Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
File: nkVus5ycwGznHHdUoD8_PwCSgd0.mft (raw, json)
Hash identifier: vis5zOQZ+YUY1IL33xRB5kaPZ8dyNaQhpo29VD+L2No=
Subject key identifier: 7D:F5:DD:A5:57:85:4C:0D:69:3B:05:0C:E5:F9:3D:FB:F8:F4:92:47
Authority key identifier: 9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
Certificate issuer: /CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Certificate serial: 0199FBEAF53C0AE11E6BFE3547601C68F246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:43 +0000
Manifest this update: Sun 19 Oct 2025 10:01:43 +0000
Manifest next update: Mon 20 Oct 2025 10:01:43 +0000
Files and hashes: 1: 0e3XvmLgCCLyXX2Pnl1oUQprG1Y.roa (hash: FMORsyXFiyuBPfP/wfzNQt83A1mlYj2dL5G6obhc0aU=)
2: nkVus5ycwGznHHdUoD8_PwCSgd0.crl (hash: ARz9I+mRW7XpZ0jD5ZzLE23XxknklBXnx89NIw7Lwxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f5:3c:0a:e1:1e:6b:fe:35:47:60:1c:68:f2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Validity
Not Before: Oct 19 10:01:43 2025 GMT
Not After : Oct 20 10:01:43 2025 GMT
Subject: CN=7df5dda557854c0d693b050ce5f93dfbf8f49247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:5d:de:c4:72:ae:36:54:47:4c:44:88:5a:
85:2b:6e:a5:5b:87:df:12:34:3d:10:cb:7c:e5:c6:
4d:48:8b:5a:c1:81:1d:39:ad:4d:78:e9:ff:40:59:
fd:42:00:7f:71:58:94:8b:83:87:95:4b:6c:e9:8a:
7f:c9:45:68:0a:f1:d4:47:98:a1:fc:fb:b3:db:b0:
9c:06:80:b1:61:f7:00:c7:c9:09:48:dc:62:8c:8f:
e5:22:eb:1d:64:de:32:0c:bd:d5:c0:56:97:86:dc:
23:88:77:55:6e:52:3a:54:43:4a:f7:60:42:4b:a0:
8b:07:3b:46:d4:91:91:89:4d:ec:ab:9b:08:69:a3:
cb:55:ac:8e:b3:49:67:72:40:2d:88:88:b3:0c:25:
6e:8f:03:41:dd:76:fb:14:18:07:00:6a:30:3a:2d:
e7:2e:a0:f6:6c:92:c1:33:53:68:84:61:4b:d8:67:
96:c3:ab:d2:bc:84:e1:fc:29:82:d3:17:f2:5e:03:
3d:e2:97:04:08:d8:46:6b:26:6c:db:21:99:7e:9a:
43:96:28:76:fd:bd:ea:67:c1:98:73:49:b0:3f:1a:
19:4b:2c:a7:01:1e:3d:fb:0d:22:9c:3c:b3:c8:96:
be:8b:18:fe:83:de:96:e3:d8:f0:d4:e1:70:a2:58:
ac:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F5:DD:A5:57:85:4C:0D:69:3B:05:0C:E5:F9:3D:FB:F8:F4:92:47
X509v3 Authority Key Identifier:
keyid:9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:63:66:6e:4d:67:d3:87:b1:ce:04:06:ff:c1:77:2b:57:8b:
ea:78:60:9f:80:2d:d9:93:5a:71:d7:d1:0c:41:1f:82:70:01:
dd:49:ce:3a:ef:e1:cc:9e:7a:4a:06:17:92:51:85:da:cf:0b:
01:ea:16:06:5b:e7:48:86:82:2e:1a:9b:07:13:79:8b:2b:e6:
30:8b:02:e5:42:13:f7:b3:40:d8:2e:48:c0:eb:86:50:b6:d1:
73:33:10:cc:92:53:36:d2:7e:1a:85:86:ac:28:60:9b:be:87:
d9:33:d1:07:7a:de:fb:7b:3a:5b:c8:d7:c8:a2:5b:12:88:09:
24:7e:8a:c5:3f:6c:79:e3:e5:a3:b0:a5:4e:a3:95:0b:fb:29:
0b:6b:ed:bf:a4:e8:1d:2f:13:b8:fd:3b:2b:eb:35:d7:a4:19:
86:0b:20:fa:9d:f8:88:87:07:9a:0d:81:db:7c:42:46:d1:61:
88:82:e8:e9:66:6f:3c:c4:7a:6a:0e:12:83:fa:49:74:c2:99:
48:36:0f:d4:d8:92:47:b8:0a:74:d4:99:f4:52:c2:3e:02:cc:
e7:57:2b:9f:df:3f:8c:cc:02:62:5b:83:9b:0b:c6:28:c8:f9:
52:01:3f:57:5c:75:9e:c5:e9:ec:8b:a0:f4:66:dc:fc:2b:cd:
4c:5c:1c:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76vU8CuEea/41R2AcaPJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDU2ZWIzOWM5Y2MwNmNlNzFjNzc1NGEwM2YzZjNmMDA5
MjgxZGQwHhcNMjUxMDE5MTAwMTQzWhcNMjUxMDIwMTAwMTQzWjAzMTEwLwYDVQQD
Eyg3ZGY1ZGRhNTU3ODU0YzBkNjkzYjA1MGNlNWY5M2RmYmY4ZjQ5MjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOtd3sRyrjZUR0xEiFqFK26lW4ff
EjQ9EMt85cZNSItawYEdOa1NeOn/QFn9QgB/cViUi4OHlUts6Yp/yUVoCvHUR5ih
/Puz27CcBoCxYfcAx8kJSNxijI/lIusdZN4yDL3VwFaXhtwjiHdVblI6VENK92BC
S6CLBztG1JGRiU3sq5sIaaPLVayOs0lnckAtiIizDCVujwNB3Xb7FBgHAGowOi3n
LqD2bJLBM1NohGFL2GeWw6vSvITh/CmC0xfyXgM94pcECNhGayZs2yGZfppDlih2
/b3qZ8GYc0mwPxoZSyynAR49+w0inDyzyJa+ixj+g96W49jw1OFwolisDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH313aVXhUwNaTsFDOX5Pfv49JJHMB8GA1UdIwQY
MBaAFJ5FbrOcnMBs5xx3VKA/Pz8AkoHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtWdXM1eWN3R3puSEhkVW9EOF9Qd0NTZ2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmM3MTItMGM2ZS00ZmI1LTkwZDkt
YzFmOTE1ODI0M2VhLzEvbmtWdXM1eWN3R3puSEhkVW9EOF9Qd0NTZ2QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMmM3MTItMGM2ZS00ZmI1LTkwZDktYzFmOTE1ODI0M2Vh
LzEvbmtWdXM1eWN3R3puSEhkVW9EOF9Qd0NTZ2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmNmbk1n
04exzgQG/8F3K1eL6nhgn4At2ZNacdfRDEEfgnAB3UnOOu/hzJ56SgYXklGF2s8L
AeoWBlvnSIaCLhqbBxN5iyvmMIsC5UIT97NA2C5IwOuGULbRczMQzJJTNtJ+GoWG
rChgm76H2TPRB3re+3s6W8jXyKJbEogJJH6KxT9seePlo7ClTqOVC/spC2vtv6To
HS8TuP07K+s116QZhgsg+p34iIcHmg2B23xCRtFhiILo6WZvPMR6ag4Sg/pJdMKZ
SDYP1NiSR7gKdNSZ9FLCPgLM51crn98/jMwCYluDmwvGKMj5UgE/V1x1nsXp7Iug
9Gbc/CvNTFwcwg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:39 2025 by rpki-client