Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
File: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json)
Hash identifier: BhrKfuE+5wgUwFnV3vk/+2mbmId/1sRm8paoYruZkgY=
Subject key identifier: EB:4F:81:DF:60:94:01:1A:00:79:84:A2:6D:36:4B:6C:27:0B:0F:1A
Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Certificate serial: 0199FB7C7526CACB0EEE84A3439461F6456D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
Manifest number: 0146
Signing time: Sun 19 Oct 2025 08:01:01 +0000
Manifest this update: Sun 19 Oct 2025 08:01:01 +0000
Manifest next update: Mon 20 Oct 2025 08:01:01 +0000
Files and hashes: 1: B7c_NuomsMLePlv4BqYRjDtq6rA.roa (hash: 9F/KOglkwN1+3aYHtjpMXcocrWjjPZ/arLWSx9kmqyY=)
2: LfG4OjHPoLHsAJrtCsFzB1-WA1c.roa (hash: l1BlIjqmxWuuS5MgIueayr3dbyb+8P1GNcaS+TuAghU=)
3: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: v6LoXG2XlV4ivEMNztcbDA6xEmbWXqiGezIpxJXgNGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:75:26:ca:cb:0e:ee:84:a3:43:94:61:f6:45:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Validity
Not Before: Oct 19 08:01:01 2025 GMT
Not After : Oct 20 08:01:01 2025 GMT
Subject: CN=eb4f81df6094011a007984a26d364b6c270b0f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:af:66:8a:a9:b3:0f:b0:c2:cd:77:ce:ca:
98:0f:d9:f3:8f:de:78:7d:97:81:d0:e4:ca:30:b1:
dc:22:0e:ea:d2:d5:6e:75:35:4f:08:1b:95:79:08:
22:75:2d:7c:7a:a9:fa:fd:38:8c:81:6b:64:bc:9c:
70:91:a5:40:97:c2:f7:a9:6d:09:f6:52:6a:a2:1c:
b1:53:06:0c:7c:fe:c3:95:90:e8:63:67:d3:d0:f5:
d5:b4:f5:c2:ac:f2:d5:ed:15:f4:41:2f:cd:b1:87:
c5:89:b7:0f:40:02:ca:e8:b3:d0:ef:33:55:69:00:
3e:c8:9e:61:8b:d5:47:06:0e:df:bd:48:9d:03:d2:
3c:f8:fc:25:00:6e:31:41:20:35:bb:17:ea:30:72:
e7:f8:0f:42:08:45:2b:0f:86:ea:1e:f8:ba:ed:b8:
7a:80:bb:56:79:9e:b1:44:4b:c4:6c:89:16:f7:9a:
e3:1e:cb:66:28:ab:65:8c:40:37:05:02:94:ef:05:
56:8b:d9:2c:fb:77:ef:57:d6:22:58:58:68:57:23:
6d:03:75:e9:8e:76:f9:3e:1e:95:11:a9:27:32:4f:
34:37:83:5e:ab:3c:73:51:72:70:47:2f:36:44:45:
93:0c:9e:7c:0d:1f:43:c5:8a:a5:c8:08:b4:35:2b:
12:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4F:81:DF:60:94:01:1A:00:79:84:A2:6D:36:4B:6C:27:0B:0F:1A
X509v3 Authority Key Identifier:
keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:cf:bf:db:45:65:53:cc:2f:0b:8c:53:e1:41:74:55:ff:ce:
d0:d6:96:8f:35:36:30:1a:0e:0a:d8:48:12:e5:be:1d:bc:b5:
53:b5:b1:3f:48:38:dd:0d:11:b0:4c:0e:b4:4b:a9:11:ae:66:
41:b2:9e:da:f9:f3:de:81:70:df:a4:49:b3:1c:fc:6e:28:64:
b8:48:bc:23:95:32:82:28:57:fd:53:b6:d8:8c:82:c8:07:d8:
f9:01:27:6c:9a:d0:cb:43:c1:21:fd:43:95:17:f1:02:46:8a:
e2:aa:0b:86:3a:0c:ff:37:e6:8f:bc:5d:89:3d:5f:ea:82:24:
ea:9c:ff:9b:c2:4a:82:e5:d1:dc:86:db:e7:4e:05:76:84:ca:
fe:38:80:c7:86:23:ec:69:6c:72:0f:25:a0:2d:36:b2:9f:ce:
ba:ee:ba:3e:34:c3:46:f5:5f:3d:34:9e:2a:6c:af:e4:4d:0f:
fa:89:1f:30:74:1e:51:f5:52:9e:21:e6:66:14:b7:bf:c3:c9:
f7:c9:de:46:ff:b1:2b:af:cc:02:d0:71:02:00:e6:55:70:fd:
9f:36:59:cc:58:2b:61:89:31:b0:34:6d:3c:91:03:ab:2c:e1:
15:ec:08:51:94:5e:04:5d:90:92:b2:36:e0:ab:fe:d7:cc:d5:
76:b3:46:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:34 2025 by rpki-client