Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
File: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json)
Hash identifier: fmVJ9nmPFkNQ012WMaKQp1sWbR8tb2DQbAa+m05IkRs=
Subject key identifier: 6F:CE:DF:61:D1:8C:57:8F:2D:33:10:6C:A1:5F:78:9E:EE:F7:17:67
Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Certificate serial: 019A1A6206F1033107011C0C8B5F265BA9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
Manifest number: 0156
Signing time: Sat 25 Oct 2025 08:00:23 +0000
Manifest this update: Sat 25 Oct 2025 08:00:23 +0000
Manifest next update: Sun 26 Oct 2025 08:00:23 +0000
Files and hashes: 1: B7c_NuomsMLePlv4BqYRjDtq6rA.roa (hash: 9F/KOglkwN1+3aYHtjpMXcocrWjjPZ/arLWSx9kmqyY=)
2: LfG4OjHPoLHsAJrtCsFzB1-WA1c.roa (hash: l1BlIjqmxWuuS5MgIueayr3dbyb+8P1GNcaS+TuAghU=)
3: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: uuoQP8I0H11MbUGQk9T+ysQRpokj4RSictYwfvq3CmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:62:06:f1:03:31:07:01:1c:0c:8b:5f:26:5b:a9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Validity
Not Before: Oct 25 08:00:23 2025 GMT
Not After : Oct 26 08:00:23 2025 GMT
Subject: CN=6fcedf61d18c578f2d33106ca15f789eeef71767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:90:f5:47:ac:69:75:a3:f3:d3:a8:29:70:23:
50:ee:a5:36:b9:e5:ef:dd:22:9b:2f:b9:e0:e9:da:
f2:36:1a:37:73:ea:e9:c0:da:c6:4d:da:bb:a8:d4:
bd:c8:02:8a:6b:ae:7c:97:61:ab:ad:b5:8e:45:40:
92:8c:a3:ed:2b:36:77:d2:8d:36:80:94:88:4b:72:
e6:41:65:b2:84:e1:c0:05:84:f2:ec:25:03:ed:e3:
40:94:d4:16:b5:20:28:45:ee:28:b9:5e:57:1e:fe:
bd:a0:a8:3c:2c:22:2d:ae:14:e7:df:b1:bd:ce:2e:
e7:3a:fd:a4:57:86:30:91:ab:eb:ff:bc:14:6f:4c:
ee:fe:cc:c4:25:81:47:5f:4b:51:93:78:40:a0:ae:
4e:67:6a:2f:dc:9d:69:ad:e2:0d:3d:be:56:33:ec:
eb:84:6c:c4:3c:3d:31:8f:f6:5e:34:60:ed:44:83:
ec:23:d4:fa:09:13:c2:f2:b0:4b:d7:9b:24:c1:1d:
a6:58:a6:4e:5b:d1:d3:59:c2:42:34:a9:e0:7c:36:
64:cc:61:0f:26:b2:76:02:19:83:17:b4:c2:ff:c4:
ac:84:db:3b:58:ee:a6:fe:8c:75:2e:7d:c9:18:67:
4b:75:b6:13:08:89:18:5a:ba:8b:e2:d5:bc:cd:53:
92:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CE:DF:61:D1:8C:57:8F:2D:33:10:6C:A1:5F:78:9E:EE:F7:17:67
X509v3 Authority Key Identifier:
keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:09:b1:39:1f:1c:45:be:37:9c:05:ed:75:70:9c:28:ab:24:
45:3f:5e:6a:49:4c:cd:6f:3a:c9:a5:98:a4:2c:f5:07:67:ad:
fa:4a:93:87:45:a9:3c:d5:0e:1a:0c:a3:ef:ec:a9:e7:f2:f2:
19:95:ac:4d:8d:d0:95:4c:1f:2d:49:9b:16:c3:53:ea:6b:ad:
09:d3:44:04:31:e1:46:7a:18:a6:26:a6:e0:47:bd:5e:d2:ad:
7c:11:59:9f:8e:b8:97:aa:27:ad:22:52:e1:16:bd:34:c4:b6:
3e:d0:43:21:51:29:12:3c:51:e5:f3:56:e7:98:0f:d6:46:64:
a1:c3:28:a5:b5:d4:48:07:fa:60:dc:5e:17:73:24:5e:4b:68:
44:b7:47:8a:87:b2:9e:ba:be:d2:4d:f9:35:fd:96:2c:f1:06:
51:50:b1:05:82:9b:58:e5:66:7a:5b:63:3a:21:ac:30:6b:16:
b1:22:39:b5:32:1c:68:58:12:68:9f:14:f5:03:6b:94:51:0b:
73:3a:bd:be:d1:8f:fd:48:09:47:98:a7:69:0f:0e:0d:de:1c:
76:1e:c8:0e:b7:7b:95:47:1c:7d:3c:01:26:7b:e0:c8:ec:4a:
61:0b:bf:d6:72:6f:28:10:18:db:60:88:eb:a5:bf:9e:48:ac:
15:ea:f9:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoaYgbxAzEHARwMi18mW6neMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMmJjZDczNzA1YjkzNzQ3NWE5NThjNjM0ZWRkNjRjOWM2
NGFmYjYwHhcNMjUxMDI1MDgwMDIzWhcNMjUxMDI2MDgwMDIzWjAzMTEwLwYDVQQD
Eyg2ZmNlZGY2MWQxOGM1NzhmMmQzMzEwNmNhMTVmNzg5ZWVlZjcxNzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JD1R6xpdaPz06gpcCNQ7qU2ueXv
3SKbL7ng6dryNho3c+rpwNrGTdq7qNS9yAKKa658l2GrrbWORUCSjKPtKzZ30o02
gJSIS3LmQWWyhOHABYTy7CUD7eNAlNQWtSAoRe4ouV5XHv69oKg8LCItrhTn37G9
zi7nOv2kV4Ywkavr/7wUb0zu/szEJYFHX0tRk3hAoK5OZ2ov3J1preINPb5WM+zr
hGzEPD0xj/ZeNGDtRIPsI9T6CRPC8rBL15skwR2mWKZOW9HTWcJCNKngfDZkzGEP
JrJ2AhmDF7TC/8SshNs7WO6m/ox1Ln3JGGdLdbYTCIkYWrqL4tW8zVOSMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/O32HRjFePLTMQbKFfeJ7u9xdnMB8GA1UdIwQY
MBaAFJ8rzXNwW5N0dalYxjTt1kycZK+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDct
OTA4NGZiMGJlOWMxLzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDctOTA4NGZiMGJlOWMx
LzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5AmxOR8c
Rb43nAXtdXCcKKskRT9eaklMzW86yaWYpCz1B2et+kqTh0WpPNUOGgyj7+yp5/Ly
GZWsTY3QlUwfLUmbFsNT6mutCdNEBDHhRnoYpiam4Ee9XtKtfBFZn464l6onrSJS
4Ra9NMS2PtBDIVEpEjxR5fNW55gP1kZkocMopbXUSAf6YNxeF3MkXktoRLdHioey
nrq+0k35Nf2WLPEGUVCxBYKbWOVmeltjOiGsMGsWsSI5tTIcaFgSaJ8U9QNrlFEL
czq9vtGP/UgJR5inaQ8ODd4cdh7IDrd7lUccfTwBJnvgyOxKYQu/1nJvKBAY22CI
66W/nkisFer5Bg==
-----END CERTIFICATE-----
Generated at Sat Oct 25 17:36:23 2025 by rpki-client