Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
File: Nse0TnxfKbnepAKsgFFgspjPDaY.mft (raw, json)
Hash identifier: +GJUqaMCk13MnTLtaNM8fQXrFq1OzltD4I1QS92I3TM=
Subject key identifier: 92:23:FB:05:55:F5:6A:CD:23:8B:66:C5:85:A8:59:26:86:5D:E5:24
Authority key identifier: 36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
Certificate issuer: /CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Certificate serial: 0199FD343311EE4DCA98C86415B774404DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 16:01:20 +0000
Manifest this update: Sun 19 Oct 2025 16:01:20 +0000
Manifest next update: Mon 20 Oct 2025 16:01:20 +0000
Files and hashes: 1: Nse0TnxfKbnepAKsgFFgspjPDaY.crl (hash: ehf+QCsPWz6mXxoAKDvgp4a7dLXGlVGxOGnlb9z0OLY=)
2: SMYfuR1vOqwT0gbQyB5G9SKEcQs.roa (hash: 790cASmrwFRWvIHgSFvW34RkdQVbe9565zpCVGOf6tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:33:11:ee:4d:ca:98:c8:64:15:b7:74:40:4d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Validity
Not Before: Oct 19 16:01:20 2025 GMT
Not After : Oct 20 16:01:20 2025 GMT
Subject: CN=9223fb0555f56acd238b66c585a85926865de524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c2:73:09:c1:f6:ee:98:d1:8d:69:d8:31:b0:
5a:50:b9:d3:e7:b8:a4:98:32:ed:77:93:d6:05:a7:
6f:93:e0:c3:99:2a:01:e1:8c:b5:14:7d:6a:90:ed:
02:c3:f9:f8:98:80:d0:4e:c8:db:0a:95:31:52:c7:
fe:99:02:96:45:bb:e5:7d:9c:9f:0e:d7:b0:74:33:
19:55:a2:8d:c5:52:e9:45:03:e5:3e:b1:58:f2:4c:
7d:74:20:c1:36:70:48:0d:90:19:39:e2:c1:6b:51:
f6:0c:ad:a2:b9:82:80:a5:87:e9:63:28:6f:5e:5a:
1f:1d:81:00:82:f7:7c:2b:a5:20:7d:31:43:2d:a2:
18:6b:10:ad:c9:30:2f:de:63:46:eb:3d:a3:a5:35:
52:3f:94:8b:35:33:18:fe:78:b0:ed:fa:29:1f:54:
f3:ce:3a:2e:af:b0:08:d7:21:8f:bb:3f:86:d0:a9:
3c:2c:67:5c:08:21:41:4c:39:31:43:ac:be:58:73:
ff:5d:88:0c:5b:28:1f:c8:3d:bc:22:07:48:1a:a2:
62:59:f7:57:9f:f1:55:f1:89:75:8d:9d:24:b3:99:
33:bc:83:d1:9b:0f:2b:bc:fa:81:b6:2a:4c:81:c4:
8d:27:e1:95:1e:c1:88:94:65:c6:f4:22:5d:d7:b2:
c8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:23:FB:05:55:F5:6A:CD:23:8B:66:C5:85:A8:59:26:86:5D:E5:24
X509v3 Authority Key Identifier:
keyid:36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7f:48:39:84:b3:c9:af:fd:d0:75:80:c5:fb:be:ec:f3:cf:
7b:47:30:a8:d2:e9:c0:bf:1d:5e:71:59:01:b9:18:33:9a:d6:
d7:44:08:1c:2c:0f:ba:7c:69:e6:18:b4:b5:c8:96:a6:80:a7:
0b:49:7b:51:3f:03:69:91:d6:2b:02:60:1d:7a:26:68:73:21:
49:51:a0:84:57:6c:df:93:8a:ef:73:f6:2a:4c:4d:ac:03:a9:
e5:40:e5:46:e0:f1:63:71:f7:96:bd:71:a4:45:2b:7d:ad:ae:
80:0b:f9:8a:07:72:b0:c2:fe:ca:89:2d:bf:86:8b:0d:92:58:
03:da:45:d0:69:c9:ce:7a:8e:57:b3:62:ee:16:97:60:b4:d5:
c9:26:9e:fe:61:a2:f9:81:6b:da:4b:64:88:c9:22:01:ef:d1:
b1:c0:c4:ef:87:e2:69:1a:29:de:23:5a:2e:2e:64:b6:bd:82:
ae:b3:17:b7:4b:b8:e0:53:73:0f:89:c6:20:ae:68:7d:8f:cd:
56:25:90:fe:20:e4:f6:bc:7d:a8:5a:57:e1:32:42:01:32:95:
92:1d:f6:50:b2:07:27:c3:6e:e2:a8:df:77:3a:a3:f6:fd:ea:
8e:6f:f5:11:cf:ac:65:a7:77:f8:3a:1b:00:22:0c:7b:53:da:
f5:16:70:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NDMR7k3KmMhkFbd0QE2jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzdiNDRlN2M1ZjI5YjlkZWE0MDJhYzgwNTE2MGIyOThj
ZjBkYTYwHhcNMjUxMDE5MTYwMTIwWhcNMjUxMDIwMTYwMTIwWjAzMTEwLwYDVQQD
Eyg5MjIzZmIwNTU1ZjU2YWNkMjM4YjY2YzU4NWE4NTkyNjg2NWRlNTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8JzCcH27pjRjWnYMbBaULnT57ik
mDLtd5PWBadvk+DDmSoB4Yy1FH1qkO0Cw/n4mIDQTsjbCpUxUsf+mQKWRbvlfZyf
DtewdDMZVaKNxVLpRQPlPrFY8kx9dCDBNnBIDZAZOeLBa1H2DK2iuYKApYfpYyhv
XlofHYEAgvd8K6UgfTFDLaIYaxCtyTAv3mNG6z2jpTVSP5SLNTMY/niw7fopH1Tz
zjour7AI1yGPuz+G0Kk8LGdcCCFBTDkxQ6y+WHP/XYgMWygfyD28IgdIGqJiWfdX
n/FV8Yl1jZ0ks5kzvIPRmw8rvPqBtipMgcSNJ+GVHsGIlGXG9CJd17LISwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIj+wVV9WrNI4tmxYWoWSaGXeUkMB8GA1UdIwQY
MBaAFDbHtE58Xym53qQCrIBRYLKYzw2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNlMFRueGZLYm5lcEFLc2dGRmdzcGpQRGFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84ZjcxMzgtNDZkOS00OThiLWFmNmQt
NmQ2NTgyYjJiNWI2LzEvTnNlMFRueGZLYm5lcEFLc2dGRmdzcGpQRGFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84ZjcxMzgtNDZkOS00OThiLWFmNmQtNmQ2NTgyYjJiNWI2
LzEvTnNlMFRueGZLYm5lcEFLc2dGRmdzcGpQRGFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARX9IOYSz
ya/90HWAxfu+7PPPe0cwqNLpwL8dXnFZAbkYM5rW10QIHCwPunxp5hi0tciWpoCn
C0l7UT8DaZHWKwJgHXomaHMhSVGghFds35OK73P2KkxNrAOp5UDlRuDxY3H3lr1x
pEUrfa2ugAv5igdysML+yoktv4aLDZJYA9pF0GnJznqOV7Ni7haXYLTVySae/mGi
+YFr2ktkiMkiAe/RscDE74fiaRop3iNaLi5ktr2CrrMXt0u44FNzD4nGIK5ofY/N
ViWQ/iDk9rx9qFpX4TJCATKVkh32ULIHJ8Nu4qjfdzqj9v3qjm/1Ec+sZad3+Dob
ACIMe1Pa9RZwFw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:49 2025 by rpki-client