Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
File: nyasnus6LPovbKP0E--5zf_pck4.mft (raw, json)
Hash identifier: RRx1YmOUlgwHcHyDsK5YAMbHwpJf+YciMZm5idbX9CI=
Subject key identifier: D0:09:B5:5E:60:F3:C4:3C:12:D2:A1:34:2E:36:17:2E:2D:21:9C:64
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 019A71131FD17A4B0F80DF17EA793E07F161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
Manifest number: 1733
Signing time: Tue 11 Nov 2025 04:01:09 +0000
Manifest this update: Tue 11 Nov 2025 04:01:09 +0000
Manifest next update: Wed 12 Nov 2025 04:01:09 +0000
Files and hashes: 1: MVVMDHQ15A5eeUSCPotdqrTSwBM.roa (hash: 5nG4w5vscj5LeP7wWl1bV9XF/+IvsA0KVrNr06ax6cw=)
2: nyasnus6LPovbKP0E--5zf_pck4.crl (hash: cHYcAzxAPtmnnsBdb83cFaw+w3NIhc9av6uNTJowohM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:1f:d1:7a:4b:0f:80:df:17:ea:79:3e:07:f1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Nov 11 04:01:09 2025 GMT
Not After : Nov 12 04:01:09 2025 GMT
Subject: CN=d009b55e60f3c43c12d2a1342e36172e2d219c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9b:6a:ef:6d:d0:f2:6d:f3:20:52:8c:e3:1e:
71:51:7d:84:a9:fb:41:c7:9e:72:68:de:64:0d:82:
a3:de:5b:b9:1b:b2:b4:53:22:89:7e:ea:ef:53:c3:
3c:9b:f8:46:cb:d1:cd:3b:6a:bc:2a:eb:87:b5:60:
e6:99:c2:ce:43:f9:c8:fb:36:5b:28:10:26:12:d8:
76:cf:94:b8:7b:9d:48:4a:40:37:11:99:8d:77:15:
4b:7f:c2:04:f9:9e:64:01:dd:52:9b:42:3f:ad:ac:
0f:8c:eb:60:df:45:98:0e:e2:a6:3c:9a:e8:9b:d1:
62:90:d3:31:49:25:82:75:c6:6c:c0:af:59:91:12:
7a:72:8f:66:ad:8f:ea:b5:6e:fe:6e:5a:21:d3:c3:
5c:46:97:35:32:9d:46:33:b7:30:5a:d9:0f:23:60:
84:5d:37:4a:47:4f:b5:f7:31:d4:00:b9:39:a6:8f:
e2:59:97:f1:3d:c7:ff:9d:30:e2:64:84:83:13:74:
a1:2f:8c:44:0c:bf:a4:d7:ea:1d:37:e1:f9:ed:0f:
07:28:a4:76:18:bd:11:7d:c3:46:02:d7:b4:bd:0e:
f1:f9:43:19:1d:60:5c:44:60:0d:23:ee:e5:7d:fe:
ff:c9:fe:ac:ca:1e:bb:b5:a0:50:44:68:48:09:a9:
3c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:09:B5:5E:60:F3:C4:3C:12:D2:A1:34:2E:36:17:2E:2D:21:9C:64
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:de:c1:f2:30:8a:e3:7a:10:f5:6d:6c:3a:7b:15:7c:be:2c:
f2:5f:4a:38:9b:18:83:3a:1e:e3:83:da:8e:a8:e2:54:f7:27:
f9:86:11:d2:44:8b:0c:1d:d7:2b:e4:bb:a8:ab:72:11:6c:0d:
5e:3f:d7:32:43:45:8b:62:37:b5:4e:76:19:84:2c:6b:4e:0e:
5e:b0:c9:df:ae:58:22:1f:95:c4:8d:ed:a6:59:a9:41:de:8b:
51:66:79:0b:70:ab:12:23:b8:4c:4e:91:44:32:ed:24:f3:fd:
78:41:2e:9a:54:2d:0c:af:fe:8d:20:e8:a2:58:9c:ca:83:59:
6c:59:66:1e:c3:9d:ca:15:59:74:ef:19:6d:f6:30:91:39:5a:
31:a3:2f:5a:6c:e8:3e:a4:6c:70:f1:53:bb:72:90:3b:38:35:
09:dd:7a:d7:dd:f4:ee:36:81:ef:d0:88:e9:d8:b5:2e:59:d2:
f6:d6:fb:d6:f1:fb:14:35:01:f5:fb:d0:d8:64:57:75:97:32:
18:db:43:48:cb:9f:cc:aa:dd:a1:05:6a:9a:df:32:f0:39:c3:
b7:fe:19:26:9f:f4:33:27:6c:c5:80:8b:21:fb:ab:a6:11:54:
22:4f:3b:31:f7:81:d1:6c:29:8e:0c:07:e7:ac:16:1f:45:bd:
26:5e:61:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEx/ReksPgN8X6nk+B/FhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMjZhYzllZWIzYTJjZmEyZjZjYTNmNDEzZWZiOWNkZmZl
OTcyNGUwHhcNMjUxMTExMDQwMTA5WhcNMjUxMTEyMDQwMTA5WjAzMTEwLwYDVQQD
EyhkMDA5YjU1ZTYwZjNjNDNjMTJkMmExMzQyZTM2MTcyZTJkMjE5YzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZtq723Q8m3zIFKM4x5xUX2EqftB
x55yaN5kDYKj3lu5G7K0UyKJfurvU8M8m/hGy9HNO2q8KuuHtWDmmcLOQ/nI+zZb
KBAmEth2z5S4e51ISkA3EZmNdxVLf8IE+Z5kAd1Sm0I/rawPjOtg30WYDuKmPJro
m9FikNMxSSWCdcZswK9ZkRJ6co9mrY/qtW7+bloh08NcRpc1Mp1GM7cwWtkPI2CE
XTdKR0+19zHUALk5po/iWZfxPcf/nTDiZISDE3ShL4xEDL+k1+odN+H57Q8HKKR2
GL0RfcNGAte0vQ7x+UMZHWBcRGANI+7lff7/yf6syh67taBQRGhICak88wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAJtV5g88Q8EtKhNC42Fy4tIZxkMB8GA1UdIwQY
MBaAFJ8mrJ7rOiz6L2yj9BPvuc3/6XJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWIt
N2Q0MjY2Y2Y4MjJhLzEvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWItN2Q0MjY2Y2Y4MjJh
LzEvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhd7B8jCK
43oQ9W1sOnsVfL4s8l9KOJsYgzoe44PajqjiVPcn+YYR0kSLDB3XK+S7qKtyEWwN
Xj/XMkNFi2I3tU52GYQsa04OXrDJ365YIh+VxI3tplmpQd6LUWZ5C3CrEiO4TE6R
RDLtJPP9eEEumlQtDK/+jSDoolicyoNZbFlmHsOdyhVZdO8ZbfYwkTlaMaMvWmzo
PqRscPFTu3KQOzg1Cd1619307jaB79CI6di1LlnS9tb71vH7FDUB9fvQ2GRXdZcy
GNtDSMufzKrdoQVqmt8y8DnDt/4ZJp/0MydsxYCLIfurphFUIk87MfeB0WwpjgwH
56wWH0W9Jl5hcw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:11 2025 by rpki-client