Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
File: nG_8tbXi3kVRrPm0WvJC25RYTlo.mft (raw, json)
Hash identifier: ZmbIvJvkT1EyAEYx8oQmYbmir2WjnZMzOA5/Qx1fzOw=
Subject key identifier: E9:19:22:4A:9E:38:F5:A4:48:45:DB:A3:FA:3E:84:A7:A0:B4:95:C6
Authority key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
Certificate issuer: /CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Certificate serial: 01974B56C0C9D194AD7371994B28F2E24DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
Manifest number: 34
Signing time: Sat 07 Jun 2025 17:01:06 +0000
Manifest this update: Sat 07 Jun 2025 17:01:06 +0000
Manifest next update: Sun 08 Jun 2025 17:01:06 +0000
Files and hashes: 1: JwRtsxKsHclcBB-A4e8ZZ-jD4D0.roa (hash: qJiNznI8TYONtH5aWUgF2Zivyd6LUikgOFyMXC2FJUY=)
2: c1fGsP0bCEH6cCis_UoQKhD3CSY.roa (hash: tV98uAPL9NGHun4KK73liMuNDYczrIrsIhzMw0qt0ig=)
3: nG_8tbXi3kVRrPm0WvJC25RYTlo.crl (hash: v3EY7ClgRjiePKSUi9NptqLEeZmG+bwujQ8QsKWi5/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:c0:c9:d1:94:ad:73:71:99:4b:28:f2:e2:4d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Validity
Not Before: Jun 7 17:01:06 2025 GMT
Not After : Jun 8 17:01:06 2025 GMT
Subject: CN=e919224a9e38f5a44845dba3fa3e84a7a0b495c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f9:ce:28:01:ac:47:3c:60:2f:7f:d0:07:1e:
0d:b9:d2:86:05:26:4d:3c:52:5e:75:67:1f:06:ed:
0e:44:96:eb:0b:fc:a3:5c:b4:7b:38:be:3f:bb:5d:
a5:2f:f5:cb:54:1f:bd:ef:1a:e2:34:79:65:9a:be:
ce:94:ef:c9:b6:be:bb:53:bb:44:46:e6:f5:2f:d7:
79:1d:a5:1f:e4:57:b6:36:7c:c4:dc:c0:ff:90:f2:
54:6d:69:64:c2:31:b2:ae:82:45:30:a9:8f:d2:d4:
0e:33:98:21:61:36:ee:9f:e5:2e:8d:71:09:3d:4e:
57:68:4c:92:48:fd:fe:12:1c:e3:34:7a:c2:a5:a2:
c1:fb:d7:0c:c1:cf:4e:af:88:6f:05:de:87:3a:4e:
66:70:4a:4d:07:a4:e4:04:20:53:72:6b:14:df:5a:
64:6c:d9:c4:62:7c:e4:b3:71:0c:02:a0:ca:b4:17:
9b:05:ec:40:2d:2f:b4:99:31:a6:47:8d:7c:32:d0:
d2:d6:7b:21:d1:0f:a7:3f:f5:e8:be:29:71:b9:55:
3b:56:bf:c4:2f:96:38:d3:f8:74:83:b5:59:bc:0d:
43:7e:59:c3:de:85:2b:5d:ad:88:70:5b:5c:65:7b:
e9:e4:9d:e3:a7:66:6b:6f:49:e3:65:fc:0a:d8:0b:
e7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:19:22:4A:9E:38:F5:A4:48:45:DB:A3:FA:3E:84:A7:A0:B4:95:C6
X509v3 Authority Key Identifier:
keyid:9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:16:09:64:7c:ea:be:12:9c:9c:65:99:1f:e2:e9:cd:8d:47:
6e:12:a2:06:28:98:c9:d2:1d:6d:f0:f0:0f:bf:1b:8e:56:13:
04:0d:88:97:a3:d5:ac:dc:78:5c:b7:0e:15:09:db:f7:7e:83:
08:47:76:07:88:c0:87:56:07:11:d3:b8:b8:ef:ce:5d:98:57:
91:be:35:c4:b0:e0:d8:3e:e8:5d:e0:4a:8a:4c:5e:c4:39:f5:
60:5e:b8:0f:54:2f:b2:dd:f3:68:78:5f:d7:58:44:c4:2a:e8:
ea:c6:6a:62:06:3d:d7:58:6a:c1:14:c3:f1:3b:6e:7d:13:f2:
e2:0b:1f:87:82:de:6c:e0:1a:28:db:0e:c9:3e:f1:90:46:50:
e4:41:81:38:74:f3:8f:aa:11:17:1b:62:32:6f:36:32:d2:ac:
68:24:13:9d:57:a8:ed:07:d9:06:8b:ba:08:9b:fe:7c:b5:b0:
22:6a:c0:8f:5c:b7:56:57:a9:2b:84:b2:06:87:ea:0b:31:4b:
20:40:3c:ba:3e:59:fe:29:91:ff:aa:59:f0:60:d2:ff:96:f6:
5a:43:e8:55:a8:14:ac:fd:4d:3d:6f:b5:11:3a:ab:9d:ad:99:
8a:7d:2b:16:f3:db:ea:3b:8c:8b:b5:c1:de:49:7a:b0:2f:6f:
e6:56:5e:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLVsDJ0ZStc3GZSyjy4k39MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNmZmY2I1YjVlMmRlNDU1MWFjZjliNDVhZjI0MmRiOTQ1
ODRlNWEwHhcNMjUwNjA3MTcwMTA2WhcNMjUwNjA4MTcwMTA2WjAzMTEwLwYDVQQD
EyhlOTE5MjI0YTllMzhmNWE0NDg0NWRiYTNmYTNlODRhN2EwYjQ5NWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfnOKAGsRzxgL3/QBx4NudKGBSZN
PFJedWcfBu0ORJbrC/yjXLR7OL4/u12lL/XLVB+97xriNHllmr7OlO/Jtr67U7tE
Rub1L9d5HaUf5Fe2NnzE3MD/kPJUbWlkwjGyroJFMKmP0tQOM5ghYTbun+UujXEJ
PU5XaEySSP3+EhzjNHrCpaLB+9cMwc9Or4hvBd6HOk5mcEpNB6TkBCBTcmsU31pk
bNnEYnzks3EMAqDKtBebBexALS+0mTGmR418MtDS1nsh0Q+nP/XovilxuVU7Vr/E
L5Y40/h0g7VZvA1DflnD3oUrXa2IcFtcZXvp5J3jp2Zrb0njZfwK2AvncwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkZIkqeOPWkSEXbo/o+hKegtJXGMB8GA1UdIwQY
MBaAFJxv/LW14t5FUaz5tFryQtuUWE5aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkdfOHRiWGkza1ZSclBtMFd2SkMyNVJZVGxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85ODQxZmYtYzg4Ni00ZGEwLTk1N2Et
ZjJmMDk1NWRhMWFkLzEvbkdfOHRiWGkza1ZSclBtMFd2SkMyNVJZVGxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85ODQxZmYtYzg4Ni00ZGEwLTk1N2EtZjJmMDk1NWRhMWFk
LzEvbkdfOHRiWGkza1ZSclBtMFd2SkMyNVJZVGxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBYJZHzq
vhKcnGWZH+LpzY1HbhKiBiiYydIdbfDwD78bjlYTBA2Il6PVrNx4XLcOFQnb936D
CEd2B4jAh1YHEdO4uO/OXZhXkb41xLDg2D7oXeBKikxexDn1YF64D1Qvst3zaHhf
11hExCro6sZqYgY911hqwRTD8TtufRPy4gsfh4LebOAaKNsOyT7xkEZQ5EGBOHTz
j6oRFxtiMm82MtKsaCQTnVeo7QfZBou6CJv+fLWwImrAj1y3VlepK4SyBofqCzFL
IEA8uj5Z/imR/6pZ8GDS/5b2WkPoVagUrP1NPW+1ETqrna2Zin0rFvPb6juMi7XB
3kl6sC9v5lZeCg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:50:43 2025 by rpki-client