:f7:e9:ed:37:4a:33:5b:42:d2:0f:
ef:ff:bf:fa:41:cd:cb:9b:1c:8e:5b:0c:17:20:f6:
45:7f:58:34:6e:9f:32:7f:78:b0:d9:ab:9a:13:e9:
02:c2:b0:9f:14:ff:93:5e:1b:fd:93:b5:e6:4c:65:
c6:ff:69:8a:57:6f:2a:6d:bf:64:89:94:22:bc:3e:
e2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:80:48:1E:C7:B2:6D:E4:F4:81:2B:86:F9:38:DC:BF:5A:3A:DC:F4
X509v3 Authority Key Identifier:
keyid:9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:91:bb:65:81:3f:f6:2c:60:8f:86:4f:a6:d2:6f:88:4b:4d:
6e:e0:8e:d8:46:66:b1:88:9f:fc:3d:56:bd:7e:7b:df:f9:5c:
d7:f2:7e:9f:eb:5e:98:40:20:36:e0:80:04:ab:99:e0:db:11:
54:44:30:3d:e2:c2:f2:9f:34:5e:c3:e4:a2:ac:dc:63:29:a4:
fa:b3:9f:bd:45:29:eb:b2:0f:c9:84:03:d3:bc:a3:91:4c:31:
89:9f:b3:7d:7e:79:79:bb:31:9d:ef:3b:51:b6:04:a7:fb:d7:
9e:2c:e9:ef:25:1c:62:db:d9:e6:8b:63:ac:e1:96:6c:23:a4:
8b:e5:2c:26:15:79:56:8e:30:0d:3a:2e:2f:d1:3c:ff:95:03:
98:96:94:85:e1:c8:3b:a1:3a:7e:51:2b:0f:72:28:a8:37:f7:
03:ab:8e:52:82:8f:42:eb:63:f4:21:a9:8d:56:90:05:04:3a:
44:2c:df:9d:97:d0:26:0e:0c:e6:7e:2c:c3:7b:78:6e:6e:39:
3f:b5:16:54:9b:b5:72:db:5c:51:33:db:f4:6b:fd:57:48:5a:
e7:ee:e9:34:ae:ac:a5:c2:67:08:54:03:0d:e4:02:8a:06:6f:
f3:f0:3a:da:49:a9:c2:19:3c:64:30:f0:22:b6:12:f7:5f:72:
74:79:5c:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk0W82x4+ZIQ8ZZyk7snfzeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljY2Y1M2YxZTBhZTZmNWYzM2RiY2Y4MGVhOGM3NDFmNjgy
NDg1ZmUwHhcNMjUwOTEwMTYwMDU1WhcNMjUwOTExMTYwMDU1WjAzMTEwLwYDVQQD
EyhkODgwNDgxZWM3YjI2ZGU0ZjQ4MTJiODZmOTM4ZGNiZjVhM2FkY2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndTabjAwmr6mL3OzxZJ/bhaqfH2K
qx/xpFv61VrntM6MH6ZhQJfiQCfpdGKs1GgpESjfhs888Lmvr0HEuTeCIWBGAyaE
T/y3hlGMAI57ZJV7UlxRgBeqaqK6PpXoHpymbe39BpxijoDJeMe2IMxzu4cE7DPa
Kx5QoIG1cT/9GtXMNuMgJOP5QDk9S1i9Hs0KkItnbJTW2P/lVpDKJKR7a0PwqH7W
GF4FUauYwhvaNcYDnkGS9G7hU/fp7TdKM1tC0g/v/7/6Qc3LmxyOWwwXIPZFf1g0
bp8yf3iw2auaE+kCwrCfFP+TXhv9k7XmTGXG/2mKV28qbb9kiZQivD7iYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNiASB7Hsm3k9IErhvk43L9aOtz0MB8GA1UdIwQY
MBaAFJzPU/Hgrm9fM9vPgOqMdB9oJIX+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk05VDhlQ3ViMTh6MjgtQTZveDBIMmdraGY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi84ZDY2NmQtMDZhYi00NGQyLWE2YTUt
YWY2MzVkODc1NTc1LzEvbk05VDhlQ3ViMTh6MjgtQTZveDBIMmdraGY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi84ZDY2NmQtMDZhYi00NGQyLWE2YTUtYWY2MzVkODc1NTc1
LzEvbk05VDhlQ3ViMTh6MjgtQTZveDBIMmdraGY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwJG7ZYE/
9ixgj4ZPptJviEtNbuCO2EZmsYif/D1WvX573/lc1/J+n+temEAgNuCABKuZ4NsR
VEQwPeLC8p80XsPkoqzcYymk+rOfvUUp67IPyYQD07yjkUwxiZ+zfX55ebsxne87
UbYEp/vXnizp7yUcYtvZ5otjrOGWbCOki+UsJhV5Vo4wDTouL9E8/5UDmJaUheHI
O6E6flErD3IoqDf3A6uOUoKPQutj9CGpjVaQBQQ6RCzfnZfQJg4M5n4sw3t4bm45
P7UWVJu1cttcUTPb9Gv9V0ha5+7pNK6spcJnCFQDDeQCigZv8/A62kmpwhk8ZDDw
IrYS919ydHlcXw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 19:13:12 2025 by rpki-client