Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
File: NMSVb4VnESWILFdM0uLSA6q97QU.mft (raw, json)
Hash identifier: DQ+on4ytF/n5wGvtjmgNS17dWnIdu6/3plqGrFkc4qY=
Subject key identifier: 02:76:0A:74:EB:83:15:4C:9A:AA:12:0A:4E:45:5D:A1:24:96:45:6F
Authority key identifier: 34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05
Certificate issuer: /CN=34c4956f85671125882c574cd2e2d203aabded05
Certificate serial: 0199FDD90F721FF862D0249BC25B5DEB3512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:01:24 +0000
Manifest this update: Sun 19 Oct 2025 19:01:24 +0000
Manifest next update: Mon 20 Oct 2025 19:01:24 +0000
Files and hashes: 1: NMSVb4VnESWILFdM0uLSA6q97QU.crl (hash: iIgFJpD2ekY4VedeiCo0zSDJfxiWJ6iLpugBkJexDqA=)
2: xtLurjJMXgwePFKUT7vd_Bs7y4g.roa (hash: 9QOnyZtRBS25fvMRFyNZdyW0R5uMOP/pXW6ujcGtyGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:0f:72:1f:f8:62:d0:24:9b:c2:5b:5d:eb:35:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34c4956f85671125882c574cd2e2d203aabded05
Validity
Not Before: Oct 19 19:01:24 2025 GMT
Not After : Oct 20 19:01:24 2025 GMT
Subject: CN=02760a74eb83154c9aaa120a4e455da12496456f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:86:f8:1a:51:55:31:7e:5d:ba:1a:b5:df:77:
22:11:b1:98:26:19:2b:37:0f:7f:73:22:eb:6d:d7:
67:bd:a5:5c:44:ce:8d:c4:a9:de:d8:20:92:53:06:
78:5a:51:ab:3e:94:73:b5:14:20:67:90:e8:2d:39:
8f:df:b9:0e:20:d2:8c:73:cb:63:45:8d:44:57:75:
f1:03:8c:a9:f4:eb:2c:4d:bc:db:f8:39:fc:25:6b:
f9:fb:63:5b:00:cb:78:e3:ce:e1:1c:3d:84:54:fa:
e9:2e:28:a2:5b:ad:15:84:c0:c9:f3:3d:c8:c6:3b:
54:5a:50:79:5e:cc:c6:62:5a:0c:64:b9:05:52:a6:
67:27:eb:e5:03:fc:72:28:9b:2f:38:4c:35:ec:70:
ad:83:77:45:bb:aa:d7:93:da:5f:68:47:0e:67:5e:
90:cb:4a:d0:75:e8:c1:8c:74:88:27:24:e0:28:f3:
7d:d4:5d:1e:d6:6e:6b:d8:78:d3:9e:72:99:4c:f3:
d0:fe:98:15:b0:56:0e:72:a7:62:fb:60:4f:18:67:
7d:6c:9a:af:14:18:6e:05:b6:33:37:35:de:3a:a4:
40:cb:cb:b8:33:a4:66:fe:1c:3d:2f:00:63:e4:1f:
d7:cd:0a:8f:40:25:fc:2a:c9:bb:ad:fa:a8:83:90:
9f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:76:0A:74:EB:83:15:4C:9A:AA:12:0A:4E:45:5D:A1:24:96:45:6F
X509v3 Authority Key Identifier:
keyid:34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:cb:3f:44:9c:b3:9a:d2:26:6d:82:2f:87:82:19:02:99:86:
1e:32:23:dd:57:49:80:1d:90:d2:7c:ea:de:1b:cc:19:90:f2:
aa:d1:16:52:82:5f:00:c6:eb:ed:35:a5:03:f3:ef:0c:5c:2b:
11:38:b9:af:fa:f3:34:06:a0:27:39:db:56:f2:be:af:b3:50:
6e:c9:3d:a6:96:38:b2:78:25:af:d3:f7:1d:02:45:ad:50:1b:
40:0f:dd:45:a7:3a:96:a6:df:d9:7f:09:11:32:9d:16:f5:e4:
78:60:27:c9:ec:f5:20:7d:dd:29:b1:b0:65:7e:76:4d:34:e7:
41:64:7e:c2:03:ec:5e:a9:f5:07:5a:e4:b0:c2:d5:d3:2a:65:
af:d1:d1:5f:9e:50:f1:ec:3c:c0:77:f3:d4:97:2f:74:6c:8d:
40:06:8c:bf:17:3c:11:6c:42:9b:29:58:db:52:33:8d:db:ba:
5f:95:61:af:1b:69:6b:59:f0:1a:40:d3:46:a3:48:3c:6c:de:
af:92:61:f7:13:c6:6d:c8:e1:3d:22:9f:1d:dc:6f:84:66:cd:
a7:79:71:ba:ab:80:11:b6:71:f6:7b:ef:37:54:3a:a4:0a:93:
8d:66:e3:b6:2b:4b:a6:af:6e:78:75:e9:d5:20:ff:8b:7f:e5:
c1:8a:76:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92Q9yH/hi0CSbwltd6zUSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YzQ5NTZmODU2NzExMjU4ODJjNTc0Y2QyZTJkMjAzYWFi
ZGVkMDUwHhcNMjUxMDE5MTkwMTI0WhcNMjUxMDIwMTkwMTI0WjAzMTEwLwYDVQQD
EygwMjc2MGE3NGViODMxNTRjOWFhYTEyMGE0ZTQ1NWRhMTI0OTY0NTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ob4GlFVMX5duhq133ciEbGYJhkr
Nw9/cyLrbddnvaVcRM6NxKne2CCSUwZ4WlGrPpRztRQgZ5DoLTmP37kOINKMc8tj
RY1EV3XxA4yp9OssTbzb+Dn8JWv5+2NbAMt4487hHD2EVPrpLiiiW60VhMDJ8z3I
xjtUWlB5XszGYloMZLkFUqZnJ+vlA/xyKJsvOEw17HCtg3dFu6rXk9pfaEcOZ16Q
y0rQdejBjHSIJyTgKPN91F0e1m5r2HjTnnKZTPPQ/pgVsFYOcqdi+2BPGGd9bJqv
FBhuBbYzNzXeOqRAy8u4M6Rm/hw9LwBj5B/XzQqPQCX8Ksm7rfqog5CfNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJ2CnTrgxVMmqoSCk5FXaEklkVvMB8GA1UdIwQY
MBaAFDTElW+FZxEliCxXTNLi0gOqve0FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk1TVmI0Vm5FU1dJTEZkTTB1TFNBNnE5N1FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mM2U2N2EtY2ZkNy00NzQ1LTgyYjct
MmQ5MGM3ZmQwZDYwLzEvTk1TVmI0Vm5FU1dJTEZkTTB1TFNBNnE5N1FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9mM2U2N2EtY2ZkNy00NzQ1LTgyYjctMmQ5MGM3ZmQwZDYw
LzEvTk1TVmI0Vm5FU1dJTEZkTTB1TFNBNnE5N1FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcs/RJyz
mtImbYIvh4IZApmGHjIj3VdJgB2Q0nzq3hvMGZDyqtEWUoJfAMbr7TWlA/PvDFwr
ETi5r/rzNAagJznbVvK+r7NQbsk9ppY4snglr9P3HQJFrVAbQA/dRac6lqbf2X8J
ETKdFvXkeGAnyez1IH3dKbGwZX52TTTnQWR+wgPsXqn1B1rksMLV0yplr9HRX55Q
8ew8wHfz1JcvdGyNQAaMvxc8EWxCmylY21Izjdu6X5Vhrxtpa1nwGkDTRqNIPGze
r5Jh9xPGbcjhPSKfHdxvhGbNp3lxuquAEbZx9nvvN1Q6pAqTjWbjtitLpq9ueHXp
1SD/i3/lwYp2/A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:58:44 2025 by rpki-client