Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
File: NvdiEfPFj2yYr5nPZabx6P98Q7o.mft (raw, json)
Hash identifier: MvRaokDPkdCDXMJhEPDrpK6vUKrizJxlTCu7XSgQL+o=
Subject key identifier: EA:1C:97:DA:E5:8F:43:FD:0A:11:EA:DA:42:17:DE:03:60:E4:41:94
Authority key identifier: 36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
Certificate issuer: /CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Certificate serial: 01994EF7262B72F78809EB6F277A8F2BAD3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
Manifest number: 104F
Signing time: Mon 15 Sep 2025 20:00:43 +0000
Manifest this update: Mon 15 Sep 2025 20:00:43 +0000
Manifest next update: Tue 16 Sep 2025 20:00:43 +0000
Files and hashes: 1: IMiPI_sQJpS-dko-Db8d2-Qz-B0.roa (hash: fyR22c3qbngtIbooNJXlmC6fXpgIjnWVTMNZ/hhGG0A=)
2: NvdiEfPFj2yYr5nPZabx6P98Q7o.crl (hash: hb+/4da1+39b+kOBmR+CqVRajVeYcdfqUqSKiU+/fGk=)
3: SAAncdb2H87xzD0WkojsMdkjI9E.roa (hash: bzjggaHNN8SzirhLiuBFGlBjgMu/vnVg8ZfnlYMY9GY=)
4: _E9iapjx7rmdCjMi6lOxJAzw41c.roa (hash: XzeBU1MqaK56hZttRGiRoj2k5rsX6aCywVY+pFC+b8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:f7:26:2b:72:f7:88:09:eb:6f:27:7a:8f:2b:ad:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Validity
Not Before: Sep 15 20:00:43 2025 GMT
Not After : Sep 16 20:00:43 2025 GMT
Subject: CN=ea1c97dae58f43fd0a11eada4217de0360e44194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:09:c2:89:75:f7:fa:c8:08:ed:1e:8b:52:
77:34:f5:ec:91:e6:e3:3e:37:a4:f9:af:5f:e3:4e:
34:5a:8c:01:c8:a5:66:06:30:35:6b:3b:fc:f3:b7:
a5:e0:b6:fe:61:98:10:fa:1a:3b:26:af:61:29:e7:
b4:c4:b6:7a:61:a7:75:c8:ae:da:58:44:df:ee:cb:
3e:3c:76:09:0d:d0:7f:07:7a:b7:6b:32:b9:19:b3:
41:8c:ec:02:1b:98:63:c6:09:8e:a6:5b:28:56:80:
c6:da:79:2c:96:9f:02:28:c1:4b:c6:66:d5:92:19:
9e:60:cc:ae:e5:25:6e:5f:b3:c7:73:48:ca:1f:91:
5e:4a:c4:5b:40:73:eb:7d:81:53:13:ee:e4:72:18:
70:ed:c4:05:cc:2c:3a:b6:63:b7:11:f0:0b:ff:3e:
e8:d3:8d:15:89:1f:ec:97:c3:91:74:a4:0e:3f:ee:
4a:f0:ba:90:f5:ec:bd:1f:e5:fc:a1:a7:fb:17:22:
0a:0f:fc:a6:35:e3:c3:bc:29:cc:c6:e7:83:9f:a6:
fd:7b:0f:ed:b3:d8:c4:b0:35:35:71:22:bc:87:1c:
e3:3c:29:13:c5:da:8c:1f:81:12:c5:77:a0:31:72:
8f:d5:83:a6:f8:77:46:4b:81:d2:26:7a:a0:ad:32:
39:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1C:97:DA:E5:8F:43:FD:0A:11:EA:DA:42:17:DE:03:60:E4:41:94
X509v3 Authority Key Identifier:
keyid:36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:69:44:7e:28:a3:d6:f4:61:84:9c:8a:16:16:37:fe:14:37:
e7:dd:86:8e:a0:66:a8:b6:fe:99:b6:30:3f:5e:88:e1:4c:72:
35:7d:c1:df:95:f0:79:f7:7c:a3:84:d1:b3:b4:bf:f1:e9:53:
6b:a4:bd:23:b2:50:6f:09:c1:1a:d2:65:d8:26:51:1a:69:28:
d2:28:10:4f:a2:22:1f:7f:15:7c:65:37:13:b3:e7:11:54:ea:
13:eb:1b:e9:af:33:d6:ab:80:34:70:3b:dc:08:fb:fb:d5:3a:
6d:1a:8d:10:08:5d:0a:e5:2c:44:f6:60:14:40:fb:e5:68:a0:
8f:24:a2:d9:77:4a:d8:46:91:8c:e6:f1:c6:97:ef:1e:66:f6:
68:a4:91:dd:ba:29:6d:6d:cc:90:a0:4a:17:73:07:8c:55:1f:
1c:77:5e:c3:e2:00:b7:8e:f3:6c:44:1f:22:15:92:a8:29:ef:
1a:c2:db:f8:ff:3a:bd:0b:0d:d8:1f:88:36:33:5c:66:43:05:
a0:72:99:59:27:ec:4d:c6:76:46:8a:f5:3e:84:4d:ff:1f:3f:
b4:e4:72:62:43:c7:31:23:42:ff:96:67:cc:d4:69:31:82:c6:
4b:8b:8a:88:cc:37:fc:dc:81:e2:8b:49:da:79:29:c4:95:da:
96:ab:12:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlO9yYrcveICetvJ3qPK607MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Zjc2MjExZjNjNThmNmM5OGFmOTljZjY1YTZmMWU4ZmY3
YzQzYmEwHhcNMjUwOTE1MjAwMDQzWhcNMjUwOTE2MjAwMDQzWjAzMTEwLwYDVQQD
EyhlYTFjOTdkYWU1OGY0M2ZkMGExMWVhZGE0MjE3ZGUwMzYwZTQ0MTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgIJwol19/rICO0ei1J3NPXskebj
Pjek+a9f4040WowByKVmBjA1azv887el4Lb+YZgQ+ho7Jq9hKee0xLZ6Yad1yK7a
WETf7ss+PHYJDdB/B3q3azK5GbNBjOwCG5hjxgmOplsoVoDG2nkslp8CKMFLxmbV
khmeYMyu5SVuX7PHc0jKH5FeSsRbQHPrfYFTE+7kchhw7cQFzCw6tmO3EfAL/z7o
040ViR/sl8ORdKQOP+5K8LqQ9ey9H+X8oaf7FyIKD/ymNePDvCnMxueDn6b9ew/t
s9jEsDU1cSK8hxzjPCkTxdqMH4ESxXegMXKP1YOm+HdGS4HSJnqgrTI5sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOocl9rlj0P9ChHq2kIX3gNg5EGUMB8GA1UdIwQY
MBaAFDb3YhHzxY9smK+Zz2Wm8ej/fEO6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnZkaUVmUEZqMnlZcjVuUFphYng2UDk4UTdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9mY2FkMmQtODZkOS00MmIxLWIxMTUt
MmZjZjM5NjI1M2I4LzEvTnZkaUVmUEZqMnlZcjVuUFphYng2UDk4UTdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9mY2FkMmQtODZkOS00MmIxLWIxMTUtMmZjZjM5NjI1M2I4
LzEvTnZkaUVmUEZqMnlZcjVuUFphYng2UDk4UTdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmlEfiij
1vRhhJyKFhY3/hQ3592GjqBmqLb+mbYwP16I4UxyNX3B35Xwefd8o4TRs7S/8elT
a6S9I7JQbwnBGtJl2CZRGmko0igQT6IiH38VfGU3E7PnEVTqE+sb6a8z1quANHA7
3Aj7+9U6bRqNEAhdCuUsRPZgFED75WigjySi2XdK2EaRjObxxpfvHmb2aKSR3bop
bW3MkKBKF3MHjFUfHHdew+IAt47zbEQfIhWSqCnvGsLb+P86vQsN2B+INjNcZkMF
oHKZWSfsTcZ2Ror1PoRN/x8/tORyYkPHMSNC/5ZnzNRpMYLGS4uKiMw3/NyB4otJ
2nkpxJXalqsSaA==
-----END CERTIFICATE-----
Generated at Mon Sep 15 22:52:12 2025 by rpki-client