Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
File: nPYI_632AAge6SIpjksq6Wr_SOg.mft (raw, json)
Hash identifier: HnC4NGvZSyDS1K96gRd22mQL5TIqEGDrbntQ2yjRSAc=
Subject key identifier: 9F:E3:06:8F:92:B8:2D:D9:A3:09:2E:7A:9C:EE:B0:35:01:32:95:27
Authority key identifier: 9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
Certificate issuer: /CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Certificate serial: 019A4F2B3247D08ED7E400AE8F00AC1FDFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 14:00:22 +0000
Manifest this update: Tue 04 Nov 2025 14:00:22 +0000
Manifest next update: Wed 05 Nov 2025 14:00:22 +0000
Files and hashes: 1: RvXB7TupJSt9FEkzNNElWKNqWuk.roa (hash: yijhlw1vumObJvF+OXDbjNPPtftfHa2fND852vV46Co=)
2: nPYI_632AAge6SIpjksq6Wr_SOg.crl (hash: S1t4WG5Qk/XKEjVxpY47eWkNjPgM+RjdWs/Bn9h4Kzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:32:47:d0:8e:d7:e4:00:ae:8f:00:ac:1f:df:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Validity
Not Before: Nov 4 14:00:22 2025 GMT
Not After : Nov 5 14:00:22 2025 GMT
Subject: CN=9fe3068f92b82dd9a3092e7a9ceeb03501329527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:08:e2:03:3f:2a:1d:5e:62:20:4a:65:92:
f8:7b:3f:f6:be:7f:c1:9a:4a:e7:f9:f3:76:bc:b7:
6b:b3:23:8e:51:e6:cf:1a:bd:15:9c:de:20:eb:0d:
50:e1:d3:4e:56:2c:4a:57:3e:ae:c0:b3:8e:3f:57:
52:e7:e7:20:d6:c2:30:b9:8b:b8:26:1b:f8:54:a5:
28:2a:66:32:f8:60:ba:27:96:fd:c3:56:a6:1d:47:
61:ed:4a:1a:4f:dd:41:42:e8:51:19:01:5b:4c:8d:
57:84:60:77:7f:d0:4b:d1:6d:af:c6:15:2a:15:3e:
6c:68:06:97:ec:13:07:27:b0:06:4c:25:22:3a:2d:
5a:bb:47:e2:7b:dc:71:f1:56:1c:b4:83:b4:5c:bf:
8e:b3:d5:97:f1:2e:ab:6f:7d:71:7f:51:f0:e8:36:
79:c0:78:dd:87:0c:87:cd:c5:d1:fa:91:13:47:b8:
ed:c8:e6:a9:62:44:8d:0c:26:b7:65:4d:ae:80:bb:
23:ec:34:7b:d1:31:79:48:4e:32:43:b1:9a:a5:06:
7f:18:6e:08:75:b1:5c:d7:0e:06:04:a2:74:81:b2:
6e:6f:2d:5d:c7:51:17:8f:42:36:18:02:40:7d:87:
b2:43:c2:ce:4c:48:73:bc:73:cd:e8:e4:c1:f4:e5:
26:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E3:06:8F:92:B8:2D:D9:A3:09:2E:7A:9C:EE:B0:35:01:32:95:27
X509v3 Authority Key Identifier:
keyid:9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:b9:e4:2b:02:d4:45:4d:15:ec:5c:2f:1d:03:8d:15:bb:6d:
34:99:23:31:6e:39:1b:6c:48:3c:24:ae:93:8d:3b:f6:ee:5f:
e8:20:ac:cf:b7:dd:f4:1f:c5:3b:35:f3:b1:f9:bc:c8:0c:97:
b8:cf:29:2b:f2:d6:1a:11:37:e6:43:68:e2:95:53:e3:24:38:
a4:0e:ff:c9:3d:06:02:7b:96:87:ed:4f:3f:b1:66:a9:95:51:
db:4e:d4:ee:d1:4f:18:33:ea:3c:69:b6:d1:87:65:10:3e:a1:
7b:cd:32:f7:0e:3f:a5:b1:e7:cc:9b:dc:f7:5d:ba:44:c7:b0:
31:e2:bc:d0:b8:65:46:cd:7d:33:13:f2:24:71:e1:28:e5:eb:
43:01:04:52:14:9c:ef:24:3c:25:85:7f:f6:1b:f2:e4:85:3e:
a6:47:f8:b2:e1:2d:78:76:c9:0d:5f:b4:e2:28:47:d6:04:6a:
fb:17:6b:60:49:d9:4f:b9:5c:94:2c:ef:8a:f6:79:52:4c:da:
8c:eb:9c:72:17:59:35:e3:79:1e:8c:92:0b:77:63:c1:53:f6:
23:20:e3:8a:5b:3d:20:2b:85:8e:3a:74:d8:d6:17:e5:5e:60:
bf:a7:85:42:9e:be:a0:08:4b:00:2f:53:db:e5:e2:45:57:0a:
f2:eb:26:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKzJH0I7X5ACujwCsH9/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZjYwOGZmYWRmNjAwMDgxZWU5MjIyOThlNGIyYWU5NmFm
ZjQ4ZTgwHhcNMjUxMTA0MTQwMDIyWhcNMjUxMTA1MTQwMDIyWjAzMTEwLwYDVQQD
Eyg5ZmUzMDY4ZjkyYjgyZGQ5YTMwOTJlN2E5Y2VlYjAzNTAxMzI5NTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKAI4gM/Kh1eYiBKZZL4ez/2vn/B
mkrn+fN2vLdrsyOOUebPGr0VnN4g6w1Q4dNOVixKVz6uwLOOP1dS5+cg1sIwuYu4
Jhv4VKUoKmYy+GC6J5b9w1amHUdh7UoaT91BQuhRGQFbTI1XhGB3f9BL0W2vxhUq
FT5saAaX7BMHJ7AGTCUiOi1au0fie9xx8VYctIO0XL+Os9WX8S6rb31xf1Hw6DZ5
wHjdhwyHzcXR+pETR7jtyOapYkSNDCa3ZU2ugLsj7DR70TF5SE4yQ7GapQZ/GG4I
dbFc1w4GBKJ0gbJuby1dx1EXj0I2GAJAfYeyQ8LOTEhzvHPN6OTB9OUmnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/jBo+SuC3ZowkuepzusDUBMpUnMB8GA1UdIwQY
MBaAFJz2CP+t9gAIHukiKY5LKulq/0joMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblBZSV82MzJBQWdlNlNJcGprc3E2V3JfU09nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kNDVmMTEtNjdjMi00N2E1LTk5NmMt
ODkxZWI1NDhiODkxLzEvblBZSV82MzJBQWdlNlNJcGprc3E2V3JfU09nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kNDVmMTEtNjdjMi00N2E1LTk5NmMtODkxZWI1NDhiODkx
LzEvblBZSV82MzJBQWdlNlNJcGprc3E2V3JfU09nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzLnkKwLU
RU0V7FwvHQONFbttNJkjMW45G2xIPCSuk4079u5f6CCsz7fd9B/FOzXzsfm8yAyX
uM8pK/LWGhE35kNo4pVT4yQ4pA7/yT0GAnuWh+1PP7FmqZVR207U7tFPGDPqPGm2
0YdlED6he80y9w4/pbHnzJvc9126RMewMeK80LhlRs19MxPyJHHhKOXrQwEEUhSc
7yQ8JYV/9hvy5IU+pkf4suEteHbJDV+04ihH1gRq+xdrYEnZT7lclCzvivZ5Ukza
jOucchdZNeN5HoySC3djwVP2IyDjils9ICuFjjp02NYX5V5gv6eFQp6+oAhLAC9T
2+XiRVcK8usmzQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:06 2025 by rpki-client