
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
File: nyasnus6LPovbKP0E--5zf_pck4.mft (raw, json)
Hash identifier: fQcgFNkO0jmPuiaf+sMoNvpm6xqb7Cssn5kUPBM+JNo=
Subject key identifier: 71:64:A4:E0:AE:E3:AC:88:67:CF:6D:B8:D8:C9:CF:9D:7F:AB:63:04
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 0199FB45DC755CC3FE3AB196158F5051BED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
Manifest number: 16F6
Signing time: Sun 19 Oct 2025 07:01:23 +0000
Manifest this update: Sun 19 Oct 2025 07:01:23 +0000
Manifest next update: Mon 20 Oct 2025 07:01:23 +0000
Files and hashes: 1: MVVMDHQ15A5eeUSCPotdqrTSwBM.roa (hash: 5nG4w5vscj5LeP7wWl1bV9XF/+IvsA0KVrNr06ax6cw=)
2: nyasnus6LPovbKP0E--5zf_pck4.crl (hash: L5btMHxiqqGEAYH66vvWXTemcDBMizDjFrrbvYqD2TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:dc:75:5c:c3:fe:3a:b1:96:15:8f:50:51:be:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Oct 19 07:01:23 2025 GMT
Not After : Oct 20 07:01:23 2025 GMT
Subject: CN=7164a4e0aee3ac8867cf6db8d8c9cf9d7fab6304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:04:90:ac:61:1a:55:12:cc:f6:5d:a5:92:
b9:bd:48:f2:4b:9e:5c:c8:72:c2:91:83:d6:94:e5:
c7:0c:66:70:c7:b0:5a:2a:95:2c:66:f7:9f:e7:c6:
90:bd:c4:1b:f0:17:76:53:07:22:98:8b:18:b2:21:
d9:6f:2f:c6:54:ee:70:09:8e:25:64:ed:45:a3:d5:
df:6c:ac:7d:20:d0:9e:82:b0:4a:26:44:f6:37:14:
a6:7d:67:12:b1:27:0e:5a:bb:34:7f:00:48:58:d9:
e4:e2:a9:0f:73:9e:88:01:19:28:3b:e7:34:a3:aa:
b5:2f:26:e6:7c:02:a3:50:04:7d:53:1f:59:5a:fa:
e8:67:45:71:46:b1:25:43:f5:9a:a0:0e:07:97:cf:
18:19:de:a0:67:66:21:89:96:c1:23:62:20:0c:38:
bd:0a:c1:83:e2:38:50:8f:57:0b:a2:8d:5e:89:0c:
72:6c:9b:03:5e:85:74:40:9b:dd:8f:c6:09:e8:09:
52:f4:3a:87:7d:65:0a:1b:94:6d:51:e3:fe:6f:d3:
1c:14:e4:70:9a:43:f8:8b:7d:39:1c:d9:b4:e1:71:
e5:cc:14:3b:53:5d:3a:5d:a3:af:e4:d1:f9:10:62:
df:2e:e9:0c:5d:34:0c:49:f2:de:1a:34:1a:bd:79:
b6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:64:A4:E0:AE:E3:AC:88:67:CF:6D:B8:D8:C9:CF:9D:7F:AB:63:04
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d8:14:2a:70:b5:bf:bf:5a:fc:8f:c8:6d:7e:b6:93:0c:f6:
3e:9b:72:57:02:92:5f:63:23:9b:5a:d7:a0:4d:b2:25:d3:2f:
c9:c3:c5:ff:d7:53:90:0f:5d:1a:fa:55:d2:a4:fd:ec:1a:1e:
e9:b1:35:32:fa:1b:db:65:c0:64:31:25:d3:a0:1e:d1:c7:c9:
3b:0d:b9:74:9e:3a:22:7e:29:c9:a0:18:87:3e:d9:d6:54:69:
1c:b7:65:c8:12:5b:14:71:71:d8:37:86:d0:b1:04:a9:55:f3:
0e:9d:df:68:6b:a7:93:a5:64:28:73:ad:d4:82:80:e8:57:4c:
66:86:fd:46:3f:ff:39:e3:0b:a2:c0:b9:02:70:e4:ff:15:64:
db:b2:61:54:ef:11:b0:1d:d4:16:b5:a7:ad:b8:61:5e:81:50:
a2:0d:6f:0b:7f:d7:8a:19:23:5d:bf:8f:48:08:be:58:37:b7:
dd:36:f8:c0:62:48:16:95:28:f9:59:67:2e:a1:ef:d4:0f:18:
4b:11:de:f8:6d:7e:ec:bb:6d:f4:2a:0e:2a:5f:e0:9a:03:0a:
cc:eb:7f:49:cc:06:6a:2e:64:cf:77:90:d3:ed:a4:db:09:c2:
20:2c:7f:5a:2e:c0:f2:91:47:ff:76:2c:83:cf:30:9e:ab:e3:
54:12:5c:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Rdx1XMP+OrGWFY9QUb7YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMjZhYzllZWIzYTJjZmEyZjZjYTNmNDEzZWZiOWNkZmZl
OTcyNGUwHhcNMjUxMDE5MDcwMTIzWhcNMjUxMDIwMDcwMTIzWjAzMTEwLwYDVQQD
Eyg3MTY0YTRlMGFlZTNhYzg4NjdjZjZkYjhkOGM5Y2Y5ZDdmYWI2MzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwkEkKxhGlUSzPZdpZK5vUjyS55c
yHLCkYPWlOXHDGZwx7BaKpUsZvef58aQvcQb8Bd2UwcimIsYsiHZby/GVO5wCY4l
ZO1Fo9XfbKx9INCegrBKJkT2NxSmfWcSsScOWrs0fwBIWNnk4qkPc56IARkoO+c0
o6q1LybmfAKjUAR9Ux9ZWvroZ0VxRrElQ/WaoA4Hl88YGd6gZ2YhiZbBI2IgDDi9
CsGD4jhQj1cLoo1eiQxybJsDXoV0QJvdj8YJ6AlS9DqHfWUKG5RtUeP+b9McFORw
mkP4i305HNm04XHlzBQ7U106XaOv5NH5EGLfLukMXTQMSfLeGjQavXm2iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFkpOCu46yIZ89tuNjJz51/q2MEMB8GA1UdIwQY
MBaAFJ8mrJ7rOiz6L2yj9BPvuc3/6XJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWIt
N2Q0MjY2Y2Y4MjJhLzEvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWItN2Q0MjY2Y2Y4MjJh
LzEvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNgUKnC1
v79a/I/IbX62kwz2PptyVwKSX2Mjm1rXoE2yJdMvycPF/9dTkA9dGvpV0qT97Boe
6bE1Mvob22XAZDEl06Ae0cfJOw25dJ46In4pyaAYhz7Z1lRpHLdlyBJbFHFx2DeG
0LEEqVXzDp3faGunk6VkKHOt1IKA6FdMZob9Rj//OeMLosC5AnDk/xVk27JhVO8R
sB3UFrWnrbhhXoFQog1vC3/XihkjXb+PSAi+WDe33Tb4wGJIFpUo+VlnLqHv1A8Y
SxHe+G1+7Ltt9CoOKl/gmgMKzOt/ScwGai5kz3eQ0+2k2wnCICx/Wi7A8pFH/3Ys
g88wnqvjVBJcZQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:12 2025 by rpki-client