Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
File: nOYfsJJrzgyvrdDysZNIiVpEgUc.mft (raw, json)
Hash identifier: Bz1n3+ERecmoliY3RlvOmlHLxZdLjXGHBe7TeEiIxG8=
Subject key identifier: DB:95:B9:9B:C2:F0:1C:DA:EB:86:81:55:21:3F:F0:1E:7D:19:C4:C2
Authority key identifier: 9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
Certificate issuer: /CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Certificate serial: 0199FD6B25B2E12637E30DFE7B111B543D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
Manifest number: 02D5
Signing time: Sun 19 Oct 2025 17:01:21 +0000
Manifest this update: Sun 19 Oct 2025 17:01:21 +0000
Manifest next update: Mon 20 Oct 2025 17:01:21 +0000
Files and hashes: 1: 7ZCM2DGQAxMoqKS4r08nTwBlTvg.roa (hash: Nsq7TZX/LJBEuY63VFLqAaBjZcBcw7djLWbv9kH4DH4=)
2: nOYfsJJrzgyvrdDysZNIiVpEgUc.crl (hash: IXvNZT74GMG3YfsgyA1l7Jsi4gpeiPUjfLFnz+9DS1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:25:b2:e1:26:37:e3:0d:fe:7b:11:1b:54:3d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Validity
Not Before: Oct 19 17:01:21 2025 GMT
Not After : Oct 20 17:01:21 2025 GMT
Subject: CN=db95b99bc2f01cdaeb868155213ff01e7d19c4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:41:88:4a:72:8d:91:69:16:53:08:24:ad:e0:
cb:ea:f7:4e:0f:d0:81:f6:63:88:4c:c1:54:05:ba:
37:9c:24:65:e9:74:ef:27:8c:1c:19:d3:07:8d:b3:
5a:43:80:81:e1:77:5c:84:57:82:e3:8f:bf:ae:4e:
7a:1e:00:58:83:c6:14:b8:d5:91:5b:fc:93:81:8f:
2e:6d:75:43:46:a5:3b:f7:69:48:25:f0:0d:9a:7b:
3f:9b:87:a5:34:45:f5:6b:c8:66:fa:fa:14:a0:37:
ad:a5:a0:26:af:4d:86:d8:ff:16:8f:85:8d:1d:c4:
85:0f:b8:df:22:38:8f:09:99:d5:c2:da:94:b0:70:
77:19:93:7a:01:8f:ea:84:fa:f1:1e:87:48:ad:d8:
f6:68:b7:d1:20:ce:63:e3:1c:a1:ba:98:a8:a2:ef:
eb:11:39:ca:86:14:e3:ba:6e:8b:8c:a7:3a:d9:fa:
1f:e6:68:e5:f1:17:90:87:d0:7c:9d:38:25:32:09:
76:39:39:12:18:3c:24:e3:cf:74:0d:5d:3f:f4:8d:
cf:cc:35:7b:ad:f4:29:33:24:13:0a:24:dd:6c:01:
00:6c:eb:70:52:e8:ce:da:ec:bf:7a:45:70:9c:d5:
ef:46:a4:b7:67:f4:a8:3d:53:ab:9a:97:8e:c3:33:
8b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:95:B9:9B:C2:F0:1C:DA:EB:86:81:55:21:3F:F0:1E:7D:19:C4:C2
X509v3 Authority Key Identifier:
keyid:9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c9:df:a9:20:85:49:b2:3d:38:f3:3c:85:4e:e1:9c:6f:75:
fc:37:f3:65:9e:59:3e:98:8c:75:47:76:44:22:7e:e3:8c:76:
71:7e:06:d3:94:ce:12:19:d5:a2:96:8a:e1:bc:18:f7:07:dd:
0b:e6:bf:70:4c:b9:1d:63:8e:89:16:be:3c:5a:e5:f3:92:84:
1c:7d:66:b7:52:77:90:16:64:63:19:7e:12:ab:93:25:cd:c2:
88:49:4c:76:08:97:5b:61:52:67:1d:b7:e4:55:e7:7f:fa:29:
7c:62:c3:e6:73:32:b9:f8:ef:0f:ec:0f:ee:ed:5d:ef:95:0a:
d8:e4:c9:1c:ff:32:c2:4a:df:89:ea:83:e2:87:22:82:85:90:
a7:32:68:e1:fa:7f:1a:a8:ac:41:bc:5b:74:08:62:e3:d2:7e:
dd:88:7c:58:53:6e:79:13:7a:c8:25:d3:fe:30:fe:bd:9b:69:
70:50:4d:38:4d:8b:f4:17:a3:a4:8b:41:75:a0:17:c8:22:68:
f1:7e:c5:94:2b:e8:39:da:8d:eb:8e:3d:72:db:13:b4:d5:38:
eb:e5:db:08:09:9e:22:96:c2:72:d1:fe:e4:af:c7:25:df:5d:
4a:8f:85:1a:b5:25:98:81:5e:f9:48:06:22:63:0b:de:65:9c:
7b:7e:d6:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9ayWy4SY34w3+exEbVD0VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZTYxZmIwOTI2YmNlMGNhZmFkZDBmMmIxOTM0ODg5NWE0
NDgxNDcwHhcNMjUxMDE5MTcwMTIxWhcNMjUxMDIwMTcwMTIxWjAzMTEwLwYDVQQD
EyhkYjk1Yjk5YmMyZjAxY2RhZWI4NjgxNTUyMTNmZjAxZTdkMTljNGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkGISnKNkWkWUwgkreDL6vdOD9CB
9mOITMFUBbo3nCRl6XTvJ4wcGdMHjbNaQ4CB4XdchFeC44+/rk56HgBYg8YUuNWR
W/yTgY8ubXVDRqU792lIJfANmns/m4elNEX1a8hm+voUoDetpaAmr02G2P8Wj4WN
HcSFD7jfIjiPCZnVwtqUsHB3GZN6AY/qhPrxHodIrdj2aLfRIM5j4xyhupioou/r
ETnKhhTjum6LjKc62fof5mjl8ReQh9B8nTglMgl2OTkSGDwk4890DV0/9I3PzDV7
rfQpMyQTCiTdbAEAbOtwUujO2uy/ekVwnNXvRqS3Z/SoPVOrmpeOwzOLwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNuVuZvC8Bza64aBVSE/8B59GcTCMB8GA1UdIwQY
MBaAFJzmH7CSa84Mr63Q8rGTSIlaRIFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk9ZZnNKSnJ6Z3l2cmREeXNaTklpVnBFZ1VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MGU5NTctMWUxNy00MTBlLTkxYTEt
OTZiN2UwYThlZTA5LzEvbk9ZZnNKSnJ6Z3l2cmREeXNaTklpVnBFZ1VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MGU5NTctMWUxNy00MTBlLTkxYTEtOTZiN2UwYThlZTA5
LzEvbk9ZZnNKSnJ6Z3l2cmREeXNaTklpVnBFZ1VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsnfqSCF
SbI9OPM8hU7hnG91/DfzZZ5ZPpiMdUd2RCJ+44x2cX4G05TOEhnVopaK4bwY9wfd
C+a/cEy5HWOOiRa+PFrl85KEHH1mt1J3kBZkYxl+EquTJc3CiElMdgiXW2FSZx23
5FXnf/opfGLD5nMyufjvD+wP7u1d75UK2OTJHP8ywkrfieqD4ocigoWQpzJo4fp/
GqisQbxbdAhi49J+3Yh8WFNueRN6yCXT/jD+vZtpcFBNOE2L9BejpItBdaAXyCJo
8X7FlCvoOdqN6449ctsTtNU46+XbCAmeIpbCctH+5K/HJd9dSo+FGrUlmIFe+UgG
ImML3mWce37WUg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:37 2025 by rpki-client