
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
File: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json)
Hash identifier: 96VNbL771yW9UZAkJA8jKYGV2UjHm3g/+dQWGtkMBGQ=
Subject key identifier: 40:92:38:69:A3:DB:1A:CD:1F:8D:D2:71:A1:26:40:75:3B:A4:75:D1
Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Certificate serial: 0198D62987CE87781511A34CF2A087F51FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
Manifest number: AE
Signing time: Sat 23 Aug 2025 09:01:42 +0000
Manifest this update: Sat 23 Aug 2025 09:01:42 +0000
Manifest next update: Sun 24 Aug 2025 09:01:42 +0000
Files and hashes: 1: B7c_NuomsMLePlv4BqYRjDtq6rA.roa (hash: 9F/KOglkwN1+3aYHtjpMXcocrWjjPZ/arLWSx9kmqyY=)
2: LfG4OjHPoLHsAJrtCsFzB1-WA1c.roa (hash: l1BlIjqmxWuuS5MgIueayr3dbyb+8P1GNcaS+TuAghU=)
3: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: GuMqJljykRDwuDnxddMJ2r5jh0yl3GINVrLcR9nl+O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:87:ce:87:78:15:11:a3:4c:f2:a0:87:f5:1f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Validity
Not Before: Aug 23 09:01:42 2025 GMT
Not After : Aug 24 09:01:42 2025 GMT
Subject: CN=40923869a3db1acd1f8dd271a12640753ba475d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:65:c1:63:a4:fb:21:63:2c:6d:bf:25:ba:64:
07:df:a2:b4:6c:53:e4:3c:c4:c2:bd:54:1f:74:ef:
eb:ff:8b:68:aa:e5:77:2f:db:5f:6d:9a:df:16:4e:
78:9f:fe:7a:95:97:85:ff:3f:c6:1a:0f:3b:29:e5:
1a:a0:27:f6:aa:8e:09:d7:10:4a:c8:90:32:a4:8f:
0b:48:89:74:ac:54:a3:d9:9d:d7:74:2d:db:65:b5:
fe:11:35:3d:54:e9:65:19:8f:13:82:2f:d3:cd:32:
f5:a2:11:cf:de:0c:c6:db:98:62:36:9e:37:a1:63:
cc:88:fa:80:7d:87:77:81:4d:96:bd:55:13:a3:fe:
22:68:71:da:d8:61:12:05:54:d4:e5:a6:44:a5:cc:
fa:73:12:fa:7a:fd:a5:55:8c:c6:4e:b9:74:87:e8:
fe:2a:e2:10:33:fb:aa:05:4b:94:e1:fe:14:2a:c3:
2a:91:5a:a3:91:de:49:da:2b:85:cf:27:4d:7b:83:
ea:b2:c4:98:86:e8:89:ab:e0:de:ac:73:8f:f3:8f:
03:ad:b4:b6:b1:fa:1a:78:0b:cc:ce:49:ac:07:98:
c1:30:67:06:b6:48:c4:78:1b:8a:79:f3:42:b8:3d:
25:5e:1e:17:05:32:ff:c9:79:ed:05:49:d2:9a:2a:
5e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:92:38:69:A3:DB:1A:CD:1F:8D:D2:71:A1:26:40:75:3B:A4:75:D1
X509v3 Authority Key Identifier:
keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f5:02:ed:b8:2c:7d:15:b0:ed:e7:27:d6:bf:09:99:e5:cd:
6e:0c:b6:80:24:ce:8e:ca:9e:2d:92:be:0b:ed:14:ad:50:69:
eb:29:eb:94:b4:6c:9a:41:08:7a:4e:1f:d7:1e:bb:bc:58:04:
7f:f1:c2:28:6a:b9:19:a3:1c:96:5b:6f:5f:d5:09:7a:ad:ab:
77:5e:3c:1a:21:dc:53:a1:31:64:89:89:16:ae:ee:be:d2:3d:
4d:37:34:5a:07:c1:ed:66:8b:00:28:65:ac:c3:7e:48:ba:2c:
ad:71:9a:d7:f5:4a:22:86:80:5b:20:bf:da:9d:db:cf:f6:1a:
91:14:35:1e:c5:be:76:e8:ed:4f:6f:d6:ed:b8:aa:d5:48:51:
06:4a:cc:8d:75:0c:c1:83:62:8d:de:64:e6:61:87:b1:05:12:
9a:c1:0d:26:de:47:40:6c:ca:2a:ad:b5:64:2b:de:f2:fa:14:
69:e1:d1:84:38:1b:42:7d:de:c1:99:0b:2c:37:cc:e9:69:88:
b3:0b:5d:97:80:c8:e9:4c:9e:e0:2c:1a:a0:40:f1:a5:e3:96:
f6:80:34:cd:c4:1c:bd:aa:d7:0e:91:89:8e:e4:bd:57:0d:de:
9c:65:55:1f:c7:37:f2:e5:54:65:95:d5:3a:ef:45:23:16:a3:
07:3f:2a:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWKYfOh3gVEaNM8qCH9R+uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMmJjZDczNzA1YjkzNzQ3NWE5NThjNjM0ZWRkNjRjOWM2
NGFmYjYwHhcNMjUwODIzMDkwMTQyWhcNMjUwODI0MDkwMTQyWjAzMTEwLwYDVQQD
Eyg0MDkyMzg2OWEzZGIxYWNkMWY4ZGQyNzFhMTI2NDA3NTNiYTQ3NWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mXBY6T7IWMsbb8lumQH36K0bFPk
PMTCvVQfdO/r/4toquV3L9tfbZrfFk54n/56lZeF/z/GGg87KeUaoCf2qo4J1xBK
yJAypI8LSIl0rFSj2Z3XdC3bZbX+ETU9VOllGY8Tgi/TzTL1ohHP3gzG25hiNp43
oWPMiPqAfYd3gU2WvVUTo/4iaHHa2GESBVTU5aZEpcz6cxL6ev2lVYzGTrl0h+j+
KuIQM/uqBUuU4f4UKsMqkVqjkd5J2iuFzydNe4PqssSYhuiJq+DerHOP848DrbS2
sfoaeAvMzkmsB5jBMGcGtkjEeBuKefNCuD0lXh4XBTL/yXntBUnSmipehQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECSOGmj2xrNH43ScaEmQHU7pHXRMB8GA1UdIwQY
MBaAFJ8rzXNwW5N0dalYxjTt1kycZK+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDct
OTA4NGZiMGJlOWMxLzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDctOTA4NGZiMGJlOWMx
LzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfUC7bgs
fRWw7ecn1r8JmeXNbgy2gCTOjsqeLZK+C+0UrVBp6ynrlLRsmkEIek4f1x67vFgE
f/HCKGq5GaMclltvX9UJeq2rd148GiHcU6ExZImJFq7uvtI9TTc0WgfB7WaLAChl
rMN+SLosrXGa1/VKIoaAWyC/2p3bz/YakRQ1HsW+dujtT2/W7biq1UhRBkrMjXUM
wYNijd5k5mGHsQUSmsENJt5HQGzKKq21ZCve8voUaeHRhDgbQn3ewZkLLDfM6WmI
swtdl4DI6Uye4CwaoEDxpeOW9oA0zcQcvarXDpGJjuS9Vw3enGVVH8c38uVUZZXV
Ou9FIxajBz8quw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:12 2025 by rpki-client