Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
File: n92vITJX0XbfUKpud2SKDMcqX6E.mft (raw, json)
Hash identifier: N9+2tdKEvtGV44Rhwt30z0BmJrez0Uo1pdfnN6q+vBo=
Subject key identifier: 88:49:4D:98:66:44:80:49:83:02:90:89:DC:69:F5:68:F7:D2:12:FB
Authority key identifier: 9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
Certificate issuer: /CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Certificate serial: 0198A04E0515F6BE56F97516B7922603BF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
Manifest number: 1632
Signing time: Tue 12 Aug 2025 22:02:04 +0000
Manifest this update: Tue 12 Aug 2025 22:02:04 +0000
Manifest next update: Wed 13 Aug 2025 22:02:04 +0000
Files and hashes: 1: 6WWGMBEJeVUhw0je11LNLXob3Fk.roa (hash: UR2dxpbdtKcSXZI0WPnuoltcK0Rk3PFpyvHQx4QFc88=)
2: n92vITJX0XbfUKpud2SKDMcqX6E.crl (hash: rAsoXzbWNjQ83NXXh6to6m6SV1MiPAHfq8+4/AlnXrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:05:15:f6:be:56:f9:75:16:b7:92:26:03:bf:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Validity
Not Before: Aug 12 22:02:04 2025 GMT
Not After : Aug 13 22:02:04 2025 GMT
Subject: CN=88494d986644804983029089dc69f568f7d212fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:c1:66:be:2a:c0:7d:47:b0:88:6f:78:ab:
42:1b:a4:d6:02:11:41:b6:98:92:82:00:85:2c:f8:
c5:df:40:d1:86:d4:82:6a:62:d0:2a:7b:3d:5c:9d:
1d:9f:15:2a:20:e6:9f:88:ac:0f:10:5f:32:4e:90:
a6:b9:18:90:53:67:fe:f1:24:6e:7a:f1:e6:f8:44:
fe:8f:38:47:88:6f:63:cb:d7:ea:be:b9:9b:70:3f:
ad:92:d6:c9:cf:a2:d3:18:36:38:fa:bc:68:3f:1b:
d3:27:d9:18:24:64:50:91:ed:33:f5:95:1b:5d:f8:
2a:94:49:86:43:65:98:de:7b:92:80:42:bc:cf:ac:
f9:3e:94:8c:0d:d2:2a:c6:99:3d:2e:63:e5:e5:4b:
7e:3c:29:bc:c5:a2:e4:6d:f6:2c:db:df:70:fd:21:
46:9d:1d:21:3f:cf:d7:5e:b7:a6:3b:a4:3b:84:02:
c8:98:37:70:fa:8f:9a:7d:6a:75:01:67:5b:b5:4d:
1c:f1:a3:7c:be:aa:19:1c:bf:d9:e4:d3:7c:bf:13:
4b:9f:fe:fd:5c:56:e4:48:aa:f7:c5:07:04:85:3d:
3c:aa:5a:e4:02:ce:a1:ca:a8:77:bb:06:64:41:86:
bf:10:51:3b:47:8e:59:05:49:54:49:7f:39:a8:17:
83:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:49:4D:98:66:44:80:49:83:02:90:89:DC:69:F5:68:F7:D2:12:FB
X509v3 Authority Key Identifier:
keyid:9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:29:a9:cc:5b:5e:07:81:46:f6:47:e5:27:0a:a9:e1:f6:28:
91:3d:8b:75:d6:f6:16:64:35:be:87:f0:a8:a0:ca:a7:93:d2:
06:d6:22:9d:c9:9f:e9:2c:d9:e2:64:89:3f:62:17:76:2f:e0:
c1:de:11:64:25:65:02:04:af:2e:62:71:d8:5a:cd:ac:75:cd:
66:c2:c8:f5:79:4f:0c:aa:fe:fc:25:6f:12:0b:9a:c6:06:8e:
be:7b:63:64:2b:62:7d:59:30:77:1b:18:dc:59:48:be:27:3d:
ec:c3:f3:96:ed:c8:32:56:3c:54:4b:1c:6d:44:14:e1:01:ff:
83:90:e2:e0:40:80:28:7d:89:fb:e5:85:62:f2:ef:d4:92:1b:
3d:8f:47:48:0d:1d:eb:8b:6a:c3:88:cb:d0:7c:24:f2:32:a9:
0d:a2:69:bd:ea:be:69:97:e4:a8:9c:59:75:a0:52:bf:04:74:
2a:00:01:4c:82:de:4b:56:8a:67:6b:67:45:ca:14:0b:b3:22:
9f:33:6e:9f:eb:65:09:44:41:0a:80:80:7a:4d:53:9e:f5:1a:
90:a1:e9:b1:ac:5e:4d:51:38:f7:cf:c3:32:21:e3:79:cd:78:
21:74:fb:f1:51:b3:83:ff:f0:b2:9f:b4:7e:ea:63:e9:74:22:
76:05:ca:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTgUV9r5W+XUWt5ImA79fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZGRhZjIxMzI1N2QxNzZkZjUwYWE2ZTc3NjQ4YTBjYzcy
YTVmYTEwHhcNMjUwODEyMjIwMjA0WhcNMjUwODEzMjIwMjA0WjAzMTEwLwYDVQQD
Eyg4ODQ5NGQ5ODY2NDQ4MDQ5ODMwMjkwODlkYzY5ZjU2OGY3ZDIxMmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssDBZr4qwH1HsIhveKtCG6TWAhFB
tpiSggCFLPjF30DRhtSCamLQKns9XJ0dnxUqIOafiKwPEF8yTpCmuRiQU2f+8SRu
evHm+ET+jzhHiG9jy9fqvrmbcD+tktbJz6LTGDY4+rxoPxvTJ9kYJGRQke0z9ZUb
XfgqlEmGQ2WY3nuSgEK8z6z5PpSMDdIqxpk9LmPl5Ut+PCm8xaLkbfYs299w/SFG
nR0hP8/XXremO6Q7hALImDdw+o+afWp1AWdbtU0c8aN8vqoZHL/Z5NN8vxNLn/79
XFbkSKr3xQcEhT08qlrkAs6hyqh3uwZkQYa/EFE7R45ZBUlUSX85qBeD4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhJTZhmRIBJgwKQidxp9Wj30hL7MB8GA1UdIwQY
MBaAFJ/dryEyV9F231CqbndkigzHKl+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjkydklUSlgwWGJmVUtwdWQyU0tETWNxWDZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81NGE1OGItN2EzMi00NmJjLTg1YzAt
MzBiNzY0ZWI0OTAwLzEvbjkydklUSlgwWGJmVUtwdWQyU0tETWNxWDZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81NGE1OGItN2EzMi00NmJjLTg1YzAtMzBiNzY0ZWI0OTAw
LzEvbjkydklUSlgwWGJmVUtwdWQyU0tETWNxWDZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCmpzFte
B4FG9kflJwqp4fYokT2Lddb2FmQ1vofwqKDKp5PSBtYincmf6SzZ4mSJP2IXdi/g
wd4RZCVlAgSvLmJx2FrNrHXNZsLI9XlPDKr+/CVvEguaxgaOvntjZCtifVkwdxsY
3FlIvic97MPzlu3IMlY8VEscbUQU4QH/g5Di4ECAKH2J++WFYvLv1JIbPY9HSA0d
64tqw4jL0Hwk8jKpDaJpveq+aZfkqJxZdaBSvwR0KgABTILeS1aKZ2tnRcoUC7Mi
nzNun+tlCURBCoCAek1TnvUakKHpsaxeTVE498/DMiHjec14IXT78VGzg//wsp+0
fupj6XQidgXKTg==
-----END CERTIFICATE-----
Generated at Wed Aug 13 00:27:18 2025 by rpki-client