Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
File: nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft (raw, json)
Hash identifier: b9T52+vIXepinBrm8ZZ0Uk5/ockgIGyY7yzta2K82TE=
Subject key identifier: DF:C6:C6:C4:6A:A8:05:EB:87:A6:15:34:15:73:32:0A:64:D7:FE:76
Authority key identifier: 9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
Certificate issuer: /CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Certificate serial: 01974B1F70A798D5FA128B7E2B0B950F976B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 16:00:41 +0000
Manifest this update: Sat 07 Jun 2025 16:00:41 +0000
Manifest next update: Sun 08 Jun 2025 16:00:41 +0000
Files and hashes: 1: MPwSmw7TKMOSUXcFrOOlFixZc2g.roa (hash: QP+dxlkmxIyI9F9hcSk4trG33k+WqitL0NMMPJjf69Q=)
2: O_fqEW14QhPRGqjQoVa9vmGmVmM.roa (hash: V1ztdeLVNvewuDYhom6BXL6CS05sk8OmHCsK+DDqUrE=)
3: nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl (hash: qWErd2xyYHnvogDqoeCFvO7f4UkyHY06pTqQbjyDm8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:70:a7:98:d5:fa:12:8b:7e:2b:0b:95:0f:97:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Validity
Not Before: Jun 7 16:00:41 2025 GMT
Not After : Jun 8 16:00:41 2025 GMT
Subject: CN=dfc6c6c46aa805eb87a615341573320a64d7fe76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:d8:8a:ee:65:88:26:33:2e:ec:a6:17:ee:
71:3b:db:50:c1:e6:4f:26:1f:2b:09:7c:fc:7e:64:
ba:76:b6:61:b4:e8:87:da:8e:4e:d8:b8:19:30:a7:
26:d9:59:44:53:b7:fa:5e:05:66:4d:15:03:3c:32:
0c:b7:24:b5:b5:db:72:be:62:5b:2a:c2:ac:fe:31:
74:f8:ee:1e:94:9f:b6:ec:c2:af:8f:ff:db:50:14:
66:88:14:ac:6f:07:50:2d:24:d0:31:79:bf:5b:55:
55:e0:a4:f4:d8:c2:9f:2d:13:0d:d0:92:40:3e:73:
7c:fa:03:48:ef:5b:ca:02:08:72:09:0b:91:c7:9c:
6e:f0:da:26:18:f9:12:35:7b:07:cb:a3:0e:62:67:
6f:f0:31:e5:a1:9b:7f:6e:16:29:52:0e:d2:56:aa:
5b:8f:5d:67:52:23:09:93:b7:fe:d1:75:d1:be:45:
36:a3:51:a8:49:06:e1:17:0e:05:ff:10:02:ca:f7:
34:33:7b:ac:eb:ae:2a:9e:7a:05:36:9a:a3:89:31:
3c:4f:94:a1:61:1d:18:a5:f5:25:57:13:6d:aa:7d:
a9:9c:56:aa:b9:58:d2:7d:18:e4:c1:38:a9:2f:e5:
cd:b5:c8:9b:c3:6f:1c:fc:64:37:eb:90:e7:b1:2e:
76:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C6:C6:C4:6A:A8:05:EB:87:A6:15:34:15:73:32:0A:64:D7:FE:76
X509v3 Authority Key Identifier:
keyid:9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7d:bd:22:3e:60:1e:79:68:d7:46:21:4e:53:db:8c:9f:02:
e5:f7:df:c9:f3:38:57:f3:f0:f5:20:40:d4:41:e3:a5:27:46:
e9:af:a8:9d:3e:c4:b9:07:d6:ae:2a:a3:ae:3b:96:0a:28:1e:
56:e8:93:e2:3e:75:d0:b7:a0:47:dd:29:08:dc:66:a4:0d:16:
54:2b:27:72:bd:f0:15:2c:7b:ca:24:19:21:fc:4e:b2:16:84:
a2:05:14:aa:bf:1f:b2:bf:d4:6f:95:67:52:3e:ca:db:f1:cd:
66:50:8f:7a:73:f1:35:25:78:b3:54:ff:d8:bb:86:53:16:41:
67:72:98:fe:0e:bb:44:62:47:de:3b:16:a9:24:09:d1:a0:d8:
34:15:fc:2f:81:85:9b:b6:bf:17:0a:0c:eb:8c:12:08:3c:f6:
54:b8:43:dd:e7:ab:00:2c:df:bd:8e:6a:0e:49:ae:76:7f:1e:
cd:bb:3d:fd:a6:22:15:51:91:cc:96:33:31:56:07:84:30:98:
9c:f8:97:40:27:05:a3:f4:95:a3:bb:7b:88:be:8f:5b:df:ee:
b4:ee:09:ad:2b:2f:c4:1d:cf:88:89:bd:7e:88:bb:fb:c3:95:
f7:a0:2a:fc:00:63:d8:94:bf:b0:1d:09:32:ef:6f:d0:ed:a1:
e6:82:46:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLH3CnmNX6Eot+KwuVD5drMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOGExODc2ZmRkYzJiNjM3NDhiNDU3Yjc3MGI3OWE3ZTY2
ZTc5M2MwHhcNMjUwNjA3MTYwMDQxWhcNMjUwNjA4MTYwMDQxWjAzMTEwLwYDVQQD
EyhkZmM2YzZjNDZhYTgwNWViODdhNjE1MzQxNTczMzIwYTY0ZDdmZTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFPYiu5liCYzLuymF+5xO9tQweZP
Jh8rCXz8fmS6drZhtOiH2o5O2LgZMKcm2VlEU7f6XgVmTRUDPDIMtyS1tdtyvmJb
KsKs/jF0+O4elJ+27MKvj//bUBRmiBSsbwdQLSTQMXm/W1VV4KT02MKfLRMN0JJA
PnN8+gNI71vKAghyCQuRx5xu8NomGPkSNXsHy6MOYmdv8DHloZt/bhYpUg7SVqpb
j11nUiMJk7f+0XXRvkU2o1GoSQbhFw4F/xACyvc0M3us664qnnoFNpqjiTE8T5Sh
YR0YpfUlVxNtqn2pnFaquVjSfRjkwTipL+XNtcibw28c/GQ365DnsS52QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/GxsRqqAXrh6YVNBVzMgpk1/52MB8GA1UdIwQY
MBaAFJyKGHb93CtjdItFe3cLeafmbnk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbklvWWR2M2NLMk4waTBWN2R3dDVwLVp1ZVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85ZWE2OGYtNzQzZC00N2RhLWI3MWMt
NzA5ZmJlODRjZGZiLzEvbklvWWR2M2NLMk4waTBWN2R3dDVwLVp1ZVR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy85ZWE2OGYtNzQzZC00N2RhLWI3MWMtNzA5ZmJlODRjZGZi
LzEvbklvWWR2M2NLMk4waTBWN2R3dDVwLVp1ZVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdn29Ij5g
Hnlo10YhTlPbjJ8C5fffyfM4V/Pw9SBA1EHjpSdG6a+onT7EuQfWriqjrjuWCige
VuiT4j510LegR90pCNxmpA0WVCsncr3wFSx7yiQZIfxOshaEogUUqr8fsr/Ub5Vn
Uj7K2/HNZlCPenPxNSV4s1T/2LuGUxZBZ3KY/g67RGJH3jsWqSQJ0aDYNBX8L4GF
m7a/FwoM64wSCDz2VLhD3eerACzfvY5qDkmudn8ezbs9/aYiFVGRzJYzMVYHhDCY
nPiXQCcFo/SVo7t7iL6PW9/utO4JrSsvxB3PiIm9foi7+8OV96Aq/ABj2JS/sB0J
Mu9v0O2h5oJGqg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:22:26 2025 by rpki-client