Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
File: nOlHV6w_cLQPNpMH02XryWV7q2k.mft (raw, json)
Hash identifier: i6IbD4kzbmDXyUdt0zvfcxj7zDMPANLaG655qJF0dOs=
Subject key identifier: 65:93:C4:7D:66:B6:5B:BE:9A:25:2C:73:DD:E8:B6:2D:21:DF:45:39
Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
Certificate issuer: /CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Certificate serial: 019A39B5BDFC004C2675B92D53FFF9948499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
Manifest number: 1702
Signing time: Fri 31 Oct 2025 10:00:03 +0000
Manifest this update: Fri 31 Oct 2025 10:00:03 +0000
Manifest next update: Sat 01 Nov 2025 10:00:03 +0000
Files and hashes: 1: 4oft3Loz6Mj-iGBZld8Zml9nZKk.roa (hash: wH8MDJNmWcLwEAp7rv/L6Y94FGx4klTMMdgO3DL2B5U=)
2: 7Rx3mayEBwk8ldskeFY-2K2rZ-s.roa (hash: wklqA5tkn0CZJbDeoo6PYXZybB1iV079BOW7c/8yfmg=)
3: nOlHV6w_cLQPNpMH02XryWV7q2k.crl (hash: iWn6tlla154zlCY+VUZ3JfLGIkzodoqnc1BNMCOx51c=)
4: ufDo1kTLEOZD1_qKQ7HiFNKPunM.roa (hash: ez87p1Up7V/1mOstPVoSc34fcjVVGs1wyCiou6O9r2k=)
5: x0sLhzFdsabJsjGmaTnhB2s9wws.roa (hash: ZbmagYZOZjVgRuVWz3KGPUrXIWBjrnqcYZ6kZuTx6+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:b5:bd:fc:00:4c:26:75:b9:2d:53:ff:f9:94:84:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Validity
Not Before: Oct 31 10:00:03 2025 GMT
Not After : Nov 1 10:00:03 2025 GMT
Subject: CN=6593c47d66b65bbe9a252c73dde8b62d21df4539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4a:3c:db:10:9a:09:d1:8e:23:62:e8:a1:57:
f6:d4:ca:0c:7e:d9:61:01:f5:42:f7:d0:54:64:c6:
d7:2e:7d:5e:d0:75:e9:a4:3a:ca:31:2f:21:7d:21:
a9:f5:f7:d2:82:ff:ef:2c:80:1a:85:2c:7e:f8:8b:
58:7b:ba:d3:43:83:38:ee:06:53:00:90:31:d4:7b:
9f:92:d4:1e:aa:0b:c0:11:6a:4a:1a:83:35:af:b0:
33:91:81:de:16:f9:9e:21:54:bf:a0:aa:be:d2:21:
e0:e5:c5:7a:ab:90:5e:3f:1c:38:c6:1b:34:b9:72:
63:02:ce:eb:85:0a:25:0b:93:13:24:24:58:69:93:
f8:bc:0a:4f:51:0b:d5:b4:08:02:d4:5e:3e:01:a0:
db:d9:da:8b:04:01:fd:86:84:1a:c5:ed:6a:bf:ae:
88:1e:b9:e4:6e:34:86:34:f4:35:78:e6:30:b6:eb:
eb:6e:60:d1:35:65:97:d8:40:59:c9:2d:34:eb:c6:
d5:01:25:c4:64:dc:a8:c4:83:27:0c:e8:8c:ce:89:
c4:6f:fc:14:e3:1f:21:c1:79:18:31:cf:66:07:6d:
87:84:56:ac:d5:e0:12:56:fd:c6:77:a9:73:0e:3a:
68:89:50:94:38:24:d3:d5:6b:c1:61:8b:91:a8:69:
7f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:93:C4:7D:66:B6:5B:BE:9A:25:2C:73:DD:E8:B6:2D:21:DF:45:39
X509v3 Authority Key Identifier:
keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:73:cb:da:e2:08:3a:71:53:ba:f3:2c:49:66:a1:f2:91:7c:
00:5d:4c:8f:de:23:b2:c6:ce:f4:b3:8a:1f:3e:f0:e2:bf:22:
f5:7f:13:fa:cc:ac:54:c4:20:45:4e:39:fc:6c:a2:00:4b:53:
aa:72:65:2a:c2:5f:7e:3f:eb:33:8b:61:01:90:6a:0d:5c:f9:
73:0d:6b:3e:89:84:80:f7:38:27:fe:45:05:f2:34:6b:32:ba:
59:9b:64:b3:8f:67:f6:ad:6e:b6:bc:41:d7:97:6b:a6:85:f3:
18:67:82:df:53:c3:9a:5d:22:f4:3f:40:c6:f5:30:77:9f:9b:
ac:c8:c4:6c:f2:d6:47:2c:e9:35:00:67:98:3d:e6:cd:eb:79:
20:59:db:d7:fb:2d:c6:48:a5:79:c0:58:cb:7a:69:be:67:48:
74:a4:e6:f0:73:c1:1f:c2:64:d3:2f:37:f7:ab:c1:b0:53:3f:
7b:ae:fe:a1:a4:09:d6:1d:f4:23:10:1e:b0:60:52:0d:18:1b:
8a:b7:eb:98:7a:69:c2:eb:6c:3a:be:75:0c:17:11:39:db:87:
dd:d2:bd:80:12:41:7f:c6:a0:67:9b:41:f1:64:9f:4a:88:6c:
71:75:22:f5:9b:0b:12:86:51:a4:4f:81:a8:76:3e:c0:24:28:
eb:84:2c:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZo5tb38AEwmdbktU//5lISZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZTk0NzU3YWMzZjcwYjQwZjM2OTMwN2QzNjVlYmM5NjU3
YmFiNjkwHhcNMjUxMDMxMTAwMDAzWhcNMjUxMTAxMTAwMDAzWjAzMTEwLwYDVQQD
Eyg2NTkzYzQ3ZDY2YjY1YmJlOWEyNTJjNzNkZGU4YjYyZDIxZGY0NTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEo82xCaCdGOI2LooVf21MoMftlh
AfVC99BUZMbXLn1e0HXppDrKMS8hfSGp9ffSgv/vLIAahSx++ItYe7rTQ4M47gZT
AJAx1HufktQeqgvAEWpKGoM1r7AzkYHeFvmeIVS/oKq+0iHg5cV6q5BePxw4xhs0
uXJjAs7rhQolC5MTJCRYaZP4vApPUQvVtAgC1F4+AaDb2dqLBAH9hoQaxe1qv66I
HrnkbjSGNPQ1eOYwtuvrbmDRNWWX2EBZyS0068bVASXEZNyoxIMnDOiMzonEb/wU
4x8hwXkYMc9mB22HhFas1eASVv3Gd6lzDjpoiVCUOCTT1WvBYYuRqGl/VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWTxH1mtlu+miUsc93oti0h30U5MB8GA1UdIwQY
MBaAFJzpR1esP3C0DzaTB9Nl68lle6tpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk9sSFY2d19jTFFQTnBNSDAyWHJ5V1Y3cTJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80ODEyNjktZGJkYi00MjVlLTk2NDIt
ZTFlYTQxYzlhMmU2LzEvbk9sSFY2d19jTFFQTnBNSDAyWHJ5V1Y3cTJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80ODEyNjktZGJkYi00MjVlLTk2NDItZTFlYTQxYzlhMmU2
LzEvbk9sSFY2d19jTFFQTnBNSDAyWHJ5V1Y3cTJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2HPL2uII
OnFTuvMsSWah8pF8AF1Mj94jssbO9LOKHz7w4r8i9X8T+sysVMQgRU45/GyiAEtT
qnJlKsJffj/rM4thAZBqDVz5cw1rPomEgPc4J/5FBfI0azK6WZtks49n9q1utrxB
15drpoXzGGeC31PDml0i9D9AxvUwd5+brMjEbPLWRyzpNQBnmD3mzet5IFnb1/st
xkilecBYy3ppvmdIdKTm8HPBH8Jk0y8396vBsFM/e67+oaQJ1h30IxAesGBSDRgb
irfrmHppwutsOr51DBcROduH3dK9gBJBf8agZ5tB8WSfSohscXUi9ZsLEoZRpE+B
qHY+wCQo64QsAg==
-----END CERTIFICATE-----
Generated at Fri Oct 31 19:16:38 2025 by rpki-client