Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier: MiGn0xxJjUmmK3l3zY1jx/MWXCZSZCqzBKvNQ8lGF7I=
Subject key identifier: B1:EE:C8:82:02:3C:57:DD:BE:94:B4:ED:E9:17:FF:7B:55:1B:92:9F
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 0199FBEB1712EAEBB7B02B70B1A8BA6A7800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:01:52 +0000
Manifest this update: Sun 19 Oct 2025 10:01:52 +0000
Manifest next update: Mon 20 Oct 2025 10:01:52 +0000
Files and hashes: 1: S6yD0xSsAdYMuFY-SqJP0As2TGI.roa (hash: NWiZKpb2JP7oKryMsUVnNHlDjQunxGKrj2ir9mx8k8E=)
2: lkhGtmHtTBEdKgsUVjONXoB0iQc.roa (hash: 9yZ07+0QCixTukFaKD5cKhr7FU+NHBM/0FUydctI6gg=)
3: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: GGX4OS6fjX1YLvBlv9/5hkqwkYbDkvLAL4UWucqojic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:17:12:ea:eb:b7:b0:2b:70:b1:a8:ba:6a:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: Oct 19 10:01:52 2025 GMT
Not After : Oct 20 10:01:52 2025 GMT
Subject: CN=b1eec882023c57ddbe94b4ede917ff7b551b929f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d0:79:17:1b:9b:3d:8c:68:da:2c:8b:f5:39:
bc:13:26:8f:8c:8a:58:73:18:db:e6:db:9b:54:0c:
31:0a:87:fd:3f:f3:8b:a5:58:24:ff:3e:bf:9d:9e:
a4:1b:63:e5:76:1d:2e:f1:63:cf:22:39:be:2c:af:
06:63:26:bf:46:5f:e5:fd:a8:a6:fa:8c:f3:fc:88:
6b:6b:42:86:56:65:c1:3b:7c:1a:7e:4f:46:22:ac:
cf:a6:44:fb:6b:73:a5:1e:7c:c7:a7:cf:13:48:5d:
87:1f:36:a9:70:ed:2d:5c:0e:f2:0d:53:0a:2f:85:
c5:d1:ad:05:f4:0c:33:6c:60:27:58:0f:c4:42:89:
26:1f:20:9e:ce:23:68:89:95:15:fc:d4:77:c7:1d:
3a:a3:df:c7:27:c6:5f:4b:1d:0e:92:ca:a3:4c:01:
9d:80:9b:41:ad:66:1f:e9:2a:ee:89:f0:5c:2c:d8:
c3:c1:f5:69:25:fa:c2:d4:69:c6:1a:27:93:45:33:
4d:fa:cb:a0:74:88:4f:da:54:27:15:97:72:bb:33:
ef:55:2a:3a:87:0c:72:e8:65:47:27:2b:00:a6:88:
49:24:5f:d1:c4:d6:ed:e8:53:01:55:0b:77:53:b7:
65:63:c3:ce:ba:50:e5:ba:cf:cf:16:12:91:79:da:
99:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EE:C8:82:02:3C:57:DD:BE:94:B4:ED:E9:17:FF:7B:55:1B:92:9F
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:8b:bb:74:77:40:8b:40:9f:13:14:5a:6b:d0:79:63:23:7b:
d8:b9:42:eb:00:ca:fc:d6:5e:7d:ad:04:b4:49:b7:53:2e:55:
04:a6:e6:72:45:c6:a8:c1:3b:4f:cb:90:e8:40:7b:4d:21:16:
b3:91:f9:61:dd:24:7c:d3:0c:7b:05:42:96:33:c4:5f:ad:e3:
41:89:19:59:23:7d:a2:87:55:02:db:d4:e0:e8:e7:9a:5d:ef:
a3:44:57:a0:29:9b:54:46:5d:18:49:7c:fd:63:99:ae:89:cf:
c2:c8:06:5f:b5:5c:3a:69:85:ea:26:e8:ad:0b:c6:d0:41:68:
9a:09:0a:2b:93:26:40:e7:cc:80:88:46:b6:63:ec:23:de:45:
69:c1:17:ab:e9:39:d8:34:a5:19:d4:d1:59:40:97:17:77:09:
07:53:94:85:46:40:a5:57:d5:ca:f4:2f:c9:7a:1e:44:11:74:
d9:6f:81:bd:97:87:f4:0a:1b:9c:6d:76:6f:72:3d:2c:54:ae:
45:2e:9d:87:f1:23:06:5d:0a:f2:9c:c2:01:77:51:5c:5b:34:
2e:6f:4b:d2:e8:bf:60:77:fc:bf:d8:72:59:ef:27:c3:da:c0:
87:08:61:5d:a0:74:0d:82:20:dc:f2:b2:23:7b:1d:4e:cd:3c:
8e:5a:73:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76xcS6uu3sCtwsai6angAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjU3MTkwODIxZjcwNThhOGVhZmQ0ODE5Njk3NDM2OGJh
ZDhmMTQwHhcNMjUxMDE5MTAwMTUyWhcNMjUxMDIwMTAwMTUyWjAzMTEwLwYDVQQD
EyhiMWVlYzg4MjAyM2M1N2RkYmU5NGI0ZWRlOTE3ZmY3YjU1MWI5MjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9B5FxubPYxo2iyL9Tm8EyaPjIpY
cxjb5tubVAwxCof9P/OLpVgk/z6/nZ6kG2Pldh0u8WPPIjm+LK8GYya/Rl/l/aim
+ozz/Ihra0KGVmXBO3wafk9GIqzPpkT7a3OlHnzHp88TSF2HHzapcO0tXA7yDVMK
L4XF0a0F9AwzbGAnWA/EQokmHyCeziNoiZUV/NR3xx06o9/HJ8ZfSx0OksqjTAGd
gJtBrWYf6SruifBcLNjDwfVpJfrC1GnGGieTRTNN+sugdIhP2lQnFZdyuzPvVSo6
hwxy6GVHJysApohJJF/RxNbt6FMBVQt3U7dlY8POulDlus/PFhKRedqZ4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHuyIICPFfdvpS07ekX/3tVG5KfMB8GA1UdIwQY
MBaAFJ0lcZCCH3BYqOr9SBlpdDaLrY8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNWeGtJSWZjRmlvNnYxSUdXbDBOb3V0anhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS82NmY4MjktNTEyOS00ODQyLWE1YzAt
Mzc0MGIwOTQxZGI4LzEvblNWeGtJSWZjRmlvNnYxSUdXbDBOb3V0anhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS82NmY4MjktNTEyOS00ODQyLWE1YzAtMzc0MGIwOTQxZGI4
LzEvblNWeGtJSWZjRmlvNnYxSUdXbDBOb3V0anhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdou7dHdA
i0CfExRaa9B5YyN72LlC6wDK/NZefa0EtEm3Uy5VBKbmckXGqME7T8uQ6EB7TSEW
s5H5Yd0kfNMMewVCljPEX63jQYkZWSN9oodVAtvU4Ojnml3vo0RXoCmbVEZdGEl8
/WOZronPwsgGX7VcOmmF6iborQvG0EFomgkKK5MmQOfMgIhGtmPsI95FacEXq+k5
2DSlGdTRWUCXF3cJB1OUhUZApVfVyvQvyXoeRBF02W+BvZeH9AobnG12b3I9LFSu
RS6dh/EjBl0K8pzCAXdRXFs0Lm9L0ui/YHf8v9hyWe8nw9rAhwhhXaB0DYIg3PKy
I3sdTs08jlpzMA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:18 2025 by rpki-client