Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
File: nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft (raw, json)
Hash identifier: VGCsvHQG5wNGufZXZovHxx09SiOnsQKBHtL3DZpLhi8=
Subject key identifier: B8:22:F7:B0:84:AF:EE:54:6F:24:4B:3C:10:7B:13:DC:40:FB:B5:E3
Authority key identifier: 9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
Certificate issuer: /CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Certificate serial: 0199221EC9E66A0EF2E1D61580ADB61E45BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
Manifest number: 0712
Signing time: Sun 07 Sep 2025 03:01:06 +0000
Manifest this update: Sun 07 Sep 2025 03:01:06 +0000
Manifest next update: Mon 08 Sep 2025 03:01:06 +0000
Files and hashes: 1: 3bmAz9vtv2JfaPatPhAR81BLdD4.roa (hash: pscVtMzNszIXtiYFoQgUwJA4nkNZDSRzSpGrx8TMuU8=)
2: nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl (hash: 5Xp7VX7z/433ayaPbss4MXdH7i0QqrlubG84ESvA2A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:c9:e6:6a:0e:f2:e1:d6:15:80:ad:b6:1e:45:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Validity
Not Before: Sep 7 03:01:06 2025 GMT
Not After : Sep 8 03:01:06 2025 GMT
Subject: CN=b822f7b084afee546f244b3c107b13dc40fbb5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:21:4c:8b:b0:25:06:dd:1a:b1:d4:58:31:
b9:16:17:5c:d6:fb:92:dc:cf:47:0e:6b:9b:42:6e:
cc:5e:8f:ef:f9:b8:dd:9f:f4:e7:01:21:48:d7:d0:
1f:e7:cf:d4:23:fa:bd:3c:8f:3e:8c:a9:22:79:72:
29:a7:c0:e1:7e:63:d6:78:98:5f:b2:e9:e2:fb:86:
26:72:63:88:19:a2:a3:63:c0:90:7c:80:90:14:54:
64:19:68:d6:3a:67:0a:77:84:2c:cc:ce:57:37:b7:
69:54:46:04:a3:e6:92:f1:02:15:6a:91:72:6b:ef:
43:0e:bb:ef:3a:fb:b5:65:c7:e5:9d:e8:df:c0:30:
b4:81:83:5c:85:6e:9b:25:83:28:3f:2e:7c:a4:73:
b7:87:57:0b:49:7a:d1:49:c8:a2:a8:71:af:b8:c6:
86:0f:70:ea:04:c9:5d:b8:70:66:b8:a8:2b:09:f8:
a4:62:bd:9d:93:89:7b:46:61:fe:57:0f:d3:25:31:
13:54:de:65:e2:d5:49:ba:ea:5c:26:08:fa:a1:6c:
86:99:9f:6b:88:9b:65:3c:cb:7c:99:cf:02:8e:7d:
08:f8:9c:32:17:72:ca:32:43:ab:4e:94:08:5d:dc:
c3:1d:e8:e9:8a:75:24:83:e8:d5:85:db:a8:50:e4:
6f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:22:F7:B0:84:AF:EE:54:6F:24:4B:3C:10:7B:13:DC:40:FB:B5:E3
X509v3 Authority Key Identifier:
keyid:9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:02:a4:8b:de:a0:b9:b0:1d:77:4c:4b:2c:2d:a6:66:3d:df:
2f:2f:98:be:0f:d3:52:f9:12:9f:3c:44:03:29:4e:9f:43:2f:
4a:39:98:07:c1:75:d4:0b:88:45:1e:ad:ae:68:56:1f:bf:04:
8c:84:e0:98:f2:4a:7d:23:54:f8:c3:b2:4c:07:39:02:df:74:
ec:47:74:b6:25:97:61:16:f1:93:65:a6:d5:a5:32:ae:13:f1:
4b:3d:0a:f9:30:16:04:f7:de:67:ef:83:5c:44:3e:b4:76:a9:
c3:77:89:38:12:c6:12:53:3c:60:c1:5b:61:66:22:52:b9:f5:
fd:28:33:0f:53:dc:e6:de:7a:a4:41:92:e2:bd:63:8f:44:f6:
7f:da:06:ee:3e:3c:d9:e5:6f:12:a2:c1:26:13:94:e6:06:3c:
35:d1:a7:ed:0f:1b:16:af:0e:85:ae:9f:3f:6e:77:ad:76:fa:
2a:8c:ec:ee:bb:1f:2c:ec:16:17:5e:af:22:42:9a:56:4e:ee:
d0:ce:de:61:d0:44:a9:f0:fb:9c:9c:7c:2f:62:e5:7a:77:fc:
ae:90:85:ae:46:ae:02:1c:70:51:2b:a8:aa:89:a8:f3:8f:fb:
e0:32:3b:c1:35:68:60:32:fc:65:95:a0:99:ab:60:f9:c2:9c:
cd:69:3e:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHsnmag7y4dYVgK22HkW/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZjI3ZmFlMTUzMGVhNzE2NzA3MGNmMTJjNDg2ODExZDhl
MGJhYzUwHhcNMjUwOTA3MDMwMTA2WhcNMjUwOTA4MDMwMTA2WjAzMTEwLwYDVQQD
EyhiODIyZjdiMDg0YWZlZTU0NmYyNDRiM2MxMDdiMTNkYzQwZmJiNWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz4hTIuwJQbdGrHUWDG5Fhdc1vuS
3M9HDmubQm7MXo/v+bjdn/TnASFI19Af58/UI/q9PI8+jKkieXIpp8DhfmPWeJhf
suni+4YmcmOIGaKjY8CQfICQFFRkGWjWOmcKd4QszM5XN7dpVEYEo+aS8QIVapFy
a+9DDrvvOvu1ZcflnejfwDC0gYNchW6bJYMoPy58pHO3h1cLSXrRSciiqHGvuMaG
D3DqBMlduHBmuKgrCfikYr2dk4l7RmH+Vw/TJTETVN5l4tVJuupcJgj6oWyGmZ9r
iJtlPMt8mc8Cjn0I+JwyF3LKMkOrTpQIXdzDHejpinUkg+jVhduoUORvRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgi97CEr+5UbyRLPBB7E9xA+7XjMB8GA1UdIwQY
MBaAFJ7yf64VMOpxZwcM8SxIaBHY4LrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnZKX3JoVXc2bkZuQnd6eExFaG9FZGpndXNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81MjllODQtZmVhMS00NDI5LTgzYjIt
ZGY4MjNlNGRiMWVhLzEvbnZKX3JoVXc2bkZuQnd6eExFaG9FZGpndXNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC81MjllODQtZmVhMS00NDI5LTgzYjItZGY4MjNlNGRiMWVh
LzEvbnZKX3JoVXc2bkZuQnd6eExFaG9FZGpndXNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQKki96g
ubAdd0xLLC2mZj3fLy+Yvg/TUvkSnzxEAylOn0MvSjmYB8F11AuIRR6trmhWH78E
jITgmPJKfSNU+MOyTAc5At907Ed0tiWXYRbxk2Wm1aUyrhPxSz0K+TAWBPfeZ++D
XEQ+tHapw3eJOBLGElM8YMFbYWYiUrn1/SgzD1Pc5t56pEGS4r1jj0T2f9oG7j48
2eVvEqLBJhOU5gY8NdGn7Q8bFq8Oha6fP253rXb6Kozs7rsfLOwWF16vIkKaVk7u
0M7eYdBEqfD7nJx8L2Llenf8rpCFrkauAhxwUSuoqomo84/74DI7wTVoYDL8ZZWg
matg+cKczWk+vw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:34 2025 by rpki-client