Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
File: niN_MrrhSoH9on6ylGDDoO2jQkA.mft (raw, json)
Hash identifier: O24X4RCbDr+4+Um4NolP76n6hoQIu8a1Q2nKGtjZuxE=
Subject key identifier: A0:F4:B4:CF:47:B8:30:23:7D:28:AD:22:7D:45:B6:46:E4:D2:83:0F
Authority key identifier: 9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40
Certificate issuer: /CN=9e237f32bae14a81fda27eb29460c3a0eda34240
Certificate serial: 0198733D04385EB43DF86E6EBA83FE4FFA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
Manifest number: 0E1D
Signing time: Mon 04 Aug 2025 04:00:35 +0000
Manifest this update: Mon 04 Aug 2025 04:00:35 +0000
Manifest next update: Tue 05 Aug 2025 04:00:35 +0000
Files and hashes: 1: duyGpoRiUSXpX71VT4XYnZHmGlA.roa (hash: BUaqTN98K6qCPpPRz7Abj2KUlyE692OgtKSmoKCDJkM=)
2: niN_MrrhSoH9on6ylGDDoO2jQkA.crl (hash: 8LTFp0TovWfm4k3WYdOvgUSwRp8n9cCHNL2WeF+cwmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:04:38:5e:b4:3d:f8:6e:6e:ba:83:fe:4f:fa:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e237f32bae14a81fda27eb29460c3a0eda34240
Validity
Not Before: Aug 4 04:00:35 2025 GMT
Not After : Aug 5 04:00:35 2025 GMT
Subject: CN=a0f4b4cf47b830237d28ad227d45b646e4d2830f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d1:0d:c2:e3:f6:fc:b0:89:42:74:f2:ad:be:
c6:bb:40:a3:b3:12:fe:76:25:61:b6:13:3b:c1:88:
14:cd:c0:8b:bd:4e:30:e0:d2:aa:1b:48:b6:95:03:
ef:98:f5:33:1e:ea:c9:b1:08:ae:a5:7a:fc:b8:c0:
48:79:1a:db:85:b3:ba:20:ce:cd:56:bf:ed:14:e2:
0b:fc:d4:e4:32:41:1c:30:09:cc:0b:b0:c8:91:0b:
0f:39:aa:9f:54:ab:15:5b:df:e8:72:d1:2c:e0:25:
f7:06:3d:aa:73:ea:35:b7:c0:fc:40:da:07:80:65:
a3:05:22:cc:5b:7e:13:e0:a6:3e:6a:d4:41:44:e0:
ee:5c:b0:b2:37:11:49:2f:72:f5:c2:d9:aa:62:df:
9e:7d:b9:1f:b9:f6:86:2f:74:ef:5d:c5:47:d2:4b:
79:25:d3:79:1c:f3:c6:fe:8c:55:13:fd:20:8a:a2:
12:29:4e:15:88:30:83:6b:b8:96:c3:2f:88:3d:bf:
67:a3:8a:d2:d8:60:f9:80:67:b1:6d:ef:43:8f:29:
c3:0e:23:fe:f7:2c:3a:d4:83:ce:55:2e:2e:d0:37:
00:83:33:2e:41:86:44:35:fe:5e:b5:69:99:67:35:
99:e4:f7:fc:55:c2:ae:a4:23:c9:86:67:57:6a:0d:
cc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F4:B4:CF:47:B8:30:23:7D:28:AD:22:7D:45:B6:46:E4:D2:83:0F
X509v3 Authority Key Identifier:
keyid:9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:17:6f:18:1b:0f:7e:3e:96:2e:67:60:e1:82:43:60:06:a5:
b0:91:42:65:dd:81:a1:8a:df:1c:d1:f0:83:8e:17:3c:14:b2:
87:5b:b3:91:87:1e:9e:9b:a5:ea:83:fe:a7:60:34:59:c2:07:
2a:a6:3d:49:e7:6d:b2:4d:38:0b:3d:56:ee:64:6d:d9:bf:21:
02:a0:ff:fe:2f:d9:3a:2a:a5:24:37:3d:06:88:12:ec:19:dc:
4e:a2:fb:e8:df:ee:e8:48:b3:ed:0d:09:36:af:76:a1:39:f3:
2b:71:c4:71:60:e4:1f:31:61:27:8c:89:e6:cc:97:cf:77:68:
9a:53:20:20:87:64:89:4f:3d:bf:81:42:4c:31:c1:1c:66:53:
fb:80:49:56:55:44:73:5d:11:58:2f:7b:8b:f5:5d:9a:d7:16:
08:5b:89:51:04:97:02:01:f6:5f:2a:12:63:8e:b2:44:14:c1:
49:01:bd:bc:c6:fe:91:a7:37:f8:9e:f9:01:0d:08:38:c8:0e:
e6:b2:10:76:48:06:5c:bf:59:fd:50:19:cb:be:52:3d:52:76:
ce:e8:a9:a3:7e:a9:58:70:7d:da:15:d6:eb:59:da:90:99:7b:
97:02:d1:e8:d9:69:69:ac:45:fe:66:7b:9b:bf:6e:fd:fc:e4:
a6:4c:ed:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPQQ4XrQ9+G5uuoP+T/o5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMjM3ZjMyYmFlMTRhODFmZGEyN2ViMjk0NjBjM2EwZWRh
MzQyNDAwHhcNMjUwODA0MDQwMDM1WhcNMjUwODA1MDQwMDM1WjAzMTEwLwYDVQQD
EyhhMGY0YjRjZjQ3YjgzMDIzN2QyOGFkMjI3ZDQ1YjY0NmU0ZDI4MzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9ENwuP2/LCJQnTyrb7Gu0CjsxL+
diVhthM7wYgUzcCLvU4w4NKqG0i2lQPvmPUzHurJsQiupXr8uMBIeRrbhbO6IM7N
Vr/tFOIL/NTkMkEcMAnMC7DIkQsPOaqfVKsVW9/octEs4CX3Bj2qc+o1t8D8QNoH
gGWjBSLMW34T4KY+atRBRODuXLCyNxFJL3L1wtmqYt+efbkfufaGL3TvXcVH0kt5
JdN5HPPG/oxVE/0giqISKU4ViDCDa7iWwy+IPb9no4rS2GD5gGexbe9DjynDDiP+
9yw61IPOVS4u0DcAgzMuQYZENf5etWmZZzWZ5Pf8VcKupCPJhmdXag3M0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKD0tM9HuDAjfSitIn1Ftkbk0oMPMB8GA1UdIwQY
MBaAFJ4jfzK64UqB/aJ+spRgw6Dto0JAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmlOX01ycmhTb0g5b242eWxHRERvTzJqUWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81ZDZlYmQtYThlZS00NzRjLWI3MWEt
YTY0MmNjODViYzcxLzEvbmlOX01ycmhTb0g5b242eWxHRERvTzJqUWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi81ZDZlYmQtYThlZS00NzRjLWI3MWEtYTY0MmNjODViYzcx
LzEvbmlOX01ycmhTb0g5b242eWxHRERvTzJqUWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRdvGBsP
fj6WLmdg4YJDYAalsJFCZd2BoYrfHNHwg44XPBSyh1uzkYcenpul6oP+p2A0WcIH
KqY9Sedtsk04Cz1W7mRt2b8hAqD//i/ZOiqlJDc9BogS7BncTqL76N/u6Eiz7Q0J
Nq92oTnzK3HEcWDkHzFhJ4yJ5syXz3domlMgIIdkiU89v4FCTDHBHGZT+4BJVlVE
c10RWC97i/VdmtcWCFuJUQSXAgH2XyoSY46yRBTBSQG9vMb+kac3+J75AQ0IOMgO
5rIQdkgGXL9Z/VAZy75SPVJ2zuipo36pWHB92hXW61nakJl7lwLR6NlpaaxF/mZ7
m79u/fzkpkzt0g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:23 2025 by rpki-client