Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
File: nOItyiotsKWf5WaByNHEBnenRbU.mft (raw, json)
Hash identifier: gpHICeUoujmlC4YH0ZI2JFxjSfma6DGo+njOMKZl6eU=
Subject key identifier: C0:BD:8C:FD:FF:7C:D1:40:5C:9E:D4:65:6E:E6:CB:0A:FF:BC:D9:F5
Authority key identifier: 9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
Certificate issuer: /CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Certificate serial: 0198A23D070296511CA22571283E42BBEF8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
Manifest number: 11ED
Signing time: Wed 13 Aug 2025 07:02:45 +0000
Manifest this update: Wed 13 Aug 2025 07:02:45 +0000
Manifest next update: Thu 14 Aug 2025 07:02:45 +0000
Files and hashes: 1: SgrL7DiM5GSLyUl02rPic8LO2xM.roa (hash: mfGk2oXMS3Dskm6xFi6bjI6ao91mV5GgJuEh/2dC5PU=)
2: nOItyiotsKWf5WaByNHEBnenRbU.crl (hash: IQsdBYvm1o2V2Vr3MV++M2nCcbtY7OCze+C5nBRj5RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:3d:07:02:96:51:1c:a2:25:71:28:3e:42:bb:ef:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Validity
Not Before: Aug 13 07:02:45 2025 GMT
Not After : Aug 14 07:02:45 2025 GMT
Subject: CN=c0bd8cfdff7cd1405c9ed4656ee6cb0affbcd9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d9:e3:25:12:b1:13:78:ef:08:94:99:14:b6:
3b:46:da:ad:a6:64:4e:71:e6:40:d6:3a:20:db:48:
f6:17:ee:98:c9:56:b4:5f:61:2f:25:91:14:d3:25:
6c:70:64:0a:63:c4:4f:0d:1a:52:cb:d4:08:ad:58:
77:be:ac:38:91:30:02:12:05:d1:94:b5:0c:c1:9a:
ae:9b:28:5c:c2:4d:40:2b:a6:34:e7:49:0c:a1:e9:
8a:6e:8c:fe:0c:be:46:6b:aa:dd:2e:d2:0f:0c:f8:
e8:f8:bb:24:a2:91:4e:68:4a:f2:9f:9e:a8:69:54:
73:ee:88:ce:9b:14:c9:71:10:f5:19:ee:2e:7a:19:
2f:1a:51:fa:c0:ac:a9:4c:0c:1b:41:1a:6c:09:00:
89:ef:c9:22:2e:ad:50:85:84:7d:7b:d2:54:25:8b:
3f:29:52:85:97:52:6c:ae:14:a0:e8:ab:4c:d4:01:
8a:00:66:8c:d3:2b:87:2d:c3:7b:92:c2:f7:53:31:
b9:fe:04:21:ee:4f:a6:0f:14:21:60:a4:75:a2:74:
b7:8e:9a:3e:bc:a3:59:75:98:a3:f5:b3:01:d8:88:
52:e9:88:c0:4b:c2:09:79:a6:f8:cf:2c:a7:5f:8e:
2d:8c:16:66:1c:40:27:a6:f2:5f:21:30:5d:19:a4:
37:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BD:8C:FD:FF:7C:D1:40:5C:9E:D4:65:6E:E6:CB:0A:FF:BC:D9:F5
X509v3 Authority Key Identifier:
keyid:9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:ef:e9:dc:5b:93:50:ad:02:21:54:e4:9d:23:64:90:4b:f1:
62:0a:27:18:7d:44:4f:d0:7a:28:40:aa:df:6b:cc:12:c6:2d:
b3:a7:80:6f:0f:88:fd:0e:6c:f5:df:0c:11:e1:eb:54:4b:e3:
de:9f:8a:e3:dc:dd:06:bd:3a:5b:ad:7d:81:7c:71:e5:52:8f:
4a:37:07:fa:c7:67:79:f1:80:71:d9:86:56:9d:4f:d0:58:13:
88:2c:6b:ac:6c:0c:61:4a:16:74:c7:8d:9f:e6:aa:fd:fa:5f:
6e:06:be:d4:55:3f:05:3c:59:1c:2b:10:f5:f6:12:61:04:6d:
fc:16:a3:a1:75:b1:56:ff:13:29:e8:77:67:93:53:19:51:73:
5a:ca:3a:69:ed:4c:4f:12:18:45:84:d1:98:a8:72:28:af:38:
74:9e:9b:ca:82:f3:1a:78:32:e3:eb:63:98:d9:6a:be:76:4d:
06:f5:11:50:dc:2c:23:dd:4f:96:7a:d3:25:1a:7e:59:eb:34:
d5:58:e1:e7:86:3a:e6:41:67:ea:ff:44:15:49:67:c8:8e:24:
81:36:4e:a1:1c:92:47:e3:0b:4f:e2:64:62:84:85:67:79:c0:
6e:90:5c:7d:1a:9f:db:bb:ee:dc:99:6a:11:1a:ad:10:34:21:
bd:45:6d:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiiPQcCllEcoiVxKD5Cu++MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZTIyZGNhMmEyZGIwYTU5ZmU1NjY4MWM4ZDFjNDA2Nzdh
NzQ1YjUwHhcNMjUwODEzMDcwMjQ1WhcNMjUwODE0MDcwMjQ1WjAzMTEwLwYDVQQD
EyhjMGJkOGNmZGZmN2NkMTQwNWM5ZWQ0NjU2ZWU2Y2IwYWZmYmNkOWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtnjJRKxE3jvCJSZFLY7RtqtpmRO
ceZA1jog20j2F+6YyVa0X2EvJZEU0yVscGQKY8RPDRpSy9QIrVh3vqw4kTACEgXR
lLUMwZqumyhcwk1AK6Y050kMoemKboz+DL5Ga6rdLtIPDPjo+LskopFOaEryn56o
aVRz7ojOmxTJcRD1Ge4uehkvGlH6wKypTAwbQRpsCQCJ78kiLq1QhYR9e9JUJYs/
KVKFl1JsrhSg6KtM1AGKAGaM0yuHLcN7ksL3UzG5/gQh7k+mDxQhYKR1onS3jpo+
vKNZdZij9bMB2IhS6YjAS8IJeab4zyynX44tjBZmHEAnpvJfITBdGaQ3TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMC9jP3/fNFAXJ7UZW7mywr/vNn1MB8GA1UdIwQY
MBaAFJziLcoqLbCln+VmgcjRxAZ3p0W1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk9JdHlpb3RzS1dmNVdhQnlOSEVCbmVuUmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82YjBlMGUtOGJlNS00YmY5LWI0Mjct
NzBkNjMxMDdkMDVkLzEvbk9JdHlpb3RzS1dmNVdhQnlOSEVCbmVuUmJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC82YjBlMGUtOGJlNS00YmY5LWI0MjctNzBkNjMxMDdkMDVk
LzEvbk9JdHlpb3RzS1dmNVdhQnlOSEVCbmVuUmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzO/p3FuT
UK0CIVTknSNkkEvxYgonGH1ET9B6KECq32vMEsYts6eAbw+I/Q5s9d8MEeHrVEvj
3p+K49zdBr06W619gXxx5VKPSjcH+sdnefGAcdmGVp1P0FgTiCxrrGwMYUoWdMeN
n+aq/fpfbga+1FU/BTxZHCsQ9fYSYQRt/BajoXWxVv8TKeh3Z5NTGVFzWso6ae1M
TxIYRYTRmKhyKK84dJ6byoLzGngy4+tjmNlqvnZNBvURUNwsI91PlnrTJRp+Wes0
1Vjh54Y65kFn6v9EFUlnyI4kgTZOoRySR+MLT+JkYoSFZ3nAbpBcfRqf27vu3Jlq
ERqtEDQhvUVtiA==
-----END CERTIFICATE-----
Generated at Wed Aug 13 08:46:20 2025 by rpki-client