
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: b/fWeaOso18mXadChR9thzch+8x6+OL6Zd1SoH1UR8U=
Subject key identifier: 42:C7:29:26:E3:4E:F3:0C:62:EE:52:98:56:7F:47:F8:D4:DE:00:83
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 0198D661368D49FA026BC75AFE070A82D13E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 0963
Signing time: Sat 23 Aug 2025 10:02:31 +0000
Manifest this update: Sat 23 Aug 2025 10:02:31 +0000
Manifest next update: Sun 24 Aug 2025 10:02:31 +0000
Files and hashes: 1: ZcSRf0HxnWHQIw5MIAf_WL9oY6A.roa (hash: cP2ZkY5lLDgrJYkw2lqKqOmENJRMWCl82XCDZbZfylY=)
2: dk4GVxnPxj9mrIWRHBmkYZR_RAY.roa (hash: eaMuW15awNbcED9U+mZfT6o28nxoJ9RTD5vuUNkkC90=)
3: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: tS2JmUR5q9LI8reT94QdYVIpjqljGVIh6ZoZYm73di4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:36:8d:49:fa:02:6b:c7:5a:fe:07:0a:82:d1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Aug 23 10:02:31 2025 GMT
Not After : Aug 24 10:02:31 2025 GMT
Subject: CN=42c72926e34ef30c62ee5298567f47f8d4de0083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:e8:f2:5b:fa:30:4d:e8:47:59:a5:3d:4e:
c8:ea:28:8f:cc:de:dd:64:dd:7c:7a:1c:ca:e3:4a:
4e:42:be:ed:57:1b:02:3c:f4:9c:c7:7b:23:65:57:
1a:71:87:77:92:0e:3c:57:df:c6:2f:a5:05:20:50:
c6:91:c1:f8:56:b6:3e:81:77:b3:df:e5:42:21:f0:
2b:87:7d:1b:c6:dd:b2:31:cd:5d:04:0f:7d:1a:f3:
2a:a5:90:f1:12:44:fb:d8:64:e9:2e:24:d3:a4:f4:
63:44:bd:53:c6:28:07:48:c5:c2:bf:00:a1:2d:f0:
86:9b:ea:50:bc:45:92:6d:3a:2f:e6:50:c9:f2:f4:
84:3e:9f:fa:a7:f6:a9:0a:4a:67:09:3c:e8:b2:97:
40:52:36:e1:da:a2:27:87:c4:70:07:fc:43:38:5a:
de:62:38:4e:71:38:87:71:3e:68:88:ec:c2:4a:18:
e2:b1:1d:4a:6c:05:0c:d2:91:ed:f7:b4:98:ee:34:
4c:29:f0:b9:9d:7f:91:e1:d1:0f:4b:95:c3:84:ea:
fa:a9:1d:fe:bb:e4:0e:2a:97:29:87:b7:7a:b1:09:
e2:7c:5b:66:62:5e:c4:c7:ce:f8:e9:b2:d1:a1:0a:
31:a5:97:db:b1:5c:5a:97:13:4e:4d:fc:e5:43:28:
db:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C7:29:26:E3:4E:F3:0C:62:EE:52:98:56:7F:47:F8:D4:DE:00:83
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c1:91:2b:ac:72:7f:9b:d5:ff:03:b6:21:16:ad:ad:fd:99:
b2:41:e1:f2:77:36:0c:47:0a:2a:b4:29:da:fe:b9:b6:d2:25:
5b:2b:52:5a:9e:69:79:24:ef:33:82:dc:ab:84:f6:0a:69:df:
a7:9f:2e:40:24:44:83:7c:37:22:d6:db:be:68:e4:c6:de:e1:
5f:79:ca:89:b8:bf:65:a4:9e:7c:9f:44:34:7c:b5:cf:3b:7f:
74:42:61:31:e8:0c:70:e9:e5:3e:c7:fc:fe:8e:91:59:9a:a9:
bc:07:3c:50:99:a7:f5:a9:f3:a4:61:4a:6b:b5:3d:ab:ea:23:
ba:e0:56:02:f0:a6:e1:c5:8d:1f:8e:04:15:fa:38:81:22:09:
a1:ce:14:11:3e:1d:6d:55:a7:87:fe:ff:68:f7:99:be:78:12:
31:4e:7a:72:48:f4:77:f5:60:84:70:3a:f2:1b:35:ed:ab:7d:
e3:5b:5d:90:e0:df:e6:7b:05:1c:07:bd:6a:bc:23:f9:88:bd:
b6:da:ff:78:34:26:95:c2:7f:40:e1:65:18:62:78:83:8d:eb:
19:94:0d:43:ea:17:de:35:e9:76:49:a7:a0:75:8d:2c:cc:e8:
fd:c3:1d:df:a9:12:08:a7:d1:ba:e8:10:cc:f6:ac:fe:85:3f:
de:3d:59:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYTaNSfoCa8da/gcKgtE+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMjllODU1NDAyMGJkZWZhMTdjNTU2MTQzOGZiNGJhZjU4
MzFmNTIwHhcNMjUwODIzMTAwMjMxWhcNMjUwODI0MTAwMjMxWjAzMTEwLwYDVQQD
Eyg0MmM3MjkyNmUzNGVmMzBjNjJlZTUyOTg1NjdmNDdmOGQ0ZGUwMDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtADo8lv6ME3oR1mlPU7I6iiPzN7d
ZN18ehzK40pOQr7tVxsCPPScx3sjZVcacYd3kg48V9/GL6UFIFDGkcH4VrY+gXez
3+VCIfArh30bxt2yMc1dBA99GvMqpZDxEkT72GTpLiTTpPRjRL1TxigHSMXCvwCh
LfCGm+pQvEWSbTov5lDJ8vSEPp/6p/apCkpnCTzospdAUjbh2qInh8RwB/xDOFre
YjhOcTiHcT5oiOzCShjisR1KbAUM0pHt97SY7jRMKfC5nX+R4dEPS5XDhOr6qR3+
u+QOKpcph7d6sQnifFtmYl7Ex8746bLRoQoxpZfbsVxalxNOTfzlQyjb7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELHKSbjTvMMYu5SmFZ/R/jU3gCDMB8GA1UdIwQY
MBaAFJ8p6FVAIL3voXxVYUOPtLr1gx9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yZGJlMDQtNDNhOC00OTYzLThlODYt
M2ZlOGY4OTZlNTUxLzEvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yZGJlMDQtNDNhOC00OTYzLThlODYtM2ZlOGY4OTZlNTUx
LzEvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMGRK6xy
f5vV/wO2IRatrf2ZskHh8nc2DEcKKrQp2v65ttIlWytSWp5peSTvM4Lcq4T2Cmnf
p58uQCREg3w3Itbbvmjkxt7hX3nKibi/ZaSefJ9ENHy1zzt/dEJhMegMcOnlPsf8
/o6RWZqpvAc8UJmn9anzpGFKa7U9q+ojuuBWAvCm4cWNH44EFfo4gSIJoc4UET4d
bVWnh/7/aPeZvngSMU56ckj0d/VghHA68hs17at941tdkODf5nsFHAe9arwj+Yi9
ttr/eDQmlcJ/QOFlGGJ4g43rGZQNQ+oX3jXpdkmnoHWNLMzo/cMd36kSCKfRuugQ
zPas/oU/3j1Z3Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:14 2025 by rpki-client