Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
File: NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft (raw, json)
Hash identifier: y9Up0H0kHp8uTij8IYm649VS2MqmIGJoIKztOG0uy4E=
Subject key identifier: C2:75:72:96:8C:D7:EC:62:28:95:F9:C3:55:79:3E:6E:D6:9A:A7:89
Authority key identifier: 34:CB:95:6E:C3:A1:4F:6F:5E:4B:76:D5:43:42:FA:98:D5:9C:77:A6
Certificate issuer: /CN=34cb956ec3a14f6f5e4b76d54342fa98d59c77a6
Certificate serial: 0199FBEBC042CD6644CBBB69E4CA11F63232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
Manifest number: 13BD
Signing time: Sun 19 Oct 2025 10:02:35 +0000
Manifest this update: Sun 19 Oct 2025 10:02:35 +0000
Manifest next update: Mon 20 Oct 2025 10:02:35 +0000
Files and hashes: 1: NMuVbsOhT29eS3bVQ0L6mNWcd6Y.crl (hash: ChGJmt20BQPnmRwF0EirKtTkdXz4shXpgqeCjeBFGl0=)
2: pJ8B6gtnj6CL56vYC6LrCO5oBmo.roa (hash: F88j9ZRyVWoqzEm3QsXJ4KW1kEET+j/VAKZytfrtK/M=)
3: zsR2hosRcU8M1KGjXd1_k-ktlfc.roa (hash: rTq5tN+JofEk5Za1xiOrbVhdFMOSTGjrPTYOHgXaK+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c0:42:cd:66:44:cb:bb:69:e4:ca:11:f6:32:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cb956ec3a14f6f5e4b76d54342fa98d59c77a6
Validity
Not Before: Oct 19 10:02:35 2025 GMT
Not After : Oct 20 10:02:35 2025 GMT
Subject: CN=c27572968cd7ec622895f9c355793e6ed69aa789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:a1:cf:e4:49:89:97:92:2f:d0:9e:70:97:
47:5d:7d:23:b0:a2:af:c9:a8:1a:30:83:cd:48:ae:
cc:fd:f3:a1:0c:3c:d5:e2:07:72:47:a3:7b:c1:20:
11:ab:b6:ea:d5:c0:6e:cf:0c:4c:37:51:07:90:04:
8f:81:63:54:1b:31:d0:f3:14:f5:af:5b:ce:c0:98:
c7:ba:d9:e8:9d:94:ba:9f:38:48:76:9f:95:4f:3e:
9e:45:0c:e6:68:12:f4:74:70:03:d0:39:ad:ee:80:
88:27:cc:ca:50:92:57:0a:94:cb:10:2e:7f:16:7d:
40:cc:8d:1b:3e:9f:27:d6:40:fa:25:05:ea:d2:f5:
15:bd:e5:5f:81:37:5b:c1:bd:3e:8b:49:24:24:8b:
dd:e1:bd:e0:98:c5:8c:db:d8:87:93:be:7e:9c:3e:
d5:45:cf:17:8a:28:8a:12:aa:32:24:8c:1a:5b:4e:
76:cb:7b:9f:81:a9:9f:1e:ed:9f:36:b9:98:4e:4c:
0a:12:fb:c5:d0:e2:c0:b2:f6:81:15:6d:96:e0:df:
63:60:02:88:58:6a:ba:5c:02:ea:20:af:12:d9:cc:
25:3d:76:17:53:81:db:2a:ed:4c:25:98:74:77:81:
8c:b2:ee:d7:5c:bb:40:4d:7e:ae:4f:1c:f1:86:9b:
5d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:75:72:96:8C:D7:EC:62:28:95:F9:C3:55:79:3E:6E:D6:9A:A7:89
X509v3 Authority Key Identifier:
keyid:34:CB:95:6E:C3:A1:4F:6F:5E:4B:76:D5:43:42:FA:98:D5:9C:77:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:04:b4:46:71:e4:a4:4a:0b:c2:b5:41:3c:d0:c5:6c:63:6e:
23:0a:1a:e9:55:ae:b2:f5:e2:d5:f3:94:11:2f:cc:d2:11:a7:
62:85:64:3f:55:79:f2:58:32:30:70:32:60:de:66:87:70:ae:
68:8f:1d:77:71:48:d9:91:c9:e1:6e:c4:a8:2c:e1:7e:55:77:
7a:04:10:38:2a:81:65:a0:db:1d:85:8d:25:1c:7c:d1:4b:b2:
e8:61:e4:84:b0:60:65:cb:12:d5:22:6f:3b:a3:07:43:33:99:
6c:b8:88:a4:6b:c6:2c:38:e2:34:b3:36:c4:5b:0f:ee:9d:04:
d3:4c:88:4e:a1:38:e9:c5:35:90:dd:75:91:2a:9b:3c:71:a9:
67:a4:eb:3b:00:77:7e:fc:aa:b7:7e:d4:d2:1b:91:14:5b:b3:
22:a6:25:25:53:1e:bf:21:97:7b:da:f7:5d:f2:59:19:51:c1:
ea:a2:88:bd:05:42:07:c4:a4:de:0a:d3:8d:c0:51:48:0c:a9:
6e:27:ac:79:b5:3d:46:c7:e1:ac:38:db:1c:c1:2f:2b:2a:56:
6d:84:00:4e:09:75:25:27:9d:16:a7:3e:0c:90:b6:94:85:5f:
f7:f4:9b:47:f4:48:c6:94:98:bb:db:ef:dc:19:63:6d:4c:e3:
50:99:c8:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn768BCzWZEy7tp5MoR9jIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0Y2I5NTZlYzNhMTRmNmY1ZTRiNzZkNTQzNDJmYTk4ZDU5
Yzc3YTYwHhcNMjUxMDE5MTAwMjM1WhcNMjUxMDIwMTAwMjM1WjAzMTEwLwYDVQQD
EyhjMjc1NzI5NjhjZDdlYzYyMjg5NWY5YzM1NTc5M2U2ZWQ2OWFhNzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/Chz+RJiZeSL9CecJdHXX0jsKKv
yagaMIPNSK7M/fOhDDzV4gdyR6N7wSARq7bq1cBuzwxMN1EHkASPgWNUGzHQ8xT1
r1vOwJjHutnonZS6nzhIdp+VTz6eRQzmaBL0dHAD0Dmt7oCIJ8zKUJJXCpTLEC5/
Fn1AzI0bPp8n1kD6JQXq0vUVveVfgTdbwb0+i0kkJIvd4b3gmMWM29iHk75+nD7V
Rc8XiiiKEqoyJIwaW052y3ufgamfHu2fNrmYTkwKEvvF0OLAsvaBFW2W4N9jYAKI
WGq6XALqIK8S2cwlPXYXU4HbKu1MJZh0d4GMsu7XXLtATX6uTxzxhptdTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJ1cpaM1+xiKJX5w1V5Pm7WmqeJMB8GA1UdIwQY
MBaAFDTLlW7DoU9vXkt21UNC+pjVnHemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk11VmJzT2hUMjllUzNiVlEwTDZtTldjZDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNGY5ZjUtMjVkNy00NWU4LWJjMjQt
OWE2ODgwODBhNTc5LzEvTk11VmJzT2hUMjllUzNiVlEwTDZtTldjZDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xNGY5ZjUtMjVkNy00NWU4LWJjMjQtOWE2ODgwODBhNTc5
LzEvTk11VmJzT2hUMjllUzNiVlEwTDZtTldjZDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgS0RnHk
pEoLwrVBPNDFbGNuIwoa6VWusvXi1fOUES/M0hGnYoVkP1V58lgyMHAyYN5mh3Cu
aI8dd3FI2ZHJ4W7EqCzhflV3egQQOCqBZaDbHYWNJRx80Uuy6GHkhLBgZcsS1SJv
O6MHQzOZbLiIpGvGLDjiNLM2xFsP7p0E00yITqE46cU1kN11kSqbPHGpZ6TrOwB3
fvyqt37U0huRFFuzIqYlJVMevyGXe9r3XfJZGVHB6qKIvQVCB8Sk3grTjcBRSAyp
biesebU9RsfhrDjbHMEvKypWbYQATgl1JSedFqc+DJC2lIVf9/SbR/RIxpSYu9vv
3BljbUzjUJnISw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:53:58 2025 by rpki-client