Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
File: nAMai2oolAx5NrpueCuUoJYr-yc.mft (raw, json)
Hash identifier: JZCRI1nFDUYIhHtfwqezfPKJInKBt+cV34VKad+l/0w=
Subject key identifier: 80:4E:D4:3E:FC:09:C4:0A:F7:19:6D:39:88:FB:AA:AE:CF:E1:28:25
Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
Certificate issuer: /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Certificate serial: 01987D8ABACC489AB77E2230087142D1A19F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
Manifest number: 03AB
Signing time: Wed 06 Aug 2025 04:01:40 +0000
Manifest this update: Wed 06 Aug 2025 04:01:40 +0000
Manifest next update: Thu 07 Aug 2025 04:01:40 +0000
Files and hashes: 1: nAMai2oolAx5NrpueCuUoJYr-yc.crl (hash: V7pDVqfEQHup31ziu0BWCSuxZDpTilKNIMCZ3FJSXm8=)
2: sazfzVz6q9bIns0N5tJ_KIxOhyU.roa (hash: 7Dx7RnLHW4HsXUHgAbio+tOs+19yMbUTjmWX8tX1e1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:ba:cc:48:9a:b7:7e:22:30:08:71:42:d1:a1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Validity
Not Before: Aug 6 04:01:40 2025 GMT
Not After : Aug 7 04:01:40 2025 GMT
Subject: CN=804ed43efc09c40af7196d3988fbaaaecfe12825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:f6:9f:e5:23:ac:5b:6b:5c:07:5d:35:f2:
bf:b0:89:11:b9:e6:12:ee:8d:38:0e:83:53:ba:7f:
c9:f4:36:42:51:9a:41:fd:69:68:ab:fb:53:c7:02:
5e:79:ac:47:15:b1:c2:d6:c4:fb:33:44:be:ec:1a:
26:f1:39:20:94:3d:2e:ae:c1:8f:82:cb:42:41:d0:
96:c8:cb:2c:95:6a:65:8a:ca:20:7a:9c:26:f9:d9:
bc:3f:84:d4:27:20:fb:58:dd:fd:f4:75:74:da:ea:
a4:28:55:db:2f:fd:fb:b6:0d:db:2e:c0:60:11:e5:
91:1e:3c:29:4f:ce:c4:b7:bb:53:be:9f:3b:95:89:
8f:7e:60:04:14:28:7e:fc:93:94:21:54:a7:df:15:
69:e5:6b:5f:d1:f9:00:f6:85:99:47:33:e3:5d:cb:
b9:cb:d6:16:c9:fd:5f:ec:7f:14:ba:2f:67:b2:c2:
dc:89:0e:4b:e8:e2:d7:09:1c:e9:b5:cb:3b:ec:40:
d5:0e:dc:87:ae:2c:a6:3e:80:85:1e:a9:ee:e9:a5:
7d:2b:e8:05:2f:9d:84:96:b9:4c:a4:dc:79:07:45:
b9:dc:36:a2:81:c9:59:ab:66:92:97:0c:66:9f:e1:
27:85:7f:79:65:a5:0a:27:fb:6b:b6:9b:8a:fa:9e:
71:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4E:D4:3E:FC:09:C4:0A:F7:19:6D:39:88:FB:AA:AE:CF:E1:28:25
X509v3 Authority Key Identifier:
keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:73:03:1c:c3:6e:24:54:57:68:a5:bb:7b:6e:9b:c5:5b:24:
3b:14:1c:c7:60:77:23:76:bd:bc:27:39:5f:94:db:09:77:7a:
71:be:0c:a4:d9:e8:c1:27:d0:e8:dd:d4:6d:3d:fb:18:e9:48:
3b:d5:5b:96:64:c5:1d:ba:e0:05:2a:df:24:94:35:36:3a:3a:
a2:72:a7:c4:4d:2f:d3:d6:ba:7b:cb:62:cb:43:89:84:a2:10:
f9:ad:59:c1:16:bc:1f:1a:ae:08:e8:7b:19:00:bc:a4:3d:bd:
8d:4f:a3:26:6a:16:b7:21:fb:72:ed:fa:19:09:b0:31:21:47:
01:59:d9:2b:9f:1a:51:c6:fe:b4:4c:e1:b7:ff:17:4e:4f:55:
38:17:24:f3:15:01:b4:6e:b5:90:d7:fa:dc:45:5b:9e:44:10:
e0:76:47:b9:aa:fe:8d:53:e7:75:5a:2d:13:d9:77:35:34:10:
eb:a0:61:e7:15:be:8b:da:89:27:d0:82:da:c3:73:09:e9:2f:
3b:40:c8:65:11:fc:1d:ef:eb:1b:8c:b2:d7:05:bc:f3:9d:c8:
21:9e:17:e5:2f:30:bf:5d:a3:a3:9d:b9:f5:80:32:58:17:84:
6c:6a:b2:ea:95:8b:91:e8:75:e2:bf:43:09:e9:07:03:d8:14:
dc:59:a9:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9irrMSJq3fiIwCHFC0aGfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMDMxYThiNmEyODk0MGM3OTM2YmE2ZTc4MmI5NGEwOTYy
YmZiMjcwHhcNMjUwODA2MDQwMTQwWhcNMjUwODA3MDQwMTQwWjAzMTEwLwYDVQQD
Eyg4MDRlZDQzZWZjMDljNDBhZjcxOTZkMzk4OGZiYWFhZWNmZTEyODI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4f2n+UjrFtrXAddNfK/sIkRueYS
7o04DoNTun/J9DZCUZpB/Wloq/tTxwJeeaxHFbHC1sT7M0S+7Bom8TkglD0ursGP
gstCQdCWyMsslWplisogepwm+dm8P4TUJyD7WN399HV02uqkKFXbL/37tg3bLsBg
EeWRHjwpT87Et7tTvp87lYmPfmAEFCh+/JOUIVSn3xVp5Wtf0fkA9oWZRzPjXcu5
y9YWyf1f7H8Uui9nssLciQ5L6OLXCRzptcs77EDVDtyHriymPoCFHqnu6aV9K+gF
L52ElrlMpNx5B0W53DaigclZq2aSlwxmn+EnhX95ZaUKJ/trtpuK+p5xVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBO1D78CcQK9xltOYj7qq7P4SglMB8GA1UdIwQY
MBaAFJwDGotqKJQMeTa6bngrlKCWK/snMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkFNYWkyb29sQXg1TnJwdWVDdVVvSllyLXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNDMzZmUtNjQwOC00NjhkLTgxZTQt
ZjAzZWI4NzQwYzNlLzEvbkFNYWkyb29sQXg1TnJwdWVDdVVvSllyLXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8zNDMzZmUtNjQwOC00NjhkLTgxZTQtZjAzZWI4NzQwYzNl
LzEvbkFNYWkyb29sQXg1TnJwdWVDdVVvSllyLXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXMDHMNu
JFRXaKW7e26bxVskOxQcx2B3I3a9vCc5X5TbCXd6cb4MpNnowSfQ6N3UbT37GOlI
O9VblmTFHbrgBSrfJJQ1Njo6onKnxE0v09a6e8tiy0OJhKIQ+a1ZwRa8HxquCOh7
GQC8pD29jU+jJmoWtyH7cu36GQmwMSFHAVnZK58aUcb+tEzht/8XTk9VOBck8xUB
tG61kNf63EVbnkQQ4HZHuar+jVPndVotE9l3NTQQ66Bh5xW+i9qJJ9CC2sNzCekv
O0DIZRH8He/rG4yy1wW8853IIZ4X5S8wv12jo5259YAyWBeEbGqy6pWLkeh14r9D
CekHA9gU3Fmp1g==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:34:39 2025 by rpki-client