Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
File: nG_8tbXi3kVRrPm0WvJC25RYTlo.mft (raw, json)
Hash identifier: dvSZEe2wbeSse+j81noyOPRYP4bLY00nt4BrvdzgyNA=
Subject key identifier: FA:E9:10:38:08:4C:D0:5A:D3:33:03:44:74:A9:4E:2C:88:4B:73:6E
Authority key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
Certificate issuer: /CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Certificate serial: 019872CF3F6E493649F2E3F87B25058E16F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
Manifest number: CD
Signing time: Mon 04 Aug 2025 02:00:41 +0000
Manifest this update: Mon 04 Aug 2025 02:00:41 +0000
Manifest next update: Tue 05 Aug 2025 02:00:41 +0000
Files and hashes: 1: JwRtsxKsHclcBB-A4e8ZZ-jD4D0.roa (hash: qJiNznI8TYONtH5aWUgF2Zivyd6LUikgOFyMXC2FJUY=)
2: c1fGsP0bCEH6cCis_UoQKhD3CSY.roa (hash: tV98uAPL9NGHun4KK73liMuNDYczrIrsIhzMw0qt0ig=)
3: nG_8tbXi3kVRrPm0WvJC25RYTlo.crl (hash: 7OjF4vlKJ35OHfUrGeVhogk1jz4l+frCaPcTe9zrE+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:3f:6e:49:36:49:f2:e3:f8:7b:25:05:8e:16:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Validity
Not Before: Aug 4 02:00:41 2025 GMT
Not After : Aug 5 02:00:41 2025 GMT
Subject: CN=fae91038084cd05ad333034474a94e2c884b736e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:82:12:58:3f:78:5e:38:bc:9b:f7:20:b6:
6f:cb:37:6e:78:37:2c:1f:5b:a3:b1:01:df:94:91:
5e:18:b3:d3:fb:2b:c5:8b:46:64:d0:51:c9:2c:86:
bb:62:05:72:57:ef:cb:2c:8a:02:fe:c0:a6:ad:dc:
8c:85:b5:9d:66:60:2d:4d:67:22:82:1f:c0:53:52:
3e:d1:2e:bb:e0:89:da:44:4f:1b:68:c1:92:cb:50:
08:7b:a2:64:19:03:e2:e1:44:6c:0a:a4:d3:fc:73:
6c:e4:a4:ee:a5:da:6c:56:c3:c5:b7:b2:b7:ac:34:
eb:49:fd:df:d9:4a:10:12:d0:a2:52:c9:3a:1e:8e:
97:54:52:94:f1:41:46:26:e4:46:15:a4:b6:19:6c:
b4:98:00:13:e4:40:8b:e0:d9:82:1a:a5:4e:55:30:
12:25:2d:eb:0a:1c:6d:7f:c8:62:2d:c8:6d:0c:13:
25:6a:5c:3f:93:df:d2:ab:c1:ae:86:20:01:43:e9:
29:e1:9d:29:db:71:94:3e:16:7f:d8:48:dd:93:23:
3b:70:41:24:ba:98:80:bc:35:23:54:1f:cf:7e:d0:
94:b9:66:f0:8f:97:1e:5b:e8:3d:6a:d3:20:63:2d:
3b:f8:30:b1:17:91:5e:6d:6e:86:be:0c:53:43:14:
dc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E9:10:38:08:4C:D0:5A:D3:33:03:44:74:A9:4E:2C:88:4B:73:6E
X509v3 Authority Key Identifier:
keyid:9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2b:f4:5f:3d:48:41:36:32:8d:89:e6:86:d2:1a:c7:52:d2:
35:a2:63:52:81:06:4a:60:92:d7:43:46:2e:ce:39:b7:dd:b4:
09:0f:70:ab:39:fd:ee:1e:0d:8c:93:02:74:dd:2d:ca:77:0e:
a9:5f:2e:33:d4:df:f7:af:25:fc:a0:c9:61:a7:58:35:08:a4:
ec:9a:1e:4d:8c:ba:6d:b1:2e:c8:fa:82:df:f1:d7:67:5b:cd:
21:ad:21:ab:e3:81:39:71:76:70:dd:e9:4e:1b:19:1b:fa:18:
83:75:ca:47:3a:e5:1b:ae:f9:d3:2b:ba:6f:98:ea:4c:80:0f:
d3:10:2c:ca:62:c6:58:1d:76:18:0b:a6:db:34:89:e5:66:f4:
2b:ba:a3:72:3f:c0:62:18:cd:91:5d:e9:fc:be:b4:8d:1a:e8:
fa:62:83:9d:43:22:e5:54:22:16:6f:47:fe:14:d9:37:6e:d6:
6d:4d:63:1b:cb:4b:22:ef:fe:eb:8c:36:3a:03:d3:a3:8a:43:
48:a5:5e:0b:dc:5b:7a:cf:27:2c:ab:12:8a:13:9a:a8:b1:c4:
d2:ee:0d:b4:f4:ab:9c:1b:31:5b:61:07:25:52:16:30:91:e3:
ee:b6:0c:90:02:1b:e9:d6:2e:f6:92:06:15:f6:6e:88:9f:8a:
3f:fc:93:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyzz9uSTZJ8uP4eyUFjhb4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNmZmY2I1YjVlMmRlNDU1MWFjZjliNDVhZjI0MmRiOTQ1
ODRlNWEwHhcNMjUwODA0MDIwMDQxWhcNMjUwODA1MDIwMDQxWjAzMTEwLwYDVQQD
EyhmYWU5MTAzODA4NGNkMDVhZDMzMzAzNDQ3NGE5NGUyYzg4NGI3MzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwimCElg/eF44vJv3ILZvyzdueDcs
H1ujsQHflJFeGLPT+yvFi0Zk0FHJLIa7YgVyV+/LLIoC/sCmrdyMhbWdZmAtTWci
gh/AU1I+0S674InaRE8baMGSy1AIe6JkGQPi4URsCqTT/HNs5KTupdpsVsPFt7K3
rDTrSf3f2UoQEtCiUsk6Ho6XVFKU8UFGJuRGFaS2GWy0mAAT5ECL4NmCGqVOVTAS
JS3rChxtf8hiLchtDBMlalw/k9/Sq8GuhiABQ+kp4Z0p23GUPhZ/2EjdkyM7cEEk
upiAvDUjVB/PftCUuWbwj5ceW+g9atMgYy07+DCxF5FebW6GvgxTQxTcBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrpEDgITNBa0zMDRHSpTiyIS3NuMB8GA1UdIwQY
MBaAFJxv/LW14t5FUaz5tFryQtuUWE5aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkdfOHRiWGkza1ZSclBtMFd2SkMyNVJZVGxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85ODQxZmYtYzg4Ni00ZGEwLTk1N2Et
ZjJmMDk1NWRhMWFkLzEvbkdfOHRiWGkza1ZSclBtMFd2SkMyNVJZVGxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85ODQxZmYtYzg4Ni00ZGEwLTk1N2EtZjJmMDk1NWRhMWFk
LzEvbkdfOHRiWGkza1ZSclBtMFd2SkMyNVJZVGxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyv0Xz1I
QTYyjYnmhtIax1LSNaJjUoEGSmCS10NGLs45t920CQ9wqzn97h4NjJMCdN0tyncO
qV8uM9Tf968l/KDJYadYNQik7JoeTYy6bbEuyPqC3/HXZ1vNIa0hq+OBOXF2cN3p
ThsZG/oYg3XKRzrlG6750yu6b5jqTIAP0xAsymLGWB12GAum2zSJ5Wb0K7qjcj/A
YhjNkV3p/L60jRro+mKDnUMi5VQiFm9H/hTZN27WbU1jG8tLIu/+64w2OgPTo4pD
SKVeC9xbes8nLKsSihOaqLHE0u4NtPSrnBsxW2EHJVIWMJHj7rYMkAIb6dYu9pIG
FfZuiJ+KP/yTZQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:14 2025 by rpki-client