Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
File: nCy3-coO_XK-JYpKCTWIBjdLRmI.mft (raw, json)
Hash identifier: bpJv6PxGCMpZfezZFtqZ0D/JCYqn3KcNBKPLcQkJhoo=
Subject key identifier: 2F:7E:6D:3A:BE:F7:24:DD:42:A2:C8:8A:5F:BB:C2:36:66:A4:63:85
Authority key identifier: 9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
Certificate issuer: /CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Certificate serial: 019880F957B5611FA12C3C1BB152291B9A49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
Manifest number: 0C71
Signing time: Wed 06 Aug 2025 20:01:21 +0000
Manifest this update: Wed 06 Aug 2025 20:01:21 +0000
Manifest next update: Thu 07 Aug 2025 20:01:21 +0000
Files and hashes: 1: Dotq45i-CIL8miP4blqY3J6J13s.roa (hash: AeEyJtBFVLSGPDiSeedlZidCthzwYAlppOftvZd9mwo=)
2: nCy3-coO_XK-JYpKCTWIBjdLRmI.crl (hash: 15c4MxseDgxIbv/UbmWDF0g2XglQElbUGqSU1oi5SAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:57:b5:61:1f:a1:2c:3c:1b:b1:52:29:1b:9a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Validity
Not Before: Aug 6 20:01:21 2025 GMT
Not After : Aug 7 20:01:21 2025 GMT
Subject: CN=2f7e6d3abef724dd42a2c88a5fbbc23666a46385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:3a:52:46:84:54:a3:95:c3:aa:5f:47:01:
ff:6e:45:e2:3e:17:20:bf:90:bb:23:68:75:87:7d:
cc:2e:48:b7:24:11:86:4b:2d:c8:02:37:b3:37:ae:
6e:61:54:ce:91:6d:14:68:00:6a:49:ec:5b:06:c6:
ee:16:c6:51:2a:af:22:be:3d:51:72:90:7a:11:f8:
a5:65:f3:bb:b8:c1:b7:c7:b2:ad:ff:e2:f0:55:d4:
57:15:53:63:1c:2e:7e:1e:c1:70:ea:31:1f:0b:b8:
d8:81:0e:4d:60:b1:9e:9c:24:ef:53:94:b1:39:b8:
18:27:e9:a2:bb:f5:ff:5c:f7:32:f1:d3:6e:4c:8c:
60:68:0e:59:a0:e6:33:6f:ef:1f:37:eb:a7:06:75:
95:5b:ac:0e:93:fa:6d:43:a8:ae:af:e3:ba:ec:22:
67:30:38:f4:86:41:7b:00:d4:23:80:fa:82:69:93:
d6:b8:4c:9c:2c:a9:be:7b:df:df:f4:65:0c:c8:34:
57:1a:b4:75:52:35:38:69:45:5a:d1:47:b5:b5:44:
e4:6d:97:4d:9a:20:c2:5c:26:b2:26:2f:35:b1:05:
c9:7f:d5:97:5e:15:b5:44:fe:43:7b:b7:57:09:fa:
19:ed:a0:a4:37:49:fc:5b:fe:f6:0d:f8:5d:66:7f:
da:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7E:6D:3A:BE:F7:24:DD:42:A2:C8:8A:5F:BB:C2:36:66:A4:63:85
X509v3 Authority Key Identifier:
keyid:9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:df:2b:96:be:1b:98:33:ba:57:d0:51:cf:cc:26:85:e6:44:
6f:26:84:5b:7a:af:f0:b7:c6:9d:0e:b1:5e:1f:92:f1:02:a9:
bf:d9:3b:35:74:2d:96:1d:0e:96:13:5d:c3:c3:95:4d:7a:43:
75:ad:36:70:50:4e:38:1f:ba:c1:5d:35:be:f5:6d:36:32:a7:
e3:8b:2b:0a:0c:00:15:6f:a0:9b:a1:4e:4c:f8:61:d5:bc:79:
4b:fd:6a:db:17:90:ba:93:ed:4c:09:4e:82:ee:e4:40:54:52:
5c:b2:b2:91:cd:70:4a:04:46:2c:5b:40:eb:98:81:e3:fb:67:
10:1e:a5:e4:2e:77:42:66:7e:dc:7c:20:1f:e0:74:c2:46:6e:
a4:e0:17:60:43:5c:30:3e:e8:4f:9a:e2:fa:6b:c8:f9:81:ed:
bb:f8:5b:e1:03:8c:07:b3:6d:97:f1:e1:04:bb:21:31:9c:4b:
04:ac:fb:d7:d4:41:f7:44:a9:ed:00:65:ed:c7:83:e7:1b:e2:
53:b5:c6:cb:e5:9a:8e:f7:01:b3:73:24:e6:f9:38:b0:f5:ce:
7b:bd:18:15:b5:64:22:20:8d:1c:67:cd:b6:b4:1a:8d:7e:f7:
e0:01:42:9e:07:b7:de:9c:ff:87:8e:26:4a:8d:e7:aa:92:24:
7d:df:ba:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiA+Ve1YR+hLDwbsVIpG5pJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMmNiN2Y5Y2EwZWZkNzJiZTI1OGE0YTA5MzU4ODA2Mzc0
YjQ2NjIwHhcNMjUwODA2MjAwMTIxWhcNMjUwODA3MjAwMTIxWjAzMTEwLwYDVQQD
EygyZjdlNmQzYWJlZjcyNGRkNDJhMmM4OGE1ZmJiYzIzNjY2YTQ2Mzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVQ6UkaEVKOVw6pfRwH/bkXiPhcg
v5C7I2h1h33MLki3JBGGSy3IAjezN65uYVTOkW0UaABqSexbBsbuFsZRKq8ivj1R
cpB6EfilZfO7uMG3x7Kt/+LwVdRXFVNjHC5+HsFw6jEfC7jYgQ5NYLGenCTvU5Sx
ObgYJ+miu/X/XPcy8dNuTIxgaA5ZoOYzb+8fN+unBnWVW6wOk/ptQ6iur+O67CJn
MDj0hkF7ANQjgPqCaZPWuEycLKm+e9/f9GUMyDRXGrR1UjU4aUVa0Ue1tUTkbZdN
miDCXCayJi81sQXJf9WXXhW1RP5De7dXCfoZ7aCkN0n8W/72DfhdZn/aoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9+bTq+9yTdQqLIil+7wjZmpGOFMB8GA1UdIwQY
MBaAFJwst/nKDv1yviWKSgk1iAY3S0ZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkN5My1jb09fWEstSllwS0NUV0lCamRMUm1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84NmE0MjYtNTZlZS00NmRkLTk0MjUt
N2Y5MmMzNGViMDdjLzEvbkN5My1jb09fWEstSllwS0NUV0lCamRMUm1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84NmE0MjYtNTZlZS00NmRkLTk0MjUtN2Y5MmMzNGViMDdj
LzEvbkN5My1jb09fWEstSllwS0NUV0lCamRMUm1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYt8rlr4b
mDO6V9BRz8wmheZEbyaEW3qv8LfGnQ6xXh+S8QKpv9k7NXQtlh0OlhNdw8OVTXpD
da02cFBOOB+6wV01vvVtNjKn44srCgwAFW+gm6FOTPhh1bx5S/1q2xeQupPtTAlO
gu7kQFRSXLKykc1wSgRGLFtA65iB4/tnEB6l5C53QmZ+3HwgH+B0wkZupOAXYENc
MD7oT5ri+mvI+YHtu/hb4QOMB7Ntl/HhBLshMZxLBKz719RB90Sp7QBl7ceD5xvi
U7XGy+WajvcBs3Mk5vk4sPXOe70YFbVkIiCNHGfNtrQajX734AFCnge33pz/h44m
So3nqpIkfd+64w==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:42:02 2025 by rpki-client