Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
File: nkVus5ycwGznHHdUoD8_PwCSgd0.mft (raw, json)
Hash identifier: F+96pxhiwyncWcKWcwV+J6wvvkQVThJyFImL+r7UJgY=
Subject key identifier: AB:FB:B6:D0:7B:F1:FA:95:C4:19:DD:E3:F2:7E:46:A5:45:1A:DB:45
Authority key identifier: 9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
Certificate issuer: /CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Certificate serial: 019873E1F0A7E5FCE3EB16D8B3741D42B303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:00:43 +0000
Manifest this update: Mon 04 Aug 2025 07:00:43 +0000
Manifest next update: Tue 05 Aug 2025 07:00:43 +0000
Files and hashes: 1: 0e3XvmLgCCLyXX2Pnl1oUQprG1Y.roa (hash: FMORsyXFiyuBPfP/wfzNQt83A1mlYj2dL5G6obhc0aU=)
2: nkVus5ycwGznHHdUoD8_PwCSgd0.crl (hash: 3O/gtUHMz5KacysqVdGycCuo1z9ql7odpgbw/T2m+IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:f0:a7:e5:fc:e3:eb:16:d8:b3:74:1d:42:b3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Validity
Not Before: Aug 4 07:00:43 2025 GMT
Not After : Aug 5 07:00:43 2025 GMT
Subject: CN=abfbb6d07bf1fa95c419dde3f27e46a5451adb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:de:0c:73:e6:32:a3:c6:69:4f:c1:e0:ea:
fa:b2:f7:b6:15:dd:d7:9b:f3:8f:bd:01:52:a6:f2:
89:12:32:9d:5b:a3:29:85:cc:b4:14:44:32:ff:14:
c5:fe:d8:be:44:55:cc:f9:5f:df:de:90:4b:59:c1:
c1:23:d7:f6:7a:1e:e6:b6:e2:76:ab:31:48:06:a1:
66:1b:c5:eb:fd:cc:79:3c:db:8a:5e:1e:4d:c4:bd:
87:74:67:2a:94:84:97:7c:fe:a1:cb:44:35:ba:45:
d6:44:c0:0e:89:41:38:a1:24:68:39:cb:63:09:69:
7c:49:4b:60:d9:60:f5:33:8b:3f:26:d5:81:49:91:
f9:52:6a:4b:3d:12:dd:d5:bd:1f:15:ef:a6:a8:0f:
93:c5:8c:dd:a1:15:da:f6:9f:05:87:4c:99:bc:cc:
40:76:bb:c5:23:6b:40:92:96:7b:e0:b4:f7:2a:bf:
31:7c:8f:f9:2f:fb:12:03:00:e0:97:c7:a1:01:a5:
c6:c9:84:5b:51:b2:bd:f8:1d:f5:4b:4a:d2:2f:5c:
c6:0e:b7:81:92:35:95:07:3e:57:08:f0:7c:41:11:
2b:74:6b:a7:8c:d4:e7:0e:58:0e:80:d3:02:88:81:
ee:52:41:2c:c6:e3:7c:f6:ea:78:3e:fe:30:c4:e3:
e7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FB:B6:D0:7B:F1:FA:95:C4:19:DD:E3:F2:7E:46:A5:45:1A:DB:45
X509v3 Authority Key Identifier:
keyid:9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:aa:54:31:92:15:84:51:74:72:e9:31:a6:da:29:20:ee:cb:
df:8c:2f:6a:77:3e:75:70:25:2a:e8:0f:5c:6a:97:8a:93:ea:
79:e8:f6:a2:2b:40:60:6e:ef:68:45:c5:29:90:92:6f:ab:d0:
44:20:de:66:9e:d6:4c:81:e3:97:3d:69:ea:03:ca:77:e2:dc:
b4:b9:1c:fa:0b:fc:90:58:f1:5d:61:4c:97:df:00:fa:57:a4:
98:bd:66:9d:8d:35:5d:90:4e:5f:6e:79:85:e0:61:34:b2:1e:
34:96:c1:30:b2:ad:8f:d0:9e:36:f6:1c:ed:88:95:9e:86:18:
0d:78:d1:97:4d:1d:d8:75:b9:ea:35:79:d5:1c:ca:85:2e:71:
85:99:ff:b7:c2:f3:42:b4:a5:9c:38:60:82:88:05:6f:7e:08:
68:5a:06:e4:d1:46:53:47:2d:ae:91:47:c3:24:16:e6:e6:56:
7b:f2:a8:8d:5e:ab:57:08:2f:33:fe:5d:19:5b:fa:8b:53:12:
26:0d:c8:2b:2d:8d:b6:7c:bb:85:39:4f:21:60:07:bb:81:20:
53:53:82:06:07:5e:68:92:b9:48:6a:3f:1b:86:7d:93:c6:44:
e4:01:fb:b4:32:e4:33:f4:92:86:a7:a8:99:af:1d:29:85:fe:
a2:d0:37:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4fCn5fzj6xbYs3QdQrMDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDU2ZWIzOWM5Y2MwNmNlNzFjNzc1NGEwM2YzZjNmMDA5
MjgxZGQwHhcNMjUwODA0MDcwMDQzWhcNMjUwODA1MDcwMDQzWjAzMTEwLwYDVQQD
EyhhYmZiYjZkMDdiZjFmYTk1YzQxOWRkZTNmMjdlNDZhNTQ1MWFkYjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCfeDHPmMqPGaU/B4Or6sve2Fd3X
m/OPvQFSpvKJEjKdW6Mphcy0FEQy/xTF/ti+RFXM+V/f3pBLWcHBI9f2eh7mtuJ2
qzFIBqFmG8Xr/cx5PNuKXh5NxL2HdGcqlISXfP6hy0Q1ukXWRMAOiUE4oSRoOctj
CWl8SUtg2WD1M4s/JtWBSZH5UmpLPRLd1b0fFe+mqA+TxYzdoRXa9p8Fh0yZvMxA
drvFI2tAkpZ74LT3Kr8xfI/5L/sSAwDgl8ehAaXGyYRbUbK9+B31S0rSL1zGDreB
kjWVBz5XCPB8QRErdGunjNTnDlgOgNMCiIHuUkEsxuN89up4Pv4wxOPnTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKv7ttB78fqVxBnd4/J+RqVFGttFMB8GA1UdIwQY
MBaAFJ5FbrOcnMBs5xx3VKA/Pz8AkoHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtWdXM1eWN3R3puSEhkVW9EOF9Qd0NTZ2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmM3MTItMGM2ZS00ZmI1LTkwZDkt
YzFmOTE1ODI0M2VhLzEvbmtWdXM1eWN3R3puSEhkVW9EOF9Qd0NTZ2QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMmM3MTItMGM2ZS00ZmI1LTkwZDktYzFmOTE1ODI0M2Vh
LzEvbmtWdXM1eWN3R3puSEhkVW9EOF9Qd0NTZ2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKpUMZIV
hFF0cukxptopIO7L34wvanc+dXAlKugPXGqXipPqeej2oitAYG7vaEXFKZCSb6vQ
RCDeZp7WTIHjlz1p6gPKd+LctLkc+gv8kFjxXWFMl98A+lekmL1mnY01XZBOX255
heBhNLIeNJbBMLKtj9CeNvYc7YiVnoYYDXjRl00d2HW56jV51RzKhS5xhZn/t8Lz
QrSlnDhggogFb34IaFoG5NFGU0ctrpFHwyQW5uZWe/KojV6rVwgvM/5dGVv6i1MS
Jg3IKy2Ntny7hTlPIWAHu4EgU1OCBgdeaJK5SGo/G4Z9k8ZE5AH7tDLkM/SShqeo
ma8dKYX+otA3fA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:05:52 2025 by rpki-client