Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
File: NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft (raw, json)
Hash identifier: IYUOx9siwy4bFpqoJuVEZk4CQBps5Kds/c0qTWgqCKw=
Subject key identifier: 40:84:7B:DF:AB:12:8B:47:51:15:4F:F4:B5:C8:40:66:AC:1F:B9:02
Authority key identifier: 34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76
Certificate issuer: /CN=34803a2cf290b0bdc69addc003d564a234aa4f76
Certificate serial: 0199FB7C9B1EBB9F87827493D8E41DB0133C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
Manifest number: 1177
Signing time: Sun 19 Oct 2025 08:01:11 +0000
Manifest this update: Sun 19 Oct 2025 08:01:11 +0000
Manifest next update: Mon 20 Oct 2025 08:01:11 +0000
Files and hashes: 1: JscmxGl_L2E7JnV0mfv32RHUpNw.roa (hash: 8j6EFW05T3ckFd0k6CAkZlDvS05KieVcVNbYKlWGlos=)
2: NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl (hash: Up8Xgmmhe87E0Fs86utK/KTXr32OX2s3Z2WpPy8jLSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9b:1e:bb:9f:87:82:74:93:d8:e4:1d:b0:13:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34803a2cf290b0bdc69addc003d564a234aa4f76
Validity
Not Before: Oct 19 08:01:11 2025 GMT
Not After : Oct 20 08:01:11 2025 GMT
Subject: CN=40847bdfab128b4751154ff4b5c84066ac1fb902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:02:07:54:b0:d9:a5:be:80:29:1c:c1:34:bb:
84:ed:00:52:7c:9f:c5:39:3d:61:64:40:22:1d:56:
1f:64:9c:a1:8f:c7:91:fe:72:05:4e:85:8a:0b:47:
39:9d:67:42:65:04:76:7d:97:24:6e:fc:79:b7:f4:
7a:ed:f1:ea:54:8b:00:04:51:95:1a:ff:97:39:b5:
41:d5:48:e9:03:b7:0d:fe:31:51:25:e9:27:08:39:
45:d7:fc:df:55:6d:93:15:f3:b2:76:4a:0c:4f:d3:
a7:0d:a3:aa:c7:e6:9b:03:3b:5c:8d:e2:1f:d0:b4:
ab:6f:95:9b:ae:ea:9e:df:19:1a:f2:87:53:05:9d:
e6:e6:50:22:6a:b1:62:06:29:de:0d:d0:fd:d2:9d:
8d:03:8c:b7:ab:96:94:aa:99:15:fa:27:e2:bb:be:
82:25:b7:ba:aa:64:56:40:0a:27:12:5b:a5:2b:60:
bd:e9:3d:96:89:bb:d0:ca:5f:d7:9d:5e:dc:5c:bf:
fd:73:f4:9e:4e:fc:5a:fd:54:fb:fa:40:a9:87:b7:
d0:ba:d5:c0:17:42:3f:ed:cd:59:5e:14:c6:35:2c:
11:8c:6f:45:40:b5:1a:91:a2:97:8d:1b:b9:bf:8e:
f0:46:e9:6d:0b:77:8b:73:f5:90:c0:73:5c:4b:12:
78:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:84:7B:DF:AB:12:8B:47:51:15:4F:F4:B5:C8:40:66:AC:1F:B9:02
X509v3 Authority Key Identifier:
keyid:34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:84:ea:a2:9c:00:30:3f:45:5d:4a:8a:a6:d8:aa:04:2a:d2:
b8:5f:7b:6d:43:b4:8f:19:f8:af:24:2b:a6:51:32:06:c5:70:
9d:cf:94:76:50:72:92:54:93:18:43:c0:f9:87:31:b7:39:8b:
17:27:d7:df:b6:b4:24:cc:34:42:6a:ab:b5:28:9c:6e:21:36:
c6:e6:0d:db:1f:96:e9:55:34:ec:0f:27:69:c3:db:85:dd:0b:
47:ff:46:d0:7b:27:68:22:c3:89:01:07:65:71:4d:d7:28:93:
ae:ff:2f:4b:87:cc:5e:f1:86:88:8a:8b:d9:27:4b:15:7e:4d:
84:4c:08:1a:f1:aa:92:98:e6:d1:fe:08:4d:c0:3c:33:98:e6:
6c:46:56:8e:df:a6:34:67:3c:95:c3:cd:9a:0c:3c:4f:2c:2f:
b1:fc:d4:ca:63:bf:7d:ad:f2:33:0b:dc:6c:87:fc:c1:88:74:
2a:e2:4a:4e:ef:06:ec:bf:f5:af:5e:6b:2c:f9:a9:12:74:6f:
ff:47:fa:08:6a:5f:55:c3:30:3b:79:c3:82:39:36:78:76:f3:
50:b2:9f:ad:e9:86:3c:62:36:91:2f:bf:c9:f2:4a:bf:f6:83:
b4:a1:c5:0a:af:66:4c:be:38:f9:6a:62:62:c9:fe:db:18:69:
1e:8b:cb:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fJseu5+HgnST2OQdsBM8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ODAzYTJjZjI5MGIwYmRjNjlhZGRjMDAzZDU2NGEyMzRh
YTRmNzYwHhcNMjUxMDE5MDgwMTExWhcNMjUxMDIwMDgwMTExWjAzMTEwLwYDVQQD
Eyg0MDg0N2JkZmFiMTI4YjQ3NTExNTRmZjRiNWM4NDA2NmFjMWZiOTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgIHVLDZpb6AKRzBNLuE7QBSfJ/F
OT1hZEAiHVYfZJyhj8eR/nIFToWKC0c5nWdCZQR2fZckbvx5t/R67fHqVIsABFGV
Gv+XObVB1UjpA7cN/jFRJeknCDlF1/zfVW2TFfOydkoMT9OnDaOqx+abAztcjeIf
0LSrb5Wbruqe3xka8odTBZ3m5lAiarFiBineDdD90p2NA4y3q5aUqpkV+ifiu76C
Jbe6qmRWQAonElulK2C96T2WibvQyl/XnV7cXL/9c/SeTvxa/VT7+kCph7fQutXA
F0I/7c1ZXhTGNSwRjG9FQLUakaKXjRu5v47wRultC3eLc/WQwHNcSxJ4hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECEe9+rEotHURVP9LXIQGasH7kCMB8GA1UdIwQY
MBaAFDSAOizykLC9xprdwAPVZKI0qk92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTklBNkxQS1FzTDNHbXQzQUE5VmtvalNxVDNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mZTYyMzQtNjQzNy00OTY3LWJhNjMt
ODVjM2ZhNzllYmMxLzEvTklBNkxQS1FzTDNHbXQzQUE5VmtvalNxVDNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9mZTYyMzQtNjQzNy00OTY3LWJhNjMtODVjM2ZhNzllYmMx
LzEvTklBNkxQS1FzTDNHbXQzQUE5VmtvalNxVDNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYTqopwA
MD9FXUqKptiqBCrSuF97bUO0jxn4ryQrplEyBsVwnc+UdlByklSTGEPA+YcxtzmL
FyfX37a0JMw0QmqrtSicbiE2xuYN2x+W6VU07A8nacPbhd0LR/9G0HsnaCLDiQEH
ZXFN1yiTrv8vS4fMXvGGiIqL2SdLFX5NhEwIGvGqkpjm0f4ITcA8M5jmbEZWjt+m
NGc8lcPNmgw8TywvsfzUymO/fa3yMwvcbIf8wYh0KuJKTu8G7L/1r15rLPmpEnRv
/0f6CGpfVcMwO3nDgjk2eHbzULKfremGPGI2kS+/yfJKv/aDtKHFCq9mTL44+Wpi
Ysn+2xhpHovL0Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:39 2025 by rpki-client