
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
File: NyQY8ATVhPL-JshCNeZrtrKUJxg.mft (raw, json)
Hash identifier: SKj13g074zNaXouLEzCzapxg1wr6vd8fb3tl/b9Nu/g=
Subject key identifier: 4B:47:9A:21:7A:75:B0:ED:97:EA:38:C5:CF:67:8C:D7:0D:FC:94:C7
Authority key identifier: 37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
Certificate issuer: /CN=372418f004d584f2fe26c84235e66bb6b2942718
Certificate serial: 0198D65F23E33C4A78CEE89F8108B19E5478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
Manifest number: E9
Signing time: Sat 23 Aug 2025 10:00:15 +0000
Manifest this update: Sat 23 Aug 2025 10:00:15 +0000
Manifest next update: Sun 24 Aug 2025 10:00:15 +0000
Files and hashes: 1: NyQY8ATVhPL-JshCNeZrtrKUJxg.crl (hash: WS0tBYPM+HH2g0H3rW2De/mCwsFfoU+u7mZz/VPXoHU=)
2: tT9egEPZfOW0iJxsepbGA_UgQjg.roa (hash: nJcChZ33Fi+iAdXvZOyTBjHIrvr+XcKOSiVdHqUG+CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:23:e3:3c:4a:78:ce:e8:9f:81:08:b1:9e:54:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372418f004d584f2fe26c84235e66bb6b2942718
Validity
Not Before: Aug 23 10:00:15 2025 GMT
Not After : Aug 24 10:00:15 2025 GMT
Subject: CN=4b479a217a75b0ed97ea38c5cf678cd70dfc94c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:76:6d:78:06:4a:74:25:8d:70:b2:e5:24:
60:7e:fe:f4:57:29:ad:db:f8:cb:80:8e:6e:20:80:
6e:7a:fb:23:df:74:16:6e:65:2d:44:0a:0c:00:f1:
e1:fd:22:51:73:48:66:46:14:04:5d:16:af:13:d2:
e3:f3:92:54:ab:8b:70:44:9d:48:66:dc:df:74:16:
ea:b3:31:7e:c8:3a:c0:ce:66:77:46:31:d6:a6:fd:
bb:e0:c6:8b:60:16:76:cc:7f:76:68:33:00:38:6c:
44:b1:10:b2:9d:04:a0:8e:36:05:f4:b1:99:39:a6:
47:4e:07:d8:1e:a0:93:84:d0:6e:13:f9:09:22:9f:
f6:73:fe:ab:fa:7b:57:3d:ca:63:c9:2c:f6:01:6d:
61:0c:4b:27:b4:9e:e5:5c:9a:cc:50:f7:e9:77:80:
76:0a:cd:85:16:b7:e4:94:1e:8a:e2:8e:8b:90:d1:
a8:96:13:4c:a9:6f:a9:d1:10:a4:a7:5b:14:52:64:
0a:a5:d2:46:eb:be:a7:de:00:c0:b7:af:39:14:15:
cf:28:d2:9a:20:32:4c:f0:13:22:22:c5:f1:aa:93:
66:9f:aa:e4:6e:da:e4:a9:d7:1f:37:3c:bb:e0:b0:
ea:b2:da:6e:d0:92:d2:b3:27:dd:27:27:96:83:1b:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:47:9A:21:7A:75:B0:ED:97:EA:38:C5:CF:67:8C:D7:0D:FC:94:C7
X509v3 Authority Key Identifier:
keyid:37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:cf:e2:50:79:40:d2:a5:b5:6e:80:72:b3:e6:80:99:50:54:
51:a6:02:66:c3:b9:66:47:7a:9e:e8:98:d6:b4:14:fc:f9:a2:
8c:59:48:36:eb:19:e6:ce:39:ac:77:72:94:d9:33:f6:ce:26:
13:67:73:98:73:85:e5:68:a4:6b:8f:5d:35:6f:9b:d6:86:e0:
1d:7d:34:fd:bf:5a:74:1f:14:c9:00:03:90:f5:23:65:83:f2:
9d:78:8d:15:33:66:0c:5e:74:00:88:20:a8:20:58:ae:c9:81:
22:ef:b1:79:40:86:e5:85:00:e7:d3:54:1c:1b:9d:47:2d:03:
bd:58:9a:d8:65:61:52:f1:33:c4:69:2e:ed:65:1d:f7:45:bd:
6d:05:64:c0:b3:ff:6f:55:f8:cf:87:6a:fc:78:f5:21:40:2b:
a4:7f:b8:3c:c0:a6:70:15:ef:8c:98:57:11:95:f7:c7:49:a6:
35:27:0c:b0:d7:df:62:a5:cb:86:cc:cb:4f:a3:56:de:b6:e1:
e2:69:32:71:14:d6:13:fa:06:0f:00:0c:43:a3:7f:7c:fa:56:
a2:01:24:20:24:4c:af:e1:a7:92:71:fd:0d:39:6f:f5:4c:dd:
64:53:5f:82:0d:cd:ee:c8:10:8d:27:73:21:ce:91:f8:cd:70:
0a:8a:03:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXyPjPEp4zuifgQixnlR4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MjQxOGYwMDRkNTg0ZjJmZTI2Yzg0MjM1ZTY2YmI2YjI5
NDI3MTgwHhcNMjUwODIzMTAwMDE1WhcNMjUwODI0MTAwMDE1WjAzMTEwLwYDVQQD
Eyg0YjQ3OWEyMTdhNzViMGVkOTdlYTM4YzVjZjY3OGNkNzBkZmM5NGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskV2bXgGSnQljXCy5SRgfv70Vymt
2/jLgI5uIIBuevsj33QWbmUtRAoMAPHh/SJRc0hmRhQEXRavE9Lj85JUq4twRJ1I
ZtzfdBbqszF+yDrAzmZ3RjHWpv274MaLYBZ2zH92aDMAOGxEsRCynQSgjjYF9LGZ
OaZHTgfYHqCThNBuE/kJIp/2c/6r+ntXPcpjySz2AW1hDEsntJ7lXJrMUPfpd4B2
Cs2FFrfklB6K4o6LkNGolhNMqW+p0RCkp1sUUmQKpdJG676n3gDAt685FBXPKNKa
IDJM8BMiIsXxqpNmn6rkbtrkqdcfNzy74LDqstpu0JLSsyfdJyeWgxvAqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtHmiF6dbDtl+o4xc9njNcN/JTHMB8GA1UdIwQY
MBaAFDckGPAE1YTy/ibIQjXma7aylCcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnlRWThBVFZoUEwtSnNoQ05lWnJ0cktVSnhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85M2M4NTEtYmFhNi00MTIxLWJjZGQt
YTEzNmEzMjg5NWMwLzEvTnlRWThBVFZoUEwtSnNoQ05lWnJ0cktVSnhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy85M2M4NTEtYmFhNi00MTIxLWJjZGQtYTEzNmEzMjg5NWMw
LzEvTnlRWThBVFZoUEwtSnNoQ05lWnJ0cktVSnhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkc/iUHlA
0qW1boBys+aAmVBUUaYCZsO5Zkd6nuiY1rQU/PmijFlINusZ5s45rHdylNkz9s4m
E2dzmHOF5Wika49dNW+b1obgHX00/b9adB8UyQADkPUjZYPynXiNFTNmDF50AIgg
qCBYrsmBIu+xeUCG5YUA59NUHBudRy0DvVia2GVhUvEzxGku7WUd90W9bQVkwLP/
b1X4z4dq/Hj1IUArpH+4PMCmcBXvjJhXEZX3x0mmNScMsNffYqXLhszLT6NW3rbh
4mkycRTWE/oGDwAMQ6N/fPpWogEkICRMr+GnknH9DTlv9UzdZFNfgg3N7sgQjSdz
Ic6R+M1wCooDQg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:57:49 2025 by rpki-client