
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.mft
File: ny4CE8HB23M97spK4mFsqv-lFXA.mft (raw, json)
Hash identifier: K22Jb7f/i0fO0wEMGX22j1Jf/h6xcz2qVWsuwgKDmv8=
Subject key identifier: B2:48:05:40:8B:7C:3B:37:94:61:38:24:90:49:E4:F0:36:1E:95:8D
Authority key identifier: 9F:2E:02:13:C1:C1:DB:73:3D:EE:CA:4A:E2:61:6C:AA:FF:A5:15:70
Certificate issuer: /CN=9f2e0213c1c1db733deeca4ae2616caaffa51570
Certificate serial: 0199FAD838D10378F4F92B5E58A674EEA09E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ny4CE8HB23M97spK4mFsqv-lFXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.mft
Manifest number: 138F
Signing time: Sun 19 Oct 2025 05:01:38 +0000
Manifest this update: Sun 19 Oct 2025 05:01:38 +0000
Manifest next update: Mon 20 Oct 2025 05:01:38 +0000
Files and hashes: 1: ny4CE8HB23M97spK4mFsqv-lFXA.crl (hash: p5pablMaPdvReM09EvZMOkAqlOPZyTf2NQV2Kl3aWqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ny4CE8HB23M97spK4mFsqv-lFXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:38:d1:03:78:f4:f9:2b:5e:58:a6:74:ee:a0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2e0213c1c1db733deeca4ae2616caaffa51570
Validity
Not Before: Oct 19 05:01:38 2025 GMT
Not After : Oct 20 05:01:38 2025 GMT
Subject: CN=b24805408b7c3b37946138249049e4f0361e958d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:fa:a1:1c:a7:77:66:b8:cc:7b:fb:02:e0:
33:7e:d2:9b:eb:dc:63:fc:2e:a2:6f:d1:be:20:24:
f9:d1:7f:86:44:83:e2:e1:6c:55:0d:93:b8:8c:18:
07:44:69:0c:b9:be:cc:43:f8:33:ca:38:b8:48:7d:
fd:dd:72:51:d0:e2:32:eb:dc:24:37:a5:9a:b2:22:
f7:0c:7e:2f:a5:23:de:14:3d:b5:c6:cc:50:50:5d:
ea:cf:00:83:1d:f4:f7:9f:73:6c:1d:80:d4:5e:8a:
4b:cf:d7:b6:98:7f:67:3b:0b:21:3f:d2:97:11:41:
84:bb:f0:b6:d1:9e:7a:28:8c:01:da:05:f0:fa:d5:
cd:c3:d0:45:8f:fd:2f:cb:28:81:cf:0a:74:be:c9:
81:03:16:95:6d:70:e5:16:60:46:92:d1:ff:5f:f8:
0e:fb:93:92:36:4d:c9:82:5d:60:c5:08:77:4a:82:
99:e7:ea:b5:05:39:30:c6:c8:26:71:7a:15:ea:18:
0e:85:29:f1:11:6d:0e:62:11:18:50:55:89:f3:7a:
ae:c1:8b:26:d3:0b:b1:0d:70:27:47:91:b6:36:6d:
77:3b:7e:7f:44:36:13:0e:4e:99:df:70:90:97:a0:
07:7a:9a:0a:d8:b4:eb:17:47:e5:55:39:4f:9a:58:
99:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:48:05:40:8B:7C:3B:37:94:61:38:24:90:49:E4:F0:36:1E:95:8D
X509v3 Authority Key Identifier:
keyid:9F:2E:02:13:C1:C1:DB:73:3D:EE:CA:4A:E2:61:6C:AA:FF:A5:15:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ny4CE8HB23M97spK4mFsqv-lFXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:94:60:42:59:33:0c:24:71:2f:d7:c7:e3:7a:5f:a6:a4:5c:
f2:d3:86:ad:8f:88:23:4b:10:8f:a5:90:ae:68:10:10:ac:0e:
e5:e2:14:f3:ef:12:f2:43:a3:fb:6e:9b:25:ee:58:28:fa:2c:
da:f6:3f:c4:a4:30:a0:8e:4a:f8:78:82:51:ab:02:dc:48:c3:
f4:f3:c3:f6:a7:b6:54:90:8c:62:72:41:6d:32:8a:68:29:53:
22:3c:07:0a:96:cb:db:a8:70:c8:e5:8e:d5:10:a4:2a:68:fc:
4c:87:9f:07:39:b6:e2:c1:c3:9e:9e:4c:c1:0e:f9:3f:69:6a:
f8:7c:49:d5:07:6b:aa:01:61:56:26:24:83:27:55:3c:16:58:
6a:67:73:7d:8a:c3:b4:d7:35:03:fc:62:6e:d3:b2:4d:60:32:
a6:56:a9:36:27:15:f9:eb:f3:56:57:9e:4f:22:27:c2:7e:d2:
d5:29:69:bf:7a:c0:2a:6c:ab:54:f2:fb:c2:c3:fe:2a:d9:47:
7f:bc:f4:f2:af:06:3c:3e:2c:ad:d9:df:09:9e:90:53:4c:1d:
2e:ae:7d:c0:8e:b4:d4:56:2a:43:3d:bb:ea:a4:7d:96:e7:2a:
23:9b:0f:aa:60:eb:e0:16:0d:50:a0:59:49:96:2e:c0:54:b3:
71:66:dd:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62DjRA3j0+SteWKZ07qCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMmUwMjEzYzFjMWRiNzMzZGVlY2E0YWUyNjE2Y2FhZmZh
NTE1NzAwHhcNMjUxMDE5MDUwMTM4WhcNMjUxMDIwMDUwMTM4WjAzMTEwLwYDVQQD
EyhiMjQ4MDU0MDhiN2MzYjM3OTQ2MTM4MjQ5MDQ5ZTRmMDM2MWU5NThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9v6oRynd2a4zHv7AuAzftKb69xj
/C6ib9G+ICT50X+GRIPi4WxVDZO4jBgHRGkMub7MQ/gzyji4SH393XJR0OIy69wk
N6WasiL3DH4vpSPeFD21xsxQUF3qzwCDHfT3n3NsHYDUXopLz9e2mH9nOwshP9KX
EUGEu/C20Z56KIwB2gXw+tXNw9BFj/0vyyiBzwp0vsmBAxaVbXDlFmBGktH/X/gO
+5OSNk3Jgl1gxQh3SoKZ5+q1BTkwxsgmcXoV6hgOhSnxEW0OYhEYUFWJ83quwYsm
0wuxDXAnR5G2Nm13O35/RDYTDk6Z33CQl6AHepoK2LTrF0flVTlPmliZRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJIBUCLfDs3lGE4JJBJ5PA2HpWNMB8GA1UdIwQY
MBaAFJ8uAhPBwdtzPe7KSuJhbKr/pRVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnk0Q0U4SEIyM005N3NwSzRtRnNxdi1sRlhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iMTM4OGYtM2FlYi00MGQ2LWI0Yjct
OWU4NTJmMzMwMWMwLzEvbnk0Q0U4SEIyM005N3NwSzRtRnNxdi1sRlhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9iMTM4OGYtM2FlYi00MGQ2LWI0YjctOWU4NTJmMzMwMWMw
LzEvbnk0Q0U4SEIyM005N3NwSzRtRnNxdi1sRlhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5RgQlkz
DCRxL9fH43pfpqRc8tOGrY+II0sQj6WQrmgQEKwO5eIU8+8S8kOj+26bJe5YKPos
2vY/xKQwoI5K+HiCUasC3EjD9PPD9qe2VJCMYnJBbTKKaClTIjwHCpbL26hwyOWO
1RCkKmj8TIefBzm24sHDnp5MwQ75P2lq+HxJ1QdrqgFhViYkgydVPBZYamdzfYrD
tNc1A/xibtOyTWAyplapNicV+evzVleeTyInwn7S1Slpv3rAKmyrVPL7wsP+KtlH
f7z08q8GPD4srdnfCZ6QU0wdLq59wI601FYqQz276qR9lucqI5sPqmDr4BYNUKBZ
SZYuwFSzcWbdUQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:47 2025 by rpki-client