Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
File: nHEi8vf6UwvxqP_Plqkw9psw94Y.mft (raw, json)
Hash identifier: q5mVchMu7gNf92G2ISgyX+9kkwtkkO9PYAccl37h5aY=
Subject key identifier: 80:DB:34:59:FD:44:9D:74:1C:BD:A0:83:F7:F6:75:93:C1:F8:D1:3A
Authority key identifier: 9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86
Certificate issuer: /CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786
Certificate serial: 0199337FD889855D090A2F0AC52A9AC2D3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
Manifest number: 0382
Signing time: Wed 10 Sep 2025 12:00:40 +0000
Manifest this update: Wed 10 Sep 2025 12:00:40 +0000
Manifest next update: Thu 11 Sep 2025 12:00:40 +0000
Files and hashes: 1: Jf1OKx1njasgUepF7NPQjYFePjY.roa (hash: +FbY8K3ltw3fRzjGzqv270MBVQe3sjgedLIQtn2lOs0=)
2: nHEi8vf6UwvxqP_Plqkw9psw94Y.crl (hash: DlNOe14Ri/eGgXiqY41fTCDB9heI7ChvxoUJs28ydEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:7f:d8:89:85:5d:09:0a:2f:0a:c5:2a:9a:c2:d3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786
Validity
Not Before: Sep 10 12:00:40 2025 GMT
Not After : Sep 11 12:00:40 2025 GMT
Subject: CN=80db3459fd449d741cbda083f7f67593c1f8d13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:dd:59:5d:44:0f:66:21:65:cb:39:16:d6:
ea:18:f4:d9:6b:59:c4:d1:62:85:be:8b:62:c7:26:
b5:fa:f7:c5:f8:f8:51:51:04:b6:04:a6:13:32:9d:
f8:b5:45:fa:a9:fe:5f:5a:cd:a9:d0:65:6c:69:e0:
ac:ed:84:f6:80:6e:3d:f7:ac:c0:08:ea:2a:aa:a5:
0b:c6:97:33:b1:7d:9f:a7:17:c3:7a:fb:42:bc:9a:
78:4c:46:f2:e4:c1:cf:07:9d:ce:22:70:84:9d:ac:
54:93:dc:3c:e1:6a:df:66:5f:c4:31:20:74:35:46:
b8:48:86:41:18:9c:47:b6:4d:ab:e2:e8:4d:a5:bf:
f3:68:a6:40:5e:f1:c2:b6:3b:80:18:3e:5e:ba:ed:
dc:ee:0d:aa:b3:fd:62:be:ab:94:c6:b9:2e:96:cd:
4a:57:23:9f:02:ac:da:fd:1b:0d:af:8e:ce:86:c1:
ab:62:52:96:5a:10:98:96:cb:16:7b:6e:84:26:c4:
18:a8:a1:e9:dd:56:81:9f:5a:8b:55:6e:70:2a:32:
f5:d4:7a:59:a4:65:43:25:6a:f6:84:52:60:59:77:
dc:0f:04:8a:a2:cd:32:d9:7e:89:41:6b:fe:80:f0:
3d:25:19:4f:34:56:01:fa:d7:fd:cc:a8:44:68:40:
d0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DB:34:59:FD:44:9D:74:1C:BD:A0:83:F7:F6:75:93:C1:F8:D1:3A
X509v3 Authority Key Identifier:
keyid:9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ac:5e:a7:e3:e3:07:ea:48:a6:5e:a0:8e:01:a5:2c:05:1f:
47:d5:31:32:e5:54:1b:75:c0:ec:17:c5:e1:36:91:ba:30:a9:
74:8a:88:42:cc:e4:3f:b4:b0:14:c4:e8:f1:16:52:7f:b2:72:
e1:6b:98:3f:71:b3:dd:fb:9a:6e:f4:c7:ab:95:04:e7:14:4c:
80:cd:2d:37:6d:ec:e7:f4:44:5a:d6:16:bc:95:72:e0:43:40:
d0:c8:46:c4:50:ef:05:28:c7:3e:22:a4:f0:35:20:57:f7:51:
e1:3b:12:4f:30:c7:ca:ed:5c:bd:b5:31:6d:5b:d5:a7:f6:19:
30:b9:b7:9f:a3:00:69:db:2c:40:10:02:0e:e1:98:0a:e0:a1:
a2:5e:6b:ce:76:e1:19:2c:e1:80:b8:a7:9e:bd:c0:cb:62:4d:
8d:f7:37:2f:51:9c:52:1b:1b:f3:5b:0a:96:15:20:2d:a4:37:
13:97:a0:83:70:73:c2:3c:70:c2:fd:a1:85:ae:22:1b:b6:43:
e6:ef:90:e4:32:07:df:54:3f:f6:d9:f3:22:61:d3:65:2d:5b:
40:1c:aa:a4:eb:2c:fb:2d:37:7d:59:ff:61:a1:bb:ee:54:70:
74:8e:90:a9:0a:32:e3:9e:f2:27:3d:5d:5e:36:26:da:6f:f0:
f6:e2:01:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzf9iJhV0JCi8KxSqawtPIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNzEyMmYyZjdmYTUzMGJmMWE4ZmZjZjk2YTkzMGY2OWIz
MGY3ODYwHhcNMjUwOTEwMTIwMDQwWhcNMjUwOTExMTIwMDQwWjAzMTEwLwYDVQQD
Eyg4MGRiMzQ1OWZkNDQ5ZDc0MWNiZGEwODNmN2Y2NzU5M2MxZjhkMTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+HdWV1ED2YhZcs5FtbqGPTZa1nE
0WKFvotixya1+vfF+PhRUQS2BKYTMp34tUX6qf5fWs2p0GVsaeCs7YT2gG4996zA
COoqqqULxpczsX2fpxfDevtCvJp4TEby5MHPB53OInCEnaxUk9w84WrfZl/EMSB0
NUa4SIZBGJxHtk2r4uhNpb/zaKZAXvHCtjuAGD5euu3c7g2qs/1ivquUxrkuls1K
VyOfAqza/RsNr47OhsGrYlKWWhCYlssWe26EJsQYqKHp3VaBn1qLVW5wKjL11HpZ
pGVDJWr2hFJgWXfcDwSKos0y2X6JQWv+gPA9JRlPNFYB+tf9zKhEaEDQvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDbNFn9RJ10HL2gg/f2dZPB+NE6MB8GA1UdIwQY
MBaAFJxxIvL3+lML8aj/z5apMPabMPeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkhFaTh2ZjZVd3Z4cVBfUGxxa3c5cHN3OTRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS84M2UxZmUtM2Q0OC00Y2Q2LWE2MGIt
NmIyNzMzNmQyNjllLzEvbkhFaTh2ZjZVd3Z4cVBfUGxxa3c5cHN3OTRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS84M2UxZmUtM2Q0OC00Y2Q2LWE2MGItNmIyNzMzNmQyNjll
LzEvbkhFaTh2ZjZVd3Z4cVBfUGxxa3c5cHN3OTRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6xep+Pj
B+pIpl6gjgGlLAUfR9UxMuVUG3XA7BfF4TaRujCpdIqIQszkP7SwFMTo8RZSf7Jy
4WuYP3Gz3fuabvTHq5UE5xRMgM0tN23s5/REWtYWvJVy4ENA0MhGxFDvBSjHPiKk
8DUgV/dR4TsSTzDHyu1cvbUxbVvVp/YZMLm3n6MAadssQBACDuGYCuChol5rznbh
GSzhgLinnr3Ay2JNjfc3L1GcUhsb81sKlhUgLaQ3E5egg3Bzwjxwwv2hha4iG7ZD
5u+Q5DIH31Q/9tnzImHTZS1bQByqpOss+y03fVn/YaG77lRwdI6QqQoy457yJz1d
XjYm2m/w9uIB1Q==
-----END CERTIFICATE-----
Generated at Wed Sep 10 20:34:08 2025 by rpki-client