Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
File: 0NhScDKV7Pi5cgH5FjEPiPTAirc.mft (raw, json)
Hash identifier: NrNpYV2L4iG4YJ8UZscASXAwioxtikN3UGd8WrRDe6M=
Subject key identifier: 3B:64:63:51:6C:AE:03:8F:9C:E0:BF:85:45:E5:1C:24:4B:88:1D:75
Authority key identifier: D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
Certificate issuer: /CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Certificate serial: 0199FDD9638ACD45AF728A0AAEAAD9F84A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:01:46 +0000
Manifest this update: Sun 19 Oct 2025 19:01:46 +0000
Manifest next update: Mon 20 Oct 2025 19:01:46 +0000
Files and hashes: 1: 0NhScDKV7Pi5cgH5FjEPiPTAirc.crl (hash: ZrtV94b38QqcArciOrIS+1clmFywPxRZ1zZ+BdzgZqk=)
2: YlrLpRr6jHVjZjhSp57OuuJNoDA.roa (hash: 3sLpE4GcZV46VhUEypK4IVzC6Mp0SDmiK7VScSwFOfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:63:8a:cd:45:af:72:8a:0a:ae:aa:d9:f8:4a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Validity
Not Before: Oct 19 19:01:46 2025 GMT
Not After : Oct 20 19:01:46 2025 GMT
Subject: CN=3b6463516cae038f9ce0bf8545e51c244b881d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:9a:2b:8b:d8:e3:6d:63:54:90:f5:0a:99:
bb:aa:e0:88:60:84:74:bd:80:91:9a:a6:16:48:99:
68:f8:23:f0:82:c4:c4:13:24:68:64:8b:a3:69:4e:
a0:33:66:cb:c7:dd:2e:b9:37:05:ff:f1:34:f1:27:
fc:c8:09:de:52:7d:13:4f:7b:fb:e1:f1:7e:3c:03:
82:ff:de:8c:b7:4e:c9:ce:b7:eb:d5:6c:cb:52:be:
3d:d9:c7:f0:b2:ef:5b:5b:9a:09:50:c2:67:4d:10:
d5:a7:e6:6e:40:88:d7:a7:b5:f8:64:32:18:24:60:
1b:f2:7f:40:fc:31:3a:c9:9c:47:17:54:44:57:06:
70:0e:35:37:20:93:7a:57:cc:4c:88:f4:fa:45:83:
a3:ab:89:21:61:1d:b9:3c:f0:92:8f:4a:51:1d:d3:
71:6b:e1:56:77:47:d2:44:ef:96:53:70:9f:0f:9b:
bd:5e:c3:8e:aa:7a:85:59:70:7b:c6:74:c0:28:f6:
1a:1c:26:1b:6b:93:45:fb:d9:09:4c:80:b2:7b:aa:
1e:2e:12:61:29:db:29:09:95:a5:0e:2e:80:10:f4:
66:e3:59:26:8d:5d:1f:dd:7a:92:64:91:37:6d:8f:
a0:ac:3e:0c:1e:f2:a7:a5:c0:a4:fb:3d:e5:82:2c:
75:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:64:63:51:6C:AE:03:8F:9C:E0:BF:85:45:E5:1C:24:4B:88:1D:75
X509v3 Authority Key Identifier:
keyid:D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a3:c0:53:6c:d3:74:cc:1b:fa:6e:ca:e6:82:c8:ec:56:da:
41:5b:54:52:8e:20:05:96:bb:31:ff:87:d3:bd:09:16:e1:a1:
7b:be:73:60:a7:50:50:0f:db:7c:2c:5f:b2:c6:d2:d0:16:78:
73:4f:6f:76:4e:40:43:fc:92:4c:8b:3d:dd:81:cf:ea:98:67:
c1:a4:65:a9:b8:f1:49:33:0c:4b:9d:9c:49:33:15:eb:67:c9:
64:ee:c2:aa:92:96:60:e2:d1:5d:78:d0:5f:3f:3e:f8:aa:0c:
37:31:81:59:e5:a1:96:12:8f:69:e1:c4:20:e3:30:7e:e4:4d:
03:b9:45:84:c8:64:1d:3a:3d:1f:9d:da:73:98:51:08:3d:0e:
27:87:c4:cc:01:b4:ef:45:04:94:47:12:96:94:ce:4d:93:db:
29:e3:b2:ab:de:ae:74:2c:11:d1:5d:ba:89:6f:7b:73:0c:66:
10:b7:2f:fe:64:25:d5:ec:09:a5:ba:9c:d5:b9:fd:a8:83:91:
32:d3:bf:c6:69:9a:d4:b9:1e:fa:3a:9a:4e:e6:ec:14:91:4e:
c9:5d:be:c4:86:f6:3e:5d:a3:b6:fc:84:97:0b:ec:64:ea:09:
a3:59:ac:69:3a:a2:fe:68:dd:c2:10:03:52:2a:84:aa:a1:76:
cd:b7:ab:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92WOKzUWvcooKrqrZ+EoIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZDg1MjcwMzI5NWVjZjhiOTcyMDFmOTE2MzEwZjg4ZjRj
MDhhYjcwHhcNMjUxMDE5MTkwMTQ2WhcNMjUxMDIwMTkwMTQ2WjAzMTEwLwYDVQQD
EygzYjY0NjM1MTZjYWUwMzhmOWNlMGJmODU0NWU1MWMyNDRiODgxZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/aaK4vY421jVJD1Cpm7quCIYIR0
vYCRmqYWSJlo+CPwgsTEEyRoZIujaU6gM2bLx90uuTcF//E08Sf8yAneUn0TT3v7
4fF+PAOC/96Mt07Jzrfr1WzLUr492cfwsu9bW5oJUMJnTRDVp+ZuQIjXp7X4ZDIY
JGAb8n9A/DE6yZxHF1REVwZwDjU3IJN6V8xMiPT6RYOjq4khYR25PPCSj0pRHdNx
a+FWd0fSRO+WU3CfD5u9XsOOqnqFWXB7xnTAKPYaHCYba5NF+9kJTICye6oeLhJh
KdspCZWlDi6AEPRm41kmjV0f3XqSZJE3bY+grD4MHvKnpcCk+z3lgix1KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtkY1FsrgOPnOC/hUXlHCRLiB11MB8GA1UdIwQY
MBaAFNDYUnAylez4uXIB+RYxD4j0wIq3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME5oU2NES1Y3UGk1Y2dINUZqRVBpUFRBaXJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lYWY5NzQtNmVmZC00NjMzLWI4NGEt
YThhYWY4ODZjODIwLzEvME5oU2NES1Y3UGk1Y2dINUZqRVBpUFRBaXJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9lYWY5NzQtNmVmZC00NjMzLWI4NGEtYThhYWY4ODZjODIw
LzEvME5oU2NES1Y3UGk1Y2dINUZqRVBpUFRBaXJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKPAU2zT
dMwb+m7K5oLI7FbaQVtUUo4gBZa7Mf+H070JFuGhe75zYKdQUA/bfCxfssbS0BZ4
c09vdk5AQ/ySTIs93YHP6phnwaRlqbjxSTMMS52cSTMV62fJZO7CqpKWYOLRXXjQ
Xz8++KoMNzGBWeWhlhKPaeHEIOMwfuRNA7lFhMhkHTo9H53ac5hRCD0OJ4fEzAG0
70UElEcSlpTOTZPbKeOyq96udCwR0V26iW97cwxmELcv/mQl1ewJpbqc1bn9qIOR
MtO/xmma1Lke+jqaTubsFJFOyV2+xIb2Pl2jtvyElwvsZOoJo1msaTqi/mjdwhAD
UiqEqqF2zber1g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:26:39 2025 by rpki-client