Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
File: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json)
Hash identifier: uStTgmJI8sSK8+rE1vdl7c3MQRYXXEUj4MnlGXXJ7wA=
Subject key identifier: 8E:1A:21:5C:AB:38:50:BE:79:56:17:16:6D:2D:03:58:07:79:93:97
Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Certificate serial: 019873AADA63FA707042005DCC9240D054A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
Manifest number: 7B
Signing time: Mon 04 Aug 2025 06:00:33 +0000
Manifest this update: Mon 04 Aug 2025 06:00:33 +0000
Manifest next update: Tue 05 Aug 2025 06:00:33 +0000
Files and hashes: 1: B7c_NuomsMLePlv4BqYRjDtq6rA.roa (hash: 9F/KOglkwN1+3aYHtjpMXcocrWjjPZ/arLWSx9kmqyY=)
2: LfG4OjHPoLHsAJrtCsFzB1-WA1c.roa (hash: l1BlIjqmxWuuS5MgIueayr3dbyb+8P1GNcaS+TuAghU=)
3: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: dFpWar889ZgkAYAFHH8ZT6zaNzdga2XveoTKhBhJ7Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:aa:da:63:fa:70:70:42:00:5d:cc:92:40:d0:54:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Validity
Not Before: Aug 4 06:00:33 2025 GMT
Not After : Aug 5 06:00:33 2025 GMT
Subject: CN=8e1a215cab3850be795617166d2d035807799397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:db:7c:fb:07:ac:ed:47:8e:ce:7a:d6:e1:
75:91:44:e0:16:48:27:ba:96:15:d0:d4:b2:08:8d:
e5:63:ad:cf:6c:f5:7c:48:16:f8:f1:70:8d:bc:3f:
21:c2:39:28:3f:78:af:82:6f:e4:3c:92:04:14:5c:
a7:58:8c:22:98:ba:75:fe:72:1e:6c:7a:c1:50:15:
a3:9d:d0:b3:ff:23:6e:6d:89:e8:7d:2c:07:15:ba:
ba:40:d5:8c:87:48:27:63:9f:24:fa:56:b0:36:40:
b9:c7:49:c2:52:ff:7e:d4:67:b4:ea:02:7b:77:16:
c0:c7:8d:22:d7:9d:43:54:5e:c9:52:5f:7b:36:db:
62:f5:9e:ca:a9:66:1c:0a:c2:26:a3:ba:ba:0f:49:
d8:ce:8c:62:b1:4e:61:e6:08:04:71:c7:29:9e:52:
99:a0:7b:d1:0a:ff:5a:40:35:cf:6a:9c:90:ce:b3:
f5:86:26:39:ee:7d:cd:70:ee:9e:7d:82:74:c9:0c:
a0:da:b5:0a:b2:c2:f9:46:fe:e9:54:d5:d2:16:cf:
0c:0e:c7:b4:c4:97:8d:be:b1:2d:25:47:25:37:f0:
e2:83:d3:3e:88:56:53:c8:85:33:94:fc:38:b1:e3:
70:c4:e3:27:6a:5b:f9:3e:fd:7e:64:9f:28:f8:33:
52:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1A:21:5C:AB:38:50:BE:79:56:17:16:6D:2D:03:58:07:79:93:97
X509v3 Authority Key Identifier:
keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:4a:4f:cc:a7:3b:24:35:2c:9d:b2:79:de:fe:a0:73:4d:ee:
93:84:4a:c2:b6:95:d0:9d:d2:12:26:c3:37:99:e7:7b:95:1c:
63:83:a8:59:ee:6b:7e:b9:d4:dd:d0:fa:b5:48:f9:88:04:08:
3d:1a:6e:bc:7a:ca:06:b0:44:e8:9f:7d:c1:9c:68:dc:5b:68:
41:6a:83:ce:bf:cb:9c:d4:47:3b:41:35:75:be:67:28:3d:6a:
81:c3:3e:97:0b:65:f3:c8:97:20:83:82:40:84:b7:e8:dc:49:
18:8d:60:03:ae:6f:09:92:b6:b5:01:dc:0d:77:83:6f:1e:61:
a1:c4:12:9f:a1:c7:7a:d8:2d:c6:cf:c4:50:7e:ab:71:e3:f8:
b3:31:fa:8d:59:65:fd:99:32:d2:b4:ac:57:09:d8:b3:97:f8:
c8:a2:7d:de:4b:9a:4c:4e:da:e5:d2:ff:68:60:5d:c3:b4:a0:
68:29:a0:e2:5b:d9:0d:a0:bd:55:40:d3:5a:a6:65:b3:7e:99:
ae:c9:24:cf:00:d3:9a:50:ac:1b:8d:ca:57:0a:0e:18:79:2d:
2f:22:ef:db:98:4f:6f:5a:77:e5:e8:db:61:06:0d:9d:a2:3e:
89:a0:fa:c5:17:28:81:6b:90:a0:55:61:f1:1c:a9:60:aa:9b:
b4:2e:78:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzqtpj+nBwQgBdzJJA0FSkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMmJjZDczNzA1YjkzNzQ3NWE5NThjNjM0ZWRkNjRjOWM2
NGFmYjYwHhcNMjUwODA0MDYwMDMzWhcNMjUwODA1MDYwMDMzWjAzMTEwLwYDVQQD
Eyg4ZTFhMjE1Y2FiMzg1MGJlNzk1NjE3MTY2ZDJkMDM1ODA3Nzk5Mzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmjbfPsHrO1Hjs561uF1kUTgFkgn
upYV0NSyCI3lY63PbPV8SBb48XCNvD8hwjkoP3ivgm/kPJIEFFynWIwimLp1/nIe
bHrBUBWjndCz/yNubYnofSwHFbq6QNWMh0gnY58k+lawNkC5x0nCUv9+1Ge06gJ7
dxbAx40i151DVF7JUl97Ntti9Z7KqWYcCsImo7q6D0nYzoxisU5h5ggEcccpnlKZ
oHvRCv9aQDXPapyQzrP1hiY57n3NcO6efYJ0yQyg2rUKssL5Rv7pVNXSFs8MDse0
xJeNvrEtJUclN/Dig9M+iFZTyIUzlPw4seNwxOMnalv5Pv1+ZJ8o+DNSVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4aIVyrOFC+eVYXFm0tA1gHeZOXMB8GA1UdIwQY
MBaAFJ8rzXNwW5N0dalYxjTt1kycZK+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDct
OTA4NGZiMGJlOWMxLzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDctOTA4NGZiMGJlOWMx
LzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx0pPzKc7
JDUsnbJ53v6gc03uk4RKwraV0J3SEibDN5nne5UcY4OoWe5rfrnU3dD6tUj5iAQI
PRpuvHrKBrBE6J99wZxo3FtoQWqDzr/LnNRHO0E1db5nKD1qgcM+lwtl88iXIIOC
QIS36NxJGI1gA65vCZK2tQHcDXeDbx5hocQSn6HHetgtxs/EUH6rceP4szH6jVll
/Zky0rSsVwnYs5f4yKJ93kuaTE7a5dL/aGBdw7SgaCmg4lvZDaC9VUDTWqZls36Z
rskkzwDTmlCsG43KVwoOGHktLyLv25hPb1p35ejbYQYNnaI+iaD6xRcogWuQoFVh
8RypYKqbtC54CQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:59 2025 by rpki-client