Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File: Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier: U7N5XyN9t4AEDd0TW+NBtBwkAcF2C/28EOwk0XIK0LU=
Subject key identifier: 10:EE:C6:3E:27:1D:9F:7F:18:2D:CF:74:A8:59:82:5D:99:32:D8:6C
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer: /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial: 0199FDDA1EC80C6487402FDFC1CE6B318809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number: 0D16
Signing time: Sun 19 Oct 2025 19:02:34 +0000
Manifest this update: Sun 19 Oct 2025 19:02:34 +0000
Manifest next update: Mon 20 Oct 2025 19:02:34 +0000
Files and hashes: 1: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: fyego2+YGWNE/PPFeMrBirVkQv48RRto3u0LaCf/G80=)
2: R_dc828vlc27bxXSMzahF76dopg.roa (hash: U9Dh8EyuA2m2THZyqCUiwh3xOZkz+ZLmhUNE1mbIxTM=)
3: yzgxHb39JlWgV-6OUyl9AE4hQAQ.roa (hash: pG2NZjpFYDlbN9iuGT1kUvmnDeM4noZC3E54rEDkwXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:1e:c8:0c:64:87:40:2f:df:c1:ce:6b:31:88:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Validity
Not Before: Oct 19 19:02:34 2025 GMT
Not After : Oct 20 19:02:34 2025 GMT
Subject: CN=10eec63e271d9f7f182dcf74a859825d9932d86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f9:51:8c:01:00:4b:cd:fa:25:37:fe:8e:0a:
1a:d7:9b:90:b2:fe:0c:52:d7:b6:1d:9e:eb:8c:b4:
98:43:2e:87:e7:e1:cb:41:45:dc:20:00:3a:5c:0b:
4a:66:8c:ec:a7:b9:73:b2:05:07:5d:da:a1:1a:26:
07:83:e9:69:55:d3:b2:c3:30:9e:67:a0:58:8a:cd:
ae:19:6e:9e:9e:a1:10:8e:18:d2:c1:41:71:07:c5:
96:35:db:c8:5d:a2:71:11:3b:95:e0:0a:f1:2c:8b:
ae:28:f7:cb:ce:8b:9c:ef:95:1f:22:36:b1:cf:f6:
4c:3d:55:b2:e7:ee:ec:c7:2e:ce:e7:ab:51:f0:2a:
87:6c:d8:6a:95:8d:01:55:07:c4:4e:1a:cf:1e:97:
ce:2f:77:c1:81:7d:1a:7b:3b:11:a2:b4:c2:da:16:
3e:29:86:8a:54:f2:05:e9:84:85:03:e0:2f:17:6b:
9c:b0:62:70:1a:90:18:fe:30:37:ce:8b:fa:65:dd:
f4:0a:15:5d:52:56:af:b3:c7:96:31:ed:6f:39:98:
19:af:7e:37:c9:bb:0f:ba:91:79:a3:5d:1e:f1:13:
a7:bb:3c:f7:ba:ed:94:5f:b4:e7:ff:54:15:f0:93:
41:d0:d7:ac:b4:11:9e:a7:94:4d:53:47:75:66:9b:
a2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EE:C6:3E:27:1D:9F:7F:18:2D:CF:74:A8:59:82:5D:99:32:D8:6C
X509v3 Authority Key Identifier:
keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ef:99:c7:f5:bf:cb:12:76:ed:f9:a5:3b:f2:d3:09:99:34:
68:fc:1f:9c:49:77:bb:69:ac:f5:2b:ec:f6:35:77:1f:74:d8:
b9:bf:4b:1f:7a:b2:73:d1:12:76:14:88:98:c9:37:e0:58:32:
a4:cd:db:78:b5:9c:7a:21:8f:d2:fc:61:a0:d6:26:d9:02:90:
b9:0a:39:b2:ee:39:ce:6e:a8:a0:fc:8e:10:9c:1b:b7:ee:23:
da:3a:2b:46:97:f1:90:1f:0a:02:e0:11:2a:a6:2d:6e:88:a6:
81:73:de:fd:d5:6e:a2:43:89:13:d9:66:9d:6a:18:bf:eb:07:
90:14:79:be:08:8b:21:2c:2b:ab:5d:18:0c:1c:f7:de:d9:7c:
73:77:78:82:95:45:4a:90:fd:f1:64:a3:70:44:b3:ea:a7:c2:
3b:96:94:41:c7:4b:60:6b:02:2a:46:6f:55:01:b4:05:32:6e:
df:35:84:b5:b5:d0:6d:ce:62:9a:a9:50:7f:1c:40:8b:ec:b7:
d4:3c:f9:e1:ab:79:0c:1e:ea:65:0f:50:6c:97:90:a3:fa:a1:
96:07:c8:27:86:03:d3:3e:02:27:25:3e:28:93:b5:df:e8:fb:
40:51:d9:ba:4e:52:bb:13:9a:24:53:dd:bb:52:17:0e:67:47:
eb:f0:06:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92h7IDGSHQC/fwc5rMYgJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZmUzYTkxMjYzZTJlODMxOWMyYTY3OGU2Mjk4NTFkMDll
NzdmMGQwHhcNMjUxMDE5MTkwMjM0WhcNMjUxMDIwMTkwMjM0WjAzMTEwLwYDVQQD
EygxMGVlYzYzZTI3MWQ5ZjdmMTgyZGNmNzRhODU5ODI1ZDk5MzJkODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/lRjAEAS836JTf+jgoa15uQsv4M
Ute2HZ7rjLSYQy6H5+HLQUXcIAA6XAtKZozsp7lzsgUHXdqhGiYHg+lpVdOywzCe
Z6BYis2uGW6enqEQjhjSwUFxB8WWNdvIXaJxETuV4ArxLIuuKPfLzouc75UfIjax
z/ZMPVWy5+7sxy7O56tR8CqHbNhqlY0BVQfEThrPHpfOL3fBgX0aezsRorTC2hY+
KYaKVPIF6YSFA+AvF2ucsGJwGpAY/jA3zov6Zd30ChVdUlavs8eWMe1vOZgZr343
ybsPupF5o10e8ROnuzz3uu2UX7Tn/1QV8JNB0NestBGep5RNU0d1ZpuiMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDuxj4nHZ9/GC3PdKhZgl2ZMthsMB8GA1UdIwQY
MBaAFDb+OpEmPi6DGcKmeOYphR0J538NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnY0NmtTWS1Mb01ad3FaNDVpbUZIUW5uZncwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lOTZlZjQtNGY0NS00N2MwLWJlYmYt
ZmEzZTA5MDFmMjQwLzEvTnY0NmtTWS1Mb01ad3FaNDVpbUZIUW5uZncwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lOTZlZjQtNGY0NS00N2MwLWJlYmYtZmEzZTA5MDFmMjQw
LzEvTnY0NmtTWS1Mb01ad3FaNDVpbUZIUW5uZncwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoO+Zx/W/
yxJ27fmlO/LTCZk0aPwfnEl3u2ms9Svs9jV3H3TYub9LH3qyc9ESdhSImMk34Fgy
pM3beLWceiGP0vxhoNYm2QKQuQo5su45zm6ooPyOEJwbt+4j2jorRpfxkB8KAuAR
KqYtboimgXPe/dVuokOJE9lmnWoYv+sHkBR5vgiLISwrq10YDBz33tl8c3d4gpVF
SpD98WSjcESz6qfCO5aUQcdLYGsCKkZvVQG0BTJu3zWEtbXQbc5imqlQfxxAi+y3
1Dz54at5DB7qZQ9QbJeQo/qhlgfIJ4YD0z4CJyU+KJO13+j7QFHZuk5SuxOaJFPd
u1IXDmdH6/AGLA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:18:44 2025 by rpki-client