Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
File: NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft (raw, json)
Hash identifier: VFgH+sEwzjiUWn0vkE1u4phPnh1n/ucid8FSWKafl+Y=
Subject key identifier: 0D:8B:81:DB:E6:A2:DA:91:AB:9A:B7:5D:DB:5F:81:50:1F:28:2C:F1
Authority key identifier: 34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
Certificate issuer: /CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Certificate serial: 019872CFD35F01FB55B91F697B98A89BCF3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
Manifest number: 0F4D
Signing time: Mon 04 Aug 2025 02:01:19 +0000
Manifest this update: Mon 04 Aug 2025 02:01:19 +0000
Manifest next update: Tue 05 Aug 2025 02:01:19 +0000
Files and hashes: 1: MjfPB6z00e-ff7RNJtIi20gDUz8.roa (hash: Cpw1zTo9jE0fDsY0ux+7L1DgxTy3Nnzm8fXHw47pw5Q=)
2: NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl (hash: K3vIhRr1+wbjuAF6oOMuGaFebgl2XKMDxRu/kcgVNxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:d3:5f:01:fb:55:b9:1f:69:7b:98:a8:9b:cf:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Validity
Not Before: Aug 4 02:01:19 2025 GMT
Not After : Aug 5 02:01:19 2025 GMT
Subject: CN=0d8b81dbe6a2da91ab9ab75ddb5f81501f282cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a1:cb:6f:e8:02:25:5e:34:1f:01:6f:7c:19:
92:a2:73:da:27:81:7b:8d:55:8f:19:f2:db:b8:82:
90:4f:c5:15:d9:8e:4f:84:07:3b:9f:b0:7c:d7:f9:
14:47:97:3a:cd:ad:79:f0:9b:44:c5:1b:6f:0a:c4:
58:f2:53:30:0b:dd:73:10:92:2b:28:48:55:e2:ee:
c4:34:99:b6:85:07:38:cd:a2:1d:b6:7e:91:dd:54:
9e:bd:86:73:67:b5:a4:cc:ca:ba:60:99:1a:f6:ce:
72:39:3b:e7:c4:b2:61:90:39:a9:b8:74:37:86:80:
5c:30:9c:ff:a3:fc:3a:05:40:f5:16:08:5e:32:e6:
85:37:9b:68:16:05:ac:1a:e1:e0:40:db:45:5d:f6:
d4:b8:c1:f4:4e:8c:10:65:c4:fd:67:78:52:33:91:
2c:b8:0c:82:03:0e:7b:6e:21:bd:d5:bc:c1:b9:62:
09:e6:43:66:38:8d:43:bf:16:25:90:ed:6b:77:92:
42:43:2b:12:61:fa:c0:7a:8f:42:50:16:a6:12:05:
3f:6f:2e:0c:f7:1d:56:46:ab:fc:aa:37:59:66:f5:
2a:99:76:ba:5f:aa:3c:b9:a0:71:04:17:b4:57:58:
0c:db:10:26:77:9c:d6:e0:21:4b:ca:d8:7c:51:f8:
87:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8B:81:DB:E6:A2:DA:91:AB:9A:B7:5D:DB:5F:81:50:1F:28:2C:F1
X509v3 Authority Key Identifier:
keyid:34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e3:d2:ba:13:1e:27:1a:e2:bd:65:5f:d8:e0:74:37:99:60:
4e:cc:a2:ad:ac:f4:df:77:d2:a2:00:b8:7f:0f:22:29:22:4b:
ff:1d:ba:81:dc:44:94:c0:80:9f:a6:48:e4:c9:c4:87:c2:04:
aa:52:59:12:83:1a:5b:d5:12:40:4c:2e:77:2e:62:68:f4:58:
af:bc:56:22:79:01:c3:a6:64:15:37:d0:5f:b6:c8:d9:30:55:
f3:c6:9e:d3:0b:e6:e5:61:58:10:81:5f:ea:9f:a8:de:93:fd:
0a:a3:99:e4:dc:fc:68:9d:93:96:0c:ac:7c:2a:d3:28:e2:3c:
b5:fb:53:fd:5d:69:54:6d:b8:72:4d:98:96:b6:08:87:47:0d:
9f:df:d9:e6:dd:bd:8d:41:a1:71:88:70:89:6b:e3:7a:60:b9:
f2:ab:20:69:ce:29:7e:53:be:33:71:51:eb:b2:be:32:71:74:
e9:c2:86:5a:77:e1:9e:ca:df:2a:37:e1:72:38:47:f1:08:51:
48:1d:ef:1c:43:2d:43:cf:54:21:85:24:80:09:80:68:6b:e5:
a0:bf:b7:37:88:27:6f:b4:e9:85:68:fe:92:fa:23:c0:f2:31:
c3:24:a6:25:91:bd:14:36:9b:0c:b4:c3:a6:bd:8f:2b:67:2b:
77:9a:c0:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz9NfAftVuR9pe5iom88/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YTYzZGM4NjEyMGU4N2Y0Y2ZmOGM1OWFmMzI2MWU2ZTEy
OTJmZDkwHhcNMjUwODA0MDIwMTE5WhcNMjUwODA1MDIwMTE5WjAzMTEwLwYDVQQD
EygwZDhiODFkYmU2YTJkYTkxYWI5YWI3NWRkYjVmODE1MDFmMjgyY2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6HLb+gCJV40HwFvfBmSonPaJ4F7
jVWPGfLbuIKQT8UV2Y5PhAc7n7B81/kUR5c6za158JtExRtvCsRY8lMwC91zEJIr
KEhV4u7ENJm2hQc4zaIdtn6R3VSevYZzZ7WkzMq6YJka9s5yOTvnxLJhkDmpuHQ3
hoBcMJz/o/w6BUD1FgheMuaFN5toFgWsGuHgQNtFXfbUuMH0TowQZcT9Z3hSM5Es
uAyCAw57biG91bzBuWIJ5kNmOI1DvxYlkO1rd5JCQysSYfrAeo9CUBamEgU/by4M
9x1WRqv8qjdZZvUqmXa6X6o8uaBxBBe0V1gM2xAmd5zW4CFLyth8UfiHQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2LgdvmotqRq5q3XdtfgVAfKCzxMB8GA1UdIwQY
MBaAFDSmPchhIOh/TP+MWa8yYebhKS/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82YjljN2EtOWRjNy00MDQwLWIyOWEt
ZmM3YTBlYTZiMGUyLzEvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82YjljN2EtOWRjNy00MDQwLWIyOWEtZmM3YTBlYTZiMGUy
LzEvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhePSuhMe
JxrivWVf2OB0N5lgTsyiraz033fSogC4fw8iKSJL/x26gdxElMCAn6ZI5MnEh8IE
qlJZEoMaW9USQEwudy5iaPRYr7xWInkBw6ZkFTfQX7bI2TBV88ae0wvm5WFYEIFf
6p+o3pP9CqOZ5Nz8aJ2TlgysfCrTKOI8tftT/V1pVG24ck2YlrYIh0cNn9/Z5t29
jUGhcYhwiWvjemC58qsgac4pflO+M3FR67K+MnF06cKGWnfhnsrfKjfhcjhH8QhR
SB3vHEMtQ89UIYUkgAmAaGvloL+3N4gnb7TphWj+kvojwPIxwySmJZG9FDabDLTD
pr2PK2crd5rA5Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:00 2025 by rpki-client