Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
File: nVgf-JVKiXizTYSRAVRszmHEr6M.mft (raw, json)
Hash identifier: ybQvtLxoTN7AKYeXFuGudTyqUnyAaYw4SBkJm1LhCEE=
Subject key identifier: 13:11:C3:4B:E2:DB:DC:49:E2:D7:9D:78:B5:53:0B:53:DD:A0:6F:6C
Authority key identifier: 9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
Certificate issuer: /CN=9d581ff8954a8978b34d849101546cce61c4afa3
Certificate serial: 0199FE10378228F23D1A4FFDCC482D14CD97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 20:01:39 +0000
Manifest this update: Sun 19 Oct 2025 20:01:39 +0000
Manifest next update: Mon 20 Oct 2025 20:01:39 +0000
Files and hashes: 1: nVgf-JVKiXizTYSRAVRszmHEr6M.crl (hash: WlFlH6B7YTBzciSJIyIgDMg/AvRtxrBEKJ7nQdk8xGg=)
2: pbhnhbhAo7f81mspcf47i1RiwC4.roa (hash: cy6NBeCA9q+KpxmPFPQqLF3HwYWfNZwADzV/UaXEKik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:37:82:28:f2:3d:1a:4f:fd:cc:48:2d:14:cd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d581ff8954a8978b34d849101546cce61c4afa3
Validity
Not Before: Oct 19 20:01:39 2025 GMT
Not After : Oct 20 20:01:39 2025 GMT
Subject: CN=1311c34be2dbdc49e2d79d78b5530b53dda06f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b6:f9:ab:fb:67:cc:5f:da:8b:31:10:c3:71:
21:08:cc:32:47:0e:09:c2:7a:95:77:1c:65:45:f8:
11:63:84:13:82:57:61:77:f8:a1:f6:70:25:39:d8:
fd:17:48:0d:50:91:08:65:58:81:86:a4:f1:ee:5a:
76:8d:94:4b:78:ca:00:72:c6:a0:a6:4a:5a:e6:f0:
3a:7c:7d:be:cb:b1:8e:a1:1f:d1:e8:14:97:8f:49:
f6:c2:e3:04:98:49:60:52:e1:c9:05:e8:a6:cc:cf:
61:99:0c:51:ea:04:35:3e:73:7d:6c:52:7c:0a:5a:
bb:e4:d6:6e:95:67:87:9b:a7:46:15:0f:b9:e3:b8:
6b:56:9d:22:8b:92:d8:66:03:e8:f7:d2:ff:88:49:
fc:27:0f:ec:bc:60:53:dd:ae:0d:e8:e6:2d:f0:44:
d2:a9:5e:1c:76:bf:19:bf:5c:26:b8:e9:7b:1f:8a:
a9:30:8f:3b:37:15:3f:73:9f:20:ab:58:53:1a:42:
e6:b1:53:ba:b0:b9:79:a6:b2:fa:9e:17:59:a3:9a:
b7:d3:d5:e8:bc:b6:93:8f:db:bd:56:83:88:d5:9c:
e7:8c:3e:fb:73:a7:56:e5:7e:4b:ea:da:3b:48:81:
aa:7d:0a:87:09:39:ae:ae:f2:c1:03:ef:25:19:47:
e4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:11:C3:4B:E2:DB:DC:49:E2:D7:9D:78:B5:53:0B:53:DD:A0:6F:6C
X509v3 Authority Key Identifier:
keyid:9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:29:9b:b6:1c:02:ed:88:8d:9f:f0:27:b0:cc:c7:3d:a8:12:
19:50:40:bf:7b:a2:88:0d:6d:ef:9c:83:bf:9e:30:fe:6f:2b:
ee:56:43:18:63:a4:35:18:80:ab:8c:05:e5:92:bc:05:f7:3f:
c5:62:b7:83:35:24:70:34:b5:47:d0:b9:90:32:f3:2a:e0:fd:
be:4e:0d:34:4e:fc:ec:49:3f:1b:55:19:e9:96:8b:e9:4b:98:
03:4d:1a:50:dd:ac:f8:4e:c1:48:f2:da:70:75:e4:70:e3:2f:
b0:e8:ec:75:d1:23:4f:5a:b7:d3:c9:64:31:88:99:4d:a5:0c:
6e:31:8e:76:71:62:13:cc:7e:13:61:b3:ab:30:6c:cb:a0:9e:
9d:8a:76:65:e7:aa:bd:da:c1:21:36:e7:a5:54:26:38:a2:e9:
b3:f5:dd:0e:89:7c:bf:0f:e9:3d:da:85:fe:a0:4e:47:ba:1e:
be:0b:b8:ae:43:f9:bc:cd:47:97:89:e4:f5:8f:69:17:02:63:
6b:1e:da:2b:0f:1a:52:2b:b8:eb:da:b0:6d:f3:ff:d8:d2:44:
bf:af:56:1d:b8:4e:ce:df:bb:66:04:95:76:83:42:90:38:a0:
fb:e3:90:2a:06:4f:55:15:bf:a8:e7:99:c4:20:ee:9b:e7:63:
a1:dc:4c:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EDeCKPI9Gk/9zEgtFM2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNTgxZmY4OTU0YTg5NzhiMzRkODQ5MTAxNTQ2Y2NlNjFj
NGFmYTMwHhcNMjUxMDE5MjAwMTM5WhcNMjUxMDIwMjAwMTM5WjAzMTEwLwYDVQQD
EygxMzExYzM0YmUyZGJkYzQ5ZTJkNzlkNzhiNTUzMGI1M2RkYTA2ZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorb5q/tnzF/aizEQw3EhCMwyRw4J
wnqVdxxlRfgRY4QTgldhd/ih9nAlOdj9F0gNUJEIZViBhqTx7lp2jZRLeMoAcsag
pkpa5vA6fH2+y7GOoR/R6BSXj0n2wuMEmElgUuHJBeimzM9hmQxR6gQ1PnN9bFJ8
Clq75NZulWeHm6dGFQ+547hrVp0ii5LYZgPo99L/iEn8Jw/svGBT3a4N6OYt8ETS
qV4cdr8Zv1wmuOl7H4qpMI87NxU/c58gq1hTGkLmsVO6sLl5prL6nhdZo5q309Xo
vLaTj9u9VoOI1ZznjD77c6dW5X5L6to7SIGqfQqHCTmurvLBA+8lGUfk3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMRw0vi29xJ4tedeLVTC1PdoG9sMB8GA1UdIwQY
MBaAFJ1YH/iVSol4s02EkQFUbM5hxK+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblZnZi1KVktpWGl6VFlTUkFWUnN6bUhFcjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYjNmMmYtMTRhZS00NjRiLTliN2Mt
Nzk4MGEyZTIzMDA3LzEvblZnZi1KVktpWGl6VFlTUkFWUnN6bUhFcjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yYjNmMmYtMTRhZS00NjRiLTliN2MtNzk4MGEyZTIzMDA3
LzEvblZnZi1KVktpWGl6VFlTUkFWUnN6bUhFcjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCmbthwC
7YiNn/AnsMzHPagSGVBAv3uiiA1t75yDv54w/m8r7lZDGGOkNRiAq4wF5ZK8Bfc/
xWK3gzUkcDS1R9C5kDLzKuD9vk4NNE787Ek/G1UZ6ZaL6UuYA00aUN2s+E7BSPLa
cHXkcOMvsOjsddEjT1q308lkMYiZTaUMbjGOdnFiE8x+E2GzqzBsy6CenYp2Zeeq
vdrBITbnpVQmOKLps/XdDol8vw/pPdqF/qBOR7oevgu4rkP5vM1Hl4nk9Y9pFwJj
ax7aKw8aUiu469qwbfP/2NJEv69WHbhOzt+7ZgSVdoNCkDig++OQKgZPVRW/qOeZ
xCDum+djodxMMw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:42 2025 by rpki-client