Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
File: NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft (raw, json)
Hash identifier: mJcFlYmiZHqr05i1YRJ0MEPMS03fSEbUp9VmO23uByk=
Subject key identifier: 8D:2F:D4:A7:DC:79:27:40:79:6E:D8:7F:7B:C2:F0:99:E2:44:27:BB
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial: 019A006C0A138DC8A52D3552F119FC219837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 07:01:11 +0000
Manifest this update: Mon 20 Oct 2025 07:01:11 +0000
Manifest next update: Tue 21 Oct 2025 07:01:11 +0000
Files and hashes: 1: 92pgx6QNH23m1sb49k-ykMttkN0.roa (hash: 6x2mradcGTZ+q9pm81EMeP+6J3k4A+BvCK17T29Njxw=)
2: NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl (hash: o0gQVsTTtL1HdLCk1KP/ecvbK681UJi2TN9CtVYzfJA=)
3: lZsMnzEe-znnn1V93iNCRM_YAak.roa (hash: z+dECtyUmhjS80QJzbvWDw1cRN0vxIcWCWIADf50+Fg=)
4: oYs8paRk9JPLOaUCIoa9pxPnmCs.roa (hash: kBYq1h4wg3W+NuRYMWAaTbphy585KIiOSln9Rszwvtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:0a:13:8d:c8:a5:2d:35:52:f1:19:fc:21:98:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Validity
Not Before: Oct 20 07:01:11 2025 GMT
Not After : Oct 21 07:01:11 2025 GMT
Subject: CN=8d2fd4a7dc792740796ed87f7bc2f099e24427bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6c:75:b3:0e:7d:63:ba:9d:23:51:ef:15:0a:
5b:49:1c:0e:e1:47:35:4e:72:dc:63:86:3c:20:8e:
0e:31:30:3f:bb:c9:3a:a6:97:84:ac:2c:32:49:9b:
42:9b:a3:14:4e:0a:75:1b:d2:05:56:7e:ab:bf:f8:
87:62:d2:2d:d3:46:c6:83:cb:6b:30:68:75:e3:18:
e8:44:80:4b:56:c5:94:7b:14:35:47:70:cf:61:74:
45:56:4e:b8:71:1d:3f:0b:2e:5c:7a:54:fa:25:76:
5e:d9:d0:cf:99:bb:53:34:b9:58:bb:6d:8d:2e:a9:
15:a6:c0:88:49:1f:a7:c2:7f:5d:94:88:86:cb:c9:
20:76:55:3b:04:ed:08:01:78:a0:07:57:c1:ec:2f:
5a:4c:57:ea:14:82:dc:ff:8c:8f:8c:82:44:2d:30:
a8:fd:de:ed:2a:2f:15:99:4f:46:d6:24:53:d0:58:
78:2e:57:5a:85:aa:e9:60:0e:52:f9:05:3d:d9:26:
f1:d6:37:5d:62:2e:84:10:09:0c:3a:fe:c5:e3:30:
df:bb:cd:02:3d:4d:f2:62:7b:8c:60:28:f4:d9:d5:
9c:8a:5a:a0:e5:46:32:a9:cb:2f:da:b0:b1:6d:1c:
9f:25:99:31:bc:be:1c:ad:31:3d:41:d5:9d:d6:7a:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2F:D4:A7:DC:79:27:40:79:6E:D8:7F:7B:C2:F0:99:E2:44:27:BB
X509v3 Authority Key Identifier:
keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f4:3d:24:59:03:ba:a7:15:3e:8c:05:29:af:4c:71:8a:ac:
c2:c2:da:a8:9b:da:67:2e:e6:70:97:37:8f:ad:1f:5a:2f:4f:
cf:c8:ae:a7:ac:6d:26:6f:4f:1f:6d:8a:55:92:f9:0c:f9:88:
c3:a5:5e:41:11:b3:bd:41:db:bc:91:92:b0:e1:b7:72:f8:4e:
22:16:a7:ba:57:96:27:9f:2f:74:f3:95:f1:f2:f9:a9:9c:d1:
87:00:2a:79:23:16:75:40:30:e1:d4:e5:46:62:90:cf:81:9d:
19:7a:d5:d4:07:4a:31:40:5a:36:55:cd:63:31:b3:b9:fd:81:
ff:6b:7e:1b:a1:fa:90:bc:6a:c0:ff:d6:b8:88:3f:39:19:0e:
09:54:d9:dd:78:fa:51:f8:f0:c6:fb:83:89:61:af:9d:6b:cd:
04:a3:d6:7c:b8:12:bc:9c:38:2e:8d:cc:33:bd:e9:89:65:c6:
a7:3e:5d:4f:8b:bb:0e:78:26:4b:67:3e:cd:7b:be:da:a1:02:
b9:0d:84:4d:34:6b:3c:40:b6:69:17:fc:5c:48:41:b5:cb:56:
25:c7:f8:73:1a:f0:6d:26:82:d2:ea:d5:26:65:97:ef:19:17:
36:22:25:eb:af:9b:15:06:fa:36:2f:c8:65:ab:67:57:f3:e2:
fe:b1:4c:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAbAoTjcilLTVS8Rn8IZg3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MGJlYTNmY2MzY2JjZWRjODI5MTljZjU3Yzc0MTA4YmFl
YTM2OWUwHhcNMjUxMDIwMDcwMTExWhcNMjUxMDIxMDcwMTExWjAzMTEwLwYDVQQD
Eyg4ZDJmZDRhN2RjNzkyNzQwNzk2ZWQ4N2Y3YmMyZjA5OWUyNDQyN2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2x1sw59Y7qdI1HvFQpbSRwO4Uc1
TnLcY4Y8II4OMTA/u8k6ppeErCwySZtCm6MUTgp1G9IFVn6rv/iHYtIt00bGg8tr
MGh14xjoRIBLVsWUexQ1R3DPYXRFVk64cR0/Cy5celT6JXZe2dDPmbtTNLlYu22N
LqkVpsCISR+nwn9dlIiGy8kgdlU7BO0IAXigB1fB7C9aTFfqFILc/4yPjIJELTCo
/d7tKi8VmU9G1iRT0Fh4LldaharpYA5S+QU92Sbx1jddYi6EEAkMOv7F4zDfu80C
PU3yYnuMYCj02dWcilqg5UYyqcsv2rCxbRyfJZkxvL4crTE9QdWd1nq0qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0v1KfceSdAeW7Yf3vC8JniRCe7MB8GA1UdIwQY
MBaAFDQL6j/MPLztyCkZz1fHQQi66jaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lY2RhM2QtYTJkYi00OTA4LTg2MmYt
MTExMDU2MzY5YTIzLzEvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9lY2RhM2QtYTJkYi00OTA4LTg2MmYtMTExMDU2MzY5YTIz
LzEvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfQ9JFkD
uqcVPowFKa9McYqswsLaqJvaZy7mcJc3j60fWi9Pz8iup6xtJm9PH22KVZL5DPmI
w6VeQRGzvUHbvJGSsOG3cvhOIhanuleWJ58vdPOV8fL5qZzRhwAqeSMWdUAw4dTl
RmKQz4GdGXrV1AdKMUBaNlXNYzGzuf2B/2t+G6H6kLxqwP/WuIg/ORkOCVTZ3Xj6
UfjwxvuDiWGvnWvNBKPWfLgSvJw4Lo3MM73piWXGpz5dT4u7DngmS2c+zXu+2qEC
uQ2ETTRrPEC2aRf8XEhBtctWJcf4cxrwbSaC0urVJmWX7xkXNiIl66+bFQb6Ni/I
ZatnV/Pi/rFM4Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:07:19 2025 by rpki-client