Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
File: nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft (raw, json)
Hash identifier: s0VOL3Jc32ZbU8l8cR1K6lt8x/czy0hR1SK5kuQyh+w=
Subject key identifier: 15:3C:F3:A9:F5:85:F0:B9:16:B4:BF:77:DD:D5:FB:12:46:41:0A:3F
Authority key identifier: 9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
Certificate issuer: /CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Certificate serial: 01989637269095BD95DAB9884936B1407D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
Manifest number: 151F
Signing time: Sun 10 Aug 2025 23:00:53 +0000
Manifest this update: Sun 10 Aug 2025 23:00:53 +0000
Manifest next update: Mon 11 Aug 2025 23:00:53 +0000
Files and hashes: 1: D2puN1AdZ1JNvFyB30_yGN8jQe0.roa (hash: 2k+YekT8y6pWHIhQMm8Q342e5tW1eRByVypogLnX8G0=)
2: U_LNSvlDlkkr0YEu8loP_N3lVG8.roa (hash: sfDFxTDzQkmKbFdSJOmY1OQKmiVJ1hkpwWXjIhD3ogw=)
3: nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl (hash: CtHPaCofer8dLUeJVCS6DO5dMA/fqQsYazIUtxdwEOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:26:90:95:bd:95:da:b9:88:49:36:b1:40:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Validity
Not Before: Aug 10 23:00:53 2025 GMT
Not After : Aug 11 23:00:53 2025 GMT
Subject: CN=153cf3a9f585f0b916b4bf77ddd5fb1246410a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:0c:99:24:36:e3:2d:79:bc:d5:1c:a7:38:
08:08:be:d2:48:ec:35:1b:2a:d9:d4:3a:06:3e:40:
72:10:75:59:c5:a5:dd:0d:dd:17:c9:80:f8:d3:60:
72:0f:71:5a:48:45:73:ed:ac:ae:a4:b1:40:4c:08:
49:1f:a4:bd:44:dc:2a:52:8d:cb:e2:8d:24:50:25:
3d:20:ba:f6:83:b4:d3:96:7f:99:b7:2c:3a:80:63:
e3:27:4b:c2:45:a2:20:59:a0:47:bd:cf:f1:b6:23:
9c:c1:30:e8:b0:c5:22:52:32:af:a7:32:f1:cc:28:
d1:6f:ef:72:a4:2a:49:51:eb:27:dc:2a:ac:c1:03:
c1:5f:cb:2f:bc:fc:c0:a0:6d:d7:3d:37:4e:23:17:
87:c0:68:a5:ec:a4:59:65:c7:08:9a:de:2f:52:9a:
ab:d0:18:7a:10:99:f5:fa:67:df:a3:64:d5:ea:12:
ea:f1:57:6b:64:a7:5b:33:be:8c:35:ab:65:5a:ca:
ac:b7:20:30:1f:21:4a:10:b0:18:dd:42:e2:2b:7e:
6c:1b:e9:33:0c:bd:54:91:c2:d4:c2:9c:90:9f:83:
65:6e:d3:da:12:e4:a5:13:5b:e7:59:c3:0c:eb:17:
a6:7c:d7:fe:fd:7a:fa:1e:31:80:96:fe:e3:c0:48:
b1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3C:F3:A9:F5:85:F0:B9:16:B4:BF:77:DD:D5:FB:12:46:41:0A:3F
X509v3 Authority Key Identifier:
keyid:9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ee:03:44:e5:2c:e0:02:1c:c7:63:d0:64:76:ed:7b:a6:48:
46:37:f4:28:92:c4:fd:1d:c6:ce:e0:cc:39:35:44:78:50:20:
f9:f9:b7:a9:b2:2e:3a:6a:7e:bb:a9:c2:08:5b:9a:61:18:ed:
f0:b5:f9:c8:11:23:2c:26:e2:bb:61:bb:72:b3:93:30:34:21:
93:f2:0d:a1:2a:be:0a:94:9c:22:4b:24:7b:11:7a:f7:13:9d:
12:d0:df:22:7a:90:9e:fa:b9:73:b3:a9:f7:0e:d1:33:19:66:
c4:57:9e:14:81:9f:63:3b:f0:c6:03:39:e9:df:f7:d6:24:0e:
8c:e9:f6:e3:47:97:e1:10:c0:b5:d9:92:c3:27:32:28:cd:09:
c8:9c:21:3e:32:bb:e3:39:71:e9:4b:6c:55:f8:45:45:6d:1a:
fc:5c:96:e1:f3:af:39:09:ce:f2:3e:3e:0d:35:19:69:11:d4:
1d:24:7a:fb:d6:79:b0:f9:79:11:2f:47:29:58:8e:ff:89:b3:
8f:7b:a8:09:1d:7c:a4:78:5c:e4:19:12:a7:f8:08:2e:99:6e:
62:f9:af:8b:16:8c:63:d8:2c:b8:af:f4:f6:53:86:4e:94:5d:
de:13:97:85:51:42:b9:ec:8a:8b:90:e9:08:6a:59:23:a2:55:
d4:65:73:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWNyaQlb2V2rmISTaxQH0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMjhhNmVkMGY1Y2ZjZTc3MmQ1Y2U1YjAzYmI0MjkzMmM4
YTY0ZDAwHhcNMjUwODEwMjMwMDUzWhcNMjUwODExMjMwMDUzWjAzMTEwLwYDVQQD
EygxNTNjZjNhOWY1ODVmMGI5MTZiNGJmNzdkZGQ1ZmIxMjQ2NDEwYTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1kMmSQ24y15vNUcpzgICL7SSOw1
GyrZ1DoGPkByEHVZxaXdDd0XyYD402ByD3FaSEVz7ayupLFATAhJH6S9RNwqUo3L
4o0kUCU9ILr2g7TTln+Ztyw6gGPjJ0vCRaIgWaBHvc/xtiOcwTDosMUiUjKvpzLx
zCjRb+9ypCpJUesn3CqswQPBX8svvPzAoG3XPTdOIxeHwGil7KRZZccImt4vUpqr
0Bh6EJn1+mffo2TV6hLq8VdrZKdbM76MNatlWsqstyAwHyFKELAY3ULiK35sG+kz
DL1UkcLUwpyQn4NlbtPaEuSlE1vnWcMM6xemfNf+/Xr6HjGAlv7jwEix5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBU886n1hfC5FrS/d93V+xJGQQo/MB8GA1UdIwQY
MBaAFJwopu0PXPznctXOWwO7QpMsimTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkNpbTdROWNfT2R5MWM1YkE3dENreXlLWk5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83M2U1MmYtNDJlMy00YTMxLTk3MzYt
YTZiNzYwMDg3MWE2LzEvbkNpbTdROWNfT2R5MWM1YkE3dENreXlLWk5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy83M2U1MmYtNDJlMy00YTMxLTk3MzYtYTZiNzYwMDg3MWE2
LzEvbkNpbTdROWNfT2R5MWM1YkE3dENreXlLWk5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASO4DROUs
4AIcx2PQZHbte6ZIRjf0KJLE/R3GzuDMOTVEeFAg+fm3qbIuOmp+u6nCCFuaYRjt
8LX5yBEjLCbiu2G7crOTMDQhk/INoSq+CpScIkskexF69xOdEtDfInqQnvq5c7Op
9w7RMxlmxFeeFIGfYzvwxgM56d/31iQOjOn240eX4RDAtdmSwycyKM0JyJwhPjK7
4zlx6UtsVfhFRW0a/FyW4fOvOQnO8j4+DTUZaRHUHSR6+9Z5sPl5ES9HKViO/4mz
j3uoCR18pHhc5BkSp/gILpluYvmvixaMY9gsuK/09lOGTpRd3hOXhVFCueyKi5Dp
CGpZI6JV1GVzKg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:38 2025 by rpki-client