Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json)
Hash identifier: KZuZwuzlS2lZ49hEtFNQjrph0SPia6s9fBtRMESTYDY=
Subject key identifier: 0C:93:40:3B:E7:80:7B:6E:1C:E8:C5:83:15:62:C6:24:41:36:35:10
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 0199FE1042605BC84CA35DDAE6993E4FD591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
Manifest number: 0A56
Signing time: Sun 19 Oct 2025 20:01:42 +0000
Manifest this update: Sun 19 Oct 2025 20:01:42 +0000
Manifest next update: Mon 20 Oct 2025 20:01:42 +0000
Files and hashes: 1: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: vJB+A4fJbbU3Fys00S0lSxHZzgjQeXTq2whBLc/4400=)
2: naPzLZcFHsUMBLgsbgPGJCO-CF0.roa (hash: nIyF1z3b3iwZq0quO5N0o2X6gTB8LSfxugEcTz9j98Q=)
3: xvsRInrWKS5s7BFPqZmvGE0s2hc.roa (hash: vqluH5uE90JrgU5HmvgOgqmyqSAabArFrkPQ0aAKYvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:42:60:5b:c8:4c:a3:5d:da:e6:99:3e:4f:d5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Oct 19 20:01:42 2025 GMT
Not After : Oct 20 20:01:42 2025 GMT
Subject: CN=0c93403be7807b6e1ce8c5831562c62441363510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:20:02:a2:41:b5:46:32:65:9b:ea:70:c2:ab:
72:07:10:1f:2b:e2:70:a7:c9:57:ee:af:93:07:fa:
a2:57:e5:55:3c:84:49:97:6f:1b:6e:66:00:2f:4d:
86:2e:5a:05:b2:5d:82:5b:b0:a3:48:f4:98:71:bb:
f4:42:88:17:94:63:01:e3:d4:48:fe:32:37:60:b3:
39:17:05:87:a6:f9:b6:8d:0a:aa:8f:5e:0f:6c:b5:
c7:ab:06:97:98:bc:93:29:ef:df:f3:78:e2:2d:9c:
66:82:35:37:85:d8:42:9c:99:87:a4:5c:e5:66:e8:
ff:6a:97:32:1d:37:2f:4e:ff:eb:d1:6f:34:d4:2e:
29:82:f1:85:8d:c1:a4:e0:e1:d5:f6:e7:f0:bf:e4:
68:e4:ca:63:99:22:62:69:d1:9d:f0:61:4d:5b:50:
28:8a:70:97:23:61:ae:5e:bf:74:a7:9f:ad:2a:20:
c0:21:25:03:5b:87:95:85:be:c0:ac:56:f1:31:df:
20:c0:11:6f:33:fc:73:6a:49:fb:26:c1:b3:79:55:
cf:76:fa:54:13:56:51:93:33:0b:a5:a0:54:67:a6:
8b:d9:04:ed:d7:24:b1:45:35:67:29:3f:5a:ef:53:
3e:61:f6:96:48:7f:4d:fd:38:fd:39:d0:54:3d:51:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:93:40:3B:E7:80:7B:6E:1C:E8:C5:83:15:62:C6:24:41:36:35:10
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3f:ee:2f:67:27:0c:21:7c:e0:10:65:57:91:04:6e:7c:01:
03:15:a4:76:03:cf:73:4f:86:ff:ac:e3:44:b3:24:9d:2a:70:
e1:80:d2:a2:91:c1:d8:68:5a:c7:90:0d:d2:9b:fa:94:9b:c9:
b2:94:6c:54:cc:20:4a:7a:09:5a:3d:bf:8d:06:98:ca:e8:c4:
1f:2b:39:72:0c:1d:f8:9b:81:6f:46:44:4a:3e:2d:96:d7:84:
ac:48:44:2f:3a:e0:03:81:22:2d:23:e0:fa:29:54:0b:f0:da:
bf:18:73:1f:1b:a8:ef:b6:b5:60:4d:22:97:19:4b:27:d9:9f:
f6:d5:11:46:62:69:bf:6e:6f:0f:4e:6d:8f:29:3c:c4:ff:e6:
de:8b:e7:25:a2:fd:a7:7d:41:13:b8:f8:df:1b:25:7f:3d:14:
75:f2:b4:ee:05:45:f0:72:be:7c:43:29:c7:f2:46:ca:4a:2c:
81:9c:d7:e8:45:e1:03:99:b2:ee:4f:ad:75:2d:50:c6:2c:c9:
2e:4c:d0:b0:4e:f7:62:7c:06:c8:d3:5d:63:89:b0:18:a5:e8:
78:01:20:46:c4:81:6a:4c:5b:2c:c4:35:02:f7:ce:c1:25:5c:
2f:76:7d:38:b4:6e:1a:37:ce:15:6c:49:0f:02:69:96:49:96:
f1:4a:96:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EEJgW8hMo13a5pk+T9WRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMTM5NDc2OGM5YTM5YTYxMTI2NzRkNzM3NTk3MmE2Njk2
YjQ2ODAwHhcNMjUxMDE5MjAwMTQyWhcNMjUxMDIwMjAwMTQyWjAzMTEwLwYDVQQD
EygwYzkzNDAzYmU3ODA3YjZlMWNlOGM1ODMxNTYyYzYyNDQxMzYzNTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiACokG1RjJlm+pwwqtyBxAfK+Jw
p8lX7q+TB/qiV+VVPIRJl28bbmYAL02GLloFsl2CW7CjSPSYcbv0QogXlGMB49RI
/jI3YLM5FwWHpvm2jQqqj14PbLXHqwaXmLyTKe/f83jiLZxmgjU3hdhCnJmHpFzl
Zuj/apcyHTcvTv/r0W801C4pgvGFjcGk4OHV9ufwv+Ro5MpjmSJiadGd8GFNW1Ao
inCXI2GuXr90p5+tKiDAISUDW4eVhb7ArFbxMd8gwBFvM/xzakn7JsGzeVXPdvpU
E1ZRkzMLpaBUZ6aL2QTt1ySxRTVnKT9a71M+YfaWSH9N/Tj9OdBUPVFq5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyTQDvngHtuHOjFgxVixiRBNjUQMB8GA1UdIwQY
MBaAFJwTlHaMmjmmESZ01zdZcqZpa0aAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zZTcyMTAtMDUyOC00NDU2LWI2OGUt
YTcxM2ExOTE1YzkwLzEvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zZTcyMTAtMDUyOC00NDU2LWI2OGUtYTcxM2ExOTE1Yzkw
LzEvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABz/uL2cn
DCF84BBlV5EEbnwBAxWkdgPPc0+G/6zjRLMknSpw4YDSopHB2Ghax5AN0pv6lJvJ
spRsVMwgSnoJWj2/jQaYyujEHys5cgwd+JuBb0ZESj4tlteErEhELzrgA4EiLSPg
+ilUC/DavxhzHxuo77a1YE0ilxlLJ9mf9tURRmJpv25vD05tjyk8xP/m3ovnJaL9
p31BE7j43xslfz0UdfK07gVF8HK+fEMpx/JGykosgZzX6EXhA5my7k+tdS1QxizJ
LkzQsE73YnwGyNNdY4mwGKXoeAEgRsSBakxbLMQ1AvfOwSVcL3Z9OLRuGjfOFWxJ
DwJplkmW8UqWlA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:09 2025 by rpki-client