Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
File: n9aPGyQUI9qXZHuZIkUwOG0laYw.mft (raw, json)
Hash identifier: tcBUFh146TnrNBuObCSAAShpuc+kUA6UTVvwc7V8Y3s=
Subject key identifier: EF:E1:3E:78:2D:C8:09:B0:6D:AC:68:C0:AE:70:38:15:D5:D8:ED:16
Authority key identifier: 9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
Certificate issuer: /CN=9fd68f1b241423da97647b99224530386d25698c
Certificate serial: 019932363B43D034AF0C3D9C2E941DBA9579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 06:00:38 +0000
Manifest this update: Wed 10 Sep 2025 06:00:38 +0000
Manifest next update: Thu 11 Sep 2025 06:00:38 +0000
Files and hashes: 1: 6zp8k7ws-z1aCcsmWGLYmfVsv4E.roa (hash: bUIQEUVAIaujbjPg7okGrEKCeQdfL4efouwX9EGneXc=)
2: n9aPGyQUI9qXZHuZIkUwOG0laYw.crl (hash: vFeu1UxRRfG0m8rRdqAnx861ynHdHT/Be4+ZLru8Pq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:3b:43:d0:34:af:0c:3d:9c:2e:94:1d:ba:95:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd68f1b241423da97647b99224530386d25698c
Validity
Not Before: Sep 10 06:00:38 2025 GMT
Not After : Sep 11 06:00:38 2025 GMT
Subject: CN=efe13e782dc809b06dac68c0ae703815d5d8ed16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9e:82:7d:c8:d9:83:cc:6b:8d:3f:40:27:19:
dd:3e:98:fb:b0:91:20:95:17:86:f0:ee:8a:08:f5:
ac:be:48:db:54:33:4b:46:07:ea:5a:f4:fc:a9:09:
ef:7c:77:1b:df:96:62:62:10:14:58:22:6d:d5:a4:
5e:3b:4e:fa:df:cb:03:42:ee:96:1f:11:9e:b6:6b:
be:a5:a6:72:f7:ab:64:de:c7:14:fc:38:a4:bb:ac:
42:ab:75:a0:58:4e:0e:a2:a5:30:d2:61:43:cb:8b:
85:1c:66:65:3c:bb:2f:1e:c1:e3:43:38:b0:6e:12:
e3:db:ae:44:dc:80:45:51:fb:86:02:c3:7c:8c:c5:
37:09:3f:3d:07:f1:b8:26:70:77:58:3f:dc:79:a0:
bf:a0:d2:6e:7a:d9:eb:39:09:8d:c5:48:bc:01:7e:
92:5b:02:c4:d3:0d:98:73:9d:87:68:b1:d9:5f:8c:
47:45:47:ce:05:42:9f:08:fb:cc:3c:fc:8b:03:50:
e0:c2:eb:63:cf:4d:63:9c:f7:f4:67:03:f0:8f:ea:
a4:d0:25:35:df:c5:4f:c2:19:78:d4:57:73:e4:88:
49:d4:ef:98:02:e0:37:ce:e5:f8:5c:96:7b:4a:e4:
7a:2f:e0:d3:3d:96:f8:7a:cc:ba:21:e0:82:66:fb:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E1:3E:78:2D:C8:09:B0:6D:AC:68:C0:AE:70:38:15:D5:D8:ED:16
X509v3 Authority Key Identifier:
keyid:9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:32:e2:98:12:db:e2:67:f1:02:86:a0:4b:d7:b0:56:a5:f4:
83:c2:d5:3d:07:21:39:c2:53:20:b7:81:c9:a7:a8:d8:0e:a0:
14:b4:df:b3:a6:6a:e5:26:be:73:25:f7:23:10:6f:ee:a9:8d:
65:8d:2c:c4:96:36:53:39:34:67:91:34:9c:b3:13:a2:64:60:
3c:24:3b:07:13:17:04:3d:e4:80:43:93:15:a0:4e:d5:86:a7:
fa:95:01:a7:46:2a:08:1a:32:38:e3:04:f1:a4:87:c6:2e:24:
f1:54:2b:de:f4:0f:ac:84:f7:84:f9:89:52:a4:11:ee:e8:92:
86:58:8b:56:87:69:7a:b9:70:9b:db:d1:12:be:1c:ad:7e:d4:
86:a7:ea:dd:2f:70:3c:b7:4d:1a:07:f5:73:be:fb:69:ed:da:
34:70:39:96:a6:83:12:cd:f0:c0:12:cd:92:93:97:62:2f:2a:
cb:41:ff:cf:83:57:cb:2a:1b:9a:fa:f4:53:5d:66:21:4f:08:
cd:27:37:8b:12:d1:e8:11:cd:56:7b:39:61:a5:69:b4:8f:78:
46:f3:d1:ae:31:dc:a6:11:52:e4:03:e9:1d:65:47:eb:f6:ec:
d8:38:83:7d:32:38:98:c0:e2:f6:04:1b:c2:e9:db:4a:49:89:
1c:ad:d5:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkyNjtD0DSvDD2cLpQdupV5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZDY4ZjFiMjQxNDIzZGE5NzY0N2I5OTIyNDUzMDM4NmQy
NTY5OGMwHhcNMjUwOTEwMDYwMDM4WhcNMjUwOTExMDYwMDM4WjAzMTEwLwYDVQQD
EyhlZmUxM2U3ODJkYzgwOWIwNmRhYzY4YzBhZTcwMzgxNWQ1ZDhlZDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ6CfcjZg8xrjT9AJxndPpj7sJEg
lReG8O6KCPWsvkjbVDNLRgfqWvT8qQnvfHcb35ZiYhAUWCJt1aReO07638sDQu6W
HxGetmu+paZy96tk3scU/Diku6xCq3WgWE4OoqUw0mFDy4uFHGZlPLsvHsHjQziw
bhLj265E3IBFUfuGAsN8jMU3CT89B/G4JnB3WD/ceaC/oNJuetnrOQmNxUi8AX6S
WwLE0w2Yc52HaLHZX4xHRUfOBUKfCPvMPPyLA1Dgwutjz01jnPf0ZwPwj+qk0CU1
38VPwhl41Fdz5IhJ1O+YAuA3zuX4XJZ7SuR6L+DTPZb4esy6IeCCZvvuzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/hPngtyAmwbaxowK5wOBXV2O0WMB8GA1UdIwQY
MBaAFJ/WjxskFCPal2R7mSJFMDhtJWmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjlhUEd5UVVJOXFYWkh1WklrVXdPRzBsYVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zNWRlZTUtZDhkYi00OGUzLWI3YmIt
MDgxMGQxNmJjYzg3LzEvbjlhUEd5UVVJOXFYWkh1WklrVXdPRzBsYVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8zNWRlZTUtZDhkYi00OGUzLWI3YmItMDgxMGQxNmJjYzg3
LzEvbjlhUEd5UVVJOXFYWkh1WklrVXdPRzBsYVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqzLimBLb
4mfxAoagS9ewVqX0g8LVPQchOcJTILeByaeo2A6gFLTfs6Zq5Sa+cyX3IxBv7qmN
ZY0sxJY2Uzk0Z5E0nLMTomRgPCQ7BxMXBD3kgEOTFaBO1Yan+pUBp0YqCBoyOOME
8aSHxi4k8VQr3vQPrIT3hPmJUqQR7uiShliLVodperlwm9vREr4crX7Uhqfq3S9w
PLdNGgf1c777ae3aNHA5lqaDEs3wwBLNkpOXYi8qy0H/z4NXyyobmvr0U11mIU8I
zSc3ixLR6BHNVns5YaVptI94RvPRrjHcphFS5APpHWVH6/bs2DiDfTI4mMDi9gQb
wunbSkmJHK3VZQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 13:39:24 2025 by rpki-client