Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
File: NnBwsWnRGpYpEATjAA-bBNThEtM.mft (raw, json)
Hash identifier: EoN+R8AbgdU4hpCBmug04Udq3yjRz5iyfYs3zLVxCV8=
Subject key identifier: 7F:54:10:F5:5B:A2:7B:92:52:3D:DA:F0:4F:35:87:E0:E5:76:53:20
Authority key identifier: 36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
Certificate issuer: /CN=367070b169d11a96291004e3000f9b04d4e112d3
Certificate serial: 0199FBEBAEF7F1A409178112D0E9CA233241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
Manifest number: 07C7
Signing time: Sun 19 Oct 2025 10:02:30 +0000
Manifest this update: Sun 19 Oct 2025 10:02:30 +0000
Manifest next update: Mon 20 Oct 2025 10:02:30 +0000
Files and hashes: 1: NnBwsWnRGpYpEATjAA-bBNThEtM.crl (hash: kMuGnovHy7B8FnxfZs3wP00OVKF5G5AXWFcSPMFfOGY=)
2: dVmeU4wC0TgcJ1mLjCj6WUgRoKU.roa (hash: Tr7wmryEwMRa1UVn0iohUCcmRld2nTxoTKpz/4davog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ae:f7:f1:a4:09:17:81:12:d0:e9:ca:23:32:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367070b169d11a96291004e3000f9b04d4e112d3
Validity
Not Before: Oct 19 10:02:30 2025 GMT
Not After : Oct 20 10:02:30 2025 GMT
Subject: CN=7f5410f55ba27b92523ddaf04f3587e0e5765320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:26:2f:6e:ae:bb:b6:59:e7:e6:6e:1f:31:26:
eb:98:1d:1a:26:47:ca:5b:58:84:86:cd:98:df:ca:
9c:81:a0:0b:17:be:78:b2:20:92:ef:d4:cc:a1:a7:
0b:dd:87:e1:9d:1d:29:7e:a6:a5:e4:10:65:e1:66:
3e:9a:16:78:db:00:ac:92:26:fc:d0:e4:7a:46:1a:
a1:58:ae:9f:ee:23:24:eb:06:1c:e3:6d:14:0b:50:
d5:f0:f2:84:0c:10:c8:68:80:b4:3f:36:03:53:8d:
e2:b7:84:1d:62:48:96:64:c0:f2:b0:8c:69:1b:a4:
3e:3f:93:2f:43:52:1d:59:0c:7b:0b:1c:4c:3d:3b:
20:73:41:a1:8c:bd:55:92:5a:f9:d0:99:17:8d:b6:
86:ba:18:9e:f8:6e:10:96:df:bf:df:cc:2a:72:9b:
21:0d:c0:de:84:d5:ca:43:64:d7:9c:fe:49:bd:da:
90:2d:54:0f:52:fe:09:c2:c0:7d:91:40:13:61:5c:
b2:5b:1a:e9:ee:21:1c:54:ae:ad:3d:83:49:ce:e2:
63:8f:49:d6:72:bb:76:52:b8:c4:6c:d6:81:6d:8c:
d4:8a:1d:f8:b8:41:cb:15:27:48:b3:05:e2:6c:f1:
e3:4e:fa:ec:f4:a3:e1:79:de:93:7d:43:d8:9d:e6:
33:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:54:10:F5:5B:A2:7B:92:52:3D:DA:F0:4F:35:87:E0:E5:76:53:20
X509v3 Authority Key Identifier:
keyid:36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:95:83:fe:87:2a:f7:d6:bc:b9:6d:c9:f0:4b:cd:8a:8d:3b:
a0:5d:bb:93:e8:cd:19:ea:cb:0f:c5:83:7d:8d:7f:72:00:ca:
1f:02:f8:cd:ee:42:b5:f5:d0:8a:af:55:13:5c:35:20:41:e8:
3d:9e:df:ee:de:69:d7:e6:60:1d:5c:b1:32:62:21:09:ce:ed:
64:07:0e:34:bf:ac:79:f9:c2:6b:35:90:f5:e4:2c:a1:0c:ad:
5d:e7:a5:66:be:32:60:4e:9b:ad:b8:fc:72:c3:5c:83:5d:e1:
94:8a:53:2d:52:42:d6:27:f9:90:e9:ee:45:c6:19:b2:81:c5:
5d:0a:df:40:a7:13:28:73:7f:39:b1:bb:82:9a:88:20:82:bd:
e8:b7:c7:4f:10:08:68:ee:c9:b4:51:87:ef:36:07:20:58:6c:
74:82:dd:ab:24:49:2f:57:ce:45:d7:9c:8a:a5:a5:db:27:d1:
28:d8:d0:c4:97:94:cb:ec:fd:5f:2d:37:69:40:55:c6:7b:48:
c3:5a:18:db:63:36:04:89:11:d4:61:fb:a4:9c:6f:2d:9a:c4:
1c:19:9e:42:24:8f:02:b1:4f:4d:f4:4b:dd:52:61:88:16:f8:
a2:d9:f0:e3:a2:fe:96:42:cf:be:bf:27:35:95:f9:48:e8:58:
7c:cb:13:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn766738aQJF4ES0OnKIzJBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NzA3MGIxNjlkMTFhOTYyOTEwMDRlMzAwMGY5YjA0ZDRl
MTEyZDMwHhcNMjUxMDE5MTAwMjMwWhcNMjUxMDIwMTAwMjMwWjAzMTEwLwYDVQQD
Eyg3ZjU0MTBmNTViYTI3YjkyNTIzZGRhZjA0ZjM1ODdlMGU1NzY1MzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyYvbq67tlnn5m4fMSbrmB0aJkfK
W1iEhs2Y38qcgaALF754siCS79TMoacL3YfhnR0pfqal5BBl4WY+mhZ42wCskib8
0OR6RhqhWK6f7iMk6wYc420UC1DV8PKEDBDIaIC0PzYDU43it4QdYkiWZMDysIxp
G6Q+P5MvQ1IdWQx7CxxMPTsgc0GhjL1Vklr50JkXjbaGuhie+G4Qlt+/38wqcpsh
DcDehNXKQ2TXnP5JvdqQLVQPUv4JwsB9kUATYVyyWxrp7iEcVK6tPYNJzuJjj0nW
crt2UrjEbNaBbYzUih34uEHLFSdIswXibPHjTvrs9KPhed6TfUPYneYzvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9UEPVbonuSUj3a8E81h+DldlMgMB8GA1UdIwQY
MBaAFDZwcLFp0RqWKRAE4wAPmwTU4RLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm5Cd3NXblJHcFlwRUFUakFBLWJCTlRoRXRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iMTE5ODAtMWY3Yi00ZWU3LWE4OGUt
YTU4OTljZWU2NTVmLzEvTm5Cd3NXblJHcFlwRUFUakFBLWJCTlRoRXRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9iMTE5ODAtMWY3Yi00ZWU3LWE4OGUtYTU4OTljZWU2NTVm
LzEvTm5Cd3NXblJHcFlwRUFUakFBLWJCTlRoRXRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopWD/ocq
99a8uW3J8EvNio07oF27k+jNGerLD8WDfY1/cgDKHwL4ze5CtfXQiq9VE1w1IEHo
PZ7f7t5p1+ZgHVyxMmIhCc7tZAcONL+sefnCazWQ9eQsoQytXeelZr4yYE6brbj8
csNcg13hlIpTLVJC1if5kOnuRcYZsoHFXQrfQKcTKHN/ObG7gpqIIIK96LfHTxAI
aO7JtFGH7zYHIFhsdILdqyRJL1fORdeciqWl2yfRKNjQxJeUy+z9Xy03aUBVxntI
w1oY22M2BIkR1GH7pJxvLZrEHBmeQiSPArFPTfRL3VJhiBb4otnw46L+lkLPvr8n
NZX5SOhYfMsT5A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:11:00 2025 by rpki-client