Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
File: n9aPGyQUI9qXZHuZIkUwOG0laYw.mft (raw, json)
Hash identifier: R/WziTkcT1BmzUJJLnv6OYrQaRWBOF2nLFUv/ShocPw=
Subject key identifier: 2B:05:6B:2B:21:7F:F9:45:EA:0D:7C:BE:A1:70:8A:E5:82:67:98:C3
Authority key identifier: 9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
Certificate issuer: /CN=9fd68f1b241423da97647b99224530386d25698c
Certificate serial: 01988FFE6549B27BC303DEA95A788709124D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 18:01:10 +0000
Manifest this update: Sat 09 Aug 2025 18:01:10 +0000
Manifest next update: Sun 10 Aug 2025 18:01:10 +0000
Files and hashes: 1: 6zp8k7ws-z1aCcsmWGLYmfVsv4E.roa (hash: bUIQEUVAIaujbjPg7okGrEKCeQdfL4efouwX9EGneXc=)
2: n9aPGyQUI9qXZHuZIkUwOG0laYw.crl (hash: btKgcXe26PPco5TWpvoKKoKOcADbJ0h3K0iUTNFHhcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:65:49:b2:7b:c3:03:de:a9:5a:78:87:09:12:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd68f1b241423da97647b99224530386d25698c
Validity
Not Before: Aug 9 18:01:10 2025 GMT
Not After : Aug 10 18:01:10 2025 GMT
Subject: CN=2b056b2b217ff945ea0d7cbea1708ae5826798c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b0:2f:20:ee:83:ba:b4:4e:14:f8:a6:e9:0b:
5c:dc:33:1f:01:93:c4:cb:8b:0e:4d:fd:f2:37:31:
f3:45:21:da:b3:bb:3f:b4:51:21:d9:c6:a9:6a:0a:
40:b4:66:ff:0e:c8:c7:16:8e:97:7a:90:c8:4e:0a:
74:cd:b1:f1:f7:51:23:41:5e:2e:e5:a6:49:af:70:
bc:68:b4:24:17:b2:f4:f4:10:c1:9e:e0:9f:2f:89:
ef:91:2d:84:57:a7:15:fd:dc:d0:e5:0d:2f:01:d6:
cf:fe:92:98:09:f8:85:34:a8:81:0d:08:d8:c1:4b:
b6:b0:cd:56:66:c9:69:e4:a9:07:ee:14:8a:e4:bf:
18:af:52:4f:ad:b1:38:7a:31:10:20:5a:b9:27:d6:
68:10:41:af:5a:cb:b3:49:9d:e8:b9:2b:8f:06:af:
11:d8:54:fa:f9:84:a7:2e:ba:3d:bb:6e:be:1e:8c:
b9:6f:14:63:21:18:6d:84:32:99:35:8f:42:f1:90:
35:c1:4f:ce:9e:ea:1d:4f:bc:39:d3:bf:12:54:3c:
28:a5:f7:b1:fc:2e:71:ae:3e:d7:73:af:89:9f:70:
4c:d5:91:6b:b1:7d:07:53:44:4d:40:cd:7f:b9:22:
d3:75:72:79:a3:9d:02:39:0c:a0:2b:5c:59:9b:fe:
a7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:05:6B:2B:21:7F:F9:45:EA:0D:7C:BE:A1:70:8A:E5:82:67:98:C3
X509v3 Authority Key Identifier:
keyid:9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e2:1a:b6:60:c1:55:21:be:1e:a7:13:85:90:04:60:79:38:
86:7c:28:25:0b:44:56:79:1f:59:7b:07:6a:c7:82:ca:ce:39:
f4:b3:22:08:6c:5f:de:38:d4:8c:0e:be:57:87:5f:73:b6:12:
20:46:41:fb:11:69:ba:c5:10:c6:6d:16:8b:5c:a4:76:a3:fb:
48:47:ae:dd:f2:eb:91:ee:95:33:51:5b:a3:e0:56:e5:04:18:
1c:59:20:1a:a0:e9:df:cb:e0:b3:ad:d6:a9:a4:2f:7c:3a:52:
90:1c:df:5c:de:46:a5:1d:81:e5:8e:b7:76:a0:47:1b:22:7a:
5d:c7:a5:1a:f2:0b:41:8b:bd:ea:86:dd:06:de:40:64:0f:8d:
55:92:81:fc:2f:c9:49:23:44:03:5a:e9:36:c2:d0:eb:d5:00:
8c:27:5f:42:1f:a5:57:72:46:6e:61:03:05:36:6b:b8:72:39:
4b:28:53:71:6a:b4:6f:c2:b1:29:82:67:03:18:fd:8e:31:73:
d6:4b:fd:66:2e:93:14:d4:e1:0a:2d:ab:7a:a3:fb:68:d4:04:
a3:82:f2:0c:a9:7c:59:d4:2d:2a:7e:ba:9d:ce:6c:7a:46:76:
0b:eb:fc:50:13:36:55:71:c7:da:dd:03:04:90:3c:ec:4a:49:
a7:8e:7c:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiP/mVJsnvDA96pWniHCRJNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZDY4ZjFiMjQxNDIzZGE5NzY0N2I5OTIyNDUzMDM4NmQy
NTY5OGMwHhcNMjUwODA5MTgwMTEwWhcNMjUwODEwMTgwMTEwWjAzMTEwLwYDVQQD
EygyYjA1NmIyYjIxN2ZmOTQ1ZWEwZDdjYmVhMTcwOGFlNTgyNjc5OGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47AvIO6DurROFPim6Qtc3DMfAZPE
y4sOTf3yNzHzRSHas7s/tFEh2capagpAtGb/DsjHFo6XepDITgp0zbHx91EjQV4u
5aZJr3C8aLQkF7L09BDBnuCfL4nvkS2EV6cV/dzQ5Q0vAdbP/pKYCfiFNKiBDQjY
wUu2sM1WZslp5KkH7hSK5L8Yr1JPrbE4ejEQIFq5J9ZoEEGvWsuzSZ3ouSuPBq8R
2FT6+YSnLro9u26+Hoy5bxRjIRhthDKZNY9C8ZA1wU/OnuodT7w5078SVDwopfex
/C5xrj7Xc6+Jn3BM1ZFrsX0HU0RNQM1/uSLTdXJ5o50COQygK1xZm/6n/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsFayshf/lF6g18vqFwiuWCZ5jDMB8GA1UdIwQY
MBaAFJ/WjxskFCPal2R7mSJFMDhtJWmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjlhUEd5UVVJOXFYWkh1WklrVXdPRzBsYVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zNWRlZTUtZDhkYi00OGUzLWI3YmIt
MDgxMGQxNmJjYzg3LzEvbjlhUEd5UVVJOXFYWkh1WklrVXdPRzBsYVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8zNWRlZTUtZDhkYi00OGUzLWI3YmItMDgxMGQxNmJjYzg3
LzEvbjlhUEd5UVVJOXFYWkh1WklrVXdPRzBsYVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOIatmDB
VSG+HqcThZAEYHk4hnwoJQtEVnkfWXsHaseCys459LMiCGxf3jjUjA6+V4dfc7YS
IEZB+xFpusUQxm0Wi1ykdqP7SEeu3fLrke6VM1Fbo+BW5QQYHFkgGqDp38vgs63W
qaQvfDpSkBzfXN5GpR2B5Y63dqBHGyJ6XcelGvILQYu96obdBt5AZA+NVZKB/C/J
SSNEA1rpNsLQ69UAjCdfQh+lV3JGbmEDBTZruHI5SyhTcWq0b8KxKYJnAxj9jjFz
1kv9Zi6TFNThCi2reqP7aNQEo4LyDKl8WdQtKn66nc5sekZ2C+v8UBM2VXHH2t0D
BJA87EpJp4588g==
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:48:11 2025 by rpki-client