Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier: CEK2yVwyX4rjyeg+kh8ZHgx+w7B+0oaIQFkazQ1ugyo=
Subject key identifier: 01:D8:25:07:B7:DE:2E:38:C5:DD:3F:9E:B6:AC:B9:6B:A1:BF:6E:D0
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 01993424B2AF3D5C93A373E339CA01C5B590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number: 0971
Signing time: Wed 10 Sep 2025 15:00:44 +0000
Manifest this update: Wed 10 Sep 2025 15:00:44 +0000
Manifest next update: Thu 11 Sep 2025 15:00:44 +0000
Files and hashes: 1: IdEYIsWCps3Gl-CPOJNmXVY_KDA.roa (hash: V5/YEnbALkGDiezb6/4H3zOCBx4UZLrATG4CYdBNlRA=)
2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: mfnAoGJqoTHfqetfidUQXz31GcbPljK0Vp71JoYJOT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:b2:af:3d:5c:93:a3:73:e3:39:ca:01:c5:b5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: Sep 10 15:00:44 2025 GMT
Not After : Sep 11 15:00:44 2025 GMT
Subject: CN=01d82507b7de2e38c5dd3f9eb6acb96ba1bf6ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:8e:a8:1a:79:95:50:58:a4:1d:b8:b1:ad:
b2:c5:73:ab:41:22:5d:2b:06:ba:71:84:25:09:97:
8d:b2:80:96:1f:5d:36:6f:16:56:87:b5:f6:1d:cf:
58:44:d0:ae:99:04:ea:27:71:f9:ec:76:c9:e5:a3:
e7:87:64:5e:7f:68:bd:f7:4f:e2:32:0b:2a:07:15:
ea:23:d6:34:31:c0:1b:7d:55:1b:62:1d:95:7f:6a:
28:42:a0:59:39:f8:1c:0e:e0:81:63:97:bc:14:b1:
ea:d9:2c:0b:1a:29:49:1d:f6:9d:a7:30:ed:17:cb:
55:81:0d:e5:e8:a4:c6:3e:74:41:3e:44:31:e8:ce:
32:36:26:63:62:08:16:88:c0:e1:c8:bf:16:86:c1:
7d:79:a3:61:16:a8:78:89:e2:94:c5:8c:bd:02:01:
d8:ec:77:6e:b6:84:19:38:c0:58:cc:22:2b:8a:b3:
c8:41:b6:4f:17:65:75:03:93:b6:b5:31:56:ef:6f:
fe:2e:f0:1b:43:c7:bc:df:0a:a3:c4:2c:e7:fc:10:
5f:7a:af:19:03:2b:eb:f0:f4:86:13:4a:55:a1:46:
f8:50:ff:8b:99:db:c5:30:18:f8:1d:ba:5c:87:21:
cf:97:7e:b1:5b:a7:1a:2e:66:71:c4:52:e4:8f:a1:
ab:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D8:25:07:B7:DE:2E:38:C5:DD:3F:9E:B6:AC:B9:6B:A1:BF:6E:D0
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:56:b0:fc:80:ae:6f:f5:27:b5:da:d3:12:4a:c0:1c:cc:07:
a7:48:6b:dc:d9:20:11:84:b7:93:8f:46:dd:00:e2:76:44:31:
52:0a:89:6f:ee:3b:78:c9:60:1a:1e:ac:f5:76:f0:1d:3d:89:
41:7f:b2:55:bb:08:c4:23:9a:79:d7:31:4d:6d:d8:97:63:cf:
eb:7a:d2:c6:4e:b8:e8:4b:53:74:12:9d:8e:f1:d2:f6:a8:07:
67:8a:b3:3c:a3:46:74:7a:54:5a:04:35:d5:a0:18:32:71:ef:
f7:19:88:f3:99:0e:b4:66:b6:f3:c6:04:ae:b4:4b:5f:4a:be:
28:f2:fa:34:63:05:0a:63:48:a3:30:95:c9:9c:67:10:d4:d6:
51:89:1d:cc:ae:35:f1:fe:9a:22:9c:be:b9:a1:67:45:2a:83:
cf:6f:87:0e:3a:31:2c:f3:3d:35:6d:ed:96:15:d8:8f:38:8c:
86:19:79:2e:e4:85:8c:e9:d4:cf:60:8f:18:42:bc:cd:9f:b6:
69:ef:35:25:c8:cf:d8:81:5a:a2:17:42:94:62:2f:a6:4d:21:
ed:2e:6a:9e:db:11:51:e2:80:7f:46:d3:4f:15:78:ca:3c:bb:
3d:0c:b2:df:09:37:2d:35:c4:1f:17:aa:32:38:0e:7c:f3:63:
cf:e1:18:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk0JLKvPVyTo3PjOcoBxbWQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODIyNDM3ZjQ5ZWQ1Mzg4NjY4OTAyMmFmZGRkYTU5Zjc5
ZjhhNzEwHhcNMjUwOTEwMTUwMDQ0WhcNMjUwOTExMTUwMDQ0WjAzMTEwLwYDVQQD
EygwMWQ4MjUwN2I3ZGUyZTM4YzVkZDNmOWViNmFjYjk2YmExYmY2ZWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJyOqBp5lVBYpB24sa2yxXOrQSJd
Kwa6cYQlCZeNsoCWH102bxZWh7X2Hc9YRNCumQTqJ3H57HbJ5aPnh2Ref2i990/i
MgsqBxXqI9Y0McAbfVUbYh2Vf2ooQqBZOfgcDuCBY5e8FLHq2SwLGilJHfadpzDt
F8tVgQ3l6KTGPnRBPkQx6M4yNiZjYggWiMDhyL8WhsF9eaNhFqh4ieKUxYy9AgHY
7HdutoQZOMBYzCIrirPIQbZPF2V1A5O2tTFW72/+LvAbQ8e83wqjxCzn/BBfeq8Z
Ayvr8PSGE0pVoUb4UP+LmdvFMBj4HbpchyHPl36xW6caLmZxxFLkj6GrgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHYJQe33i44xd0/nrasuWuhv27QMB8GA1UdIwQY
MBaAFJ+CJDf0ntU4hmiQIq/d2ln3n4pxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWIt
MTRlYzQxZDRjMGE2LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWItMTRlYzQxZDRjMGE2
LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAalaw/ICu
b/UntdrTEkrAHMwHp0hr3NkgEYS3k49G3QDidkQxUgqJb+47eMlgGh6s9XbwHT2J
QX+yVbsIxCOaedcxTW3Yl2PP63rSxk646EtTdBKdjvHS9qgHZ4qzPKNGdHpUWgQ1
1aAYMnHv9xmI85kOtGa288YErrRLX0q+KPL6NGMFCmNIozCVyZxnENTWUYkdzK41
8f6aIpy+uaFnRSqDz2+HDjoxLPM9NW3tlhXYjziMhhl5LuSFjOnUz2CPGEK8zZ+2
ae81JcjP2IFaohdClGIvpk0h7S5qntsRUeKAf0bTTxV4yjy7PQyy3wk3LTXEHxeq
MjgOfPNjz+EYEg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 23:33:17 2025 by rpki-client