Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
File: n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft (raw, json)
Hash identifier: Xcsuu1rrESlbOa7NtJP27zh1gFtB6f3+KQ1mQkuRMT8=
Subject key identifier: 8F:1B:AC:E1:5B:40:B1:A3:7A:1C:F6:17:D7:19:DC:00:89:90:5E:4E
Authority key identifier: 9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46
Certificate issuer: /CN=9fac2fdddabf20ea449870e1dcc0915e60148346
Certificate serial: 0198838C12CEF34568775412074D1F2ED71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 08:00:51 +0000
Manifest this update: Thu 07 Aug 2025 08:00:51 +0000
Manifest next update: Fri 08 Aug 2025 08:00:51 +0000
Files and hashes: 1: cy8YEy59qiwK_Fnvfydw8wHKMzM.roa (hash: 13AgIVf/9mtLdIXYsHWwtEN18P6MQ6JEfgaLpvph65A=)
2: n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl (hash: VmSoewzUZKCLDV2JVnRbmMXuEyGIEkMm01swPkErG+s=)
3: u3h3mvt8jO_1-9Tc1-ZpWXazLnE.roa (hash: gXd9C0jmc6JkjtwTfiNrXT+kcF/uwTHzTooWSRdETt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:12:ce:f3:45:68:77:54:12:07:4d:1f:2e:d7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fac2fdddabf20ea449870e1dcc0915e60148346
Validity
Not Before: Aug 7 08:00:51 2025 GMT
Not After : Aug 8 08:00:51 2025 GMT
Subject: CN=8f1bace15b40b1a37a1cf617d719dc0089905e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:36:6f:32:74:41:3d:99:22:38:2e:76:fd:df:
80:7e:0f:4a:ef:99:28:12:a2:01:a5:c4:33:e4:c9:
f3:94:dc:c0:dd:d0:d8:74:44:3c:2a:54:a5:a7:81:
92:01:c9:ca:a2:38:a5:77:86:08:73:fc:3b:2f:4c:
09:34:62:b3:b0:4f:26:b0:f9:e1:fd:50:6f:e9:00:
72:b7:ca:53:96:35:8d:99:75:c1:09:f6:28:c1:2c:
e1:3e:20:be:93:45:1f:39:fe:c9:29:d5:71:85:ec:
a3:df:69:79:16:a6:61:10:e9:7f:b3:53:e1:63:76:
4c:bc:dd:1e:5d:5f:66:26:97:a6:e0:e8:6f:0a:96:
57:ca:29:15:e7:75:92:8e:7f:2e:4d:40:65:46:f5:
87:7e:e7:6d:0c:36:f9:5b:09:bc:14:fa:23:92:fa:
4d:54:fb:bc:a6:76:ed:b6:f1:29:92:2e:f9:a1:53:
f2:d1:3a:a0:ec:51:cd:31:84:ed:21:07:63:2f:93:
37:66:5f:0b:33:3f:74:8b:a1:98:d4:45:70:47:1b:
dc:4b:31:8c:1c:cd:75:95:30:4d:c7:41:a0:d5:88:
70:d9:9b:78:02:eb:67:13:41:f2:38:dc:ff:20:55:
c8:1d:7a:07:31:b8:bc:0f:b3:7a:87:cf:fc:a9:a4:
60:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1B:AC:E1:5B:40:B1:A3:7A:1C:F6:17:D7:19:DC:00:89:90:5E:4E
X509v3 Authority Key Identifier:
keyid:9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9d:06:45:cc:56:09:fc:28:17:53:9c:61:4a:e8:d2:25:1e:
0f:7e:60:e9:5f:63:e0:29:1c:c7:6a:f4:f9:18:0b:e8:64:1b:
ca:1f:da:0c:bb:bb:e6:ee:3d:0d:bd:5d:10:8f:a9:55:c8:68:
1e:3e:fa:14:78:5e:c7:e0:79:1a:3a:ed:fa:00:89:72:f5:dc:
74:5d:f2:58:12:c3:a6:47:ac:26:a0:f2:04:f0:f4:bf:97:01:
20:e7:a1:2c:34:69:73:d0:4b:c8:59:a4:59:ce:05:94:79:04:
36:94:97:e7:b7:18:26:07:d2:dd:f1:09:dc:83:97:cd:13:d3:
7b:ec:0a:fe:ab:13:2c:10:e7:4b:82:57:17:f8:3d:96:34:84:
e9:69:cb:34:98:6c:19:9c:1d:03:4b:57:41:58:39:56:32:80:
93:22:43:8e:32:52:10:7c:f9:91:6b:a9:39:d4:ff:d1:f0:41:
9c:ff:d7:93:fe:ae:45:97:e9:48:d8:54:4d:03:b6:50:cb:62:
5a:5f:32:5e:41:18:7f:20:64:5f:50:38:70:0a:44:a7:17:68:
6a:5e:72:23:6a:72:67:29:ff:58:21:7f:85:0e:83:99:46:9e:
68:79:b7:54:95:99:a0:d4:d6:68:9c:c1:7f:bf:0e:3a:bb:0f:
99:24:d6:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDjBLO80Vod1QSB00fLtcdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYWMyZmRkZGFiZjIwZWE0NDk4NzBlMWRjYzA5MTVlNjAx
NDgzNDYwHhcNMjUwODA3MDgwMDUxWhcNMjUwODA4MDgwMDUxWjAzMTEwLwYDVQQD
Eyg4ZjFiYWNlMTViNDBiMWEzN2ExY2Y2MTdkNzE5ZGMwMDg5OTA1ZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jZvMnRBPZkiOC52/d+Afg9K75ko
EqIBpcQz5MnzlNzA3dDYdEQ8KlSlp4GSAcnKojild4YIc/w7L0wJNGKzsE8msPnh
/VBv6QByt8pTljWNmXXBCfYowSzhPiC+k0UfOf7JKdVxheyj32l5FqZhEOl/s1Ph
Y3ZMvN0eXV9mJpem4OhvCpZXyikV53WSjn8uTUBlRvWHfudtDDb5Wwm8FPojkvpN
VPu8pnbttvEpki75oVPy0Tqg7FHNMYTtIQdjL5M3Zl8LMz90i6GY1EVwRxvcSzGM
HM11lTBNx0Gg1Yhw2Zt4AutnE0HyONz/IFXIHXoHMbi8D7N6h8/8qaRgwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8brOFbQLGjehz2F9cZ3ACJkF5OMB8GA1UdIwQY
MBaAFJ+sL93avyDqRJhw4dzAkV5gFINGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjZ3djNkcV9JT3BFbUhEaDNNQ1JYbUFVZzBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wYjkzOGYtMTg5Yi00YTdkLThjMzYt
MmEzZmE2MWMzZGM1LzEvbjZ3djNkcV9JT3BFbUhEaDNNQ1JYbUFVZzBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8wYjkzOGYtMTg5Yi00YTdkLThjMzYtMmEzZmE2MWMzZGM1
LzEvbjZ3djNkcV9JT3BFbUhEaDNNQ1JYbUFVZzBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJ0GRcxW
CfwoF1OcYUro0iUeD35g6V9j4Ckcx2r0+RgL6GQbyh/aDLu75u49Db1dEI+pVcho
Hj76FHhex+B5Gjrt+gCJcvXcdF3yWBLDpkesJqDyBPD0v5cBIOehLDRpc9BLyFmk
Wc4FlHkENpSX57cYJgfS3fEJ3IOXzRPTe+wK/qsTLBDnS4JXF/g9ljSE6WnLNJhs
GZwdA0tXQVg5VjKAkyJDjjJSEHz5kWupOdT/0fBBnP/Xk/6uRZfpSNhUTQO2UMti
Wl8yXkEYfyBkX1A4cApEpxdoal5yI2pyZyn/WCF/hQ6DmUaeaHm3VJWZoNTWaJzB
f78OOrsPmSTW/A==
-----END CERTIFICATE-----
Generated at Thu Aug 7 12:53:34 2025 by rpki-client