Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
File: n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json)
Hash identifier: 2muPJrjhQj3UC9YSg2wrBpTP4y4yLTRHOrhG3xrtrkg=
Subject key identifier: 67:DF:04:D6:21:5E:3C:7B:3D:6F:E5:B2:1D:27:A3:E2:4C:3A:7F:95
Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
Certificate issuer: /CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Certificate serial: 019885439175934746646092AFF8D8590978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
Manifest number: 03DE
Signing time: Thu 07 Aug 2025 16:00:54 +0000
Manifest this update: Thu 07 Aug 2025 16:00:54 +0000
Manifest next update: Fri 08 Aug 2025 16:00:54 +0000
Files and hashes: 1: Rjc45YVuDrAMQdY8qgjKUXqz9To.roa (hash: VkM0hIqEPGBmrXo8E00kzKR2aWKMeDBdfCqKvjZR58E=)
2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: s0ihAb70w/SwF56PaKTBO7Wnhyy3yyI5fj9+mv/acpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:43:91:75:93:47:46:64:60:92:af:f8:d8:59:09:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Validity
Not Before: Aug 7 16:00:54 2025 GMT
Not After : Aug 8 16:00:54 2025 GMT
Subject: CN=67df04d6215e3c7b3d6fe5b21d27a3e24c3a7f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:16:c1:af:63:23:cd:34:da:0f:59:22:cc:
dc:5a:62:bc:f6:9c:89:ec:c9:6e:68:33:76:d9:b8:
6a:52:76:7b:25:7e:57:1d:ae:60:e2:7c:ae:96:19:
98:39:8c:24:0f:a2:f1:ca:a1:6e:63:87:dc:e0:6d:
10:b2:4b:b3:5f:86:c0:79:f9:5a:bc:38:45:85:1b:
ca:99:11:c8:96:d3:65:0f:f9:64:7b:a6:64:12:54:
9b:7a:2e:49:ff:bf:67:19:05:eb:6f:4c:72:e1:3b:
4e:7e:a8:14:26:09:d1:2e:16:ad:d1:4c:6b:fb:c6:
e4:1b:de:ad:a2:2c:d7:0f:47:85:18:e9:f3:5c:41:
05:07:5c:89:82:29:60:09:1c:3d:94:ee:15:db:c5:
c3:84:00:f9:1a:43:ca:96:eb:34:98:63:03:e8:62:
df:26:1a:0d:23:a6:8b:d7:5c:82:23:db:9b:0d:3f:
cb:5c:17:58:f0:33:93:7b:d7:72:d9:e0:ac:b7:45:
97:02:b7:8e:41:0a:a7:49:c6:84:e6:9c:38:b1:27:
25:33:c0:93:1e:62:c7:ce:06:2c:fa:02:81:9a:48:
12:d0:7b:c4:fd:94:b1:c9:ae:1d:c3:85:78:02:62:
0c:ab:4c:3f:f6:8d:aa:3a:9b:68:d8:d4:e3:ce:1b:
e7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DF:04:D6:21:5E:3C:7B:3D:6F:E5:B2:1D:27:A3:E2:4C:3A:7F:95
X509v3 Authority Key Identifier:
keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5b:5c:6c:dc:9f:bd:b5:64:91:cf:eb:15:bd:3c:b1:0c:f4:
e1:1a:f3:55:cc:f6:90:b4:ac:9f:f7:57:2d:65:53:d5:6d:3a:
00:fa:e4:f4:d8:80:62:8f:26:3c:6a:63:50:eb:a8:0d:8b:3f:
32:53:10:4a:4f:6b:f2:8f:3f:d7:cd:94:1c:9a:57:35:f1:cc:
cc:32:36:c0:42:2f:1a:f7:6f:5f:de:62:db:ba:35:54:bc:8e:
57:da:ca:4c:11:c8:0a:9c:b8:b4:ea:13:55:e3:36:2f:56:59:
4e:4f:fc:fd:f2:89:26:fd:47:3f:8d:f7:08:98:83:8b:88:67:
48:e8:51:57:6d:81:0d:59:b2:a3:1d:a9:7c:18:56:c5:03:b9:
ef:61:95:e1:2c:89:64:8f:58:8b:f7:da:53:95:62:67:4a:31:
53:58:46:de:0e:1d:b7:a4:a3:95:47:3b:cb:dc:ca:b4:ae:4c:
9d:5c:26:80:4f:a8:ab:a6:07:48:8b:3a:3d:30:9d:d9:7a:26:
f3:ce:98:da:41:a0:19:14:17:2e:fd:02:d6:82:80:29:52:0d:
2e:be:5e:56:82:69:09:9e:20:32:d1:f0:4f:9a:b2:3f:a6:d9:
ad:bd:cc:69:2b:8c:d7:af:5a:9e:44:7c:55:3b:b5:64:5e:73:
37:1c:7f:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiFQ5F1k0dGZGCSr/jYWQl4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZDk4ODZlMmRiMjcwOWRiMjIzNjRlMzM0ZDM5ZTJlZTQ4
OGQzNmUwHhcNMjUwODA3MTYwMDU0WhcNMjUwODA4MTYwMDU0WjAzMTEwLwYDVQQD
Eyg2N2RmMDRkNjIxNWUzYzdiM2Q2ZmU1YjIxZDI3YTNlMjRjM2E3Zjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfoWwa9jI8002g9ZIszcWmK89pyJ
7MluaDN22bhqUnZ7JX5XHa5g4nyulhmYOYwkD6LxyqFuY4fc4G0QskuzX4bAefla
vDhFhRvKmRHIltNlD/lke6ZkElSbei5J/79nGQXrb0xy4TtOfqgUJgnRLhat0Uxr
+8bkG96toizXD0eFGOnzXEEFB1yJgilgCRw9lO4V28XDhAD5GkPKlus0mGMD6GLf
JhoNI6aL11yCI9ubDT/LXBdY8DOTe9dy2eCst0WXAreOQQqnScaE5pw4sSclM8CT
HmLHzgYs+gKBmkgS0HvE/ZSxya4dw4V4AmIMq0w/9o2qOpto2NTjzhvnjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGffBNYhXjx7PW/lsh0no+JMOn+VMB8GA1UdIwQY
MBaAFJ/ZiG4tsnCdsiNk4zTTni7kiNNuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85ZjY4NzItNTgxYi00ZDQ3LWJjNmEt
ZWJhMGNkNTdjMDIwLzEvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS85ZjY4NzItNTgxYi00ZDQ3LWJjNmEtZWJhMGNkNTdjMDIw
LzEvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1tcbNyf
vbVkkc/rFb08sQz04RrzVcz2kLSsn/dXLWVT1W06APrk9NiAYo8mPGpjUOuoDYs/
MlMQSk9r8o8/182UHJpXNfHMzDI2wEIvGvdvX95i27o1VLyOV9rKTBHICpy4tOoT
VeM2L1ZZTk/8/fKJJv1HP433CJiDi4hnSOhRV22BDVmyox2pfBhWxQO572GV4SyJ
ZI9Yi/faU5ViZ0oxU1hG3g4dt6SjlUc7y9zKtK5MnVwmgE+oq6YHSIs6PTCd2Xom
886Y2kGgGRQXLv0C1oKAKVINLr5eVoJpCZ4gMtHwT5qyP6bZrb3MaSuM169ankR8
VTu1ZF5zNxx/eA==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:18:14 2025 by rpki-client