Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
File: nfbRY1k964rv8HL-yljm8_HE5-U.mft (raw, json)
Hash identifier: pvAWqiQ6wXWxFJiVBobINy7xXwL/3dy5ZW9OWX/5yuU=
Subject key identifier: A1:DE:96:1C:CE:FB:31:B6:4D:74:A2:F7:4B:E5:83:11:B4:CC:1F:55
Authority key identifier: 9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
Certificate issuer: /CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Certificate serial: 0199FCC6C302EB625D41651525D2A4177D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
Manifest number: 0D7E
Signing time: Sun 19 Oct 2025 14:01:48 +0000
Manifest this update: Sun 19 Oct 2025 14:01:48 +0000
Manifest next update: Mon 20 Oct 2025 14:01:48 +0000
Files and hashes: 1: XM057xIBl4X4QJASTmfkRwaiNaE.roa (hash: vZ1H1/yQjb9EVPL0oyydRTCpB/F5AEPyVx/M+2z5CZ0=)
2: nfbRY1k964rv8HL-yljm8_HE5-U.crl (hash: gFCLBD3UjvGBhl2CETp1dFzZZpEhDiSWsFH1Dv67YV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c3:02:eb:62:5d:41:65:15:25:d2:a4:17:7d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Validity
Not Before: Oct 19 14:01:48 2025 GMT
Not After : Oct 20 14:01:48 2025 GMT
Subject: CN=a1de961ccefb31b64d74a2f74be58311b4cc1f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d5:2e:cd:04:5f:a1:6f:7b:0b:b1:63:9a:5d:
be:aa:0e:40:f0:60:73:a3:e3:fc:ec:c3:cb:79:77:
78:a8:a1:9c:9c:1d:66:7a:05:1c:e0:e6:f7:4b:2c:
b3:bb:13:87:6f:55:7f:21:4c:6a:8e:17:c8:a6:f1:
ff:94:6e:f1:f1:43:16:2f:da:3a:05:f0:78:73:07:
a2:54:29:c1:d0:23:6b:e6:a2:ee:4b:e2:5d:2b:ec:
25:ee:71:f9:b3:07:f8:c3:ac:87:93:36:55:e0:17:
a1:73:54:f0:f2:d3:2d:22:be:f6:81:68:14:bb:e8:
15:be:99:54:4e:59:f4:59:ca:e3:0b:e6:95:15:5a:
ea:10:64:70:b9:9c:f8:f4:01:7c:b5:1a:03:2a:fa:
eb:75:8c:38:05:d2:19:c0:50:e2:d3:67:5f:47:87:
e2:b8:26:84:da:33:73:b0:27:58:ce:a5:2a:40:bf:
f3:81:4e:f6:36:2a:0b:f8:3e:53:10:21:53:9e:78:
8b:63:1f:cd:e5:4f:8d:e3:4b:69:17:f6:77:7d:a8:
39:97:6c:d9:b4:ff:eb:a2:cf:69:0c:0a:11:f2:02:
98:f4:63:44:72:1e:69:c0:0b:46:7d:ff:59:32:6c:
f7:21:49:db:27:97:bd:8d:a6:0f:05:f4:36:2c:9e:
cd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DE:96:1C:CE:FB:31:B6:4D:74:A2:F7:4B:E5:83:11:B4:CC:1F:55
X509v3 Authority Key Identifier:
keyid:9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:4e:dd:d9:d8:08:8c:7f:64:e7:81:39:92:ab:24:af:76:ec:
1d:a4:d2:7e:8b:f6:6d:56:2a:30:15:8c:cf:70:b6:b6:94:2a:
1f:d5:e0:35:4e:d8:c3:11:c7:c4:79:e4:6b:4c:68:53:ba:80:
26:61:2f:1f:8f:87:88:eb:32:06:b9:57:29:04:b7:8c:3a:12:
92:1c:74:27:e1:47:8b:dd:31:e0:b1:93:a2:66:bb:88:12:47:
26:29:25:41:ed:04:ab:cc:89:c3:fb:a1:b9:2a:72:a5:4b:de:
41:ab:7c:08:c5:78:97:d5:b0:d9:97:ef:78:37:86:68:7d:0b:
34:e2:14:d4:0e:da:9d:fb:a5:e7:18:19:6a:5c:db:7f:71:f7:
5b:86:9c:71:9a:e4:cc:47:29:8a:47:4c:bf:b1:fc:23:11:85:
fe:35:94:b8:77:49:96:f6:13:73:57:2a:ef:0c:8e:9a:b2:43:
72:1e:66:28:54:5f:a0:18:90:d1:3e:2f:74:c5:65:29:2e:cf:
00:ab:2a:89:7d:23:56:d9:e1:3f:0e:f1:48:58:cc:92:b6:66:
fb:e9:eb:00:c3:1a:e7:4a:11:45:d0:45:62:57:24:6e:83:9e:
e2:5d:3a:ae:79:94:07:87:1d:5a:9f:73:a9:82:35:9f:75:dd:
22:72:b9:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xsMC62JdQWUVJdKkF31YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZjZkMTYzNTkzZGViOGFlZmYwNzJmZWNhNThlNmYzZjFj
NGU3ZTUwHhcNMjUxMDE5MTQwMTQ4WhcNMjUxMDIwMTQwMTQ4WjAzMTEwLwYDVQQD
EyhhMWRlOTYxY2NlZmIzMWI2NGQ3NGEyZjc0YmU1ODMxMWI0Y2MxZjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19UuzQRfoW97C7Fjml2+qg5A8GBz
o+P87MPLeXd4qKGcnB1megUc4Ob3SyyzuxOHb1V/IUxqjhfIpvH/lG7x8UMWL9o6
BfB4cweiVCnB0CNr5qLuS+JdK+wl7nH5swf4w6yHkzZV4Behc1Tw8tMtIr72gWgU
u+gVvplUTln0WcrjC+aVFVrqEGRwuZz49AF8tRoDKvrrdYw4BdIZwFDi02dfR4fi
uCaE2jNzsCdYzqUqQL/zgU72NioL+D5TECFTnniLYx/N5U+N40tpF/Z3fag5l2zZ
tP/ros9pDAoR8gKY9GNEch5pwAtGff9ZMmz3IUnbJ5e9jaYPBfQ2LJ7NHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHelhzO+zG2TXSi90vlgxG0zB9VMB8GA1UdIwQY
MBaAFJ320WNZPeuK7/By/spY5vPxxOflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmZiUlkxazk2NHJ2OEhMLXlsam04X0hFNS1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mZjI1ZDctNWZmYS00Njg2LTgzMjYt
NjlkNzljOWQwNzIxLzEvbmZiUlkxazk2NHJ2OEhMLXlsam04X0hFNS1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mZjI1ZDctNWZmYS00Njg2LTgzMjYtNjlkNzljOWQwNzIx
LzEvbmZiUlkxazk2NHJ2OEhMLXlsam04X0hFNS1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuE7d2dgI
jH9k54E5kqskr3bsHaTSfov2bVYqMBWMz3C2tpQqH9XgNU7YwxHHxHnka0xoU7qA
JmEvH4+HiOsyBrlXKQS3jDoSkhx0J+FHi90x4LGToma7iBJHJiklQe0Eq8yJw/uh
uSpypUveQat8CMV4l9Ww2ZfveDeGaH0LNOIU1A7anful5xgZalzbf3H3W4accZrk
zEcpikdMv7H8IxGF/jWUuHdJlvYTc1cq7wyOmrJDch5mKFRfoBiQ0T4vdMVlKS7P
AKsqiX0jVtnhPw7xSFjMkrZm++nrAMMa50oRRdBFYlckboOe4l06rnmUB4cdWp9z
qYI1n3XdInK5gg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:19 2025 by rpki-client