Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
File: _nISS20yFGPp8Qvh-0IriSRi6J8.mft (raw, json)
Hash identifier: UM7Iy4VMQ6pH7SOs6EKsS5IdK/12gKlWqRbdQEJqIoQ=
Subject key identifier: 91:44:AD:84:B9:29:C9:6B:7F:85:DF:68:A6:61:68:FE:D9:C6:06:F6
Authority key identifier: FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F
Certificate issuer: /CN=fe72124b6d321463e9f10be1fb422b892462e89f
Certificate serial: 01974D448A1B128DDA2C31E6588D3D36F483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
Manifest number: 0391
Signing time: Sun 08 Jun 2025 02:00:26 +0000
Manifest this update: Sun 08 Jun 2025 02:00:26 +0000
Manifest next update: Mon 09 Jun 2025 02:00:26 +0000
Files and hashes: 1: UsHLucR3rIttQE-i6TwlR7HDoxs.roa (hash: DUCr1+Yi08xU6F2DSZeSJmVDu/Cs1KLSUmKk04+9Ejs=)
2: _nISS20yFGPp8Qvh-0IriSRi6J8.crl (hash: y6ekS8mqkghpVtO2xrwyfE9Z5fhgOIwJK+1eLRgeNK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:8a:1b:12:8d:da:2c:31:e6:58:8d:3d:36:f4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe72124b6d321463e9f10be1fb422b892462e89f
Validity
Not Before: Jun 8 02:00:26 2025 GMT
Not After : Jun 9 02:00:26 2025 GMT
Subject: CN=9144ad84b929c96b7f85df68a66168fed9c606f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:f8:ba:b0:20:95:f0:fb:1e:c9:4d:9a:17:
02:cb:72:7f:8b:95:d2:d1:0c:76:34:5a:32:92:53:
14:f9:2b:80:17:c9:a2:86:d8:52:1a:d8:c2:e0:e3:
4b:35:5f:02:87:c3:7f:57:66:67:c9:c5:ff:62:35:
44:db:7c:70:33:ea:71:3a:ca:c6:c9:47:36:7d:f2:
02:c3:06:d8:05:53:d0:d7:03:fe:a4:da:a8:3b:c1:
b5:27:13:13:62:e9:e5:27:e6:de:cb:ef:8a:29:37:
40:1d:1a:a8:19:aa:0a:1c:f4:8b:bd:df:2c:86:35:
09:f5:94:2c:d5:5f:33:ea:c6:f9:e1:9f:53:45:2b:
c5:d2:da:a9:8d:db:63:30:a0:26:bb:2f:88:ea:44:
0c:3b:c5:a2:ee:57:50:f0:04:7e:1d:de:a8:bc:a3:
4d:0e:a1:cb:c7:ef:2b:b2:88:53:68:a3:bb:e6:94:
a1:2c:b4:da:16:dc:1f:89:c5:9b:c9:ac:32:11:e8:
c2:a6:5c:51:c7:27:15:ed:41:b6:c0:8e:6a:20:00:
e3:c8:a4:01:76:bf:b8:07:b0:6a:44:61:86:2d:05:
b7:b0:44:68:2c:fc:d8:9f:89:1d:a1:d9:e7:5d:aa:
c2:5b:67:c0:d0:10:ca:10:4b:6b:61:85:eb:93:1e:
ab:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:44:AD:84:B9:29:C9:6B:7F:85:DF:68:A6:61:68:FE:D9:C6:06:F6
X509v3 Authority Key Identifier:
keyid:FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c0:31:b3:a4:8c:b5:87:1c:11:48:5d:1f:bb:95:f4:de:1f:
7f:1b:62:63:37:55:b2:b1:d1:bb:e0:3b:71:cd:be:cd:55:98:
f3:ee:fc:0d:60:42:a3:e0:1f:7e:0c:4d:77:05:5c:1b:18:ec:
82:49:5d:2a:0c:12:8f:5d:34:67:ec:ee:48:47:00:0e:1e:e0:
e3:ac:82:51:d1:68:e1:aa:7b:f2:05:79:63:cf:e8:53:a8:57:
67:41:43:df:42:08:61:4e:29:8a:d7:aa:01:66:94:22:73:8b:
61:ee:a3:bf:6b:7a:ff:9d:53:17:1d:2c:b7:e3:33:49:ae:38:
32:44:f1:19:f7:12:66:15:3b:ea:ca:79:e7:df:eb:47:14:69:
e5:03:3f:c7:52:b6:79:49:e5:9f:40:61:d8:95:dd:23:ef:72:
f9:1f:f8:00:c7:03:dc:2d:bd:33:6e:85:0e:d8:99:b7:85:52:
66:ac:75:49:bb:83:da:3e:04:19:a3:e5:49:4c:d6:74:a0:4f:
72:9b:48:a1:46:ab:ec:24:2f:77:4d:7a:14:6c:0c:8f:b0:ae:
90:f2:62:e0:29:fb:65:7b:7c:43:ad:cc:d1:d1:cb:74:d4:ad:
b4:87:0b:af:c5:3f:2b:5d:35:46:12:5a:0e:a0:75:78:ac:03:
2e:cc:24:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRIobEo3aLDHmWI09NvSDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzIxMjRiNmQzMjE0NjNlOWYxMGJlMWZiNDIyYjg5MjQ2
MmU4OWYwHhcNMjUwNjA4MDIwMDI2WhcNMjUwNjA5MDIwMDI2WjAzMTEwLwYDVQQD
Eyg5MTQ0YWQ4NGI5MjljOTZiN2Y4NWRmNjhhNjYxNjhmZWQ5YzYwNmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8r4urAglfD7HslNmhcCy3J/i5XS
0Qx2NFoyklMU+SuAF8mihthSGtjC4ONLNV8Ch8N/V2ZnycX/YjVE23xwM+pxOsrG
yUc2ffICwwbYBVPQ1wP+pNqoO8G1JxMTYunlJ+bey++KKTdAHRqoGaoKHPSLvd8s
hjUJ9ZQs1V8z6sb54Z9TRSvF0tqpjdtjMKAmuy+I6kQMO8Wi7ldQ8AR+Hd6ovKNN
DqHLx+8rsohTaKO75pShLLTaFtwficWbyawyEejCplxRxycV7UG2wI5qIADjyKQB
dr+4B7BqRGGGLQW3sERoLPzYn4kdodnnXarCW2fA0BDKEEtrYYXrkx6rEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFErYS5Kclrf4XfaKZhaP7Zxgb2MB8GA1UdIwQY
MBaAFP5yEkttMhRj6fEL4ftCK4kkYuifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kYzk5MDQtMGE1Yy00MTZiLTgwZWYt
N2JiODIwNDBlNWVlLzEvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kYzk5MDQtMGE1Yy00MTZiLTgwZWYtN2JiODIwNDBlNWVl
LzEvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApsAxs6SM
tYccEUhdH7uV9N4ffxtiYzdVsrHRu+A7cc2+zVWY8+78DWBCo+AffgxNdwVcGxjs
gkldKgwSj100Z+zuSEcADh7g46yCUdFo4ap78gV5Y8/oU6hXZ0FD30IIYU4piteq
AWaUInOLYe6jv2t6/51TFx0st+MzSa44MkTxGfcSZhU76sp559/rRxRp5QM/x1K2
eUnln0Bh2JXdI+9y+R/4AMcD3C29M26FDtiZt4VSZqx1SbuD2j4EGaPlSUzWdKBP
cptIoUar7CQvd016FGwMj7CukPJi4Cn7ZXt8Q63M0dHLdNSttIcLr8U/K101RhJa
DqB1eKwDLswkuw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:40:59 2025 by rpki-client