Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
File: nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft (raw, json)
Hash identifier: BP0ka2SIabWkgurFDO37r9bLwaZtN2ct+zFb9ozJsBw=
Subject key identifier: FD:AC:60:75:CA:BC:23:6E:24:33:88:7B:DB:83:C1:E6:C9:5C:3D:EE
Authority key identifier: 9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
Certificate issuer: /CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Certificate serial: 0198D474769BC31868783A568511DBA50BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
Manifest number: 0FA9
Signing time: Sat 23 Aug 2025 01:04:18 +0000
Manifest this update: Sat 23 Aug 2025 01:04:18 +0000
Manifest next update: Sun 24 Aug 2025 01:04:18 +0000
Files and hashes: 1: mcodiKTX1slSmfc3nZ7DZKGNYFk.roa (hash: 8YfkV+577aVFpH3FgiABnIRQh7w2LYtBhi55zdviFSU=)
2: nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl (hash: ElajPUKSLn9JDMp75KiTNkf6nRxXt2m/n2/ZnAEzt/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:76:9b:c3:18:68:78:3a:56:85:11:db:a5:0b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Validity
Not Before: Aug 23 01:04:18 2025 GMT
Not After : Aug 24 01:04:18 2025 GMT
Subject: CN=fdac6075cabc236e2433887bdb83c1e6c95c3dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:1c:bb:d6:8a:de:71:9b:f8:55:02:4c:ca:
29:10:a6:6f:37:a5:d8:49:8d:06:ea:c2:30:cc:70:
f6:15:0b:da:b7:63:ee:b3:85:00:2b:56:a8:ae:69:
a7:4b:c9:03:e2:95:d6:1e:11:1d:f2:a6:4b:0e:d0:
48:c2:b7:a9:a8:d2:10:d9:d5:05:0f:e9:0c:2e:50:
d4:ed:86:d9:9f:be:bf:2b:9a:b1:f7:87:3d:6d:64:
be:36:8a:5b:de:1d:0e:d0:cd:d2:51:fb:bc:1c:71:
71:f6:0b:5f:96:9d:17:02:b6:ba:ae:4d:8a:73:8c:
c2:85:2a:0e:72:58:21:5c:ba:38:06:9b:56:c5:c5:
e0:6e:dc:49:b0:fe:e1:3e:cb:5c:2c:cf:4b:09:4d:
13:cf:de:55:3c:bd:73:05:5c:48:85:cc:a5:26:a1:
df:4c:6d:05:6e:5d:1b:15:71:8b:3d:e9:2b:b8:6b:
ac:37:ae:c7:9b:42:c6:34:f1:be:2b:f6:1d:66:e4:
00:57:31:15:bf:53:70:c9:e9:0c:f9:cc:62:35:b0:
a4:6a:01:2c:1a:ee:e2:2e:7e:14:57:2c:8f:be:42:
e3:1f:5a:45:65:55:9b:84:21:98:75:00:13:02:1e:
9e:dc:a8:a5:84:21:3b:f6:52:09:6a:6a:07:04:89:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AC:60:75:CA:BC:23:6E:24:33:88:7B:DB:83:C1:E6:C9:5C:3D:EE
X509v3 Authority Key Identifier:
keyid:9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f0:25:24:b0:a5:52:4b:b8:8f:9a:e7:99:65:fe:50:6e:9c:
aa:3c:74:04:1a:cd:eb:49:4e:6d:5e:92:b5:68:c9:43:11:dc:
26:61:4b:54:37:1b:15:74:d0:37:07:1f:a8:9e:28:49:f6:55:
96:ca:1d:be:aa:6d:01:2f:bf:a2:0e:4b:05:e0:50:8f:c3:21:
41:fc:dd:50:5b:bb:4b:74:ac:49:39:9e:07:ef:36:e9:3b:8a:
87:32:8b:63:8c:81:1e:64:e7:5d:02:cd:f5:db:a4:98:48:d5:
5e:d5:46:ff:0c:10:26:b0:6b:f4:6e:ab:36:c5:f3:32:16:22:
51:81:a2:44:85:39:fc:9b:8c:fc:94:8f:99:de:92:ea:b7:c5:
0a:36:30:fc:c4:42:bc:93:84:c7:65:cc:8e:83:76:93:3b:22:
bc:71:a9:23:30:f8:ab:d8:ac:98:30:e3:f6:22:88:8a:35:4c:
17:fb:22:53:54:f8:4b:70:f1:a8:e3:1e:44:bc:6e:23:b2:cb:
27:cc:00:2b:5b:84:cf:4c:ca:91:ec:2f:96:a9:df:a9:db:f0:
30:65:53:9d:0c:6b:e9:ec:13:80:9a:58:53:3d:11:92:b9:19:
81:37:6d:b2:38:07:8f:e0:9c:e8:28:fd:cb:6b:33:0d:a6:8c:
6d:02:1e:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdHabwxhoeDpWhRHbpQvUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZjE5ODcxYjE3NTlmMzIzNzAxMmU0YjZkYmI2YzJmZDJi
ZThiNGIwHhcNMjUwODIzMDEwNDE4WhcNMjUwODI0MDEwNDE4WjAzMTEwLwYDVQQD
EyhmZGFjNjA3NWNhYmMyMzZlMjQzMzg4N2JkYjgzYzFlNmM5NWMzZGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAEcu9aK3nGb+FUCTMopEKZvN6XY
SY0G6sIwzHD2FQvat2Pus4UAK1aormmnS8kD4pXWHhEd8qZLDtBIwrepqNIQ2dUF
D+kMLlDU7YbZn76/K5qx94c9bWS+Nopb3h0O0M3SUfu8HHFx9gtflp0XAra6rk2K
c4zChSoOclghXLo4BptWxcXgbtxJsP7hPstcLM9LCU0Tz95VPL1zBVxIhcylJqHf
TG0Fbl0bFXGLPekruGusN67Hm0LGNPG+K/YdZuQAVzEVv1NwyekM+cxiNbCkagEs
Gu7iLn4UVyyPvkLjH1pFZVWbhCGYdQATAh6e3KilhCE79lIJamoHBInvAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2sYHXKvCNuJDOIe9uDwebJXD3uMB8GA1UdIwQY
MBaAFJ7xmHGxdZ8yNwEuS227bC/SvotLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnZHWWNiRjFuekkzQVM1TGJidHNMOUstaTBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hMzZkYmItNjAyNy00M2M0LTgxOTQt
NGEwY2IyNTVkNzNhLzEvbnZHWWNiRjFuekkzQVM1TGJidHNMOUstaTBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9hMzZkYmItNjAyNy00M2M0LTgxOTQtNGEwY2IyNTVkNzNh
LzEvbnZHWWNiRjFuekkzQVM1TGJidHNMOUstaTBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfAlJLCl
Uku4j5rnmWX+UG6cqjx0BBrN60lObV6StWjJQxHcJmFLVDcbFXTQNwcfqJ4oSfZV
lsodvqptAS+/og5LBeBQj8MhQfzdUFu7S3SsSTmeB+826TuKhzKLY4yBHmTnXQLN
9dukmEjVXtVG/wwQJrBr9G6rNsXzMhYiUYGiRIU5/JuM/JSPmd6S6rfFCjYw/MRC
vJOEx2XMjoN2kzsivHGpIzD4q9ismDDj9iKIijVMF/siU1T4S3DxqOMeRLxuI7LL
J8wAK1uEz0zKkewvlqnfqdvwMGVTnQxr6ewTgJpYUz0RkrkZgTdtsjgHj+Cc6Cj9
y2szDaaMbQIe9Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:21 2025 by rpki-client