Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
File: nVK4OxL6igcTLMgIM6ED4J2L0E8.mft (raw, json)
Hash identifier: wZxMWh6idnRit5ZSzbu09G72sTKOSrRFSa53RJPfeRM=
Subject key identifier: 3B:D2:AF:59:0A:8B:27:6D:20:22:AE:F0:76:14:A9:91:6D:C4:2B:25
Authority key identifier: 9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F
Certificate issuer: /CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
Certificate serial: 0199FE47110CA77ED8B05721990C2D7D99FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
Manifest number: 03DB
Signing time: Sun 19 Oct 2025 21:01:34 +0000
Manifest this update: Sun 19 Oct 2025 21:01:34 +0000
Manifest next update: Mon 20 Oct 2025 21:01:34 +0000
Files and hashes: 1: 38Ols_fwuqUro_09-_uv-_Ul2jA.roa (hash: QymLTZTAomDxu/BGko1S2mbZfpR+LRurtzVVTfHo8uA=)
2: nVK4OxL6igcTLMgIM6ED4J2L0E8.crl (hash: v/d4v8o3HQUppx7x1VYwpccb4VrQRv5emoDtaMUnG3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:11:0c:a7:7e:d8:b0:57:21:99:0c:2d:7d:99:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
Validity
Not Before: Oct 19 21:01:34 2025 GMT
Not After : Oct 20 21:01:34 2025 GMT
Subject: CN=3bd2af590a8b276d2022aef07614a9916dc42b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e4:f8:37:73:d0:a6:4a:d5:26:ff:d5:17:b2:
90:03:09:a4:e2:4c:d7:f4:26:05:50:2c:80:2b:08:
80:79:f4:2c:b0:54:0f:de:8a:27:5b:8e:11:a5:fc:
1d:a9:95:5d:25:50:2c:18:44:8c:bb:6a:30:b3:1c:
19:47:fd:59:38:10:1d:d6:1d:16:67:7e:f8:50:d5:
98:0b:24:50:dc:c8:8d:1f:2c:69:67:3d:a0:8f:99:
2b:21:f2:3a:ec:d8:a3:0f:83:c2:17:42:89:a6:14:
d3:c0:f3:e4:92:1a:f2:bb:61:ad:75:40:c1:e2:21:
62:b7:c2:5b:cb:e6:b9:d3:30:1e:c3:6c:50:97:48:
42:3c:72:e3:cd:f6:4f:45:6f:79:7a:20:bc:5c:30:
71:f9:61:a1:aa:d3:6c:bf:2b:fd:a7:88:bd:46:00:
65:64:de:24:d3:2a:ec:78:08:47:06:23:72:cf:8d:
28:61:be:c8:ba:b5:4b:bc:3d:9f:b9:b9:af:c6:a8:
00:70:46:00:6e:92:81:e1:86:ff:ba:a8:e2:07:62:
46:30:3b:12:1f:f6:24:84:31:6e:2c:1a:6a:9f:5c:
6f:d6:10:eb:fc:69:d5:5c:b7:ab:dd:ce:58:ae:6f:
d9:0c:86:ba:fa:1b:03:80:79:4c:27:06:ee:47:c1:
67:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D2:AF:59:0A:8B:27:6D:20:22:AE:F0:76:14:A9:91:6D:C4:2B:25
X509v3 Authority Key Identifier:
keyid:9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:49:2a:23:ae:30:04:d5:d6:2c:ab:e8:73:7c:d6:b7:a2:c5:
94:5d:5d:7f:33:e5:a0:8c:5a:96:f0:37:39:06:0e:63:83:4a:
6d:29:56:72:c9:65:e5:25:84:25:d8:60:a8:ea:b2:89:64:a3:
21:ae:7a:63:3e:60:0f:1f:b2:58:44:58:8d:b7:a1:1e:c5:f8:
17:21:01:ee:67:0a:9b:09:c3:63:ba:ca:eb:f2:94:22:cc:fa:
d7:8c:c6:05:09:02:68:e2:e2:cf:1c:e3:1c:0c:3d:ec:79:d3:
b1:97:6e:54:9a:66:96:21:8c:e4:46:bd:ac:cb:18:d7:41:3b:
ba:f2:3f:4c:68:41:24:c4:43:6a:7d:82:62:a3:28:e1:64:25:
21:42:8c:60:46:49:f8:b0:19:61:75:ed:0a:37:ef:c2:f3:b6:
92:7d:cd:6b:29:03:2b:41:88:2b:05:98:82:a3:24:06:e7:5b:
ec:c7:5c:80:05:5d:fa:11:fe:3d:dd:00:fa:33:d5:b0:2e:ee:
08:d7:13:fe:3e:f4:0f:e1:3c:df:54:18:58:55:3a:5c:0d:46:
11:f7:1b:b0:4f:03:bb:4b:ab:68:d8:a5:74:a8:20:ae:da:bd:
86:96:f2:1b:02:43:95:bc:04:dd:56:4d:25:d3:33:c4:dd:01:
0a:a5:12:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RxEMp37YsFchmQwtfZn6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNTJiODNiMTJmYThhMDcxMzJjYzgwODMzYTEwM2UwOWQ4
YmQwNGYwHhcNMjUxMDE5MjEwMTM0WhcNMjUxMDIwMjEwMTM0WjAzMTEwLwYDVQQD
EygzYmQyYWY1OTBhOGIyNzZkMjAyMmFlZjA3NjE0YTk5MTZkYzQyYjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eT4N3PQpkrVJv/VF7KQAwmk4kzX
9CYFUCyAKwiAefQssFQP3oonW44RpfwdqZVdJVAsGESMu2owsxwZR/1ZOBAd1h0W
Z374UNWYCyRQ3MiNHyxpZz2gj5krIfI67NijD4PCF0KJphTTwPPkkhryu2GtdUDB
4iFit8Jby+a50zAew2xQl0hCPHLjzfZPRW95eiC8XDBx+WGhqtNsvyv9p4i9RgBl
ZN4k0yrseAhHBiNyz40oYb7IurVLvD2fubmvxqgAcEYAbpKB4Yb/uqjiB2JGMDsS
H/YkhDFuLBpqn1xv1hDr/GnVXLer3c5Yrm/ZDIa6+hsDgHlMJwbuR8Fn+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvSr1kKiydtICKu8HYUqZFtxCslMB8GA1UdIwQY
MBaAFJ1SuDsS+ooHEyzICDOhA+Cdi9BPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YmEyMzItODkyOS00MTBkLWJkZGQt
ZTRiNmE5ZGY5YTM0LzEvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83YmEyMzItODkyOS00MTBkLWJkZGQtZTRiNmE5ZGY5YTM0
LzEvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUkqI64w
BNXWLKvoc3zWt6LFlF1dfzPloIxalvA3OQYOY4NKbSlWcsll5SWEJdhgqOqyiWSj
Ia56Yz5gDx+yWERYjbehHsX4FyEB7mcKmwnDY7rK6/KUIsz614zGBQkCaOLizxzj
HAw97HnTsZduVJpmliGM5Ea9rMsY10E7uvI/TGhBJMRDan2CYqMo4WQlIUKMYEZJ
+LAZYXXtCjfvwvO2kn3NaykDK0GIKwWYgqMkBudb7MdcgAVd+hH+Pd0A+jPVsC7u
CNcT/j70D+E831QYWFU6XA1GEfcbsE8Du0uraNildKggrtq9hpbyGwJDlbwE3VZN
JdMzxN0BCqUS3A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:00 2025 by rpki-client