Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier: h3fZ4YhaDR07OsQ6P4OcbFlmPquV7j3YmvvpzYM6vdo=
Subject key identifier: 99:06:3A:32:5B:BA:74:61:38:17:CD:28:93:74:18:32:FA:5F:84:16
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 01987306F267CF44DA7D9DEBBF62F28CB01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number: 090D
Signing time: Mon 04 Aug 2025 03:01:31 +0000
Manifest this update: Mon 04 Aug 2025 03:01:31 +0000
Manifest next update: Tue 05 Aug 2025 03:01:31 +0000
Files and hashes: 1: IdEYIsWCps3Gl-CPOJNmXVY_KDA.roa (hash: V5/YEnbALkGDiezb6/4H3zOCBx4UZLrATG4CYdBNlRA=)
2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: 3wfHNTQ958rZo3Xj+nFZ67oPyUC+IWZo+Xip07GQGVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:f2:67:cf:44:da:7d:9d:eb:bf:62:f2:8c:b0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: Aug 4 03:01:31 2025 GMT
Not After : Aug 5 03:01:31 2025 GMT
Subject: CN=99063a325bba74613817cd2893741832fa5f8416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:f3:78:f3:9c:09:b6:5e:17:4b:ab:c2:e4:
b4:ed:37:df:30:35:c3:58:a0:e0:b8:bf:4b:ad:24:
85:3a:0a:42:76:7e:06:3b:78:66:23:c8:0c:b8:d3:
29:16:ce:3e:46:02:95:54:2d:64:5e:d9:68:3e:e8:
a0:e1:0d:59:4b:8d:c8:e7:d0:59:a9:93:c0:70:f2:
55:c2:c3:6a:6f:72:a9:b4:c8:07:c8:a2:2e:8f:c8:
a2:d2:9b:58:2d:dd:e2:32:ec:e8:24:37:e7:d4:de:
d0:68:1d:3b:58:79:20:4a:84:cf:3c:05:29:19:b1:
8f:3f:6c:e0:0b:a1:b7:af:b4:31:52:a6:89:81:a3:
1b:7a:98:03:da:4b:88:ae:b2:8e:e7:06:d3:08:52:
83:de:6e:54:ac:4c:22:01:01:e8:61:27:88:fd:68:
e6:6d:12:f2:6e:cd:d1:28:ed:e8:4e:df:58:a0:7c:
a9:c4:b1:39:18:94:59:1f:36:b2:90:6c:23:b5:c7:
26:17:68:af:14:e1:c7:40:8b:e3:96:a6:a1:bb:d8:
11:3c:39:0b:68:e6:b8:48:86:28:5e:19:65:ff:33:
42:bc:d5:c6:63:b0:84:4a:0a:1f:6e:8d:4c:b2:a7:
d5:96:f7:82:fa:d7:c6:92:89:98:e2:2e:f2:d8:c1:
0b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:06:3A:32:5B:BA:74:61:38:17:CD:28:93:74:18:32:FA:5F:84:16
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c5:cd:12:77:ca:23:c1:37:62:80:ff:31:fb:ab:77:b6:4c:
f8:f2:74:b8:1a:6a:2d:cf:0a:ed:b7:2d:12:5a:8e:1c:9c:50:
f3:06:92:cb:09:d5:56:5a:86:f4:76:92:ef:16:36:3a:33:b6:
36:9c:49:8d:1f:3b:4c:ff:12:7d:b0:98:22:d2:a0:1b:4c:fa:
4e:6b:66:a6:61:4f:ac:5c:d0:66:a3:b1:c1:14:bb:34:95:b2:
48:24:79:85:1e:13:b5:14:70:26:9c:32:3f:76:ed:bd:d7:d2:
42:0c:ed:fa:0a:27:d8:1b:75:d4:d1:86:35:97:e7:81:f9:37:
a0:3f:95:3d:4a:49:fc:a4:5c:2f:87:c0:63:5b:6e:8c:5b:47:
0b:f7:70:a1:29:97:77:d1:0c:b7:d9:12:28:b7:db:28:76:c6:
1d:6b:8d:ce:4a:a6:33:51:a5:af:ef:f2:91:cc:03:d5:e8:70:
bb:d4:a0:9e:a2:a5:c5:71:19:98:1b:eb:f7:ca:f8:46:52:18:
64:e9:6e:b2:2e:58:ef:ed:05:33:1a:3d:1b:0a:6e:29:08:52:
52:72:63:d4:d9:f2:d1:3e:fc:99:88:70:f4:7f:67:36:b8:37:
ad:cd:1b:5f:fa:1b:63:db:e2:b0:22:36:c3:de:c3:3a:cd:42:
8d:61:11:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBvJnz0TafZ3rv2LyjLAbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODIyNDM3ZjQ5ZWQ1Mzg4NjY4OTAyMmFmZGRkYTU5Zjc5
ZjhhNzEwHhcNMjUwODA0MDMwMTMxWhcNMjUwODA1MDMwMTMxWjAzMTEwLwYDVQQD
Eyg5OTA2M2EzMjViYmE3NDYxMzgxN2NkMjg5Mzc0MTgzMmZhNWY4NDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2XzePOcCbZeF0urwuS07TffMDXD
WKDguL9LrSSFOgpCdn4GO3hmI8gMuNMpFs4+RgKVVC1kXtloPuig4Q1ZS43I59BZ
qZPAcPJVwsNqb3KptMgHyKIuj8ii0ptYLd3iMuzoJDfn1N7QaB07WHkgSoTPPAUp
GbGPP2zgC6G3r7QxUqaJgaMbepgD2kuIrrKO5wbTCFKD3m5UrEwiAQHoYSeI/Wjm
bRLybs3RKO3oTt9YoHypxLE5GJRZHzaykGwjtccmF2ivFOHHQIvjlqahu9gRPDkL
aOa4SIYoXhll/zNCvNXGY7CESgofbo1MsqfVlveC+tfGkomY4i7y2MELVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkGOjJbunRhOBfNKJN0GDL6X4QWMB8GA1UdIwQY
MBaAFJ+CJDf0ntU4hmiQIq/d2ln3n4pxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWIt
MTRlYzQxZDRjMGE2LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWItMTRlYzQxZDRjMGE2
LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8XNEnfK
I8E3YoD/Mfurd7ZM+PJ0uBpqLc8K7bctElqOHJxQ8waSywnVVlqG9HaS7xY2OjO2
NpxJjR87TP8SfbCYItKgG0z6TmtmpmFPrFzQZqOxwRS7NJWySCR5hR4TtRRwJpwy
P3btvdfSQgzt+gon2Bt11NGGNZfngfk3oD+VPUpJ/KRcL4fAY1tujFtHC/dwoSmX
d9EMt9kSKLfbKHbGHWuNzkqmM1Glr+/ykcwD1ehwu9SgnqKlxXEZmBvr98r4RlIY
ZOlusi5Y7+0FMxo9GwpuKQhSUnJj1Nny0T78mYhw9H9nNrg3rc0bX/obY9visCI2
w97DOs1CjWEROA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:04 2025 by rpki-client