Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
File: nYwI9K2P6tNx2j58ArbP1on8pbo.mft (raw, json)
Hash identifier: LkQFR7Nz3+yyHgOAtVvBYYm+R/E8m5IjvAqhy2856nI=
Subject key identifier: 07:44:D4:D3:81:AF:2B:A0:74:ED:19:DF:73:97:3D:4C:E6:9D:D4:7D
Authority key identifier: 9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
Certificate issuer: /CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Certificate serial: 019A725CACB99B487A0C03644D6E847A3486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
Manifest number: 0A7C
Signing time: Tue 11 Nov 2025 10:01:07 +0000
Manifest this update: Tue 11 Nov 2025 10:01:07 +0000
Manifest next update: Wed 12 Nov 2025 10:01:07 +0000
Files and hashes: 1: nJBx_aFvLLmg9WQ03TK76fpJWGM.roa (hash: 02dNoeVE9Sy74k3q/XOECz/G2VHIiUVMONX/87WPyrU=)
2: nYwI9K2P6tNx2j58ArbP1on8pbo.crl (hash: tvhlzq7mx7+UtMpfDcO76NTPcKwbf34RpExbOlUCBKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ac:b9:9b:48:7a:0c:03:64:4d:6e:84:7a:34:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Validity
Not Before: Nov 11 10:01:07 2025 GMT
Not After : Nov 12 10:01:07 2025 GMT
Subject: CN=0744d4d381af2ba074ed19df73973d4ce69dd47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:8b:e6:25:84:83:05:ad:d4:59:7a:aa:91:
0b:ad:9b:99:78:fd:1b:35:2a:eb:09:45:f9:51:d2:
49:3a:ac:70:97:26:cc:38:49:ed:14:2a:5d:1f:90:
42:80:4b:44:f5:7d:39:28:58:a6:a5:b5:d4:6a:45:
48:b8:40:1c:87:af:23:3b:db:5e:5e:0f:fc:b3:16:
da:6a:c6:e9:4c:cc:b8:8e:ad:cb:20:fa:4b:51:69:
ca:81:67:00:0f:5d:d2:9d:55:31:87:be:d7:81:bc:
87:21:0b:c2:87:6d:3b:43:c4:69:5e:b4:37:f2:9b:
f5:a4:89:35:62:b3:8e:73:76:1a:ca:4b:e3:38:c9:
2f:f3:e3:09:39:ca:83:cb:1f:14:d1:9f:eb:7a:93:
88:af:d6:23:2a:a7:45:fc:9b:f7:ef:55:41:7e:06:
8b:94:a0:fc:1e:fa:39:08:9c:75:b1:de:7f:d8:0c:
7c:9f:da:b6:59:3f:da:55:49:48:8f:22:ac:31:d9:
85:ec:9e:2c:a4:bf:d2:62:75:a8:6e:d8:f1:1f:f4:
9c:5e:db:65:e8:3e:8f:aa:5a:e1:99:fd:b7:15:95:
39:9c:75:f1:f9:97:2e:84:1f:41:3a:3c:01:38:88:
2c:56:c5:f4:48:de:cc:62:c7:08:73:f1:60:a3:c4:
7e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:44:D4:D3:81:AF:2B:A0:74:ED:19:DF:73:97:3D:4C:E6:9D:D4:7D
X509v3 Authority Key Identifier:
keyid:9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1b:0f:a6:d2:31:7a:e9:af:91:ae:a0:ec:06:80:c0:01:97:
2b:19:3b:68:09:ac:6b:4f:16:aa:ee:2a:4b:ac:f5:f6:6c:06:
47:29:cd:f4:10:ac:06:6c:ee:74:68:e2:c6:d6:18:51:e7:db:
4c:6b:75:ad:ac:66:e3:f5:8c:f2:df:9b:53:20:1f:f7:22:fa:
73:11:81:3e:51:33:d0:ab:ce:46:81:ed:f8:09:3c:42:04:22:
f8:62:89:94:a3:0d:ce:69:1d:8c:f3:0d:12:42:0c:13:36:81:
a8:42:0f:2f:e0:f0:0d:3e:2d:4a:92:9e:4b:5c:46:44:27:14:
ba:78:62:75:c1:02:2c:38:bb:e2:6d:5e:41:3e:43:d1:97:07:
c5:82:4c:21:3e:c9:2e:02:c5:4c:6c:ae:f2:b6:96:2b:0b:fe:
29:b3:e7:24:fd:bc:88:fb:55:51:f6:52:2c:39:2c:d6:d0:c7:
e3:1f:45:87:61:79:a8:0d:c7:e8:13:02:dd:cb:6d:10:1d:1a:
a9:7d:b8:3e:7f:f9:10:6b:07:a6:fc:4b:39:14:51:e5:9c:f9:
f7:00:2c:a2:83:49:cd:77:0c:a3:26:12:8b:e8:3a:7e:dc:a3:
3b:b9:7c:fe:0f:ad:d1:2b:c5:de:69:61:51:76:a4:c2:5b:e2:
fa:8d:c6:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXKy5m0h6DANkTW6EejSGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkOGMwOGY0YWQ4ZmVhZDM3MWRhM2U3YzAyYjZjZmQ2ODlm
Y2E1YmEwHhcNMjUxMTExMTAwMTA3WhcNMjUxMTEyMTAwMTA3WjAzMTEwLwYDVQQD
EygwNzQ0ZDRkMzgxYWYyYmEwNzRlZDE5ZGY3Mzk3M2Q0Y2U2OWRkNDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr+L5iWEgwWt1Fl6qpELrZuZeP0b
NSrrCUX5UdJJOqxwlybMOEntFCpdH5BCgEtE9X05KFimpbXUakVIuEAch68jO9te
Xg/8sxbaasbpTMy4jq3LIPpLUWnKgWcAD13SnVUxh77XgbyHIQvCh207Q8RpXrQ3
8pv1pIk1YrOOc3YaykvjOMkv8+MJOcqDyx8U0Z/repOIr9YjKqdF/Jv371VBfgaL
lKD8Hvo5CJx1sd5/2Ax8n9q2WT/aVUlIjyKsMdmF7J4spL/SYnWobtjxH/ScXttl
6D6Pqlrhmf23FZU5nHXx+ZcuhB9BOjwBOIgsVsX0SN7MYscIc/Fgo8R+uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdE1NOBryugdO0Z33OXPUzmndR9MB8GA1UdIwQY
MBaAFJ2MCPStj+rTcdo+fAK2z9aJ/KW6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbll3STlLMlA2dE54Mmo1OEFyYlAxb244cGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9mYWE1MGYtNGRlMS00ZDFjLWI4MDMt
MTliZjc4MTA5NjFiLzEvbll3STlLMlA2dE54Mmo1OEFyYlAxb244cGJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9mYWE1MGYtNGRlMS00ZDFjLWI4MDMtMTliZjc4MTA5NjFi
LzEvbll3STlLMlA2dE54Mmo1OEFyYlAxb244cGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhsPptIx
eumvka6g7AaAwAGXKxk7aAmsa08Wqu4qS6z19mwGRynN9BCsBmzudGjixtYYUefb
TGt1raxm4/WM8t+bUyAf9yL6cxGBPlEz0KvORoHt+Ak8QgQi+GKJlKMNzmkdjPMN
EkIMEzaBqEIPL+DwDT4tSpKeS1xGRCcUunhidcECLDi74m1eQT5D0ZcHxYJMIT7J
LgLFTGyu8raWKwv+KbPnJP28iPtVUfZSLDks1tDH4x9Fh2F5qA3H6BMC3cttEB0a
qX24Pn/5EGsHpvxLORRR5Zz59wAsooNJzXcMoyYSi+g6ftyjO7l8/g+t0SvF3mlh
UXakwlvi+o3GLA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:01 2025 by rpki-client