Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
File: nxFouFcXoUZmABtbL2yQgBmX3gY.mft (raw, json)
Hash identifier: Tq9lAiFbOzR4kvROvrfKckuvhKTz+4NRf5p20Ymq1Vk=
Subject key identifier: BF:F0:51:4E:EC:05:75:6D:B0:ED:6B:4B:DC:5A:09:12:E9:3F:D6:F7
Authority key identifier: 9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
Certificate issuer: /CN=9f1168b85717a14666001b5b2f6c90801997de06
Certificate serial: 019A1F1A6F5D54DBEA2DA78EDB413F58C771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
Manifest number: 04A6
Signing time: Sun 26 Oct 2025 06:00:17 +0000
Manifest this update: Sun 26 Oct 2025 06:00:17 +0000
Manifest next update: Mon 27 Oct 2025 06:00:17 +0000
Files and hashes: 1: 3aRtdaLoPOZF10CX_CZEh4-VCqI.roa (hash: OscvtFvqL/u9a9yzvKDIzZQyXS+BuqyG+0F0KwScDL8=)
2: nxFouFcXoUZmABtbL2yQgBmX3gY.crl (hash: 0GnhWkHA31Xv5Yal3T2Uz6nJoWP55aAL72c98gnAQXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1a:6f:5d:54:db:ea:2d:a7:8e:db:41:3f:58:c7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1168b85717a14666001b5b2f6c90801997de06
Validity
Not Before: Oct 26 06:00:17 2025 GMT
Not After : Oct 27 06:00:17 2025 GMT
Subject: CN=bff0514eec05756db0ed6b4bdc5a0912e93fd6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:a8:8d:e2:43:0b:14:d1:73:9b:30:d2:0b:
7b:70:f1:cc:22:94:2c:99:e3:cb:cc:1d:ca:48:ab:
27:be:0a:d6:e1:9a:03:2b:60:34:5c:f1:56:bf:e9:
0d:c7:9f:6d:1a:e4:53:f8:48:20:70:31:67:f5:e2:
8c:06:b6:49:b3:9f:e1:e5:dc:c7:01:ba:4e:18:00:
d3:f4:69:45:12:ea:d1:d6:ee:3a:22:c4:8a:df:12:
8d:85:80:61:61:88:fe:19:6a:39:9c:8b:e7:ca:d2:
94:9f:45:41:80:4a:8d:d4:a1:71:1b:e0:2a:92:3d:
b8:05:ff:70:ef:d6:0e:93:ff:6f:0c:d4:36:10:88:
5a:6a:b7:6f:3a:35:91:39:43:2b:b8:1a:35:d4:69:
30:bd:55:fe:e1:83:22:60:23:c9:db:88:3e:90:70:
eb:37:7f:57:97:86:61:b7:d7:4b:9c:d6:9b:d2:f0:
ff:2c:d4:5f:48:55:95:cb:81:ae:b9:1b:96:a0:22:
ab:6b:f4:97:8a:23:be:4b:c2:f9:a7:e8:5f:b8:d8:
d9:28:e4:4a:a6:ad:18:9d:c4:ca:7f:76:f8:4b:be:
8f:8b:da:6e:6f:35:ff:61:3b:51:eb:f8:e9:84:de:
24:99:d2:6e:a7:2a:bd:90:b0:15:6a:e0:00:c2:8d:
4c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F0:51:4E:EC:05:75:6D:B0:ED:6B:4B:DC:5A:09:12:E9:3F:D6:F7
X509v3 Authority Key Identifier:
keyid:9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9f:38:81:07:04:98:d9:ad:ca:28:13:a3:90:8d:34:22:e3:
f9:e0:49:2f:63:49:ac:37:a7:ea:28:bc:40:0d:21:70:1c:a6:
b4:12:27:90:92:5b:80:82:e0:d8:bb:8a:d3:2b:ac:b2:98:e9:
7b:f7:39:9e:a8:89:ec:31:28:81:61:25:08:e4:9f:f0:f0:ad:
fe:3f:ed:92:8d:f9:ea:1d:ce:34:b3:d1:5f:79:3d:5b:d6:e5:
ca:43:27:7c:33:b3:c2:a2:d9:00:7c:82:61:78:2b:a4:55:bd:
c7:00:97:ad:7b:2e:9e:f6:e2:a5:f0:cb:2a:40:e8:6d:3a:50:
83:ec:42:8d:65:8c:2a:75:35:8f:50:c7:9c:73:d9:e0:6e:17:
34:2b:a0:17:68:a1:4e:ad:27:6a:2e:3c:d0:69:de:bf:90:86:
3b:7c:68:a6:a5:ec:c9:41:4a:ee:5c:53:06:53:77:b5:81:d4:
31:1f:a7:f0:89:70:7e:58:6c:40:e3:3c:9f:9d:09:8e:9c:f9:
51:92:53:8f:e8:c0:69:bf:36:6e:8c:54:d3:95:51:5d:48:c8:
79:66:44:55:e4:3e:fa:5f:c8:59:f7:18:62:34:6d:08:8d:42:
1a:b2:f4:98:45:f7:75:93:52:37:d3:80:28:ec:06:0a:dc:71:
bf:78:dd:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofGm9dVNvqLaeO20E/WMdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMTE2OGI4NTcxN2ExNDY2NjAwMWI1YjJmNmM5MDgwMTk5
N2RlMDYwHhcNMjUxMDI2MDYwMDE3WhcNMjUxMDI3MDYwMDE3WjAzMTEwLwYDVQQD
EyhiZmYwNTE0ZWVjMDU3NTZkYjBlZDZiNGJkYzVhMDkxMmU5M2ZkNmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqViojeJDCxTRc5sw0gt7cPHMIpQs
mePLzB3KSKsnvgrW4ZoDK2A0XPFWv+kNx59tGuRT+EggcDFn9eKMBrZJs5/h5dzH
AbpOGADT9GlFEurR1u46IsSK3xKNhYBhYYj+GWo5nIvnytKUn0VBgEqN1KFxG+Aq
kj24Bf9w79YOk/9vDNQ2EIhaardvOjWROUMruBo11GkwvVX+4YMiYCPJ24g+kHDr
N39Xl4Zht9dLnNab0vD/LNRfSFWVy4GuuRuWoCKra/SXiiO+S8L5p+hfuNjZKORK
pq0YncTKf3b4S76Pi9pubzX/YTtR6/jphN4kmdJupyq9kLAVauAAwo1MDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/wUU7sBXVtsO1rS9xaCRLpP9b3MB8GA1UdIwQY
MBaAFJ8RaLhXF6FGZgAbWy9skIAZl94GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnhGb3VGY1hvVVptQUJ0YkwyeVFnQm1YM2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84ZjY1OGMtM2ZhYy00OThkLWI5NWUt
ZjQyMTliZWRkYjM3LzEvbnhGb3VGY1hvVVptQUJ0YkwyeVFnQm1YM2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84ZjY1OGMtM2ZhYy00OThkLWI5NWUtZjQyMTliZWRkYjM3
LzEvbnhGb3VGY1hvVVptQUJ0YkwyeVFnQm1YM2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJ84gQcE
mNmtyigTo5CNNCLj+eBJL2NJrDen6ii8QA0hcBymtBInkJJbgILg2LuK0yusspjp
e/c5nqiJ7DEogWElCOSf8PCt/j/tko356h3ONLPRX3k9W9blykMnfDOzwqLZAHyC
YXgrpFW9xwCXrXsunvbipfDLKkDobTpQg+xCjWWMKnU1j1DHnHPZ4G4XNCugF2ih
Tq0nai480Gnev5CGO3xopqXsyUFK7lxTBlN3tYHUMR+n8IlwflhsQOM8n50Jjpz5
UZJTj+jAab82boxU05VRXUjIeWZEVeQ++l/IWfcYYjRtCI1CGrL0mEX3dZNSN9OA
KOwGCtxxv3jdjw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 14:29:03 2025 by rpki-client