Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
File: nsRI4bHg6-TpdrEg05j-dNXhNfg.mft (raw, json)
Hash identifier: YAcBK4BXNssIdAhSNjxt95WTjyHHlDwIEULd9qiyoSw=
Subject key identifier: 83:28:A2:C5:4D:7A:FF:0C:AA:79:D8:A3:2B:35:36:F7:C0:7A:21:6C
Authority key identifier: 9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
Certificate issuer: /CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Certificate serial: 019893DA9BC095FFFB452E7616A1CAFD1D79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
Manifest number: 162A
Signing time: Sun 10 Aug 2025 12:00:34 +0000
Manifest this update: Sun 10 Aug 2025 12:00:34 +0000
Manifest next update: Mon 11 Aug 2025 12:00:34 +0000
Files and hashes: 1: aCQlUufyFAXyfrSRh5UlYee4hhI.roa (hash: mJv4/wvWUFjjUO0qLpunwhk4Tn4azGG1QzZvm0z7rC8=)
2: nsRI4bHg6-TpdrEg05j-dNXhNfg.crl (hash: IwSNhBlOq4NOETWcgSCBm9ZYbZtDlqCtZp2pnlaB0wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:9b:c0:95:ff:fb:45:2e:76:16:a1:ca:fd:1d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Validity
Not Before: Aug 10 12:00:34 2025 GMT
Not After : Aug 11 12:00:34 2025 GMT
Subject: CN=8328a2c54d7aff0caa79d8a32b3536f7c07a216c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:44:64:67:13:23:00:78:d7:c4:56:3d:d5:8d:
17:83:91:ed:d7:a6:17:ab:75:ce:9a:fd:76:d2:ee:
46:54:4a:55:82:8f:50:05:65:12:e2:6d:82:5c:dc:
49:1a:17:97:11:45:16:ec:a7:7d:6a:68:b8:59:88:
29:df:41:a5:c4:5e:cf:bb:04:b1:72:fe:db:aa:88:
c6:3f:81:d7:5f:77:63:b3:22:c9:f5:b4:0a:aa:a8:
a7:58:04:90:38:8d:c9:80:5a:0d:43:ee:05:88:41:
af:e3:41:15:b9:13:eb:7f:0e:a6:26:fe:63:cd:ac:
2f:8b:b8:fb:13:68:84:df:7b:1b:37:a7:c9:92:d7:
1a:46:d9:93:70:4c:19:b5:f5:59:01:36:86:27:ba:
2c:cc:53:ff:7c:a0:1f:0d:d2:fb:dd:b0:4f:37:6f:
b6:80:27:db:58:26:45:ae:dd:75:31:f8:45:3c:33:
19:07:07:7b:8b:17:12:ba:90:e9:72:e6:6c:0c:88:
36:da:fe:fd:90:0e:fd:ed:fb:f0:55:a4:c9:6b:66:
6e:dc:0c:ad:9d:78:19:95:0e:32:96:4f:a9:75:d2:
9c:2c:e4:d8:ad:1a:89:51:81:d8:60:af:88:48:06:
37:e7:fc:c5:36:56:cb:65:79:25:13:e9:b2:d9:13:
5b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:28:A2:C5:4D:7A:FF:0C:AA:79:D8:A3:2B:35:36:F7:C0:7A:21:6C
X509v3 Authority Key Identifier:
keyid:9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:11:00:3b:12:ac:aa:55:36:7d:e4:ea:ec:eb:53:ba:f7:22:
29:63:1f:f2:7d:e0:ad:67:2b:c4:a3:00:be:85:51:3e:8f:e9:
f1:af:bd:f9:9b:b5:f4:6a:16:db:fd:88:d9:ae:0d:eb:81:7e:
9f:3e:7c:95:51:61:66:fe:70:ba:12:e1:4d:c2:88:a2:f6:b2:
f3:49:ca:87:ce:f2:a7:e2:ea:e6:ba:0a:84:65:0e:17:82:f4:
68:35:6d:1b:89:40:65:62:7c:c5:ff:ae:d9:45:e3:03:1a:ca:
4b:55:16:21:65:a6:7a:b2:6b:da:90:e5:38:d4:1b:67:ef:73:
6d:38:f7:cb:e6:40:ca:a6:36:fd:ba:18:c5:c1:fa:35:e5:d4:
61:3e:a5:1c:01:47:6e:b1:bc:80:d7:ff:5f:1f:1f:8a:99:9f:
65:66:c7:4f:da:b0:41:a8:f0:57:ba:c2:68:ea:26:6e:36:fe:
9b:d1:71:09:87:25:56:1b:96:79:b9:92:26:ce:d9:88:d3:fe:
73:cf:eb:3b:f7:da:0f:34:8e:a7:4c:12:ff:a4:77:3b:99:36:
c3:d0:bf:28:0d:bc:8a:f5:97:b4:9c:ed:1a:0c:df:10:b6:10:
3d:6e:25:67:89:71:c5:2a:53:c3:31:d6:aa:03:81:44:a9:b8:
78:81:9a:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiT2pvAlf/7RS52FqHK/R15MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYzQ0OGUxYjFlMGViZTRlOTc2YjEyMGQzOThmZTc0ZDVl
MTM1ZjgwHhcNMjUwODEwMTIwMDM0WhcNMjUwODExMTIwMDM0WjAzMTEwLwYDVQQD
Eyg4MzI4YTJjNTRkN2FmZjBjYWE3OWQ4YTMyYjM1MzZmN2MwN2EyMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0RkZxMjAHjXxFY91Y0Xg5Ht16YX
q3XOmv120u5GVEpVgo9QBWUS4m2CXNxJGheXEUUW7Kd9ami4WYgp30GlxF7PuwSx
cv7bqojGP4HXX3djsyLJ9bQKqqinWASQOI3JgFoNQ+4FiEGv40EVuRPrfw6mJv5j
zawvi7j7E2iE33sbN6fJktcaRtmTcEwZtfVZATaGJ7oszFP/fKAfDdL73bBPN2+2
gCfbWCZFrt11MfhFPDMZBwd7ixcSupDpcuZsDIg22v79kA797fvwVaTJa2Zu3Ayt
nXgZlQ4ylk+pddKcLOTYrRqJUYHYYK+ISAY35/zFNlbLZXklE+my2RNb5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMoosVNev8MqnnYoys1NvfAeiFsMB8GA1UdIwQY
MBaAFJ7ESOGx4Ovk6XaxINOY/nTV4TX4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnNSSTRiSGc2LVRwZHJFZzA1ai1kTlhoTmZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mNGNhNzktMzg0Zi00N2YyLWFlZDgt
YThkMDAzODNiY2RkLzEvbnNSSTRiSGc2LVRwZHJFZzA1ai1kTlhoTmZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9mNGNhNzktMzg0Zi00N2YyLWFlZDgtYThkMDAzODNiY2Rk
LzEvbnNSSTRiSGc2LVRwZHJFZzA1ai1kTlhoTmZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqBEAOxKs
qlU2feTq7OtTuvciKWMf8n3grWcrxKMAvoVRPo/p8a+9+Zu19GoW2/2I2a4N64F+
nz58lVFhZv5wuhLhTcKIovay80nKh87yp+Lq5roKhGUOF4L0aDVtG4lAZWJ8xf+u
2UXjAxrKS1UWIWWmerJr2pDlONQbZ+9zbTj3y+ZAyqY2/boYxcH6NeXUYT6lHAFH
brG8gNf/Xx8fipmfZWbHT9qwQajwV7rCaOombjb+m9FxCYclVhuWebmSJs7ZiNP+
c8/rO/faDzSOp0wS/6R3O5k2w9C/KA28ivWXtJztGgzfELYQPW4lZ4lxxSpTwzHW
qgOBRKm4eIGaMA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 15:56:37 2025 by rpki-client