Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
File: nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft (raw, json)
Hash identifier: cFWwEe3RzG2W/TEy/WRfgcdwE6+YmO9HiOg0izbSI/U=
Subject key identifier: 8B:D2:E6:94:AD:DA:DF:14:DC:1A:2A:36:B3:56:C8:3F:8E:DE:57:92
Authority key identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
Certificate issuer: /CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Certificate serial: 0198A08433677359386FF5872C1078DB934F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
Manifest number: 08DE
Signing time: Tue 12 Aug 2025 23:01:15 +0000
Manifest this update: Tue 12 Aug 2025 23:01:15 +0000
Manifest next update: Wed 13 Aug 2025 23:01:15 +0000
Files and hashes: 1: D6KBZtdhAp7R2Q1YiqESZQ8OeXA.roa (hash: pLl10ejVKSmOKcwrzyb02NjjAckX++6l+yonzmG4CME=)
2: nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl (hash: bY/8yfq8SESWD5gkXdan6bdqYL9MQU4nK6KIrLakt1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:84:33:67:73:59:38:6f:f5:87:2c:10:78:db:93:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Validity
Not Before: Aug 12 23:01:15 2025 GMT
Not After : Aug 13 23:01:15 2025 GMT
Subject: CN=8bd2e694addadf14dc1a2a36b356c83f8ede5792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:fb:ef:6b:9d:ce:fc:18:28:6d:c6:ab:6f:
63:27:81:5f:3d:b1:34:dc:6c:07:c2:d8:82:75:ed:
fe:0a:77:d1:23:f1:8a:38:db:f2:81:cf:e1:fe:6c:
85:a8:96:6d:05:d5:94:59:bf:d6:1e:72:12:b1:b2:
ee:d9:59:8b:54:4d:f2:90:b9:d1:e8:58:79:25:3e:
0e:41:ce:ee:21:68:74:a6:7f:57:3c:4d:9d:7b:98:
82:55:a2:22:54:10:2f:f1:30:e4:f3:b3:c7:19:22:
09:bb:27:4a:61:eb:d4:e5:b4:3c:0a:e1:cd:fc:90:
f1:be:c7:cf:42:ac:cd:1f:f4:fa:aa:82:47:55:48:
67:9b:96:66:d5:7d:d1:ff:d8:49:b1:43:26:cd:e5:
3b:68:1a:b9:f8:aa:5c:90:22:71:71:47:2c:e2:81:
25:c3:7f:0a:32:82:61:fb:93:52:c4:e0:1b:0d:d2:
7e:b8:90:85:c0:43:33:78:60:1f:a0:e9:e2:a4:b5:
09:91:a7:6b:16:cf:39:22:64:f0:55:e5:4a:44:d1:
b8:6c:4c:8d:b2:f9:42:c9:85:b3:c7:71:59:94:9e:
d4:fc:95:4f:cb:53:ef:84:cd:32:8f:0f:ed:28:39:
da:de:7d:95:ee:cd:71:db:5f:33:68:06:44:c3:e4:
82:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D2:E6:94:AD:DA:DF:14:DC:1A:2A:36:B3:56:C8:3F:8E:DE:57:92
X509v3 Authority Key Identifier:
keyid:9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:02:e4:55:e2:e8:ff:e1:4d:70:c7:4d:5c:d9:94:79:b7:6d:
91:79:31:2e:69:aa:8b:9d:4a:11:56:90:f0:a9:d3:f5:fd:bb:
fd:f6:41:f2:33:06:ff:74:2f:18:7f:c9:c5:fc:74:f3:d0:d9:
1e:9f:34:79:c0:3a:9f:8c:10:a3:45:3e:0d:77:fa:90:76:ca:
c1:c0:5e:18:22:d1:14:e8:24:c0:d0:dd:8d:60:e0:ce:fa:17:
be:18:2e:8a:4d:a7:0f:47:bb:6f:80:29:d0:c0:10:83:51:6c:
da:66:b9:c9:87:77:67:ef:3d:af:65:b7:6b:82:c0:81:8d:8c:
90:e5:7d:e5:e9:60:61:ed:63:bc:d5:d0:1d:f4:ef:1d:7f:7e:
12:b8:91:c7:d2:5e:de:bc:dc:39:ff:94:f4:eb:c8:07:61:54:
03:2b:5a:21:b3:a4:21:67:70:08:78:68:e7:11:0e:e0:ff:64:
38:33:eb:8f:c4:78:01:e7:db:85:ab:de:3c:c5:3d:61:70:80:
d4:1b:20:b4:be:fe:63:d6:24:ac:07:66:ad:b1:7f:62:11:ae:
6b:5a:88:98:b8:ab:e5:25:f2:e6:bb:4d:28:a1:58:ad:6f:5f:
e4:13:49:de:c9:29:a6:4e:16:9e:89:56:58:f5:97:91:9b:45:
b7:55:65:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZighDNnc1k4b/WHLBB425NPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZjI0YWZiZmVjZGY2YTk5YzI4MmJmNTNiMzA0ZjNjMWU4
ZjQ3MGYwHhcNMjUwODEyMjMwMTE1WhcNMjUwODEzMjMwMTE1WjAzMTEwLwYDVQQD
Eyg4YmQyZTY5NGFkZGFkZjE0ZGMxYTJhMzZiMzU2YzgzZjhlZGU1NzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlb772udzvwYKG3Gq29jJ4FfPbE0
3GwHwtiCde3+CnfRI/GKONvygc/h/myFqJZtBdWUWb/WHnISsbLu2VmLVE3ykLnR
6Fh5JT4OQc7uIWh0pn9XPE2de5iCVaIiVBAv8TDk87PHGSIJuydKYevU5bQ8CuHN
/JDxvsfPQqzNH/T6qoJHVUhnm5Zm1X3R/9hJsUMmzeU7aBq5+KpckCJxcUcs4oEl
w38KMoJh+5NSxOAbDdJ+uJCFwEMzeGAfoOnipLUJkadrFs85ImTwVeVKRNG4bEyN
svlCyYWzx3FZlJ7U/JVPy1PvhM0yjw/tKDna3n2V7s1x218zaAZEw+SCpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvS5pSt2t8U3BoqNrNWyD+O3leSMB8GA1UdIwQY
MBaAFJ3ySvv+zfapnCgr9TswTzwej0cPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lYTljNTktOWUxNC00ZjI1LTg2YmQt
N2VlZGY0ZGQ2YzEzLzEvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lYTljNTktOWUxNC00ZjI1LTg2YmQtN2VlZGY0ZGQ2YzEz
LzEvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQLkVeLo
/+FNcMdNXNmUebdtkXkxLmmqi51KEVaQ8KnT9f27/fZB8jMG/3QvGH/Jxfx089DZ
Hp80ecA6n4wQo0U+DXf6kHbKwcBeGCLRFOgkwNDdjWDgzvoXvhguik2nD0e7b4Ap
0MAQg1Fs2ma5yYd3Z+89r2W3a4LAgY2MkOV95elgYe1jvNXQHfTvHX9+EriRx9Je
3rzcOf+U9OvIB2FUAytaIbOkIWdwCHho5xEO4P9kODPrj8R4AefbhavePMU9YXCA
1BsgtL7+Y9YkrAdmrbF/YhGua1qImLir5SXy5rtNKKFYrW9f5BNJ3skppk4WnolW
WPWXkZtFt1VloA==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:43:06 2025 by rpki-client