Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
File: nNZ9EDPKRytbuA_VlruDbRLiImE.mft (raw, json)
Hash identifier: lpM3TMDwyN6karVeMVq5t62eHP+bVH9L2qnIyrtY8dw=
Subject key identifier: EA:00:8E:83:53:47:E5:C0:12:16:EF:7F:F8:A0:04:63:E3:BF:A4:2C
Authority key identifier: 9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
Certificate issuer: /CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Certificate serial: 0199FC8F70740D78FFAEE95973926A96F49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
Manifest number: 0CD3
Signing time: Sun 19 Oct 2025 13:01:22 +0000
Manifest this update: Sun 19 Oct 2025 13:01:22 +0000
Manifest next update: Mon 20 Oct 2025 13:01:22 +0000
Files and hashes: 1: nNZ9EDPKRytbuA_VlruDbRLiImE.crl (hash: QPld8wc1oVTZGniLFh5X14imXP5kcnzrq5p3XTjZ2U8=)
2: vJEpt2EZ5UHOHzXUt6_FIB9pq2c.roa (hash: wfxwNWs85u9qLCuI6Hzz2FjX0JN3uzdqSv3NQ+LC9RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:70:74:0d:78:ff:ae:e9:59:73:92:6a:96:f4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Validity
Not Before: Oct 19 13:01:22 2025 GMT
Not After : Oct 20 13:01:22 2025 GMT
Subject: CN=ea008e835347e5c01216ef7ff8a00463e3bfa42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:85:e3:3c:f0:ef:80:8e:2d:94:78:ec:a0:
9d:66:32:06:d9:ad:97:45:48:82:55:a0:4c:d7:e5:
b2:59:5f:d6:26:bf:64:59:5f:04:97:4b:a4:f0:01:
78:e3:67:2e:d4:bc:0e:0b:86:c3:3d:06:e4:af:21:
fb:8b:68:05:81:ed:f6:06:93:0f:f4:a8:bb:d6:06:
dd:50:9a:99:16:5a:ea:eb:28:5a:3a:8d:12:ab:4d:
21:35:48:ac:72:9f:83:2f:b3:fd:a4:b4:a8:de:7c:
0d:fe:04:3c:80:83:af:aa:cf:12:ff:c5:00:88:60:
1c:c7:0d:86:3c:55:26:30:9c:a1:ba:51:11:62:56:
69:e9:b5:c2:85:87:21:fc:55:05:81:9a:2a:aa:da:
25:bd:fb:2c:1c:c9:7f:bc:6d:be:f4:4d:8a:98:20:
7f:b8:cd:f0:fb:1f:44:93:2d:99:f2:9b:f1:9a:45:
a1:53:aa:a2:d9:22:5b:93:bd:33:6f:9a:36:6b:be:
24:73:ae:a2:bf:3e:1e:38:73:0d:28:23:9b:82:cb:
39:74:7d:cb:f1:ce:03:be:30:5d:75:f5:68:b3:15:
5a:54:4b:ff:19:bf:e9:11:1b:65:6a:6f:44:be:97:
71:2f:4e:f1:a3:03:99:ae:67:17:5e:f6:61:da:9d:
5f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:00:8E:83:53:47:E5:C0:12:16:EF:7F:F8:A0:04:63:E3:BF:A4:2C
X509v3 Authority Key Identifier:
keyid:9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0c:07:92:49:04:1b:5c:79:97:74:47:55:26:dd:7f:24:cd:
05:56:ab:83:b0:29:f2:a2:54:36:b1:de:48:49:88:29:d7:86:
27:18:b1:2d:ad:b1:9f:2f:a6:de:a3:17:93:8a:94:b4:f9:7b:
d8:76:92:bc:6f:ad:4d:6e:b8:e3:95:9e:02:c0:28:af:2b:8e:
bc:11:5b:5b:39:f8:27:42:9e:50:6e:76:91:ef:54:9c:32:3b:
21:cd:d0:55:6e:14:3e:ec:0b:95:15:37:c6:c5:4b:40:47:b2:
41:7e:6b:9a:f5:4f:11:c6:54:0b:f8:d4:8e:3b:4f:77:54:4c:
1f:e3:cf:cf:61:51:c9:11:31:fb:4e:f3:6f:a5:36:78:14:77:
c9:03:35:7a:14:7e:3e:fb:ab:14:2f:f5:db:b8:21:99:77:f5:
e8:72:99:74:7b:94:8e:ab:b8:2c:d8:02:fc:58:0b:08:65:16:
ee:f7:58:5c:6c:50:15:c9:1f:2a:2f:af:3a:41:dc:85:4a:ea:
7b:68:ed:49:98:25:4a:cb:42:03:dc:c8:d3:ed:87:5e:41:27:
2a:91:f5:f6:07:c4:e1:20:7e:32:f3:e1:39:59:e1:37:1b:ba:
21:db:8c:2b:70:34:77:a6:40:08:41:d7:c8:52:90:c2:01:03:
6a:1e:eb:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j3B0DXj/rulZc5JqlvSeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZDY3ZDEwMzNjYTQ3MmI1YmI4MGZkNTk2YmI4MzZkMTJl
MjIyNjEwHhcNMjUxMDE5MTMwMTIyWhcNMjUxMDIwMTMwMTIyWjAzMTEwLwYDVQQD
EyhlYTAwOGU4MzUzNDdlNWMwMTIxNmVmN2ZmOGEwMDQ2M2UzYmZhNDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQOF4zzw74COLZR47KCdZjIG2a2X
RUiCVaBM1+WyWV/WJr9kWV8El0uk8AF442cu1LwOC4bDPQbkryH7i2gFge32BpMP
9Ki71gbdUJqZFlrq6yhaOo0Sq00hNUiscp+DL7P9pLSo3nwN/gQ8gIOvqs8S/8UA
iGAcxw2GPFUmMJyhulERYlZp6bXChYch/FUFgZoqqtolvfssHMl/vG2+9E2KmCB/
uM3w+x9Eky2Z8pvxmkWhU6qi2SJbk70zb5o2a74kc66ivz4eOHMNKCObgss5dH3L
8c4DvjBddfVosxVaVEv/Gb/pERtlam9EvpdxL07xowOZrmcXXvZh2p1fWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoAjoNTR+XAEhbvf/igBGPjv6QsMB8GA1UdIwQY
MBaAFJzWfRAzykcrW7gP1Za7g20S4iJhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk5aOUVEUEtSeXRidUFfVmxydURiUkxpSW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mMTc3MjItZTU4Yi00NDUyLTgxMzUt
ZWFhNWFjZjM1ZmQxLzEvbk5aOUVEUEtSeXRidUFfVmxydURiUkxpSW1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mMTc3MjItZTU4Yi00NDUyLTgxMzUtZWFhNWFjZjM1ZmQx
LzEvbk5aOUVEUEtSeXRidUFfVmxydURiUkxpSW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAwHkkkE
G1x5l3RHVSbdfyTNBVarg7Ap8qJUNrHeSEmIKdeGJxixLa2xny+m3qMXk4qUtPl7
2HaSvG+tTW6445WeAsAoryuOvBFbWzn4J0KeUG52ke9UnDI7Ic3QVW4UPuwLlRU3
xsVLQEeyQX5rmvVPEcZUC/jUjjtPd1RMH+PPz2FRyREx+07zb6U2eBR3yQM1ehR+
PvurFC/127ghmXf16HKZdHuUjqu4LNgC/FgLCGUW7vdYXGxQFckfKi+vOkHchUrq
e2jtSZglSstCA9zI0+2HXkEnKpH19gfE4SB+MvPhOVnhNxu6IduMK3A0d6ZACEHX
yFKQwgEDah7rXw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:48 2025 by rpki-client