Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
File: nB7k05z6obOseZwX94grjOTigSA.mft (raw, json)
Hash identifier: ogMSzBYCilh/OtDRBQSXa8XKuD4FuwDNt3ziyu5MzZA=
Subject key identifier: 60:95:9B:DC:49:B3:C3:69:E5:53:0F:76:89:7A:33:15:1B:78:AC:9A
Authority key identifier: 9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
Certificate issuer: /CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Certificate serial: 0199FC5889489B8A8848ABA62C392FC73BF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
Manifest number: 0995
Signing time: Sun 19 Oct 2025 12:01:24 +0000
Manifest this update: Sun 19 Oct 2025 12:01:24 +0000
Manifest next update: Mon 20 Oct 2025 12:01:24 +0000
Files and hashes: 1: egM_lo5hkg5KA7_uP-5h7pmD4BM.roa (hash: LWEk9cOjEXdGtew0n3bgwHhe3Zn8McfotK81AHI+3M0=)
2: nB7k05z6obOseZwX94grjOTigSA.crl (hash: BdFUPoucqGajqt20i40ALA7+M6PHdtk6eLPB+dw6RAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:89:48:9b:8a:88:48:ab:a6:2c:39:2f:c7:3b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Validity
Not Before: Oct 19 12:01:24 2025 GMT
Not After : Oct 20 12:01:24 2025 GMT
Subject: CN=60959bdc49b3c369e5530f76897a33151b78ac9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b2:41:50:b3:3b:83:03:bd:f5:72:d4:d0:05:
58:62:02:99:71:70:c6:57:04:8d:05:84:75:e8:ec:
b2:e7:ed:37:b4:38:b4:3c:0b:9c:ed:48:c7:cb:be:
eb:13:a4:97:0d:4f:9c:bb:ff:16:c3:25:6f:6c:03:
9f:81:4b:28:e0:54:5f:94:b9:aa:c1:60:70:ff:af:
9e:4c:76:e3:0a:45:f0:6c:14:bc:02:32:bd:d6:3c:
46:d4:e5:42:6f:9e:8c:fb:cc:38:34:d1:7d:c7:aa:
ed:b8:68:e6:6d:95:7b:8c:4e:5a:b0:65:ee:b1:a5:
80:60:f2:68:8b:a4:ff:17:f2:00:73:46:df:85:a8:
51:15:60:bc:a6:30:ea:ba:2f:0c:65:f9:61:c5:f3:
0d:83:7e:72:e8:74:af:11:9d:c8:ef:29:d0:60:cd:
3c:ca:2f:1e:4c:58:6b:6b:44:5d:aa:2c:66:22:e8:
4e:20:7f:cb:8c:df:49:f4:d9:e4:4a:65:d8:4f:bc:
16:a8:2e:de:ab:06:3c:3f:c0:0d:0c:a8:d3:33:b0:
cd:c7:30:d0:b0:41:ae:3b:50:a7:fe:1a:99:d7:96:
fe:bb:25:e6:2e:38:f4:60:3b:32:30:e3:e9:62:81:
16:2b:17:39:10:df:cb:ae:fd:af:8e:6d:e6:30:3a:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:95:9B:DC:49:B3:C3:69:E5:53:0F:76:89:7A:33:15:1B:78:AC:9A
X509v3 Authority Key Identifier:
keyid:9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:d9:e3:b3:6b:e3:01:fb:c0:90:24:f8:17:66:fd:f0:87:8e:
c6:d2:0d:ab:d4:8e:81:cc:78:18:7a:40:83:b5:59:2f:2c:f0:
0e:62:64:b7:da:d8:52:db:43:00:48:01:fc:70:c4:aa:c9:54:
ac:6e:b4:a2:39:33:7a:b4:4a:0a:f0:c7:dd:3d:78:f6:ed:5f:
05:66:08:26:2f:0c:5b:88:c3:f4:7d:f5:2a:65:12:62:74:8b:
bc:cf:56:2d:10:5a:69:87:30:6f:1f:15:b5:69:4a:2b:20:3a:
84:e4:8e:2e:53:e6:08:4b:06:96:ce:63:c7:a9:7f:10:f0:b0:
d8:63:08:56:61:e4:55:fe:97:6f:59:61:0a:97:c3:df:35:7b:
93:70:83:d1:cd:5e:ea:b1:d9:38:22:69:5e:a2:0d:69:39:9f:
b2:8e:24:11:03:df:23:fb:de:78:f4:39:07:b1:9e:06:5c:54:
75:59:13:47:33:b7:45:19:f4:90:bf:83:62:21:5a:32:80:17:
19:4e:fc:27:9d:ad:fc:a3:8f:a7:07:5c:2b:aa:6d:1e:d9:6c:
c9:91:cb:92:37:33:65:2b:b8:fd:8a:1d:6d:66:e2:41:3f:fa:
81:3c:70:9e:2e:3d:7c:10:3e:d8:30:da:f9:f3:e9:6f:20:ac:
ce:5c:7b:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WIlIm4qISKumLDkvxzv1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMWVlNGQzOWNmYWExYjNhYzc5OWMxN2Y3ODgyYjhjZTRl
MjgxMjAwHhcNMjUxMDE5MTIwMTI0WhcNMjUxMDIwMTIwMTI0WjAzMTEwLwYDVQQD
Eyg2MDk1OWJkYzQ5YjNjMzY5ZTU1MzBmNzY4OTdhMzMxNTFiNzhhYzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7JBULM7gwO99XLU0AVYYgKZcXDG
VwSNBYR16Oyy5+03tDi0PAuc7UjHy77rE6SXDU+cu/8WwyVvbAOfgUso4FRflLmq
wWBw/6+eTHbjCkXwbBS8AjK91jxG1OVCb56M+8w4NNF9x6rtuGjmbZV7jE5asGXu
saWAYPJoi6T/F/IAc0bfhahRFWC8pjDqui8MZflhxfMNg35y6HSvEZ3I7ynQYM08
yi8eTFhra0RdqixmIuhOIH/LjN9J9NnkSmXYT7wWqC7eqwY8P8ANDKjTM7DNxzDQ
sEGuO1Cn/hqZ15b+uyXmLjj0YDsyMOPpYoEWKxc5EN/Lrv2vjm3mMDqpjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCVm9xJs8Np5VMPdol6MxUbeKyaMB8GA1UdIwQY
MBaAFJwe5NOc+qGzrHmcF/eIK4zk4oEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkI3azA1ejZvYk9zZVp3WDk0Z3JqT1RpZ1NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iYjk3ZDktN2I4MS00NDlmLTkwNjAt
YmQ0NjVjZTcxMWJiLzEvbkI3azA1ejZvYk9zZVp3WDk0Z3JqT1RpZ1NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9iYjk3ZDktN2I4MS00NDlmLTkwNjAtYmQ0NjVjZTcxMWJi
LzEvbkI3azA1ejZvYk9zZVp3WDk0Z3JqT1RpZ1NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz9njs2vj
AfvAkCT4F2b98IeOxtINq9SOgcx4GHpAg7VZLyzwDmJkt9rYUttDAEgB/HDEqslU
rG60ojkzerRKCvDH3T149u1fBWYIJi8MW4jD9H31KmUSYnSLvM9WLRBaaYcwbx8V
tWlKKyA6hOSOLlPmCEsGls5jx6l/EPCw2GMIVmHkVf6Xb1lhCpfD3zV7k3CD0c1e
6rHZOCJpXqINaTmfso4kEQPfI/veePQ5B7GeBlxUdVkTRzO3RRn0kL+DYiFaMoAX
GU78J52t/KOPpwdcK6ptHtlsyZHLkjczZSu4/YodbWbiQT/6gTxwni49fBA+2DDa
+fPpbyCszlx7eA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:24 2025 by rpki-client