Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
File: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft (raw, json)
Hash identifier: MSE6ScBoi5ubev1AeE5uravCAe45l1lCb0gswtHZYJk=
Subject key identifier: 86:94:C3:B5:9D:90:16:F4:88:94:6E:D8:4B:04:5F:9C:65:01:39:F7
Authority key identifier: 9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
Certificate issuer: /CN=9ff3396374cbf5d767125f02dcf0f97296323092
Certificate serial: 019872CFF2EC938496A1C219ED56122F6FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 02:01:27 +0000
Manifest this update: Mon 04 Aug 2025 02:01:27 +0000
Manifest next update: Tue 05 Aug 2025 02:01:27 +0000
Files and hashes: 1: g5PI0OIlX5tTjsen3s8hXQzEWx4.roa (hash: uE1lBW16SA+r7c4/Tg2mSsWjcv7alroQQDQoG/Ta6JA=)
2: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl (hash: RxznOxiNax/BQFRg43ChWU51BOSHE8IdPF2evR9BRH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:f2:ec:93:84:96:a1:c2:19:ed:56:12:2f:6f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff3396374cbf5d767125f02dcf0f97296323092
Validity
Not Before: Aug 4 02:01:27 2025 GMT
Not After : Aug 5 02:01:27 2025 GMT
Subject: CN=8694c3b59d9016f488946ed84b045f9c650139f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:69:bf:05:f7:3c:86:3a:64:7b:5c:11:29:e6:
69:7e:78:79:22:62:01:88:64:dc:7c:4d:3a:d1:99:
b5:e8:ef:d1:40:c1:38:96:b4:2c:fb:74:51:9c:f8:
81:42:6e:67:34:26:2c:74:de:03:79:1d:ef:d4:75:
e1:d4:f0:92:cb:64:75:02:fe:43:9b:a6:df:3a:35:
ae:ec:f4:c5:8c:26:20:6c:63:7a:21:21:a1:79:eb:
f4:19:d5:5c:ee:b9:9d:23:c6:da:6d:f3:97:21:5c:
89:71:b3:fb:dd:1a:1c:52:c9:7d:fd:c4:e3:04:c4:
95:bf:a4:57:83:8c:9a:1d:25:fb:f7:ce:46:7d:a2:
32:dc:55:71:a6:33:34:fc:6d:0f:a1:2b:69:e6:ad:
d9:30:c4:d1:ad:0b:7a:4c:f8:a7:92:c4:6f:b9:fa:
12:ce:3b:1e:20:95:51:5a:69:df:8c:8a:df:f9:67:
1f:8f:3e:c9:19:23:6a:e1:6d:88:4e:25:77:ac:d8:
35:3f:40:67:0b:db:7a:98:13:47:64:1b:8d:f2:df:
4a:98:64:66:ab:6b:02:aa:e7:3f:16:ea:30:77:ca:
2c:a8:4a:39:cd:c5:98:55:e8:8b:46:40:3d:6a:b7:
a0:1a:34:6c:6f:dc:65:66:b3:ae:10:cb:a1:de:ef:
81:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:94:C3:B5:9D:90:16:F4:88:94:6E:D8:4B:04:5F:9C:65:01:39:F7
X509v3 Authority Key Identifier:
keyid:9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b9:7c:b2:7f:d9:37:37:f5:ed:8b:f1:03:02:cc:6c:98:f8:
48:8f:bf:69:6c:8f:1f:7f:55:25:d4:9f:49:be:56:dd:21:0e:
ad:6f:30:4b:79:0c:a9:a6:18:91:f3:96:99:76:44:36:8a:f7:
51:40:a3:5e:f8:39:91:6a:e6:45:9d:ca:1d:c0:88:7a:31:58:
ca:d8:8a:87:0e:f6:2d:52:67:00:ae:99:f2:6a:a0:00:32:c9:
ee:c1:27:f1:09:79:76:4f:3f:8b:40:ae:e6:bf:96:39:f4:f3:
d6:f8:ea:19:de:9c:71:4a:0a:20:61:22:94:46:e4:54:4b:07:
f0:ad:23:38:63:b2:1b:82:4b:37:33:74:a6:d6:4e:52:d7:af:
e9:7b:da:a0:21:0e:40:5e:ce:2b:e4:36:20:3f:d1:72:a1:b2:
f3:96:87:0a:57:86:dc:8e:06:8e:dd:ba:53:53:31:84:c9:eb:
66:cd:93:c4:92:01:64:28:c7:bb:9b:b1:af:ee:81:a7:8a:03:
7b:b1:03:40:58:8d:cc:81:9e:96:aa:6b:2b:a9:a6:8f:17:9b:
a9:16:5c:29:80:16:06:a5:6c:35:13:a0:2d:9a:6c:77:36:f3:
23:63:c0:28:40:2a:3e:7b:18:54:ff:33:81:4e:86:69:b9:52:
20:56:bb:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz/Lsk4SWocIZ7VYSL2/VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjMzOTYzNzRjYmY1ZDc2NzEyNWYwMmRjZjBmOTcyOTYz
MjMwOTIwHhcNMjUwODA0MDIwMTI3WhcNMjUwODA1MDIwMTI3WjAzMTEwLwYDVQQD
Eyg4Njk0YzNiNTlkOTAxNmY0ODg5NDZlZDg0YjA0NWY5YzY1MDEzOWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2m/Bfc8hjpke1wRKeZpfnh5ImIB
iGTcfE060Zm16O/RQME4lrQs+3RRnPiBQm5nNCYsdN4DeR3v1HXh1PCSy2R1Av5D
m6bfOjWu7PTFjCYgbGN6ISGheev0GdVc7rmdI8babfOXIVyJcbP73RocUsl9/cTj
BMSVv6RXg4yaHSX7985GfaIy3FVxpjM0/G0PoStp5q3ZMMTRrQt6TPinksRvufoS
zjseIJVRWmnfjIrf+Wcfjz7JGSNq4W2ITiV3rNg1P0BnC9t6mBNHZBuN8t9KmGRm
q2sCquc/Fuowd8osqEo5zcWYVeiLRkA9aregGjRsb9xlZrOuEMuh3u+B6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIaUw7WdkBb0iJRu2EsEX5xlATn3MB8GA1UdIwQY
MBaAFJ/zOWN0y/XXZxJfAtzw+XKWMjCSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9NNVkzVEw5ZGRuRWw4QzNQRDVjcFl5TUpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zMTYwMjAtOWZjNS00YjdjLWFlNDEt
ZTk1NTQ0ODNmZmE3LzEvbl9NNVkzVEw5ZGRuRWw4QzNQRDVjcFl5TUpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zMTYwMjAtOWZjNS00YjdjLWFlNDEtZTk1NTQ0ODNmZmE3
LzEvbl9NNVkzVEw5ZGRuRWw4QzNQRDVjcFl5TUpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhLl8sn/Z
Nzf17YvxAwLMbJj4SI+/aWyPH39VJdSfSb5W3SEOrW8wS3kMqaYYkfOWmXZENor3
UUCjXvg5kWrmRZ3KHcCIejFYytiKhw72LVJnAK6Z8mqgADLJ7sEn8Ql5dk8/i0Cu
5r+WOfTz1vjqGd6ccUoKIGEilEbkVEsH8K0jOGOyG4JLNzN0ptZOUtev6XvaoCEO
QF7OK+Q2ID/RcqGy85aHCleG3I4Gjt26U1MxhMnrZs2TxJIBZCjHu5uxr+6Bp4oD
e7EDQFiNzIGelqprK6mmjxebqRZcKYAWBqVsNROgLZpsdzbzI2PAKEAqPnsYVP8z
gU6GablSIFa7Og==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:23 2025 by rpki-client