Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
File: nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft (raw, json)
Hash identifier: o6Y7cONhd/67dWzLoGYoCCNnrsgxgotdrLPu9FDqrcI=
Subject key identifier: B1:76:5C:62:C1:7C:C8:45:8D:5A:B4:11:C7:CF:C5:B8:0A:16:8B:BC
Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
Certificate issuer: /CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Certificate serial: 019923A0584310D92903B17D74E09BCAD5C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
Manifest number: 0738
Signing time: Sun 07 Sep 2025 10:02:14 +0000
Manifest this update: Sun 07 Sep 2025 10:02:14 +0000
Manifest next update: Mon 08 Sep 2025 10:02:14 +0000
Files and hashes: 1: nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl (hash: ciSoTNv97f9c9e8HxEUmTtM20EYUvYkN829pPuutSIo=)
2: wxRtFa54V_vU8mgLHIqlXUzZMOc.roa (hash: PMULlzIWB9KqtKOtRO+7MsiWSaPQynQGmN9eXMu6mPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:58:43:10:d9:29:03:b1:7d:74:e0:9b:ca:d5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Validity
Not Before: Sep 7 10:02:14 2025 GMT
Not After : Sep 8 10:02:14 2025 GMT
Subject: CN=b1765c62c17cc8458d5ab411c7cfc5b80a168bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8a:94:07:6c:62:5e:c8:d1:21:e2:8e:ca:3d:
46:93:9f:14:a9:22:08:77:31:80:87:f7:cc:22:88:
fc:8e:4b:81:4a:3c:1e:03:5f:f7:ff:c5:28:1a:5b:
d6:5b:bd:24:a0:2a:46:5c:67:05:89:bc:a2:e6:c6:
ee:2c:ab:47:64:62:f9:89:9b:fa:90:3e:ab:0d:9f:
4a:e7:84:ab:76:e7:21:65:da:c2:4c:bd:6c:e0:cb:
27:8e:bb:7f:fe:65:b9:96:fc:c4:2a:46:d1:b7:ff:
a4:d6:0c:e6:3d:7c:79:e1:fc:3c:d4:42:b2:1a:b8:
fc:f7:c7:d4:46:63:ec:d4:a1:28:34:4e:0d:86:53:
4e:53:89:72:e0:80:65:0e:1a:11:46:96:30:8a:84:
1a:da:48:bb:98:06:0e:32:92:1e:72:43:ba:a3:1c:
9a:2b:90:a1:56:6a:39:6d:1c:0a:0b:0b:6c:11:85:
50:71:e1:13:3c:fc:52:4c:8b:9b:64:91:87:5c:d5:
c9:27:94:47:cc:d0:c5:a3:d1:b1:6b:4a:23:f8:c2:
a4:84:81:71:8b:34:ef:09:bf:09:e9:cb:a9:bf:c7:
57:db:5e:e5:ef:c1:20:20:be:c3:77:ed:f1:33:42:
a0:5e:d0:b3:63:25:95:91:5b:58:4f:b5:53:ec:6f:
3a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:76:5C:62:C1:7C:C8:45:8D:5A:B4:11:C7:CF:C5:B8:0A:16:8B:BC
X509v3 Authority Key Identifier:
keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:20:63:f5:4b:2c:18:cd:eb:22:f2:aa:79:ea:28:b1:a5:1f:
6e:92:b9:91:80:58:73:1c:8c:4d:04:b5:96:94:c9:f7:8a:14:
80:b9:fc:7c:db:77:32:77:c2:d6:f0:d5:ba:b7:dc:f0:78:83:
7e:9e:4d:3c:f0:b0:fe:95:1e:b0:83:b7:77:29:81:4e:4f:c9:
d5:dd:5d:50:35:6f:59:36:cd:3e:92:50:73:5c:54:08:66:8f:
cb:82:d3:98:ca:69:ea:35:a9:27:c2:89:0c:7f:e5:89:75:f6:
5a:fc:8a:2b:c4:cf:8a:85:83:db:e7:a9:1b:03:b2:a4:f1:c7:
2f:8b:2d:91:2c:7a:01:02:ae:22:f5:6f:07:c5:e3:91:54:08:
2b:19:f9:85:64:f2:34:13:33:89:92:7d:bd:6d:ca:06:e1:0f:
98:f0:0f:40:52:77:c3:24:c1:51:b4:9c:96:b8:61:30:98:b8:
ca:ea:4a:37:39:5c:b8:b4:76:e5:68:9b:13:1a:7d:46:3b:80:
1b:10:39:22:ea:f9:6b:7d:09:d2:00:17:03:2e:97:4d:4a:36:
ea:00:a8:7f:88:50:51:41:ff:75:ad:a6:56:e9:17:b5:7e:c5:
8b:32:28:60:9a:35:7a:71:a1:2e:e2:f5:e7:5d:5c:61:1a:40:
1b:0e:80:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoFhDENkpA7F9dOCbytXHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNjIwZjMxYjQ5OTdjNzM0NWJjNjZiNDZiNDNkNjg2YmYw
MDkzMWEwHhcNMjUwOTA3MTAwMjE0WhcNMjUwOTA4MTAwMjE0WjAzMTEwLwYDVQQD
EyhiMTc2NWM2MmMxN2NjODQ1OGQ1YWI0MTFjN2NmYzViODBhMTY4YmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIqUB2xiXsjRIeKOyj1Gk58UqSII
dzGAh/fMIoj8jkuBSjweA1/3/8UoGlvWW70koCpGXGcFibyi5sbuLKtHZGL5iZv6
kD6rDZ9K54SrduchZdrCTL1s4Msnjrt//mW5lvzEKkbRt/+k1gzmPXx54fw81EKy
Grj898fURmPs1KEoNE4NhlNOU4ly4IBlDhoRRpYwioQa2ki7mAYOMpIeckO6oxya
K5ChVmo5bRwKCwtsEYVQceETPPxSTIubZJGHXNXJJ5RHzNDFo9Gxa0oj+MKkhIFx
izTvCb8J6cupv8dX217l78EgIL7Dd+3xM0KgXtCzYyWVkVtYT7VT7G86OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLF2XGLBfMhFjVq0EcfPxbgKFou8MB8GA1UdIwQY
MBaAFJxiDzG0mXxzRbxmtGtD1oa/AJMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2Qt
NGI4NzkzZGI3NDYwLzEvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2QtNGI4NzkzZGI3NDYw
LzEvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjyBj9Uss
GM3rIvKqeeoosaUfbpK5kYBYcxyMTQS1lpTJ94oUgLn8fNt3MnfC1vDVurfc8HiD
fp5NPPCw/pUesIO3dymBTk/J1d1dUDVvWTbNPpJQc1xUCGaPy4LTmMpp6jWpJ8KJ
DH/liXX2WvyKK8TPioWD2+epGwOypPHHL4stkSx6AQKuIvVvB8XjkVQIKxn5hWTy
NBMziZJ9vW3KBuEPmPAPQFJ3wyTBUbSclrhhMJi4yupKNzlcuLR25WibExp9RjuA
GxA5Iur5a30J0gAXAy6XTUo26gCof4hQUUH/da2mVukXtX7FizIoYJo1enGhLuL1
511cYRpAGw6AsA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:30 2025 by rpki-client