Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
File: nSZknk8seV_-VA-dl_JumcXF4_8.mft (raw, json)
Hash identifier: /Hu9zVIilsfwCp3LdYSPKFL98XwCtGsBT4walnJFKps=
Subject key identifier: FA:63:84:9E:FE:96:2E:34:C7:A2:1D:1D:26:98:6F:95:EC:35:C5:EE
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Certificate issuer: /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial: 0199FBEC3BB66E496EFC78D83738080D5DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 10:03:06 +0000
Manifest this update: Sun 19 Oct 2025 10:03:06 +0000
Manifest next update: Mon 20 Oct 2025 10:03:06 +0000
Files and hashes: 1: KCBbNGS1YVW1hBxpXGDK5vFmb2s.roa (hash: 5Zdj42abBdFlW3cL9DY3OZbKnuKmXjtJAYCIOqBuBo0=)
2: UHBBgUNLNn1iHI9e-EGjjOzBhFw.roa (hash: BSvm991wTIbEUV5S7qd3FSoLfpa8IYB6IeFe483AVIY=)
3: YulnYlbf3_p4_qdtilX3A7GCTS4.roa (hash: 9jhnLDTHr1+aTiwSRhcVHPAQnY8jnY4svd3BxfDOy3k=)
4: nSZknk8seV_-VA-dl_JumcXF4_8.crl (hash: HJLdSar1sSVRmqrdxl2s5F/68YBTPbvMUfTUP7IhGVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:3b:b6:6e:49:6e:fc:78:d8:37:38:08:0d:5d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Validity
Not Before: Oct 19 10:03:06 2025 GMT
Not After : Oct 20 10:03:06 2025 GMT
Subject: CN=fa63849efe962e34c7a21d1d26986f95ec35c5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:0b:3e:c8:92:40:a4:bf:16:a0:29:aa:91:
54:6b:3a:2f:dd:10:1e:64:59:ab:ba:e8:b6:be:d0:
38:ae:3d:35:02:a0:89:6d:6f:dd:65:13:45:50:cc:
b2:b9:43:59:18:1b:75:1d:bd:fc:39:fb:72:ac:85:
fa:f5:85:52:3f:a7:a2:a8:e6:36:da:09:06:16:9c:
52:1b:10:7d:d4:1e:11:c3:11:32:d9:4e:49:63:9a:
e0:0b:45:6d:b9:8b:3e:78:4e:0e:6a:ca:e6:a4:f5:
4c:68:79:83:ff:dc:0c:60:ff:ea:fd:8e:51:35:1d:
8b:01:1c:6d:c1:01:21:7a:5c:b4:5c:40:b0:ec:e6:
ac:1f:4b:f5:96:33:7f:3b:aa:b2:36:4e:7c:77:31:
af:2e:cd:9d:fb:2d:6e:b2:df:f6:8f:99:50:6d:95:
a3:09:ad:9a:45:c0:a8:9e:52:50:c6:f1:b1:98:e3:
b3:96:7c:1f:09:c3:c4:8a:3c:b7:95:82:f6:cf:78:
3b:04:66:e4:8e:95:65:b9:6c:4f:18:08:40:06:d9:
8f:9f:23:e1:b5:26:e4:9d:ec:ab:99:c5:64:0a:f5:
d1:89:6d:9a:51:f5:fe:64:5d:d9:41:6c:de:75:3c:
9f:c1:22:de:85:95:00:ed:ed:13:b3:b5:a6:80:7f:
41:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:63:84:9E:FE:96:2E:34:C7:A2:1D:1D:26:98:6F:95:EC:35:C5:EE
X509v3 Authority Key Identifier:
keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:5d:18:2c:3f:8f:bc:f9:ab:f7:d8:22:81:51:8a:74:be:91:
34:70:e2:a8:29:65:fc:a4:7f:3d:df:a2:ae:e8:f5:05:ab:69:
66:56:ed:f8:2b:9b:56:b2:ba:02:01:90:2c:d1:29:a6:dd:ba:
17:00:43:3d:32:88:71:dd:7b:bf:53:7f:5a:1a:2e:6a:ec:39:
1b:83:41:52:c9:ac:f6:06:c7:ee:0c:65:aa:27:b6:fe:ba:d8:
0f:96:ef:38:eb:fe:bc:d6:9b:d3:03:67:dd:a1:6c:6d:d4:02:
e9:fe:d5:42:27:99:a5:65:6e:20:fd:25:57:58:2f:e7:6e:43:
68:e1:eb:02:e7:4b:4e:a6:ba:99:84:92:11:f1:af:6d:26:3f:
7e:3c:b6:ad:87:af:d0:fa:95:3f:d3:33:02:7c:fd:3b:93:d5:
08:c8:5c:38:5e:98:f4:92:4f:ca:0a:36:2f:66:81:36:88:ff:
ea:05:24:0d:64:ee:7f:e9:65:e3:5e:1f:aa:f7:ab:b3:a8:56:
3d:75:0d:42:06:68:92:a3:29:3a:d2:cf:f8:54:4c:f7:f8:48:
03:2f:8c:27:5d:6b:4c:77:c6:3e:ba:3d:f9:42:82:89:a6:f9:
bc:66:24:11:72:db:a5:64:03:68:e3:a7:47:38:60:83:93:3e:
dd:87:da:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77Du2bklu/HjYNzgIDV2lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjY2NDllNGYyYzc5NWZmZTU0MGY5ZDk3ZjI2ZTk5YzVj
NWUzZmYwHhcNMjUxMDE5MTAwMzA2WhcNMjUxMDIwMTAwMzA2WjAzMTEwLwYDVQQD
EyhmYTYzODQ5ZWZlOTYyZTM0YzdhMjFkMWQyNjk4NmY5NWVjMzVjNWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxsLPsiSQKS/FqApqpFUazov3RAe
ZFmruui2vtA4rj01AqCJbW/dZRNFUMyyuUNZGBt1Hb38OftyrIX69YVSP6eiqOY2
2gkGFpxSGxB91B4RwxEy2U5JY5rgC0VtuYs+eE4OasrmpPVMaHmD/9wMYP/q/Y5R
NR2LARxtwQEhely0XECw7OasH0v1ljN/O6qyNk58dzGvLs2d+y1ust/2j5lQbZWj
Ca2aRcConlJQxvGxmOOzlnwfCcPEijy3lYL2z3g7BGbkjpVluWxPGAhABtmPnyPh
tSbkneyrmcVkCvXRiW2aUfX+ZF3ZQWzedTyfwSLehZUA7e0Ts7WmgH9BKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpjhJ7+li40x6IdHSaYb5XsNcXuMB8GA1UdIwQY
MBaAFJ0mZJ5PLHlf/lQPnZfybpnFxeP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNaa25rOHNlVl8tVkEtZGxfSnVtY1hGNF84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzVjMDctZWIzMC00MDhmLTg1OGEt
ZWE0NjljODYwZGM2LzEvblNaa25rOHNlVl8tVkEtZGxfSnVtY1hGNF84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9kYzVjMDctZWIzMC00MDhmLTg1OGEtZWE0NjljODYwZGM2
LzEvblNaa25rOHNlVl8tVkEtZGxfSnVtY1hGNF84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhF0YLD+P
vPmr99gigVGKdL6RNHDiqCll/KR/Pd+iruj1BatpZlbt+CubVrK6AgGQLNEppt26
FwBDPTKIcd17v1N/Whouauw5G4NBUsms9gbH7gxlqie2/rrYD5bvOOv+vNab0wNn
3aFsbdQC6f7VQieZpWVuIP0lV1gv525DaOHrAudLTqa6mYSSEfGvbSY/fjy2rYev
0PqVP9MzAnz9O5PVCMhcOF6Y9JJPygo2L2aBNoj/6gUkDWTuf+ll414fqvers6hW
PXUNQgZokqMpOtLP+FRM9/hIAy+MJ11rTHfGPro9+UKCiab5vGYkEXLbpWQDaOOn
Rzhgg5M+3YfaFQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:27 2025 by rpki-client