Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File: nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier: 4sCM71OjO3KDKg9U/CELh4dk3r4Ro7MoLCBsJb9WnNI=
Subject key identifier: 1D:ED:8A:03:FB:04:51:03:68:9F:D3:07:EB:96:42:AA:F3:FD:71:62
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 019A03DA716394CF7AE4BA7D93CEDB41466B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number: 09B4
Signing time: Mon 20 Oct 2025 23:00:38 +0000
Manifest this update: Mon 20 Oct 2025 23:00:38 +0000
Manifest next update: Tue 21 Oct 2025 23:00:38 +0000
Files and hashes: 1: 19v0BW9D62wRoBFE5ozFJdwOMQA.roa (hash: YMLiN+GeZBDn6zKwSH23wr8pzSjB9vWlcqgXSCgH65E=)
2: 9JwtlsVNx4_up1QMmZlfBeyOaK4.roa (hash: u78W1NzQkBkN4wGgOZ6ykgdqITqsuyTPVjwEYRW9o4E=)
3: HvZFP08B7xYA2IQmujw7UzbkG0Q.roa (hash: 7DGwHO9AiazjzBsJl92PU2yw56tPjljLpvn/rYKQLdM=)
4: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: UUwnSfCJx9ThLjThk5wHfXpJykHK/0jGtovYmZTRL2Q=)
5: oR-FUhbEvQx9rEQNZ_WugrEWdnk.roa (hash: BD8t2aBzJsutTWI6CA4SIZqGlJUGz2L2fZecOB/8228=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:da:71:63:94:cf:7a:e4:ba:7d:93:ce:db:41:46:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Oct 20 23:00:38 2025 GMT
Not After : Oct 21 23:00:38 2025 GMT
Subject: CN=1ded8a03fb045103689fd307eb9642aaf3fd7162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:aa:e1:23:d2:53:7d:a2:7a:33:86:73:59:
4b:66:84:0a:11:93:b4:9d:a6:6f:f7:1e:9b:d3:4a:
f0:1a:0f:42:78:f0:31:78:62:0d:fe:0c:14:f6:eb:
ab:45:97:52:72:47:28:3a:a3:27:ce:68:8a:f0:1f:
9d:3d:b5:9c:19:c0:c0:17:d3:c7:2b:d7:5c:ff:0b:
c4:4d:ea:13:64:c9:9c:cd:33:22:29:0e:c4:e5:51:
8f:4b:f9:85:fe:26:9f:69:d8:2e:ba:23:9a:3f:ae:
b7:75:8e:1a:4c:ae:cb:70:0d:c7:17:2a:1c:33:96:
83:45:a2:b2:d0:c9:bc:c7:a7:9f:3c:85:9e:5b:8f:
87:14:62:2c:26:f0:78:51:ee:98:dd:23:a9:85:3f:
02:7c:67:62:c7:3b:fa:12:ba:e1:64:e3:7a:c8:8e:
69:bf:32:c4:a3:34:4c:40:92:36:20:fd:42:a3:89:
2a:ab:5d:b0:f9:e8:7d:17:af:a0:bd:62:9e:95:9f:
4f:a0:22:ee:e8:c5:c1:a8:ac:f5:8f:6d:b2:c4:44:
1e:6a:66:34:da:53:f9:fb:a9:26:8a:df:c1:a2:66:
8f:3a:e1:8e:97:21:0c:7e:6b:18:8a:55:f1:59:a6:
8e:52:f2:d5:59:f5:ff:42:c0:43:73:0a:8d:0b:18:
f0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:ED:8A:03:FB:04:51:03:68:9F:D3:07:EB:96:42:AA:F3:FD:71:62
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a9:99:5f:c4:fb:82:75:ff:2c:b0:5f:6c:58:65:6d:49:6f:
21:a9:f6:94:bc:7e:d7:f0:6c:83:8a:c2:ff:4a:61:42:7e:ee:
19:c6:84:d3:7e:95:ea:0a:3d:08:1e:32:4f:e1:ee:b1:4d:af:
f6:bd:01:3a:b2:3a:40:73:83:e3:a1:2d:50:30:07:f4:7a:52:
f1:66:91:14:eb:5a:fd:7d:b5:3e:71:4a:7f:38:bb:9a:f9:e4:
dc:4c:f7:fb:e4:f4:2a:51:40:a9:7e:a0:c8:d6:6f:a3:e1:cc:
39:8f:bf:ec:3d:6a:cb:f3:3e:57:a2:e7:c3:11:81:f5:52:42:
8d:c0:48:eb:b8:59:24:22:b3:29:f7:a8:81:03:2c:5a:59:53:
be:db:9e:44:49:37:2c:68:75:c5:8e:db:33:3e:94:74:d9:55:
a0:77:28:bf:6f:57:0e:4c:66:26:53:7c:f9:8d:18:13:4f:45:
55:f6:78:af:2e:00:c7:d2:d3:8c:ac:d1:8a:da:e4:b1:fb:90:
57:35:18:21:a2:dd:3b:47:96:b4:11:63:13:9f:f3:55:b7:82:
b6:31:7a:c6:4e:71:06:31:07:52:9d:5e:a8:52:7c:3a:e4:48:
1c:f3:25:4b:06:6b:d1:6d:7e:e9:3d:66:11:67:50:9b:39:43:
d1:7f:9e:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoD2nFjlM965Lp9k87bQUZrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYjk2Y2U1OWM1OTU1NzUzMGYwZWFhNDRjNjY0NTAzZDlj
NDAxZWQwHhcNMjUxMDIwMjMwMDM4WhcNMjUxMDIxMjMwMDM4WjAzMTEwLwYDVQQD
EygxZGVkOGEwM2ZiMDQ1MTAzNjg5ZmQzMDdlYjk2NDJhYWYzZmQ3MTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVuq4SPSU32iejOGc1lLZoQKEZO0
naZv9x6b00rwGg9CePAxeGIN/gwU9uurRZdSckcoOqMnzmiK8B+dPbWcGcDAF9PH
K9dc/wvETeoTZMmczTMiKQ7E5VGPS/mF/iafadguuiOaP663dY4aTK7LcA3HFyoc
M5aDRaKy0Mm8x6efPIWeW4+HFGIsJvB4Ue6Y3SOphT8CfGdixzv6ErrhZON6yI5p
vzLEozRMQJI2IP1Co4kqq12w+eh9F6+gvWKelZ9PoCLu6MXBqKz1j22yxEQeamY0
2lP5+6kmit/BomaPOuGOlyEMfmsYilXxWaaOUvLVWfX/QsBDcwqNCxjwgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3tigP7BFEDaJ/TB+uWQqrz/XFiMB8GA1UdIwQY
MBaAFJy5bOWcWVV1MPDqpExmRQPZxAHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ZGQ3YjEtZTMzNy00MDRkLWI3NjQt
ZGRiMGIxNDhlNDZiLzEvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81ZGQ3YjEtZTMzNy00MDRkLWI3NjQtZGRiMGIxNDhlNDZi
LzEvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqmZX8T7
gnX/LLBfbFhlbUlvIan2lLx+1/Bsg4rC/0phQn7uGcaE036V6go9CB4yT+HusU2v
9r0BOrI6QHOD46EtUDAH9HpS8WaRFOta/X21PnFKfzi7mvnk3Ez3++T0KlFAqX6g
yNZvo+HMOY+/7D1qy/M+V6LnwxGB9VJCjcBI67hZJCKzKfeogQMsWllTvtueREk3
LGh1xY7bMz6UdNlVoHcov29XDkxmJlN8+Y0YE09FVfZ4ry4Ax9LTjKzRitrksfuQ
VzUYIaLdO0eWtBFjE5/zVbeCtjF6xk5xBjEHUp1eqFJ8OuRIHPMlSwZr0W1+6T1m
EWdQmzlD0X+eYg==
-----END CERTIFICATE-----
Generated at Tue Oct 21 09:08:36 2025 by rpki-client