Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
File: nWuXdMlIdsmDId4yAbEbdaE1jRk.mft (raw, json)
Hash identifier: pXAhX9i1PwQUh4QAApWVcw0UI/GEoyswlQFK3K5FLmQ=
Subject key identifier: A4:E9:1D:D9:AC:33:D1:7F:06:E0:A0:06:65:5C:C3:D0:6D:95:B6:17
Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
Certificate issuer: /CN=9d6b9774c94876c98321de3201b11b75a1358d19
Certificate serial: 0198752C01D6F72BA15560E2EFECBC15F277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
Manifest number: 1147
Signing time: Mon 04 Aug 2025 13:01:14 +0000
Manifest this update: Mon 04 Aug 2025 13:01:14 +0000
Manifest next update: Tue 05 Aug 2025 13:01:14 +0000
Files and hashes: 1: 5yK2af_g5CTlXz9q-R5Ey4S2raY.roa (hash: LxU9aJpGxPnyOcQ82YucJ2+C9wvejuknSWDM/RouRtA=)
2: HXLS-XKu3_p7nhpZ2K8scEyS_rc.roa (hash: 8XJ8ceqUC/FtGHEdtNIo+tnT3APlE19braxx2C56keI=)
3: NQOelXfnh9zNy4F5hN9_tYjE3Bs.roa (hash: qXIyT3lUz5bJt0IF4d25cysT8WLakbijoLlu5EAXUys=)
4: _fuT4R68BHlPpUP6HiVZDSmxINI.roa (hash: bvu+tWo4UXme3jTLsLEJ6SMX9XI3uAoVhAKkTxW9r90=)
5: boOUh_OegScUQI0rJ0GXkth8K70.roa (hash: h8bMxthrp6BSgypE0yBkUmIOsuBuRoBa/El8mfbO7Rs=)
6: dencvyi0TxmMkZDQCX9rZJN2RzU.roa (hash: B52p98p3HEzzhef7/oXAaRqNFYHk2h3tC+DtHUn18nc=)
7: nWuXdMlIdsmDId4yAbEbdaE1jRk.crl (hash: rLs66ygN6vtWcU6ijSb9AhURgBL7zgWNrzcmlQ22x2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2c:01:d6:f7:2b:a1:55:60:e2:ef:ec:bc:15:f2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19
Validity
Not Before: Aug 4 13:01:14 2025 GMT
Not After : Aug 5 13:01:14 2025 GMT
Subject: CN=a4e91dd9ac33d17f06e0a006655cc3d06d95b617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:22:4d:e1:5d:06:96:ce:68:f5:72:58:9d:ab:
f7:fc:7c:84:1c:91:71:b9:d7:75:78:85:bd:66:d2:
4f:63:e6:d9:e4:e8:cf:4b:32:9d:8d:cb:80:ef:f8:
22:8e:d0:c4:3d:d0:4a:3b:9b:4f:0a:f8:55:eb:52:
b0:21:74:12:ef:46:37:98:59:37:00:40:f5:f4:3f:
d9:99:16:62:11:09:94:cb:3d:f9:5a:c0:eb:fb:11:
e5:38:d8:fb:6f:39:71:7c:58:97:5e:51:61:21:b1:
38:9a:ac:11:3c:1b:d4:75:c0:3c:75:09:3a:c8:d3:
3e:3a:96:a3:5d:60:53:2e:d9:fd:4c:06:fa:71:a9:
fa:aa:c0:3b:c4:59:c2:fb:a9:71:87:71:0e:02:71:
17:87:ad:27:12:2b:89:fc:d4:8c:0f:42:ac:47:ce:
c0:ec:93:a2:63:5a:3e:49:bc:7e:85:4e:0e:1a:65:
82:e9:06:c5:23:ed:4f:33:bf:21:6a:e3:2f:d7:7a:
ca:2d:e9:e9:32:76:8d:1a:c6:9b:83:dc:7a:d3:79:
f5:99:56:c9:ec:47:32:c8:6c:10:95:88:19:47:91:
3e:69:37:38:50:c9:b6:b5:35:82:86:c7:45:ba:1c:
8f:31:5f:70:9e:29:a9:c6:33:de:f9:96:83:3b:d9:
82:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E9:1D:D9:AC:33:D1:7F:06:E0:A0:06:65:5C:C3:D0:6D:95:B6:17
X509v3 Authority Key Identifier:
keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:65:c0:3e:35:ad:af:d1:76:42:a8:e4:f7:a2:49:0a:e6:4d:
0d:b1:66:d1:a3:c9:3a:22:d0:e9:a1:b0:66:51:bf:34:2e:28:
35:5e:0a:28:bf:75:a7:91:65:9c:e3:a3:c9:46:04:fb:96:33:
98:dd:bf:af:8e:b9:de:91:d4:c8:8f:2e:71:b8:74:b0:20:93:
6d:9e:1f:1b:e4:56:68:58:9e:19:7b:13:c7:63:ea:b0:2b:15:
38:63:de:91:0b:46:b7:49:09:e5:b3:59:c3:5b:c6:bc:1c:98:
be:81:3c:37:16:62:f0:6f:28:c5:10:c0:4e:62:77:f3:97:64:
fa:a0:ea:61:db:55:d0:91:54:c1:ec:0b:7f:6b:fa:3d:c2:8d:
ed:a3:8b:9b:1c:40:40:2f:35:dc:dc:a8:fc:df:79:b9:61:8c:
20:8b:10:ca:30:78:cc:41:eb:70:57:d6:14:d5:e6:8c:7f:b6:
f8:7c:82:78:70:40:1d:20:91:14:66:fd:2f:cc:43:5e:0e:c9:
af:23:10:13:6d:9e:a6:f4:67:0f:e1:c4:29:93:d8:b8:83:80:
26:a2:e9:b2:d6:02:07:6a:a3:5b:29:0a:26:40:63:ce:ef:da:
e0:da:68:f9:3e:83:33:50:e8:d7:91:8b:81:2c:67:6c:b4:89:
87:9a:6a:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1LAHW9yuhVWDi7+y8FfJ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNmI5Nzc0Yzk0ODc2Yzk4MzIxZGUzMjAxYjExYjc1YTEz
NThkMTkwHhcNMjUwODA0MTMwMTE0WhcNMjUwODA1MTMwMTE0WjAzMTEwLwYDVQQD
EyhhNGU5MWRkOWFjMzNkMTdmMDZlMGEwMDY2NTVjYzNkMDZkOTViNjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCJN4V0Gls5o9XJYnav3/HyEHJFx
udd1eIW9ZtJPY+bZ5OjPSzKdjcuA7/gijtDEPdBKO5tPCvhV61KwIXQS70Y3mFk3
AED19D/ZmRZiEQmUyz35WsDr+xHlONj7bzlxfFiXXlFhIbE4mqwRPBvUdcA8dQk6
yNM+OpajXWBTLtn9TAb6can6qsA7xFnC+6lxh3EOAnEXh60nEiuJ/NSMD0KsR87A
7JOiY1o+Sbx+hU4OGmWC6QbFI+1PM78hauMv13rKLenpMnaNGsabg9x603n1mVbJ
7EcyyGwQlYgZR5E+aTc4UMm2tTWChsdFuhyPMV9wnimpxjPe+ZaDO9mCuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTpHdmsM9F/BuCgBmVcw9BtlbYXMB8GA1UdIwQY
MBaAFJ1rl3TJSHbJgyHeMgGxG3WhNY0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5Njgt
YTU2YmRmYWRiODFlLzEvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5NjgtYTU2YmRmYWRiODFl
LzEvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGXAPjWt
r9F2Qqjk96JJCuZNDbFm0aPJOiLQ6aGwZlG/NC4oNV4KKL91p5FlnOOjyUYE+5Yz
mN2/r4653pHUyI8ucbh0sCCTbZ4fG+RWaFieGXsTx2PqsCsVOGPekQtGt0kJ5bNZ
w1vGvByYvoE8NxZi8G8oxRDATmJ385dk+qDqYdtV0JFUwewLf2v6PcKN7aOLmxxA
QC813Nyo/N95uWGMIIsQyjB4zEHrcFfWFNXmjH+2+HyCeHBAHSCRFGb9L8xDXg7J
ryMQE22epvRnD+HEKZPYuIOAJqLpstYCB2qjWykKJkBjzu/a4Npo+T6DM1Do15GL
gSxnbLSJh5pq6Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:21 2025 by rpki-client