Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
File: nSAoCNH5FFVeG9WcFncof_mztZA.mft (raw, json)
Hash identifier: gUkIXWjnc/mitzDlBMkfQkkgKT0tqJHuR0zCJiB6Zco=
Subject key identifier: 22:3C:78:DB:16:48:BB:05:B6:3A:72:06:62:C9:14:33:02:E4:CA:F1
Authority key identifier: 9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90
Certificate issuer: /CN=9d202808d1f914555e1bd59c1677287ff9b3b590
Certificate serial: 0199FC21A09ED61F94C1FF211B6A0DF10349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
Manifest number: 10EC
Signing time: Sun 19 Oct 2025 11:01:26 +0000
Manifest this update: Sun 19 Oct 2025 11:01:26 +0000
Manifest next update: Mon 20 Oct 2025 11:01:26 +0000
Files and hashes: 1: nSAoCNH5FFVeG9WcFncof_mztZA.crl (hash: TFUt3oqOjh93lIubWT0n1dsGPj47PKZQQ8249g90mvw=)
2: qztp8oOkrsOnZQZ-AVesJkd8gBA.roa (hash: w8j5kLnBBDJA6YAxwk7yr2iHlxdseJ2t5FGwhKWuj0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a0:9e:d6:1f:94:c1:ff:21:1b:6a:0d:f1:03:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d202808d1f914555e1bd59c1677287ff9b3b590
Validity
Not Before: Oct 19 11:01:26 2025 GMT
Not After : Oct 20 11:01:26 2025 GMT
Subject: CN=223c78db1648bb05b63a720662c9143302e4caf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f3:04:09:64:4b:39:14:31:62:27:76:59:db:
25:74:0b:15:73:36:12:df:dc:51:ad:4d:e7:86:83:
05:10:25:c2:1b:a8:53:12:d7:e3:c8:f3:87:85:5b:
0b:2c:f6:7c:e6:9c:24:f6:d7:4a:4b:53:08:2a:fd:
d7:04:95:14:ef:96:36:ea:66:30:f0:dd:20:95:b9:
f8:e0:40:71:2e:3c:32:f4:85:f4:dc:69:3e:4b:56:
46:a8:1b:51:d6:d6:47:68:24:82:b5:a9:26:64:cf:
89:77:b2:db:20:b8:35:6e:c4:99:a2:17:d3:75:c0:
68:bc:28:90:d5:23:1b:38:f4:ab:af:e8:20:fa:1d:
cc:9a:ca:b9:90:6d:6e:45:c9:9e:a4:fa:bb:60:21:
a7:bc:6b:d2:ec:2b:f1:ff:72:fc:7c:11:0c:08:e8:
57:04:1c:b6:e5:a9:75:df:d5:4f:5b:56:09:33:e3:
f3:db:bf:44:e9:4f:72:ad:d4:2d:f0:c7:bf:5a:a7:
f9:3d:cd:75:4f:70:d5:f0:5c:4c:b0:0d:d3:5b:a7:
2a:67:11:d5:d0:ef:92:51:c8:bb:d8:e1:e4:2a:bc:
2f:be:9d:2b:15:74:f2:af:82:69:51:3a:d8:d4:fa:
e8:08:88:49:07:3e:3b:53:35:5f:60:81:c9:42:59:
83:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3C:78:DB:16:48:BB:05:B6:3A:72:06:62:C9:14:33:02:E4:CA:F1
X509v3 Authority Key Identifier:
keyid:9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d4:d0:38:71:b1:23:0a:5c:d3:4f:c0:73:84:ab:dd:c9:e8:
ea:ac:4d:36:f2:56:f1:94:04:5d:17:05:34:6f:e9:e1:c0:33:
f7:5f:63:5b:32:11:dd:55:c3:a9:ab:8b:e3:8d:a4:90:2c:76:
0d:17:40:71:b7:06:05:36:6a:7e:a0:b1:fa:ff:4c:9b:c8:c0:
7d:6c:81:ba:cf:aa:d5:47:2a:0e:5f:9f:8a:45:92:9b:80:6f:
20:98:de:da:ac:ea:c0:a6:f1:fe:ee:09:8b:a7:8f:16:62:17:
b4:21:13:f7:6f:12:bc:8d:bb:bf:25:5d:05:de:7b:6b:d4:b3:
5e:d9:23:e7:f2:26:6a:a5:7a:f8:53:c1:42:02:90:28:68:f1:
fc:5f:ba:6f:fa:53:e3:ce:8f:72:5e:37:dd:90:80:8b:d6:ee:
91:79:a6:ed:c6:62:d9:ad:a8:da:4c:b7:80:9b:05:be:d3:9f:
e8:5d:31:af:4e:7f:03:a1:be:8f:9f:b0:78:0e:fb:ed:d0:e6:
83:a3:d7:69:1f:db:a8:f6:6c:b6:49:38:6f:f3:b6:26:76:e8:
90:d4:58:fc:bb:23:59:52:cb:00:f8:1c:a5:7b:1d:e1:30:8b:
9d:6e:73:1a:b3:07:31:32:fc:5e:75:d1:82:5e:87:dc:bd:4a:
99:1a:ce:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IaCe1h+Uwf8hG2oN8QNJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjAyODA4ZDFmOTE0NTU1ZTFiZDU5YzE2NzcyODdmZjli
M2I1OTAwHhcNMjUxMDE5MTEwMTI2WhcNMjUxMDIwMTEwMTI2WjAzMTEwLwYDVQQD
EygyMjNjNzhkYjE2NDhiYjA1YjYzYTcyMDY2MmM5MTQzMzAyZTRjYWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofMECWRLORQxYid2WdsldAsVczYS
39xRrU3nhoMFECXCG6hTEtfjyPOHhVsLLPZ85pwk9tdKS1MIKv3XBJUU75Y26mYw
8N0glbn44EBxLjwy9IX03Gk+S1ZGqBtR1tZHaCSCtakmZM+Jd7LbILg1bsSZohfT
dcBovCiQ1SMbOPSrr+gg+h3Mmsq5kG1uRcmepPq7YCGnvGvS7Cvx/3L8fBEMCOhX
BBy25al139VPW1YJM+Pz279E6U9yrdQt8Me/Wqf5Pc11T3DV8FxMsA3TW6cqZxHV
0O+SUci72OHkKrwvvp0rFXTyr4JpUTrY1ProCIhJBz47UzVfYIHJQlmD0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCI8eNsWSLsFtjpyBmLJFDMC5MrxMB8GA1UdIwQY
MBaAFJ0gKAjR+RRVXhvVnBZ3KH/5s7WQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNBb0NOSDVGRlZlRzlXY0ZuY29mX216dFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9hNWMwNjktODA2MS00ZGVlLTk1Njgt
ODgwYjJkZjU3ZjI1LzEvblNBb0NOSDVGRlZlRzlXY0ZuY29mX216dFpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9hNWMwNjktODA2MS00ZGVlLTk1NjgtODgwYjJkZjU3ZjI1
LzEvblNBb0NOSDVGRlZlRzlXY0ZuY29mX216dFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9TQOHGx
Iwpc00/Ac4Sr3cno6qxNNvJW8ZQEXRcFNG/p4cAz919jWzIR3VXDqauL442kkCx2
DRdAcbcGBTZqfqCx+v9Mm8jAfWyBus+q1UcqDl+fikWSm4BvIJje2qzqwKbx/u4J
i6ePFmIXtCET928SvI27vyVdBd57a9SzXtkj5/ImaqV6+FPBQgKQKGjx/F+6b/pT
486Pcl433ZCAi9bukXmm7cZi2a2o2ky3gJsFvtOf6F0xr05/A6G+j5+weA777dDm
g6PXaR/bqPZstkk4b/O2JnbokNRY/LsjWVLLAPgcpXsd4TCLnW5zGrMHMTL8XnXR
gl6H3L1KmRrOsw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:33 2025 by rpki-client