Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
File: n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft (raw, json)
Hash identifier: BydxBuRWFfQ39ajFgfm8yDue1KXAKIEP/CFbN2RxoyI=
Subject key identifier: 00:DA:93:51:51:D8:4D:F2:34:17:E9:9F:61:EE:FF:87:81:8C:06:75
Authority key identifier: 9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
Certificate issuer: /CN=9f87521f15e0457288a9f196a8c8865c36922150
Certificate serial: 019922FB07FAE22661A6A407A42E8674AC6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 07:01:40 +0000
Manifest this update: Sun 07 Sep 2025 07:01:40 +0000
Manifest next update: Mon 08 Sep 2025 07:01:40 +0000
Files and hashes: 1: ItUfI_e5TZV8Ja35X57TtR81NmA.roa (hash: IR3NcH60QSQHq12hzjVbCSbj+J8hOMovAsbbfhH0qaA=)
2: n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl (hash: BH6dxNbQO6kjvBWaEnssapsm5gb3QVtN89AKd1Vs9Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fb:07:fa:e2:26:61:a6:a4:07:a4:2e:86:74:ac:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f87521f15e0457288a9f196a8c8865c36922150
Validity
Not Before: Sep 7 07:01:40 2025 GMT
Not After : Sep 8 07:01:40 2025 GMT
Subject: CN=00da935151d84df23417e99f61eeff87818c0675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:85:c4:1d:11:c0:e3:32:9b:b9:b3:a2:5d:fc:
5f:ce:bd:90:f3:cd:92:b1:b2:ca:1c:d2:3c:f1:72:
07:1c:be:9d:06:1c:79:dd:99:12:ca:b5:0b:a9:f8:
ac:61:cc:10:ee:ef:a3:45:aa:87:44:f9:dc:50:6a:
95:b9:f0:fb:07:52:a2:05:58:0d:06:66:66:5c:b5:
57:dc:27:c5:4a:6d:e2:f3:99:b1:0a:a3:ac:c2:e8:
8f:db:f1:f4:69:5a:c0:cc:75:5c:3d:09:4f:de:60:
a6:58:bf:ab:1a:fd:66:9a:35:e1:7c:ab:5d:f1:15:
b5:9c:ad:34:d0:46:e0:e1:a4:82:db:93:0b:49:85:
2f:16:d0:8c:ec:4d:15:cf:0b:eb:2d:8d:94:f1:26:
48:b4:1f:ff:f1:1f:cd:60:70:0c:98:2d:24:1c:4c:
93:fd:ad:65:97:7d:a7:48:79:9d:21:05:13:a4:7f:
82:c3:f2:6d:62:22:51:c8:9b:ae:7f:42:26:c8:d5:
a8:79:ef:12:13:9b:5f:8b:3a:de:a1:bc:e8:37:fa:
e5:27:47:9a:8c:50:d0:be:70:58:22:f5:c9:a7:2c:
e9:c3:88:20:d3:29:ba:8d:00:27:70:06:7a:4e:a6:
62:5e:7e:8f:73:75:e1:b3:88:9e:79:86:b1:87:77:
19:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DA:93:51:51:D8:4D:F2:34:17:E9:9F:61:EE:FF:87:81:8C:06:75
X509v3 Authority Key Identifier:
keyid:9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:28:e3:f2:db:ef:78:cb:a9:04:c4:e6:78:e1:42:13:0f:40:
d2:35:12:53:1f:ba:30:ed:48:f0:c4:ae:82:13:36:36:d0:0a:
88:7b:8f:58:c3:40:e9:6d:32:ac:2a:84:1d:c2:24:2d:ad:6a:
91:5a:6f:82:b0:f4:59:b1:04:10:47:7f:92:11:3d:3c:46:90:
14:e5:8f:bb:bb:62:8f:f9:49:c3:f5:68:6d:47:9a:91:bb:93:
76:a8:cb:7f:5d:14:4e:96:a9:46:c4:81:5c:f5:32:ec:29:8b:
22:b4:9e:2a:f7:a7:07:26:b4:a5:6b:77:58:ae:6f:97:6b:28:
d5:de:93:d6:c7:c5:d9:28:4f:51:a8:88:21:8b:b7:56:21:3e:
6a:bf:90:df:a5:6b:02:5f:a0:a1:93:96:bd:bc:d3:88:a5:4d:
82:f9:18:9e:12:a6:8d:43:2c:c8:a7:76:00:0e:3a:4b:74:4a:
6a:da:58:26:03:08:aa:da:a3:12:97:9b:e7:4c:4f:01:61:0b:
4d:57:74:6e:5f:74:ad:cd:da:27:0a:a5:fb:98:20:95:79:39:
51:6a:85:b0:ff:b7:6a:70:93:f6:32:f9:18:b4:47:7b:d7:89:
4e:d2:15:09:0f:1c:f3:75:e0:ff:eb:4e:fe:4f:70:e5:d2:ee:
ca:99:d5:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+wf64iZhpqQHpC6GdKxtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODc1MjFmMTVlMDQ1NzI4OGE5ZjE5NmE4Yzg4NjVjMzY5
MjIxNTAwHhcNMjUwOTA3MDcwMTQwWhcNMjUwOTA4MDcwMTQwWjAzMTEwLwYDVQQD
EygwMGRhOTM1MTUxZDg0ZGYyMzQxN2U5OWY2MWVlZmY4NzgxOGMwNjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IXEHRHA4zKbubOiXfxfzr2Q882S
sbLKHNI88XIHHL6dBhx53ZkSyrULqfisYcwQ7u+jRaqHRPncUGqVufD7B1KiBVgN
BmZmXLVX3CfFSm3i85mxCqOswuiP2/H0aVrAzHVcPQlP3mCmWL+rGv1mmjXhfKtd
8RW1nK000Ebg4aSC25MLSYUvFtCM7E0VzwvrLY2U8SZItB//8R/NYHAMmC0kHEyT
/a1ll32nSHmdIQUTpH+Cw/JtYiJRyJuuf0ImyNWoee8SE5tfizreobzoN/rlJ0ea
jFDQvnBYIvXJpyzpw4gg0ym6jQAncAZ6TqZiXn6Pc3Xhs4ieeYaxh3cZCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADak1FR2E3yNBfpn2Hu/4eBjAZ1MB8GA1UdIwQY
MBaAFJ+HUh8V4EVyiKnxlqjIhlw2kiFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRkU0h4WGdSWEtJcWZHV3FNaUdYRGFTSVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82ODA1ODktODQ3Mi00M2ViLWIwMzQt
MjE3NjlkZTRhMWE4LzEvbjRkU0h4WGdSWEtJcWZHV3FNaUdYRGFTSVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS82ODA1ODktODQ3Mi00M2ViLWIwMzQtMjE3NjlkZTRhMWE4
LzEvbjRkU0h4WGdSWEtJcWZHV3FNaUdYRGFTSVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmijj8tvv
eMupBMTmeOFCEw9A0jUSUx+6MO1I8MSughM2NtAKiHuPWMNA6W0yrCqEHcIkLa1q
kVpvgrD0WbEEEEd/khE9PEaQFOWPu7tij/lJw/VobUeakbuTdqjLf10UTpapRsSB
XPUy7CmLIrSeKvenBya0pWt3WK5vl2so1d6T1sfF2ShPUaiIIYu3ViE+ar+Q36Vr
Al+goZOWvbzTiKVNgvkYnhKmjUMsyKd2AA46S3RKatpYJgMIqtqjEpeb50xPAWEL
TVd0bl90rc3aJwql+5gglXk5UWqFsP+3anCT9jL5GLRHe9eJTtIVCQ8c83Xg/+tO
/k9w5dLuypnVeQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:02 2025 by rpki-client