Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
File: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json)
Hash identifier: S1KO5Mvor/78uj1IyWEo0Oy/DlA0X0cDkDW9TrxVHV0=
Subject key identifier: 21:68:56:83:63:FA:5E:86:C6:8B:10:DD:9A:6F:01:2B:8C:61:C9:33
Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Certificate serial: 019A5263343556D7217E024374E92018400D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
Manifest number: 0173
Signing time: Wed 05 Nov 2025 05:00:24 +0000
Manifest this update: Wed 05 Nov 2025 05:00:24 +0000
Manifest next update: Thu 06 Nov 2025 05:00:24 +0000
Files and hashes: 1: B7c_NuomsMLePlv4BqYRjDtq6rA.roa (hash: 9F/KOglkwN1+3aYHtjpMXcocrWjjPZ/arLWSx9kmqyY=)
2: LfG4OjHPoLHsAJrtCsFzB1-WA1c.roa (hash: l1BlIjqmxWuuS5MgIueayr3dbyb+8P1GNcaS+TuAghU=)
3: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: l7TRd+S2IvEtypOYT8DGFPxQABSl59Oo0Ww2p27kT8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:34:35:56:d7:21:7e:02:43:74:e9:20:18:40:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Validity
Not Before: Nov 5 05:00:24 2025 GMT
Not After : Nov 6 05:00:24 2025 GMT
Subject: CN=2168568363fa5e86c68b10dd9a6f012b8c61c933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:01:7f:9d:19:dd:1f:8f:aa:b8:77:59:44:22:
ca:88:54:77:ab:76:1a:8b:b9:01:a1:cd:66:c0:52:
8f:f1:68:25:f4:31:38:70:03:44:88:5f:df:6b:2f:
7d:4a:84:2e:bd:63:9a:0a:25:f2:64:4d:36:41:ae:
a3:08:31:42:61:8b:b3:6f:a2:1c:ac:f7:6c:52:ea:
1d:b4:41:d0:68:76:4d:28:65:35:e5:05:0b:11:d1:
94:40:e9:50:28:bd:01:0e:a4:67:c5:f3:b0:56:01:
8a:08:04:83:50:da:da:dd:a9:99:2e:ad:91:c3:8c:
59:58:39:eb:5b:ec:cc:f6:7f:df:7d:31:cc:b2:e2:
a6:69:0c:03:ee:b4:3b:73:c9:ee:8c:c0:b2:4d:e6:
c9:89:c2:66:e8:04:f5:53:bd:4f:c6:0e:a2:53:5b:
54:4b:bd:fa:7b:fc:23:3a:a7:a4:9a:93:d1:20:c3:
67:86:f7:55:25:5f:cb:96:3f:4e:93:1e:23:d7:89:
d6:5f:98:53:97:04:aa:15:99:23:b1:17:94:71:7c:
75:75:de:7d:62:bb:67:99:f0:d4:81:1e:b1:9a:9e:
4c:db:a5:85:db:bd:f9:a0:27:3d:cd:c3:41:c1:74:
15:de:39:a5:cc:06:e5:3e:95:8a:4b:b1:cd:bb:30:
40:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:68:56:83:63:FA:5E:86:C6:8B:10:DD:9A:6F:01:2B:8C:61:C9:33
X509v3 Authority Key Identifier:
keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:72:f0:4b:08:37:6a:b5:67:b7:bf:74:3b:35:a2:6d:08:b8:
0f:2b:0e:64:0d:30:1e:21:c4:55:56:02:7e:8d:40:c2:1b:54:
08:23:29:7f:ea:93:71:f6:1e:16:e5:c8:14:fd:83:bc:0a:af:
01:09:32:01:a6:44:e5:c3:d0:1b:c1:e4:aa:fa:3c:50:4d:08:
ba:23:ea:52:ae:eb:72:6f:c3:e3:d4:e0:93:41:2a:c3:cc:98:
0b:b2:36:ef:33:e2:5b:bf:34:42:ce:af:83:f1:6f:30:71:7b:
b7:e5:18:28:0a:15:bb:df:ae:aa:78:11:44:b5:d3:5c:65:e6:
b9:92:a4:38:0f:4e:d5:1f:f7:cd:63:e8:9a:ac:c6:2b:b1:b9:
52:79:6b:00:23:78:10:a6:1d:26:63:51:0b:fc:25:69:ea:cd:
32:5e:04:33:70:96:31:d3:16:fa:79:3a:df:95:cd:f7:53:0b:
a1:0a:4f:97:74:da:65:62:b2:17:75:dd:54:bd:75:df:04:bd:
42:3a:0c:f7:95:7a:5d:fd:24:65:4e:a5:0e:f4:98:92:58:8e:
70:bd:fe:8c:bb:56:3f:55:69:4b:57:73:0b:df:b2:a2:a5:19:
c0:ce:8e:e1:59:d1:10:aa:20:38:4d:49:ab:c7:30:a8:18:f3:
e8:e9:9f:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSYzQ1VtchfgJDdOkgGEANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMmJjZDczNzA1YjkzNzQ3NWE5NThjNjM0ZWRkNjRjOWM2
NGFmYjYwHhcNMjUxMTA1MDUwMDI0WhcNMjUxMTA2MDUwMDI0WjAzMTEwLwYDVQQD
EygyMTY4NTY4MzYzZmE1ZTg2YzY4YjEwZGQ5YTZmMDEyYjhjNjFjOTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gF/nRndH4+quHdZRCLKiFR3q3Ya
i7kBoc1mwFKP8Wgl9DE4cANEiF/fay99SoQuvWOaCiXyZE02Qa6jCDFCYYuzb6Ic
rPdsUuodtEHQaHZNKGU15QULEdGUQOlQKL0BDqRnxfOwVgGKCASDUNra3amZLq2R
w4xZWDnrW+zM9n/ffTHMsuKmaQwD7rQ7c8nujMCyTebJicJm6AT1U71Pxg6iU1tU
S736e/wjOqekmpPRIMNnhvdVJV/Llj9Okx4j14nWX5hTlwSqFZkjsReUcXx1dd59
YrtnmfDUgR6xmp5M26WF2735oCc9zcNBwXQV3jmlzAblPpWKS7HNuzBA9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFoVoNj+l6GxosQ3ZpvASuMYckzMB8GA1UdIwQY
MBaAFJ8rzXNwW5N0dalYxjTt1kycZK+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDct
OTA4NGZiMGJlOWMxLzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDctOTA4NGZiMGJlOWMx
LzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwXLwSwg3
arVnt790OzWibQi4DysOZA0wHiHEVVYCfo1AwhtUCCMpf+qTcfYeFuXIFP2DvAqv
AQkyAaZE5cPQG8Hkqvo8UE0IuiPqUq7rcm/D49Tgk0Eqw8yYC7I27zPiW780Qs6v
g/FvMHF7t+UYKAoVu9+uqngRRLXTXGXmuZKkOA9O1R/3zWPomqzGK7G5UnlrACN4
EKYdJmNRC/wlaerNMl4EM3CWMdMW+nk635XN91MLoQpPl3TaZWKyF3XdVL113wS9
QjoM95V6Xf0kZU6lDvSYkliOcL3+jLtWP1VpS1dzC9+yoqUZwM6O4VnREKogOE1J
q8cwqBjz6Omf1A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:11:29 2025 by rpki-client