Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
File: nD_Ua11gbBzKtVixc24mIaS8BAM.mft (raw, json)
Hash identifier: dv31doUlxhdHWCR4ciKtRleV6aU4XxdHPSEJSGUQdfI=
Subject key identifier: AA:95:16:E1:94:ED:8F:C8:6A:69:A3:FC:0C:69:B8:6A:0D:11:A5:B8
Authority key identifier: 9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03
Certificate issuer: /CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403
Certificate serial: 0199FC2159C0C93473C8C399809E72571800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
Manifest number: 096F
Signing time: Sun 19 Oct 2025 11:01:07 +0000
Manifest this update: Sun 19 Oct 2025 11:01:07 +0000
Manifest next update: Mon 20 Oct 2025 11:01:07 +0000
Files and hashes: 1: nD_Ua11gbBzKtVixc24mIaS8BAM.crl (hash: zarsYCTf+ZwrShuLiVIGzeFy+VzVCoubHAGdKSiR1Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:59:c0:c9:34:73:c8:c3:99:80:9e:72:57:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403
Validity
Not Before: Oct 19 11:01:07 2025 GMT
Not After : Oct 20 11:01:07 2025 GMT
Subject: CN=aa9516e194ed8fc86a69a3fc0c69b86a0d11a5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:e8:f2:d6:0f:1b:d5:ba:8b:fa:5d:3a:4e:
5d:5d:8a:15:4e:0a:2b:cf:03:a0:f3:e7:79:5e:ae:
90:67:ed:e3:40:0e:6f:d2:11:72:44:23:37:be:76:
b2:3e:2f:ec:d0:bb:86:e2:85:61:b2:bf:0d:6d:6f:
1d:00:61:85:25:7b:b2:2c:0c:b1:f8:31:d8:ef:98:
7b:ba:ad:b5:89:12:7c:d1:2d:ec:9e:8a:8a:80:3f:
a1:24:5b:9a:de:bb:5b:60:26:81:8e:49:fa:1f:ab:
1a:b8:a1:9b:da:42:4d:01:0c:08:ea:8e:ce:2b:10:
84:4f:e4:4a:de:ef:5d:ef:4f:d3:52:4b:05:d6:17:
03:0d:97:8e:f3:c4:8c:b9:6a:c2:f1:82:2d:99:e3:
3b:59:05:ae:97:b4:85:1c:b7:f8:55:e3:d8:29:15:
6b:b6:ce:16:af:bc:12:b7:46:c7:72:fc:82:a5:27:
52:d1:51:de:de:57:74:62:55:a4:cb:73:7c:d2:19:
75:13:2b:69:de:a8:13:94:73:64:5f:33:fb:59:d2:
02:8f:87:f8:0e:30:4e:e7:f8:d5:35:64:1a:88:d8:
b7:f5:41:a5:ca:f5:b2:bc:37:91:03:80:88:b4:16:
49:b5:7e:f7:1f:92:e6:4f:4f:c6:62:a6:c5:31:b6:
ba:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:95:16:E1:94:ED:8F:C8:6A:69:A3:FC:0C:69:B8:6A:0D:11:A5:B8
X509v3 Authority Key Identifier:
keyid:9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:59:3e:45:dd:68:e8:45:15:f3:4f:65:ae:02:b4:08:67:23:
90:dc:67:a4:07:eb:17:12:d4:c2:93:c5:6e:62:6b:52:9c:87:
24:c6:f9:4a:fb:34:5b:07:5a:ef:30:5b:54:99:93:a6:ea:14:
1f:70:11:1e:d8:01:73:d1:51:3b:aa:ef:f8:76:b1:76:e8:b0:
74:43:03:9e:eb:a1:5c:8f:29:ae:87:63:fa:4f:c0:12:ae:4d:
5e:72:fb:cf:95:d5:d8:3e:dc:fe:1f:e6:76:f3:11:24:f9:e7:
fd:d1:5f:bc:84:f8:ef:e9:8a:e1:97:01:18:1a:5e:b3:6f:61:
8e:bc:b2:22:c8:35:99:56:66:cb:c0:0d:9e:8f:73:a2:45:ea:
d4:3a:56:bb:1b:81:74:08:1e:df:25:e9:57:bf:44:d7:2f:fa:
dd:ed:5d:61:b3:95:1a:65:81:e7:8f:04:1e:4b:47:86:b8:3e:
1d:ef:8a:3a:38:8c:b8:4c:ce:78:b3:66:a5:dd:18:ca:14:69:
21:34:fa:a3:86:d8:d3:a8:39:ea:3f:8c:0e:82:d6:7b:20:5a:
e7:f4:8b:8e:a8:09:40:7e:cc:9b:b4:d4:7a:36:f0:2c:b9:22:
5c:36:d6:ce:43:ea:12:0b:4c:a7:1b:1c:d0:4f:f5:ce:8b:b3:
ae:8b:a2:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IVnAyTRzyMOZgJ5yVxgAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljM2ZkNDZiNWQ2MDZjMWNjYWI1NThiMTczNmUyNjIxYTRi
YzA0MDMwHhcNMjUxMDE5MTEwMTA3WhcNMjUxMDIwMTEwMTA3WjAzMTEwLwYDVQQD
EyhhYTk1MTZlMTk0ZWQ4ZmM4NmE2OWEzZmMwYzY5Yjg2YTBkMTFhNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkHo8tYPG9W6i/pdOk5dXYoVTgor
zwOg8+d5Xq6QZ+3jQA5v0hFyRCM3vnayPi/s0LuG4oVhsr8NbW8dAGGFJXuyLAyx
+DHY75h7uq21iRJ80S3snoqKgD+hJFua3rtbYCaBjkn6H6sauKGb2kJNAQwI6o7O
KxCET+RK3u9d70/TUksF1hcDDZeO88SMuWrC8YItmeM7WQWul7SFHLf4VePYKRVr
ts4Wr7wSt0bHcvyCpSdS0VHe3ld0YlWky3N80hl1Eytp3qgTlHNkXzP7WdICj4f4
DjBO5/jVNWQaiNi39UGlyvWyvDeRA4CItBZJtX73H5LmT0/GYqbFMba6SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqVFuGU7Y/Iammj/AxpuGoNEaW4MB8GA1UdIwQY
MBaAFJw/1GtdYGwcyrVYsXNuJiGkvAQDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81Y2VkMjUtOTA5Ni00NzUwLTgyMTkt
MGIzMWMzMzJkNTBkLzEvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi81Y2VkMjUtOTA5Ni00NzUwLTgyMTktMGIzMWMzMzJkNTBk
LzEvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFk+Rd1o
6EUV809lrgK0CGcjkNxnpAfrFxLUwpPFbmJrUpyHJMb5Svs0Wwda7zBbVJmTpuoU
H3ARHtgBc9FRO6rv+HaxduiwdEMDnuuhXI8prodj+k/AEq5NXnL7z5XV2D7c/h/m
dvMRJPnn/dFfvIT47+mK4ZcBGBpes29hjryyIsg1mVZmy8ANno9zokXq1DpWuxuB
dAge3yXpV79E1y/63e1dYbOVGmWB548EHktHhrg+He+KOjiMuEzOeLNmpd0YyhRp
ITT6o4bY06g56j+MDoLWeyBa5/SLjqgJQH7Mm7TUejbwLLkiXDbWzkPqEgtMpxsc
0E/1zouzrouiOw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:27 2025 by rpki-client