Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
File: nAqMF3kR9kwwVXNogVueZ9j8PA8.mft (raw, json)
Hash identifier: krf1+ud9mE/XXdTTzG+HOQngy+L1qSq5ouH5V56gW3c=
Subject key identifier: EF:E2:A5:4E:38:C0:B9:A0:48:90:41:AA:AA:0A:1A:5A:CE:BC:D1:39
Authority key identifier: 9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
Certificate issuer: /CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Certificate serial: 019922C3A25B85496F0AEC29417712F0AA5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
Manifest number: 0C83
Signing time: Sun 07 Sep 2025 06:01:10 +0000
Manifest this update: Sun 07 Sep 2025 06:01:10 +0000
Manifest next update: Mon 08 Sep 2025 06:01:10 +0000
Files and hashes: 1: d6blSjaqO2EcEPuhj7EsQzjBTt0.roa (hash: 4jd/vZVphNUOF+ezj/NTHKtL7kzqYpJOJYm6eI+27Hw=)
2: nAqMF3kR9kwwVXNogVueZ9j8PA8.crl (hash: iRGftecELTQI36FO9uhUxeRsFSnaeYJm0rCi+8BV47Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:a2:5b:85:49:6f:0a:ec:29:41:77:12:f0:aa:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Validity
Not Before: Sep 7 06:01:10 2025 GMT
Not After : Sep 8 06:01:10 2025 GMT
Subject: CN=efe2a54e38c0b9a0489041aaaa0a1a5acebcd139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:45:96:a3:f7:fc:25:d2:95:cb:a9:7a:25:dd:
54:67:2a:8e:56:6d:2b:c8:7c:93:65:71:12:af:67:
db:10:35:55:09:97:66:7a:d9:57:6f:d3:36:3c:d4:
88:9a:5e:f6:a1:97:80:b9:2d:b7:fd:50:c2:55:ff:
00:56:ae:cb:9a:b6:4c:59:fe:75:64:d2:12:65:66:
2a:ed:9a:c6:7d:dd:b4:cf:c3:1c:f7:70:db:44:19:
78:a4:1d:5b:00:70:c3:94:06:a9:a7:9d:c2:0d:31:
fa:6c:43:5f:e8:49:12:e5:4f:e3:5a:d1:a3:d4:b7:
6b:54:37:27:e4:89:61:67:69:0c:af:9d:89:68:6f:
57:a7:40:d9:26:23:f4:73:c3:69:d4:fb:5c:2a:9d:
29:42:c6:f2:2b:54:4b:d4:81:1f:32:74:00:b4:a5:
9d:c5:60:89:ea:4a:e1:a8:95:82:41:f8:f0:ed:58:
8c:89:61:39:87:75:d7:c0:7f:9a:d5:f0:bb:7c:ef:
f1:40:ba:3f:c7:0d:bc:ab:d9:84:25:3f:fe:3e:8e:
e0:ee:d2:b8:65:b3:fb:68:91:02:73:41:7a:c5:7d:
d0:58:9b:3e:3e:1b:6c:47:80:df:46:9d:c9:38:4d:
10:6e:65:ee:d5:f8:7c:84:fe:39:40:35:4b:52:c3:
21:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E2:A5:4E:38:C0:B9:A0:48:90:41:AA:AA:0A:1A:5A:CE:BC:D1:39
X509v3 Authority Key Identifier:
keyid:9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:66:3b:21:68:ee:a1:97:0e:30:f2:c0:3e:0e:b5:1c:8e:7d:
38:f3:a9:73:ce:1f:e1:ab:98:b2:6b:f2:ea:c2:50:d8:7a:5b:
b4:5f:97:9a:8d:7d:87:cd:97:31:72:fd:12:bd:32:a3:0d:fb:
93:fc:bf:a0:5d:6f:3b:8e:d1:92:d9:38:5d:be:9e:5b:3f:50:
70:27:92:3d:8c:1c:f9:10:a1:2a:19:53:10:fa:01:a4:70:08:
0d:49:8b:57:c1:23:24:ec:ec:27:a6:ba:ce:b4:a5:e6:96:9f:
a3:29:f7:e8:12:e3:30:ce:2d:2a:4f:d7:3a:ea:be:6a:81:0c:
4d:a3:65:2a:f4:90:66:34:2f:09:e7:c6:3b:f2:25:8d:fa:10:
76:e1:bd:01:93:3e:52:bc:b2:6d:34:8d:23:27:da:88:20:51:
54:57:4c:e2:96:4b:3e:0b:bd:f9:53:f2:5e:93:2e:c4:d5:99:
03:c4:09:73:56:2d:92:db:0a:af:fe:94:5a:0c:71:73:65:ae:
c0:75:b4:5f:50:d3:85:e7:a1:3e:59:aa:a8:44:f7:d2:44:46:
e4:70:87:9d:24:2f:52:ef:5e:d0:72:20:cd:28:29:cc:fd:00:
8c:93:e9:1c:f2:a5:5a:34:f8:77:70:6e:3f:fd:5a:17:2c:d6:
2c:f2:32:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw6JbhUlvCuwpQXcS8KpeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMGE4YzE3NzkxMWY2NGMzMDU1NzM2ODgxNWI5ZTY3ZDhm
YzNjMGYwHhcNMjUwOTA3MDYwMTEwWhcNMjUwOTA4MDYwMTEwWjAzMTEwLwYDVQQD
EyhlZmUyYTU0ZTM4YzBiOWEwNDg5MDQxYWFhYTBhMWE1YWNlYmNkMTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EWWo/f8JdKVy6l6Jd1UZyqOVm0r
yHyTZXESr2fbEDVVCZdmetlXb9M2PNSIml72oZeAuS23/VDCVf8AVq7LmrZMWf51
ZNISZWYq7ZrGfd20z8Mc93DbRBl4pB1bAHDDlAapp53CDTH6bENf6EkS5U/jWtGj
1LdrVDcn5IlhZ2kMr52JaG9Xp0DZJiP0c8Np1PtcKp0pQsbyK1RL1IEfMnQAtKWd
xWCJ6krhqJWCQfjw7ViMiWE5h3XXwH+a1fC7fO/xQLo/xw28q9mEJT/+Po7g7tK4
ZbP7aJECc0F6xX3QWJs+PhtsR4DfRp3JOE0QbmXu1fh8hP45QDVLUsMh8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/ipU44wLmgSJBBqqoKGlrOvNE5MB8GA1UdIwQY
MBaAFJwKjBd5EfZMMFVzaIFbnmfY/DwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkFxTUYza1I5a3d3VlhOb2dWdWVaOWo4UEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80YzczNzktMzY0OS00MWRlLTg5Zjct
ZDU2Mzc0ZTExNTdhLzEvbkFxTUYza1I5a3d3VlhOb2dWdWVaOWo4UEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy80YzczNzktMzY0OS00MWRlLTg5ZjctZDU2Mzc0ZTExNTdh
LzEvbkFxTUYza1I5a3d3VlhOb2dWdWVaOWo4UEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWY7IWju
oZcOMPLAPg61HI59OPOpc84f4auYsmvy6sJQ2HpbtF+Xmo19h82XMXL9Er0yow37
k/y/oF1vO47Rktk4Xb6eWz9QcCeSPYwc+RChKhlTEPoBpHAIDUmLV8EjJOzsJ6a6
zrSl5pafoyn36BLjMM4tKk/XOuq+aoEMTaNlKvSQZjQvCefGO/IljfoQduG9AZM+
UryybTSNIyfaiCBRVFdM4pZLPgu9+VPyXpMuxNWZA8QJc1YtktsKr/6UWgxxc2Wu
wHW0X1DTheehPlmqqET30kRG5HCHnSQvUu9e0HIgzSgpzP0AjJPpHPKlWjT4d3Bu
P/1aFyzWLPIyTg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:10 2025 by rpki-client