Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
File: nhUzxHAsLMtang6HqyetVrFfLHY.mft (raw, json)
Hash identifier: bais+OX/TOBejTn+SQJ9qJTdr/0uc9JBaMkYdWCXo7w=
Subject key identifier: F8:3B:B1:6B:84:19:81:01:8D:E4:91:5B:A3:10:E6:66:9C:29:80:4A
Authority key identifier: 9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
Certificate issuer: /CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Certificate serial: 019A24AEAFF889E01D83863E346423896BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
Manifest number: 0DCB
Signing time: Mon 27 Oct 2025 08:00:19 +0000
Manifest this update: Mon 27 Oct 2025 08:00:19 +0000
Manifest next update: Tue 28 Oct 2025 08:00:19 +0000
Files and hashes: 1: RYaLU7P7StEvfIaG8O_HUuwrXWg.roa (hash: YEpuYm5zeKipnH1+lgwVkLpZPGAKbbKNqPvP2OUt0Mc=)
2: g1QBI0oBpZMDfLnVbzlJh58dtno.roa (hash: DThH0UYff9JRlzHoLRkutIVBWjbtodZbQuiDh8h2xSo=)
3: nhUzxHAsLMtang6HqyetVrFfLHY.crl (hash: HhUafxpsVIZHtyglPhGkx6O5SiK68STAM2WnKASzqLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:af:f8:89:e0:1d:83:86:3e:34:64:23:89:6b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Validity
Not Before: Oct 27 08:00:19 2025 GMT
Not After : Oct 28 08:00:19 2025 GMT
Subject: CN=f83bb16b841981018de4915ba310e6669c29804a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:74:67:6c:61:75:fb:f4:ae:76:01:28:38:d6:
00:67:75:8e:f4:6c:23:1f:92:15:c8:2d:ff:f6:b9:
4f:15:bf:cf:08:68:98:0c:0a:99:13:66:9e:3e:57:
57:5f:1f:1f:b5:e2:f9:81:8d:4a:14:ff:da:91:5d:
b5:e9:0d:93:1d:23:0b:24:81:e5:a2:5f:ea:86:76:
ff:20:1d:3e:83:71:41:5e:f2:34:33:e0:b3:86:ca:
72:db:4a:d3:4f:cf:b2:16:52:ba:8a:5f:19:eb:39:
ee:52:ff:f2:46:07:91:b8:57:19:5e:9a:1d:2b:a7:
e9:40:f6:bc:b9:93:13:8b:bd:b2:13:4c:97:f2:f2:
4f:44:ae:4b:1b:23:ad:96:8f:25:16:5b:38:77:b8:
f6:81:ad:2e:e0:b5:be:4b:e6:35:a8:c9:a9:7a:4f:
4a:6f:6e:69:7b:5f:50:1e:72:48:18:d3:43:fb:ea:
64:73:c1:e8:96:57:01:a7:aa:28:26:7e:09:21:93:
09:88:bd:07:1e:05:e7:db:f1:e1:42:9e:e8:49:19:
76:5a:64:5a:06:4c:36:9a:f3:15:cc:29:e9:f5:4b:
c4:2b:c0:bf:98:26:95:82:f6:33:fb:24:21:d7:3a:
fe:9f:36:1b:18:37:c6:33:27:6f:64:c5:0c:47:5e:
1f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3B:B1:6B:84:19:81:01:8D:E4:91:5B:A3:10:E6:66:9C:29:80:4A
X509v3 Authority Key Identifier:
keyid:9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ec:f5:63:5b:62:ef:a5:bc:0d:aa:83:bd:3f:ad:23:3a:2f:
bd:cc:e6:22:9f:dc:f9:3a:6f:c7:8b:a0:45:d8:ca:46:c7:65:
ba:61:f5:12:08:3f:14:d7:5e:c3:5c:6e:1d:6e:80:0c:c4:15:
20:07:84:b9:47:bc:93:9e:73:1f:8d:73:73:8a:04:1d:66:8c:
13:5a:77:fe:29:0c:aa:bb:ad:5f:57:39:04:51:62:6f:95:f1:
9a:93:08:32:b2:fa:ec:95:13:2f:e8:30:5b:4e:d9:75:95:6a:
88:9c:e6:d8:a7:64:96:97:84:8f:ad:53:ad:97:6c:dd:2f:07:
b6:94:80:f6:79:55:85:8d:48:c5:72:1e:62:c4:7f:4f:cc:6c:
64:e3:1f:38:f6:59:f9:6f:cf:64:ff:c2:70:8d:08:21:df:0a:
e7:0b:85:ae:bc:c6:fe:bf:67:9a:4b:46:19:3e:a3:c7:ac:97:
bc:9a:13:b9:49:dd:47:ba:b6:09:63:c2:18:f2:a9:74:ae:61:
08:2d:b1:c3:1f:5a:a7:f8:fe:73:cb:cf:06:ba:7f:80:18:16:
6b:f0:1b:8a:98:01:3d:46:eb:9e:f2:f8:75:b1:8f:e8:93:97:
16:56:42:60:f3:07:80:dd:22:99:fb:aa:4c:97:a6:c6:cc:34:
b8:b9:8f:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokrq/4ieAdg4Y+NGQjiWvhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMTUzM2M0NzAyYzJjY2I1YTllMGU4N2FiMjdhZDU2YjE1
ZjJjNzYwHhcNMjUxMDI3MDgwMDE5WhcNMjUxMDI4MDgwMDE5WjAzMTEwLwYDVQQD
EyhmODNiYjE2Yjg0MTk4MTAxOGRlNDkxNWJhMzEwZTY2NjljMjk4MDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53RnbGF1+/SudgEoONYAZ3WO9Gwj
H5IVyC3/9rlPFb/PCGiYDAqZE2aePldXXx8fteL5gY1KFP/akV216Q2THSMLJIHl
ol/qhnb/IB0+g3FBXvI0M+Czhspy20rTT8+yFlK6il8Z6znuUv/yRgeRuFcZXpod
K6fpQPa8uZMTi72yE0yX8vJPRK5LGyOtlo8lFls4d7j2ga0u4LW+S+Y1qMmpek9K
b25pe19QHnJIGNND++pkc8HollcBp6ooJn4JIZMJiL0HHgXn2/HhQp7oSRl2WmRa
Bkw2mvMVzCnp9UvEK8C/mCaVgvYz+yQh1zr+nzYbGDfGMydvZMUMR14fNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPg7sWuEGYEBjeSRW6MQ5macKYBKMB8GA1UdIwQY
MBaAFJ4VM8RwLCzLWp4Oh6snrVaxXyx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmhVenhIQXNMTXRhbmc2SHF5ZXRWckZmTEhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yNjg4YjYtZGE3MC00YWJkLThmNTkt
MWE4MzFiNTk5YzE4LzEvbmhVenhIQXNMTXRhbmc2SHF5ZXRWckZmTEhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8yNjg4YjYtZGE3MC00YWJkLThmNTktMWE4MzFiNTk5YzE4
LzEvbmhVenhIQXNMTXRhbmc2SHF5ZXRWckZmTEhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXez1Y1ti
76W8DaqDvT+tIzovvczmIp/c+Tpvx4ugRdjKRsdlumH1Egg/FNdew1xuHW6ADMQV
IAeEuUe8k55zH41zc4oEHWaME1p3/ikMqrutX1c5BFFib5XxmpMIMrL67JUTL+gw
W07ZdZVqiJzm2KdklpeEj61TrZds3S8HtpSA9nlVhY1IxXIeYsR/T8xsZOMfOPZZ
+W/PZP/CcI0IId8K5wuFrrzG/r9nmktGGT6jx6yXvJoTuUndR7q2CWPCGPKpdK5h
CC2xwx9ap/j+c8vPBrp/gBgWa/AbipgBPUbrnvL4dbGP6JOXFlZCYPMHgN0imfuq
TJemxsw0uLmPjw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:07:41 2025 by rpki-client