Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
File: n3Qy9pnL0kmy48nFW976-DmGtEI.mft (raw, json)
Hash identifier: VdUVEQdLBoCuWqNsTmmXuwLB2uX5y83TFN8oiCdVqac=
Subject key identifier: 37:CD:1B:30:53:92:C5:82:A3:EF:13:08:AC:F1:8B:C7:7C:96:66:8C
Authority key identifier: 9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
Certificate issuer: /CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Certificate serial: 019891ECD06790CFC6EB61694A4AF6EEB6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
Manifest number: 10ED
Signing time: Sun 10 Aug 2025 03:01:12 +0000
Manifest this update: Sun 10 Aug 2025 03:01:12 +0000
Manifest next update: Mon 11 Aug 2025 03:01:12 +0000
Files and hashes: 1: n3Qy9pnL0kmy48nFW976-DmGtEI.crl (hash: d2FtOrKCbGIvekxt32JcJ4rs1unCwOkHOP/1K4omddU=)
2: yY1iNFVSPGpVBCv6e5Q4VD19NB8.roa (hash: Xz+3ntm5iVPl2B9YcE2P65g+xG5FxMjLX4w1n0LEPnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:ec:d0:67:90:cf:c6:eb:61:69:4a:4a:f6:ee:b6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Validity
Not Before: Aug 10 03:01:12 2025 GMT
Not After : Aug 11 03:01:12 2025 GMT
Subject: CN=37cd1b305392c582a3ef1308acf18bc77c96668c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8d:1d:8c:b5:05:dd:44:1d:a7:6d:f5:e6:8c:
1a:2b:bf:72:9d:30:b0:5d:50:78:97:90:6b:02:a0:
5e:f1:c7:9b:6c:51:6f:4f:a7:af:22:af:d0:40:12:
17:70:d3:d7:ad:90:a9:da:76:f9:4b:cb:76:0e:e0:
85:56:36:e5:3b:2c:01:22:5d:78:c7:c5:4a:36:4a:
9f:e3:de:94:40:1e:6c:ec:85:06:9c:1e:ec:51:11:
57:02:fa:fd:da:eb:da:dc:34:2e:52:3f:7d:ee:f8:
6e:4a:fb:5c:21:7e:05:d1:fe:de:d9:5e:2c:a6:e5:
35:8f:2f:bc:3e:4b:f8:3e:5a:9f:06:e6:c1:a6:c9:
a2:b7:9d:fd:58:88:ad:5f:f5:e4:0e:21:7d:e9:81:
6a:ab:c0:1e:3f:b9:50:11:79:d3:1f:a4:3b:05:6d:
a5:94:ec:5c:9c:82:f2:a6:8b:15:c3:f9:3a:8b:6d:
03:59:ab:d0:7e:0f:65:26:a5:b3:ff:2d:de:c2:19:
5e:9f:ad:de:ca:74:b7:ce:84:2d:b1:07:8c:37:1b:
dc:97:39:b1:45:6e:ec:b2:45:49:f8:79:7f:d9:40:
5d:70:1a:39:93:9e:76:2d:87:af:a3:14:a6:bb:0b:
c7:ec:7d:3a:7c:56:e3:5d:57:b0:30:5c:55:c4:cf:
94:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CD:1B:30:53:92:C5:82:A3:EF:13:08:AC:F1:8B:C7:7C:96:66:8C
X509v3 Authority Key Identifier:
keyid:9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:27:c5:58:b9:ee:51:a5:57:ca:06:8d:33:25:d1:64:3a:74:
0d:6a:56:2c:7c:6c:6d:f9:6e:7e:77:80:f4:03:90:50:2a:ab:
7c:9d:03:15:64:ce:b9:f7:ad:c7:03:da:80:26:6b:22:fa:ee:
45:29:ff:2d:5e:1b:5d:e3:6d:de:f8:da:b3:d4:fe:60:6a:75:
1d:dd:3c:74:7f:ac:22:5a:9f:8e:cf:ca:22:96:3d:27:b9:16:
18:c3:8d:b4:e3:f5:10:32:ce:1b:78:13:ac:3d:6b:b0:c9:69:
74:4d:c0:57:24:ea:b0:ae:ec:17:4c:4d:3f:8a:20:72:29:3c:
eb:1c:85:95:79:01:7d:4f:ab:2c:fe:f6:93:82:b6:4c:6c:45:
66:7f:07:e5:80:29:5a:eb:14:72:ac:6f:ae:31:a1:9d:2d:49:
ad:f0:1f:74:81:af:d0:52:b2:ce:5c:3f:36:2f:96:fe:ae:07:
0f:fa:2a:4e:aa:b1:b4:68:54:c6:d7:24:98:2d:1f:3b:85:26:
0b:63:c2:be:f1:08:9d:b9:5f:26:11:71:32:ce:c6:b6:f9:a8:
f6:45:b8:d8:1a:c5:b0:bc:91:96:4d:c4:00:5f:7f:67:e7:22:
23:3c:4a:32:0a:7d:72:8e:e5:fd:76:90:c5:14:ff:f8:3a:cb:
2b:1c:33:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiR7NBnkM/G62FpSkr27ra0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNzQzMmY2OTljYmQyNDliMmUzYzljNTViZGVmYWY4Mzk4
NmI0NDIwHhcNMjUwODEwMDMwMTEyWhcNMjUwODExMDMwMTEyWjAzMTEwLwYDVQQD
EygzN2NkMWIzMDUzOTJjNTgyYTNlZjEzMDhhY2YxOGJjNzdjOTY2NjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY0djLUF3UQdp2315owaK79ynTCw
XVB4l5BrAqBe8cebbFFvT6evIq/QQBIXcNPXrZCp2nb5S8t2DuCFVjblOywBIl14
x8VKNkqf496UQB5s7IUGnB7sURFXAvr92uva3DQuUj997vhuSvtcIX4F0f7e2V4s
puU1jy+8Pkv4PlqfBubBpsmit539WIitX/XkDiF96YFqq8AeP7lQEXnTH6Q7BW2l
lOxcnILyposVw/k6i20DWavQfg9lJqWz/y3ewhlen63eynS3zoQtsQeMNxvclzmx
RW7sskVJ+Hl/2UBdcBo5k552LYevoxSmuwvH7H06fFbjXVewMFxVxM+UKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfNGzBTksWCo+8TCKzxi8d8lmaMMB8GA1UdIwQY
MBaAFJ90MvaZy9JJsuPJxVve+vg5hrRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjNReTlwbkwwa215NDhuRlc5NzYtRG1HdEVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wY2YxODctZWNiMy00YjQyLTkxZTQt
NmFkZGZjYjE4Zjk5LzEvbjNReTlwbkwwa215NDhuRlc5NzYtRG1HdEVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8wY2YxODctZWNiMy00YjQyLTkxZTQtNmFkZGZjYjE4Zjk5
LzEvbjNReTlwbkwwa215NDhuRlc5NzYtRG1HdEVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSfFWLnu
UaVXygaNMyXRZDp0DWpWLHxsbflufneA9AOQUCqrfJ0DFWTOufetxwPagCZrIvru
RSn/LV4bXeNt3vjas9T+YGp1Hd08dH+sIlqfjs/KIpY9J7kWGMONtOP1EDLOG3gT
rD1rsMlpdE3AVyTqsK7sF0xNP4ogcik86xyFlXkBfU+rLP72k4K2TGxFZn8H5YAp
WusUcqxvrjGhnS1JrfAfdIGv0FKyzlw/Ni+W/q4HD/oqTqqxtGhUxtckmC0fO4Um
C2PCvvEInblfJhFxMs7Gtvmo9kW42BrFsLyRlk3EAF9/Z+ciIzxKMgp9co7l/XaQ
xRT/+DrLKxwz7g==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:34:23 2025 by rpki-client