Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
File: nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft (raw, json)
Hash identifier: 2xv+t6xQD2cwGk/7uAK0uk7cLVMIqSC4G0Jrjx4uOJ4=
Subject key identifier: 43:C6:1E:4F:4A:91:86:D7:F0:F8:DA:36:AC:DA:3A:5C:D1:29:9C:96
Authority key identifier: 9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
Certificate issuer: /CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
Certificate serial: 019A101562BCFEC828A9E81B4F2D167F8E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
Manifest number: 0EAE
Signing time: Thu 23 Oct 2025 08:00:28 +0000
Manifest this update: Thu 23 Oct 2025 08:00:28 +0000
Manifest next update: Fri 24 Oct 2025 08:00:28 +0000
Files and hashes: 1: SJakYTj9pb3r41qOMQrQf_YPYbc.roa (hash: tab9yW3GhAbdQLvfn40C4/W+qyYm4f+BamJUC4exFC4=)
2: nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl (hash: Q793xqK0kuhnL5Q6g/DrIL683pJMtpPEgLn+Jcf628A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:15:62:bc:fe:c8:28:a9:e8:1b:4f:2d:16:7f:8e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
Validity
Not Before: Oct 23 08:00:28 2025 GMT
Not After : Oct 24 08:00:28 2025 GMT
Subject: CN=43c61e4f4a9186d7f0f8da36acda3a5cd1299c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:34:45:31:69:bb:1d:3e:08:09:0c:e7:ef:
a4:9d:77:22:4e:52:7f:5e:07:ea:fd:00:41:4f:dc:
3a:11:13:a7:08:c7:77:de:a9:48:5a:08:10:21:1d:
d9:cd:3c:95:75:b2:7e:9a:74:22:b5:1b:83:24:e4:
18:61:2d:7e:bf:89:f2:5b:76:90:33:df:4e:da:d0:
00:fd:24:2f:52:ab:c5:d0:18:1d:cf:01:d3:7f:51:
5f:d2:5d:29:6c:36:36:73:c5:75:28:b7:5b:88:46:
11:32:0d:74:07:b0:00:29:ae:e3:13:70:96:74:e9:
c0:ac:11:8a:18:27:50:4e:af:69:30:c4:10:81:6f:
43:d9:60:d2:0a:87:c5:a6:ed:cf:11:32:d8:f4:bf:
dd:4c:64:8c:a6:1c:7a:6b:1e:57:c2:d5:d3:66:fb:
a1:91:b0:b7:83:be:c7:02:4b:af:30:df:31:f3:0b:
ef:31:41:0b:05:ba:ad:8a:39:ad:42:1d:74:8b:d9:
4a:9c:94:a6:ce:38:ab:2d:68:94:cd:0c:1d:66:16:
c4:c5:6b:25:d1:2e:c9:c7:6f:54:9f:be:27:2e:34:
7c:8a:b2:0e:86:b8:b5:40:19:7b:bf:a0:61:4d:32:
58:9f:b1:50:24:5d:17:3b:74:af:b5:c8:a6:b5:66:
cb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C6:1E:4F:4A:91:86:D7:F0:F8:DA:36:AC:DA:3A:5C:D1:29:9C:96
X509v3 Authority Key Identifier:
keyid:9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:9a:b5:4c:be:f3:05:34:b9:65:20:dc:fb:27:42:d1:9c:c4:
f3:81:f0:53:17:42:91:81:ee:2d:94:1d:a3:55:7f:ce:0f:20:
bc:80:7d:55:e2:50:ff:87:be:d5:5c:d9:cd:77:44:7c:43:30:
ce:47:b4:60:f9:f0:28:61:88:ea:f3:1a:86:7f:2d:7d:f6:bf:
59:05:eb:1d:20:4d:65:df:cc:d9:25:a0:6c:3e:18:6f:a0:fb:
aa:a2:3e:74:10:30:8d:1d:a9:5f:a7:26:93:68:fc:5b:dc:de:
d7:10:71:12:6e:36:e4:55:70:5e:a8:99:04:10:bd:5b:ba:05:
40:ee:00:72:62:63:3f:ea:b3:03:44:eb:3d:d1:ca:33:16:37:
2d:a0:95:56:02:cd:75:62:75:18:22:83:c9:ff:d7:a3:0d:98:
c2:b6:be:9b:62:61:85:10:7b:94:a0:70:68:cd:dd:7b:f8:a6:
d3:62:8a:80:96:df:57:db:91:e8:c8:cc:b5:c8:46:01:2a:b3:
f2:b2:27:4a:cf:bd:8f:e6:e5:83:3f:0b:3c:48:23:01:b0:20:
0f:8f:45:b9:4c:c9:13:3a:12:f3:65:8d:d4:0a:84:a9:e3:cd:
41:fa:1d:a4:c2:14:84:c4:7e:9e:e7:fb:fc:36:4b:84:2d:1a:
ca:02:77:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoQFWK8/sgoqegbTy0Wf45gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljN2ZhOWVhZjM4NTZjYTRlNzUwNDE0MTRlNTFkODYwMTgw
YzkyNmYwHhcNMjUxMDIzMDgwMDI4WhcNMjUxMDI0MDgwMDI4WjAzMTEwLwYDVQQD
Eyg0M2M2MWU0ZjRhOTE4NmQ3ZjBmOGRhMzZhY2RhM2E1Y2QxMjk5Yzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApws0RTFpux0+CAkM5++knXciTlJ/
Xgfq/QBBT9w6EROnCMd33qlIWggQIR3ZzTyVdbJ+mnQitRuDJOQYYS1+v4nyW3aQ
M99O2tAA/SQvUqvF0BgdzwHTf1Ff0l0pbDY2c8V1KLdbiEYRMg10B7AAKa7jE3CW
dOnArBGKGCdQTq9pMMQQgW9D2WDSCofFpu3PETLY9L/dTGSMphx6ax5XwtXTZvuh
kbC3g77HAkuvMN8x8wvvMUELBbqtijmtQh10i9lKnJSmzjirLWiUzQwdZhbExWsl
0S7Jx29Un74nLjR8irIOhri1QBl7v6BhTTJYn7FQJF0XO3SvtcimtWbLvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPGHk9KkYbX8PjaNqzaOlzRKZyWMB8GA1UdIwQY
MBaAFJx/qerzhWyk51BBQU5R2GAYDJJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkgtcDZ2T0ZiS1RuVUVGQlRsSFlZQmdNa204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83ZmJjYzYtNjRmZC00ODc0LWFiNDkt
ODI1YjQ3YzE1NDMwLzEvbkgtcDZ2T0ZiS1RuVUVGQlRsSFlZQmdNa204Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83ZmJjYzYtNjRmZC00ODc0LWFiNDktODI1YjQ3YzE1NDMw
LzEvbkgtcDZ2T0ZiS1RuVUVGQlRsSFlZQmdNa204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt5q1TL7z
BTS5ZSDc+ydC0ZzE84HwUxdCkYHuLZQdo1V/zg8gvIB9VeJQ/4e+1VzZzXdEfEMw
zke0YPnwKGGI6vMahn8tffa/WQXrHSBNZd/M2SWgbD4Yb6D7qqI+dBAwjR2pX6cm
k2j8W9ze1xBxEm425FVwXqiZBBC9W7oFQO4AcmJjP+qzA0TrPdHKMxY3LaCVVgLN
dWJ1GCKDyf/Xow2Ywra+m2JhhRB7lKBwaM3de/im02KKgJbfV9uR6MjMtchGASqz
8rInSs+9j+blgz8LPEgjAbAgD49FuUzJEzoS82WN1AqEqePNQfodpMIUhMR+nuf7
/DZLhC0aygJ3VQ==
-----END CERTIFICATE-----
Generated at Thu Oct 23 12:08:28 2025 by rpki-client