Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
File: nJGTyUKgcOtue3bTPBFwwauqq8A.mft (raw, json)
Hash identifier: RGT8yJEaCcQOOafsCJuHMnz62xZMuXhvCJgl88RSeeE=
Subject key identifier: 7E:A6:46:4B:DB:07:C3:1B:41:E8:A4:AA:B9:BB:2D:E3:0E:73:35:87
Authority key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
Certificate issuer: /CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Certificate serial: 019880F9263B91AAEFDC37D76AC43A537B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
Manifest number: 0123
Signing time: Wed 06 Aug 2025 20:01:08 +0000
Manifest this update: Wed 06 Aug 2025 20:01:08 +0000
Manifest next update: Thu 07 Aug 2025 20:01:08 +0000
Files and hashes: 1: nJGTyUKgcOtue3bTPBFwwauqq8A.crl (hash: XXiHi6U6degzJrHYl1ekD8sYZfYy2ap8CUTgu+lmQ+s=)
2: zsKGqfleCvDMwN0xjyFpS4xkenw.roa (hash: i/u/9VVtT03r4id3fmUnH+SfZ7Nvzq19dchi8Dl+uKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:26:3b:91:aa:ef:dc:37:d7:6a:c4:3a:53:7b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Validity
Not Before: Aug 6 20:01:08 2025 GMT
Not After : Aug 7 20:01:08 2025 GMT
Subject: CN=7ea6464bdb07c31b41e8a4aab9bb2de30e733587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b7:fc:ef:a9:6b:98:e7:8d:c2:68:70:3b:56:
bc:96:0b:e4:d5:49:6f:4c:0a:94:ff:47:5c:3b:6e:
42:56:ee:c9:c8:7e:c5:c2:76:ec:49:51:86:82:c7:
bf:fe:27:bb:57:5c:da:b5:49:f4:1a:15:b6:aa:30:
62:ad:ab:8e:4b:ef:f4:e6:7d:6c:e9:06:6f:50:1c:
fe:a2:af:fb:9b:a8:93:dc:31:3c:91:01:77:0e:12:
fd:c0:15:6c:d6:a2:00:7d:69:e2:d6:c0:68:2c:2b:
33:f8:dd:b5:4f:85:c1:8c:1f:2f:07:e7:3b:2a:3a:
c6:6f:f7:75:81:86:06:8e:74:e7:19:54:6e:12:dc:
e9:9e:3d:77:c7:6a:49:4a:21:ab:66:eb:1f:c0:43:
df:00:76:d0:7a:8a:82:41:a7:a5:89:ea:5a:2c:cd:
a8:e7:89:3f:b8:db:5d:dc:f5:3b:c5:87:75:b6:81:
bb:ad:b1:25:7d:25:47:e9:e7:26:35:30:51:7c:45:
e5:6a:dc:86:c5:04:e8:6d:47:4d:fb:32:6e:49:9d:
32:0f:21:e0:f4:aa:d8:8c:45:a0:31:f3:58:b3:9c:
08:e4:e3:0b:59:2d:ab:da:00:4f:50:2c:07:fd:13:
dc:dd:c0:ef:19:49:e1:8c:a5:da:d2:dd:56:ab:da:
86:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A6:46:4B:DB:07:C3:1B:41:E8:A4:AA:B9:BB:2D:E3:0E:73:35:87
X509v3 Authority Key Identifier:
keyid:9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:fc:9a:d7:2f:d0:88:92:bc:d0:26:f1:d8:68:99:7c:71:13:
a4:a4:74:03:10:8e:a8:c2:46:11:7e:46:af:e5:62:08:1c:c6:
04:b7:31:6b:27:61:a0:6b:90:55:4f:5d:51:0b:04:93:e7:b1:
a3:df:37:d8:11:d2:56:d1:f4:31:80:bc:74:53:26:3e:c7:f6:
f8:56:53:96:93:22:24:c0:16:c7:c4:3b:19:ac:b0:c8:91:97:
17:ed:21:3c:ee:21:19:bc:a7:91:3c:61:2c:97:32:64:9f:36:
0d:8b:6b:f9:27:4f:4c:01:1e:e1:f7:1c:bb:21:6b:33:34:35:
1f:21:2e:16:a7:0b:8d:f8:4a:e6:0f:42:85:99:5a:ae:71:9b:
b0:04:e1:fc:88:e2:33:ec:8b:1c:0b:cb:ad:eb:7b:60:17:20:
fc:96:40:aa:b7:75:9f:80:06:e0:c2:09:d7:32:13:d3:2a:68:
bc:b9:30:4a:36:2c:43:ff:ac:09:99:b6:50:5f:dd:13:c4:d1:
75:ee:11:f7:9a:7f:53:04:e8:70:87:19:ac:7b:68:59:40:8c:
69:2c:92:d8:0a:a3:80:f9:a0:3f:f8:40:4c:06:27:04:85:49:
a4:e7:d0:c8:0b:f6:d9:50:f8:46:50:da:f1:85:24:b1:53:3d:
f5:c7:a6:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiA+SY7karv3DfXasQ6U3tHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOTE5M2M5NDJhMDcwZWI2ZTdiNzZkMzNjMTE3MGMxYWJh
YWFiYzAwHhcNMjUwODA2MjAwMTA4WhcNMjUwODA3MjAwMTA4WjAzMTEwLwYDVQQD
Eyg3ZWE2NDY0YmRiMDdjMzFiNDFlOGE0YWFiOWJiMmRlMzBlNzMzNTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrf876lrmOeNwmhwO1a8lgvk1Ulv
TAqU/0dcO25CVu7JyH7FwnbsSVGGgse//ie7V1zatUn0GhW2qjBirauOS+/05n1s
6QZvUBz+oq/7m6iT3DE8kQF3DhL9wBVs1qIAfWni1sBoLCsz+N21T4XBjB8vB+c7
KjrGb/d1gYYGjnTnGVRuEtzpnj13x2pJSiGrZusfwEPfAHbQeoqCQaeliepaLM2o
54k/uNtd3PU7xYd1toG7rbElfSVH6ecmNTBRfEXlatyGxQTobUdN+zJuSZ0yDyHg
9KrYjEWgMfNYs5wI5OMLWS2r2gBPUCwH/RPc3cDvGUnhjKXa0t1Wq9qGtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6mRkvbB8MbQeikqrm7LeMOczWHMB8GA1UdIwQY
MBaAFJyRk8lCoHDrbnt20zwRcMGrqqvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkpHVHlVS2djT3R1ZTNiVFBCRnd3YXVxcThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lNjdlODItNzRkMS00NTk4LTgwZWUt
Y2UwZTk3YmFiNmE3LzEvbkpHVHlVS2djT3R1ZTNiVFBCRnd3YXVxcThBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lNjdlODItNzRkMS00NTk4LTgwZWUtY2UwZTk3YmFiNmE3
LzEvbkpHVHlVS2djT3R1ZTNiVFBCRnd3YXVxcThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofya1y/Q
iJK80Cbx2GiZfHETpKR0AxCOqMJGEX5Gr+ViCBzGBLcxaydhoGuQVU9dUQsEk+ex
o9832BHSVtH0MYC8dFMmPsf2+FZTlpMiJMAWx8Q7GaywyJGXF+0hPO4hGbynkTxh
LJcyZJ82DYtr+SdPTAEe4fccuyFrMzQ1HyEuFqcLjfhK5g9ChZlarnGbsATh/Iji
M+yLHAvLret7YBcg/JZAqrd1n4AG4MIJ1zIT0ypovLkwSjYsQ/+sCZm2UF/dE8TR
de4R95p/UwTocIcZrHtoWUCMaSyS2AqjgPmgP/hATAYnBIVJpOfQyAv22VD4RlDa
8YUksVM99cemtA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:00:12 2025 by rpki-client