Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
File: nyvDxVZNQ0OBy3i6R61Yvk096qg.mft (raw, json)
Hash identifier: t3qgof1wt3w26WZxs0FNgFSEKmvlzDN5E0RlzXwxtUw=
Subject key identifier: 4A:F8:B3:AC:D4:FE:2B:90:1B:66:0D:D9:1C:B0:98:D6:4F:E3:93:F7
Authority key identifier: 9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
Certificate issuer: /CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Certificate serial: 019921B0F8DB123C0EFBA73142FCD2E45D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 01:01:10 +0000
Manifest this update: Sun 07 Sep 2025 01:01:10 +0000
Manifest next update: Mon 08 Sep 2025 01:01:10 +0000
Files and hashes: 1: IAQeRjmmu9Z-veumwyPKfDrKvbI.roa (hash: Ww+1iOsdAQGbUwn6gW9paX3J1FGXxxEHtorVkrDGTZc=)
2: nyvDxVZNQ0OBy3i6R61Yvk096qg.crl (hash: lHRMk3hMiCSFZO04or9SQtlE/huAhn2FtciPhEL+qys=)
3: zE2nCBuCP3GWKcrh09m8L6FV9yA.roa (hash: iLVOHuiEHM03YeDql7RR17g8jhss2HwinXwx77EwMP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:f8:db:12:3c:0e:fb:a7:31:42:fc:d2:e4:5d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Validity
Not Before: Sep 7 01:01:10 2025 GMT
Not After : Sep 8 01:01:10 2025 GMT
Subject: CN=4af8b3acd4fe2b901b660dd91cb098d64fe393f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:80:6f:9f:6b:59:92:0b:b0:2b:e2:3e:b5:b9:
fe:e7:c7:9f:de:b5:7c:d0:01:e9:34:60:5d:a8:2b:
80:3d:7f:85:10:1f:a9:f2:c8:20:bf:df:b0:69:d4:
9d:4f:53:e2:f8:32:32:a0:fe:71:01:39:8f:83:2f:
f8:9b:b8:be:fb:de:fd:eb:de:7f:89:68:81:ec:d4:
8b:42:6d:65:55:3f:c9:74:c9:8e:bf:57:d1:f9:fc:
42:56:80:0b:2a:8c:67:f9:e3:5a:3e:a6:b8:2f:55:
94:52:3f:b6:27:03:c0:0f:60:52:c7:aa:ee:8b:c6:
e1:ed:fc:61:84:7a:69:24:aa:5f:9e:52:51:b6:31:
1f:8d:7c:b7:06:27:5e:1a:1f:f0:22:58:ca:42:e6:
eb:0d:bd:90:15:61:7a:cc:2e:0e:b3:36:d6:fc:20:
7f:b2:7f:65:5e:1a:58:b4:a6:26:24:01:ca:b1:8d:
d2:c7:53:de:75:cd:5b:f8:32:4f:36:81:9b:59:1d:
51:f2:15:2e:f4:03:ac:0c:74:c7:c7:09:cf:90:17:
1c:bb:ce:b0:d5:4f:2f:2f:fc:07:49:9f:e1:86:a9:
c9:c3:e7:81:56:05:b5:12:d7:92:07:25:73:95:15:
b2:03:98:fe:13:ae:e2:7a:ef:0b:40:30:81:88:fe:
78:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F8:B3:AC:D4:FE:2B:90:1B:66:0D:D9:1C:B0:98:D6:4F:E3:93:F7
X509v3 Authority Key Identifier:
keyid:9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2c:28:f2:60:8a:89:43:64:77:d3:bc:bd:d0:d5:47:f9:fd:
a8:35:24:41:9d:5e:5b:db:b1:dd:db:fd:6b:79:33:50:77:8e:
76:19:45:36:2d:c3:97:ec:c9:52:f3:08:8b:de:87:7c:b6:ed:
cd:3e:cb:fe:11:63:46:00:71:aa:b4:fa:01:f4:71:ad:6d:3e:
c6:f6:ef:ca:e4:02:77:6d:f3:e5:2c:dd:69:e0:dc:51:8d:0a:
88:a7:0b:37:d8:00:61:65:3e:a1:77:91:2d:19:01:24:ac:3f:
e3:f9:58:47:b8:5a:c7:f1:86:08:06:e6:f3:40:ec:90:d2:b3:
89:cc:f5:cf:53:a1:2a:ab:5c:1a:b8:c8:83:79:33:78:5f:19:
e4:74:8c:2f:e2:05:7b:49:27:12:37:07:4f:ed:69:06:eb:02:
ba:97:34:81:fe:1a:78:51:9c:bf:9b:32:46:c8:8e:f3:75:dc:
12:af:73:c1:81:31:9c:6c:3d:8e:7a:bc:b0:fb:34:91:6e:3b:
f6:af:3f:9b:02:98:75:77:fd:fb:4c:7b:8d:2c:98:32:e9:20:
ac:5f:5e:d8:07:91:6c:79:a6:a8:cf:15:ba:23:9d:9b:ba:2e:
cf:33:b1:e1:08:65:92:2a:f5:51:1b:d9:8a:86:62:8b:17:dc:
1f:e4:03:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsPjbEjwO+6cxQvzS5F2RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMmJjM2M1NTY0ZDQzNDM4MWNiNzhiYTQ3YWQ1OGJlNGQz
ZGVhYTgwHhcNMjUwOTA3MDEwMTEwWhcNMjUwOTA4MDEwMTEwWjAzMTEwLwYDVQQD
Eyg0YWY4YjNhY2Q0ZmUyYjkwMWI2NjBkZDkxY2IwOThkNjRmZTM5M2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YBvn2tZkguwK+I+tbn+58ef3rV8
0AHpNGBdqCuAPX+FEB+p8sggv9+wadSdT1Pi+DIyoP5xATmPgy/4m7i++979695/
iWiB7NSLQm1lVT/JdMmOv1fR+fxCVoALKoxn+eNaPqa4L1WUUj+2JwPAD2BSx6ru
i8bh7fxhhHppJKpfnlJRtjEfjXy3BideGh/wIljKQubrDb2QFWF6zC4OszbW/CB/
sn9lXhpYtKYmJAHKsY3Sx1Pedc1b+DJPNoGbWR1R8hUu9AOsDHTHxwnPkBccu86w
1U8vL/wHSZ/hhqnJw+eBVgW1EteSByVzlRWyA5j+E67ieu8LQDCBiP54MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEr4s6zU/iuQG2YN2RywmNZP45P3MB8GA1UdIwQY
MBaAFJ8rw8VWTUNDgct4uketWL5NPeqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnl2RHhWWk5RME9CeTNpNlI2MVl2azA5NnFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zNmJiNmQtZmM3My00NDQ5LWE1Mjct
NTU0MjYzODE5NTNjLzEvbnl2RHhWWk5RME9CeTNpNlI2MVl2azA5NnFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zNmJiNmQtZmM3My00NDQ5LWE1MjctNTU0MjYzODE5NTNj
LzEvbnl2RHhWWk5RME9CeTNpNlI2MVl2azA5NnFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSwo8mCK
iUNkd9O8vdDVR/n9qDUkQZ1eW9ux3dv9a3kzUHeOdhlFNi3Dl+zJUvMIi96HfLbt
zT7L/hFjRgBxqrT6AfRxrW0+xvbvyuQCd23z5SzdaeDcUY0KiKcLN9gAYWU+oXeR
LRkBJKw/4/lYR7hax/GGCAbm80DskNKzicz1z1OhKqtcGrjIg3kzeF8Z5HSML+IF
e0knEjcHT+1pBusCupc0gf4aeFGcv5syRsiO83XcEq9zwYExnGw9jnq8sPs0kW47
9q8/mwKYdXf9+0x7jSyYMukgrF9e2AeRbHmmqM8VuiOdm7ouzzOx4Qhlkir1URvZ
ioZiixfcH+QD9Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:13 2025 by rpki-client