Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
File: nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft (raw, json)
Hash identifier: 7tJgrd6qlSn7zq057As3OH7QESaNQlaMRfIgC93sO5g=
Subject key identifier: 82:0E:51:51:36:68:32:CA:76:47:28:2C:AF:D4:B2:67:03:57:85:83
Authority key identifier: 9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
Certificate issuer: /CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Certificate serial: 019916BF95B795D3CC255BE035065B93EF6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
Manifest number: 166C
Signing time: Thu 04 Sep 2025 22:01:18 +0000
Manifest this update: Thu 04 Sep 2025 22:01:18 +0000
Manifest next update: Fri 05 Sep 2025 22:01:18 +0000
Files and hashes: 1: MPwSmw7TKMOSUXcFrOOlFixZc2g.roa (hash: QP+dxlkmxIyI9F9hcSk4trG33k+WqitL0NMMPJjf69Q=)
2: O_fqEW14QhPRGqjQoVa9vmGmVmM.roa (hash: V1ztdeLVNvewuDYhom6BXL6CS05sk8OmHCsK+DDqUrE=)
3: nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl (hash: NW7YnsvCDsUbe0BxF2LA/OHyu5Ax787rZqspHj2fGiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:bf:95:b7:95:d3:cc:25:5b:e0:35:06:5b:93:ef:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Validity
Not Before: Sep 4 22:01:18 2025 GMT
Not After : Sep 5 22:01:18 2025 GMT
Subject: CN=820e5151366832ca7647282cafd4b26703578583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:39:b1:5b:cb:de:42:76:30:9e:ff:b4:bb:
d8:ae:4c:4e:da:30:52:6b:15:8b:fa:f5:50:20:ac:
9c:d0:88:d0:ef:61:4a:39:d4:09:43:f1:a4:60:1e:
a3:aa:6f:d8:30:bd:22:e3:57:6d:e2:3a:b4:18:aa:
11:a5:fd:eb:18:b6:02:1d:6f:4e:58:7b:b7:30:8d:
90:a5:c3:39:6d:ad:ea:7e:d4:a7:84:68:c3:21:c3:
51:dd:80:36:04:4d:57:25:5f:36:c3:18:fb:32:f4:
5e:54:2d:0e:ed:6b:b4:36:5c:d1:76:b4:2c:96:69:
49:5d:ac:4d:94:a4:8c:77:09:de:38:3e:8f:f4:86:
d2:4e:cb:e9:3a:d8:51:36:34:3e:7c:5f:35:eb:ea:
27:5b:9a:4f:68:93:ed:88:04:21:ce:31:f6:7a:41:
d4:24:f0:f4:41:2f:bf:69:15:c3:2b:f0:93:07:57:
17:41:e0:c1:45:2a:af:81:a3:e8:1c:e9:fd:f2:73:
bd:4c:ec:92:dd:27:d1:7a:c6:05:ee:ba:17:1a:c8:
31:d4:22:a2:80:fd:18:81:15:61:f9:54:1d:d1:d0:
ec:3d:25:e8:ba:52:da:ec:80:6a:97:d4:1b:dd:bd:
3b:e3:6b:74:98:99:e9:30:66:61:58:0a:53:28:ef:
eb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0E:51:51:36:68:32:CA:76:47:28:2C:AF:D4:B2:67:03:57:85:83
X509v3 Authority Key Identifier:
keyid:9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b5:da:9e:f0:36:d0:44:c7:d4:57:17:28:f6:3c:9b:3e:9d:
19:60:47:28:8c:b3:71:2e:20:fe:11:c6:80:b8:c7:b5:ce:60:
d8:ed:60:06:49:31:c8:54:f5:20:db:ec:c7:0a:95:0b:50:af:
e8:72:ce:25:37:00:6b:d7:f1:66:c4:ae:0c:80:e9:9e:8b:c6:
d8:9c:11:7d:6c:a0:a4:8e:a7:29:2c:1d:c2:26:b0:ae:78:34:
89:2b:ed:0c:1e:1b:1c:67:68:66:53:d7:de:93:46:92:f2:00:
d0:1d:d5:22:cd:1a:d0:ae:fa:f9:73:fb:9a:03:c1:dc:79:bb:
29:9b:52:a8:e7:76:36:c7:93:e3:8a:44:f9:24:d7:f8:29:0b:
af:59:ea:84:e3:d9:6a:19:5a:b3:05:7a:4c:d7:0b:9c:f8:be:
b6:ad:c5:02:1f:84:2c:01:9a:3c:e9:0a:26:0b:02:ca:a6:ba:
b4:fb:4e:e4:cc:8d:82:db:33:76:51:d1:b8:04:37:26:1a:8d:
5b:f1:62:ca:af:cd:e1:2d:53:c3:bb:aa:05:26:5f:7a:cd:a3:
3d:23:7a:36:4d:a6:3d:7e:00:89:8d:95:88:e2:42:6c:f2:22:
fe:66:4c:d1:c0:23:67:21:99:41:05:70:24:12:e5:de:c5:60:
c6:2f:f3:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkWv5W3ldPMJVvgNQZbk+9uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOGExODc2ZmRkYzJiNjM3NDhiNDU3Yjc3MGI3OWE3ZTY2
ZTc5M2MwHhcNMjUwOTA0MjIwMTE4WhcNMjUwOTA1MjIwMTE4WjAzMTEwLwYDVQQD
Eyg4MjBlNTE1MTM2NjgzMmNhNzY0NzI4MmNhZmQ0YjI2NzAzNTc4NTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQw5sVvL3kJ2MJ7/tLvYrkxO2jBS
axWL+vVQIKyc0IjQ72FKOdQJQ/GkYB6jqm/YML0i41dt4jq0GKoRpf3rGLYCHW9O
WHu3MI2QpcM5ba3qftSnhGjDIcNR3YA2BE1XJV82wxj7MvReVC0O7Wu0NlzRdrQs
lmlJXaxNlKSMdwneOD6P9IbSTsvpOthRNjQ+fF816+onW5pPaJPtiAQhzjH2ekHU
JPD0QS+/aRXDK/CTB1cXQeDBRSqvgaPoHOn98nO9TOyS3SfResYF7roXGsgx1CKi
gP0YgRVh+VQd0dDsPSXoulLa7IBql9Qb3b0742t0mJnpMGZhWApTKO/rDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIOUVE2aDLKdkcoLK/UsmcDV4WDMB8GA1UdIwQY
MBaAFJyKGHb93CtjdItFe3cLeafmbnk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbklvWWR2M2NLMk4waTBWN2R3dDVwLVp1ZVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85ZWE2OGYtNzQzZC00N2RhLWI3MWMt
NzA5ZmJlODRjZGZiLzEvbklvWWR2M2NLMk4waTBWN2R3dDVwLVp1ZVR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy85ZWE2OGYtNzQzZC00N2RhLWI3MWMtNzA5ZmJlODRjZGZi
LzEvbklvWWR2M2NLMk4waTBWN2R3dDVwLVp1ZVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAobXanvA2
0ETH1FcXKPY8mz6dGWBHKIyzcS4g/hHGgLjHtc5g2O1gBkkxyFT1INvsxwqVC1Cv
6HLOJTcAa9fxZsSuDIDpnovG2JwRfWygpI6nKSwdwiawrng0iSvtDB4bHGdoZlPX
3pNGkvIA0B3VIs0a0K76+XP7mgPB3Hm7KZtSqOd2NseT44pE+STX+CkLr1nqhOPZ
ahlaswV6TNcLnPi+tq3FAh+ELAGaPOkKJgsCyqa6tPtO5MyNgtszdlHRuAQ3JhqN
W/Fiyq/N4S1Tw7uqBSZfes2jPSN6Nk2mPX4AiY2ViOJCbPIi/mZM0cAjZyGZQQVw
JBLl3sVgxi/zUw==
-----END CERTIFICATE-----
Generated at Fri Sep 5 07:33:09 2025 by rpki-client