Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: UV6zkBFGEU+N1NkXztGfmN+IKtWGhKV+zEW0JQzAFbE=
Subject key identifier: 2F:38:07:F7:14:9D:AD:78:E4:DE:C9:73:B5:F4:49:2E:D3:6B:5E:56
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 0198530D772165A2D60F86619D841FCF9092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 091F
Signing time: Mon 28 Jul 2025 22:00:48 +0000
Manifest this update: Mon 28 Jul 2025 22:00:48 +0000
Manifest next update: Tue 29 Jul 2025 22:00:48 +0000
Files and hashes: 1: ZcSRf0HxnWHQIw5MIAf_WL9oY6A.roa (hash: cP2ZkY5lLDgrJYkw2lqKqOmENJRMWCl82XCDZbZfylY=)
2: dk4GVxnPxj9mrIWRHBmkYZR_RAY.roa (hash: eaMuW15awNbcED9U+mZfT6o28nxoJ9RTD5vuUNkkC90=)
3: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: jBatAlZIChNcR6baNgaH0mYuAj0k79/sPW0Nh5eOqH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:77:21:65:a2:d6:0f:86:61:9d:84:1f:cf:90:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Jul 28 22:00:48 2025 GMT
Not After : Jul 29 22:00:48 2025 GMT
Subject: CN=2f3807f7149dad78e4dec973b5f4492ed36b5e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b5:98:0e:d4:fe:16:c7:cf:4b:f1:17:68:06:
01:d3:34:52:8c:61:12:c6:7a:b0:f5:a0:27:b4:07:
4d:8e:18:2e:e7:f4:c0:2e:d6:62:e0:01:bf:97:33:
42:15:1a:ae:5a:84:cb:1c:9b:67:26:bd:f4:10:65:
56:56:72:2e:69:37:f9:44:a0:f4:e8:41:eb:36:e4:
fb:29:6e:36:fb:13:5e:ea:5f:89:73:f6:ad:b2:c5:
f5:73:a3:c6:66:8e:f7:92:28:97:ca:a0:68:67:90:
1b:24:e9:b7:27:14:29:36:db:6d:08:e0:43:70:19:
ad:17:7e:6a:88:93:1a:8a:8e:0d:da:eb:72:93:90:
07:cd:68:d2:1e:18:4b:da:fa:09:2c:02:0b:72:74:
d2:d1:5c:cc:18:00:04:4e:7d:d4:8c:53:1a:db:5a:
b5:1e:95:f1:75:53:35:d1:e9:bf:6b:09:29:0c:38:
55:25:d7:e5:64:08:5f:d8:df:ba:e6:7d:5f:03:5c:
df:81:e9:2a:b1:04:85:2e:2e:bf:69:21:db:88:54:
ec:99:b6:a9:51:34:c0:81:0d:ca:c4:80:64:a1:dc:
49:cb:da:80:0a:e8:43:23:78:78:28:a9:35:af:9e:
9f:d9:f6:17:b9:2d:d5:f1:88:38:45:c1:24:2c:64:
38:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:38:07:F7:14:9D:AD:78:E4:DE:C9:73:B5:F4:49:2E:D3:6B:5E:56
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d5:57:d0:28:dd:a7:bc:e7:60:a4:32:1c:9b:5d:07:6e:43:
27:42:80:01:74:38:67:2f:85:6f:97:72:5f:e6:72:10:cf:48:
dc:74:24:2f:8a:b6:0b:af:fd:55:19:8d:1e:dd:46:79:2d:02:
c0:2d:2c:68:cf:5e:f2:29:e3:ff:63:2b:73:21:87:9c:81:18:
5c:85:84:da:09:d6:f4:56:9d:0e:67:2a:e4:f3:74:85:e9:b1:
bf:a8:fc:44:79:db:bb:67:32:83:58:67:4b:42:7d:f7:e2:32:
ea:0a:46:0e:9d:45:74:7d:72:93:96:1d:e5:31:9b:39:fb:55:
62:22:ec:49:57:f3:01:0f:6d:80:a9:ed:21:b6:14:ea:43:65:
76:0f:02:cd:fd:87:b3:37:b2:36:c2:15:b8:4c:73:0a:f1:cf:
c9:b5:7c:34:44:15:61:5b:cf:af:61:8e:92:0b:64:04:d7:ab:
a8:61:c2:b5:18:37:29:6f:dc:dd:4e:a3:b5:ef:fd:b5:03:05:
71:16:6e:da:36:a4:0b:96:10:a3:a9:7e:a3:78:48:86:05:6f:
f6:8c:e3:7e:63:10:7a:e4:7e:2e:21:16:0a:da:fa:8b:77:fc:
91:d1:54:81:94:c3:c7:92:2c:c2:ef:23:55:34:ce:4a:b3:f6:
c3:43:55:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDXchZaLWD4ZhnYQfz5CSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMjllODU1NDAyMGJkZWZhMTdjNTU2MTQzOGZiNGJhZjU4
MzFmNTIwHhcNMjUwNzI4MjIwMDQ4WhcNMjUwNzI5MjIwMDQ4WjAzMTEwLwYDVQQD
EygyZjM4MDdmNzE0OWRhZDc4ZTRkZWM5NzNiNWY0NDkyZWQzNmI1ZTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bWYDtT+FsfPS/EXaAYB0zRSjGES
xnqw9aAntAdNjhgu5/TALtZi4AG/lzNCFRquWoTLHJtnJr30EGVWVnIuaTf5RKD0
6EHrNuT7KW42+xNe6l+Jc/atssX1c6PGZo73kiiXyqBoZ5AbJOm3JxQpNtttCOBD
cBmtF35qiJMaio4N2utyk5AHzWjSHhhL2voJLAILcnTS0VzMGAAETn3UjFMa21q1
HpXxdVM10em/awkpDDhVJdflZAhf2N+65n1fA1zfgekqsQSFLi6/aSHbiFTsmbap
UTTAgQ3KxIBkodxJy9qACuhDI3h4KKk1r56f2fYXuS3V8Yg4RcEkLGQ4zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC84B/cUna145N7Jc7X0SS7Ta15WMB8GA1UdIwQY
MBaAFJ8p6FVAIL3voXxVYUOPtLr1gx9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yZGJlMDQtNDNhOC00OTYzLThlODYt
M2ZlOGY4OTZlNTUxLzEvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yZGJlMDQtNDNhOC00OTYzLThlODYtM2ZlOGY4OTZlNTUx
LzEvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdVX0Cjd
p7znYKQyHJtdB25DJ0KAAXQ4Zy+Fb5dyX+ZyEM9I3HQkL4q2C6/9VRmNHt1GeS0C
wC0saM9e8inj/2MrcyGHnIEYXIWE2gnW9FadDmcq5PN0hemxv6j8RHnbu2cyg1hn
S0J99+Iy6gpGDp1FdH1yk5Yd5TGbOftVYiLsSVfzAQ9tgKntIbYU6kNldg8Czf2H
szeyNsIVuExzCvHPybV8NEQVYVvPr2GOkgtkBNerqGHCtRg3KW/c3U6jte/9tQMF
cRZu2jakC5YQo6l+o3hIhgVv9ozjfmMQeuR+LiEWCtr6i3f8kdFUgZTDx5Iswu8j
VTTOSrP2w0NVlg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:35:24 2025 by rpki-client