Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
File: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json)
Hash identifier: ZaUbd4tsdT5X3uC/S20hkD7eVcgPNiQdiwlBnqLDtPU=
Subject key identifier: E6:B3:5E:D6:09:1E:8E:20:57:66:5E:20:6A:5F:12:AB:6B:07:FE:F8
Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Certificate serial: 019A5451924C61031E5A5F0D62D98116AB62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
Manifest number: 0174
Signing time: Wed 05 Nov 2025 14:00:23 +0000
Manifest this update: Wed 05 Nov 2025 14:00:23 +0000
Manifest next update: Thu 06 Nov 2025 14:00:23 +0000
Files and hashes: 1: B7c_NuomsMLePlv4BqYRjDtq6rA.roa (hash: 9F/KOglkwN1+3aYHtjpMXcocrWjjPZ/arLWSx9kmqyY=)
2: LfG4OjHPoLHsAJrtCsFzB1-WA1c.roa (hash: l1BlIjqmxWuuS5MgIueayr3dbyb+8P1GNcaS+TuAghU=)
3: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: hlpoOt4E4e4PTKaHIQmfuNg4Naoc4PVjIoVMrr+oNrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:92:4c:61:03:1e:5a:5f:0d:62:d9:81:16:ab:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Validity
Not Before: Nov 5 14:00:23 2025 GMT
Not After : Nov 6 14:00:23 2025 GMT
Subject: CN=e6b35ed6091e8e2057665e206a5f12ab6b07fef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:94:50:da:98:9a:a5:cb:48:0a:5c:1c:ba:48:
03:09:0c:9f:90:55:f6:16:2f:66:0d:e3:8f:91:bf:
f2:f2:62:2f:a5:10:fe:58:02:3a:39:76:21:bb:de:
c0:f0:1a:26:72:fd:8e:4f:ea:19:0c:90:79:20:f5:
7d:4a:67:f5:c1:f1:75:d3:c3:60:67:a5:a8:14:8c:
bc:cb:43:0a:95:f6:aa:61:96:da:ac:52:f7:e4:85:
be:87:78:75:1a:e5:36:7d:d0:2a:a5:70:23:b3:f2:
30:22:f6:0d:cd:b4:ee:99:37:8c:eb:19:d3:86:9d:
94:17:28:e1:6a:fc:71:36:11:2c:62:03:7b:ce:9f:
49:03:05:db:27:59:1e:1c:99:15:19:ab:a0:be:78:
12:75:74:39:13:0d:79:07:1c:c1:ec:8d:28:92:73:
17:20:bb:9b:ba:aa:79:ba:c4:ef:67:64:23:38:3e:
99:05:3d:a8:e8:7b:6d:4e:75:4d:38:1d:5e:fe:6b:
29:17:81:90:7e:28:2c:9c:e6:1a:fe:ce:22:59:19:
8c:52:e0:3e:72:26:8c:64:ce:cd:fd:b9:3b:25:e5:
19:4c:ca:67:b9:fa:ce:08:97:97:8b:d2:3c:54:36:
d1:ae:bc:32:34:72:25:40:b8:f0:54:8a:3c:92:98:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B3:5E:D6:09:1E:8E:20:57:66:5E:20:6A:5F:12:AB:6B:07:FE:F8
X509v3 Authority Key Identifier:
keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:25:fa:b0:37:15:a8:a2:c6:80:78:a7:a3:2e:ad:63:ae:dc:
14:c2:be:7a:b6:1c:ae:31:44:a4:d1:e3:08:6b:e1:4a:30:36:
02:39:8b:50:17:a9:b0:f5:5f:6a:38:35:01:56:68:a1:e7:5a:
5e:01:2e:97:d0:91:5f:d2:7a:a5:71:cf:d1:84:09:21:6c:13:
f5:8e:81:e2:61:42:dd:ca:33:e3:75:08:16:9d:7c:96:b7:52:
3b:93:53:28:3c:f4:2e:1e:15:ae:4a:95:e0:a7:94:ac:51:21:
ce:53:b1:be:cd:59:69:42:5e:8f:bc:9e:9e:41:8f:bc:75:c8:
90:d7:9c:c1:3e:c6:8e:98:47:cd:b9:2f:57:78:cd:64:82:0e:
59:9d:9c:79:24:43:64:31:7b:55:0a:ef:f4:f0:5e:88:12:dd:
cb:57:26:5a:2b:39:f0:36:0d:be:ee:53:df:04:4b:56:94:bd:
ab:80:65:de:9b:dd:64:cc:96:d3:bd:6c:66:a2:9c:5d:ee:1b:
5b:0f:39:f6:0b:e4:2d:25:8b:6f:89:4a:d8:e7:f0:e8:d6:d0:
5f:7d:b2:0e:3e:29:10:3f:ae:91:60:91:2d:72:f5:81:2c:29:
ac:84:e7:cc:84:0a:a1:fa:6f:04:2e:8e:35:7a:80:73:c9:3e:
65:d7:a2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:19:41 2025 by rpki-client