Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
File: n-mO5s-z-6g7lyrhJlO12fxwcC4.mft (raw, json)
Hash identifier: 0GI5qLMfD/k2O5OPXjWfsYxfQlUSp0bgfK2OAISb5qE=
Subject key identifier: 96:DB:93:68:D8:B2:DC:EF:51:21:3E:B1:85:84:DF:55:2A:34:00:01
Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Certificate serial: 019889FC52E79DA71A4BBEF1EDA11D876D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
Manifest number: 0CF6
Signing time: Fri 08 Aug 2025 14:01:11 +0000
Manifest this update: Fri 08 Aug 2025 14:01:11 +0000
Manifest next update: Sat 09 Aug 2025 14:01:11 +0000
Files and hashes: 1: 1rNQC9Pmf5K1eRYu1hkhr5zZk2Q.roa (hash: x5fQIv4POV9mBCJLuhdzQlSn9HXra5gwr9JL2VOeY1M=)
2: n-mO5s-z-6g7lyrhJlO12fxwcC4.crl (hash: MbLHFyc/PDEQCXuo67ZDbEeqydujcjB0Nw5chUxK/N8=)
3: wILLHD-thZnbY2_hVwSd8tKmVuU.roa (hash: 2k1puHfj5prqotEB5UejW81dxBofSqdytblBomrOVEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:fc:52:e7:9d:a7:1a:4b:be:f1:ed:a1:1d:87:6d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Validity
Not Before: Aug 8 14:01:11 2025 GMT
Not After : Aug 9 14:01:11 2025 GMT
Subject: CN=96db9368d8b2dcef51213eb18584df552a340001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:ff:48:16:98:94:10:9d:98:7b:e8:6e:64:
b3:e7:49:f0:ed:de:92:f4:e8:f4:04:8e:ec:b0:30:
83:af:52:af:39:64:0e:aa:bd:c2:48:f7:14:0a:2b:
d0:92:2c:41:94:35:4d:db:f2:e5:c8:d1:e6:d3:2c:
70:2a:ec:d7:36:dc:fb:b9:86:48:b9:81:8c:1c:b9:
2a:c5:46:cb:4a:df:8d:de:68:93:ba:20:55:fc:52:
6a:3c:a4:0d:d6:a5:40:e5:48:cf:96:f7:50:17:af:
c4:c6:14:50:02:c1:0d:06:77:10:f7:ab:31:ca:9f:
8f:46:71:4a:eb:22:df:73:f1:44:90:1d:a8:c8:80:
48:f5:37:ad:63:38:04:78:bf:37:d0:52:dd:1d:b7:
c9:b4:db:f4:49:da:38:7b:eb:d4:bf:10:7b:9d:73:
bd:45:46:4e:67:b3:b0:0e:47:27:29:f0:97:a0:eb:
65:cc:d3:dc:49:21:c3:05:4c:c3:9c:0b:7d:b2:16:
7c:e1:7d:4f:0d:20:b9:6b:88:f2:17:65:85:dd:44:
e8:e2:fb:25:9d:6f:a0:ff:8e:99:63:85:15:96:09:
d6:e2:c2:9f:bd:f8:14:75:8c:4a:a7:7b:65:39:4f:
99:1f:82:92:97:e7:a2:d7:b8:9f:fc:7c:8c:73:c5:
14:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DB:93:68:D8:B2:DC:EF:51:21:3E:B1:85:84:DF:55:2A:34:00:01
X509v3 Authority Key Identifier:
keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:eb:44:53:9f:42:50:30:24:6e:65:88:38:44:0f:15:b7:29:
d6:e2:38:be:0b:10:0f:b4:ba:e2:eb:c5:67:49:5c:83:66:57:
5c:a2:a1:95:31:e4:e2:58:d5:f9:d8:f3:eb:51:46:b6:b2:59:
81:f2:d0:94:e4:2c:5b:26:f9:07:95:17:f1:7f:4e:b5:6f:dd:
53:fb:3e:03:2b:68:a8:f1:1d:0c:e6:00:d4:87:f3:22:16:a2:
27:e4:91:6b:7a:eb:bd:c3:52:89:0e:51:63:1b:db:dc:6b:9f:
93:1c:e6:68:ab:79:2b:46:ed:36:78:4e:86:29:d3:65:32:b3:
44:e1:54:be:59:5d:7e:3e:7a:fa:33:dd:c7:4a:39:47:85:76:
58:8e:39:d9:aa:a0:20:df:fb:0d:f0:76:cf:64:04:ca:e5:a8:
e2:b4:06:37:f0:d9:d2:1b:c1:31:56:21:53:0b:c5:cb:ab:c2:
88:01:c0:a2:72:26:c5:a7:0d:df:ee:49:65:6c:44:7a:40:1b:
3d:dd:70:e0:72:34:f3:91:f5:bc:03:f1:c9:93:07:af:87:1a:
4b:68:d5:ec:3f:3f:dc:38:0a:bd:52:45:66:91:da:27:20:db:
c3:c7:13:0c:bf:0c:ac:a3:ae:17:f1:6b:3c:af:3a:fb:70:21:
52:03:e4:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJ/FLnnacaS77x7aEdh21AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZTk4ZWU2Y2ZiM2ZiYTgzYjk3MmFlMTI2NTNiNWQ5ZmM3
MDcwMmUwHhcNMjUwODA4MTQwMTExWhcNMjUwODA5MTQwMTExWjAzMTEwLwYDVQQD
Eyg5NmRiOTM2OGQ4YjJkY2VmNTEyMTNlYjE4NTg0ZGY1NTJhMzQwMDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuH/SBaYlBCdmHvobmSz50nw7d6S
9Oj0BI7ssDCDr1KvOWQOqr3CSPcUCivQkixBlDVN2/LlyNHm0yxwKuzXNtz7uYZI
uYGMHLkqxUbLSt+N3miTuiBV/FJqPKQN1qVA5UjPlvdQF6/ExhRQAsENBncQ96sx
yp+PRnFK6yLfc/FEkB2oyIBI9TetYzgEeL830FLdHbfJtNv0Sdo4e+vUvxB7nXO9
RUZOZ7OwDkcnKfCXoOtlzNPcSSHDBUzDnAt9shZ84X1PDSC5a4jyF2WF3UTo4vsl
nW+g/46ZY4UVlgnW4sKfvfgUdYxKp3tlOU+ZH4KSl+ei17if/HyMc8UUYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbbk2jYstzvUSE+sYWE31UqNAABMB8GA1UdIwQY
MBaAFJ/pjubPs/uoO5cq4SZTtdn8cHAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgt
MTNmODk4YmM3ZDBlLzEvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgtMTNmODk4YmM3ZDBl
LzEvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbetEU59C
UDAkbmWIOEQPFbcp1uI4vgsQD7S64uvFZ0lcg2ZXXKKhlTHk4ljV+djz61FGtrJZ
gfLQlOQsWyb5B5UX8X9OtW/dU/s+AytoqPEdDOYA1IfzIhaiJ+SRa3rrvcNSiQ5R
Yxvb3GufkxzmaKt5K0btNnhOhinTZTKzROFUvlldfj56+jPdx0o5R4V2WI452aqg
IN/7DfB2z2QEyuWo4rQGN/DZ0hvBMVYhUwvFy6vCiAHAonImxacN3+5JZWxEekAb
Pd1w4HI085H1vAPxyZMHr4caS2jV7D8/3DgKvVJFZpHaJyDbw8cTDL8MrKOuF/Fr
PK86+3AhUgPk4A==
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:22:14 2025 by rpki-client