Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
File: nYHLUEMmdDsX02SiBIdcOcbtvAk.mft (raw, json)
Hash identifier: Tjkk5s1Auh4/ke1/7eRN8NlwEfeF8KJeNE03lPJQcpw=
Subject key identifier: 15:E4:75:FF:16:9A:5B:73:8B:78:06:20:70:C1:61:37:48:4A:D4:27
Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09
Certificate serial: 019A552D2652F4DCDE7050377C98E0AD18C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
Manifest number: 10A7
Signing time: Wed 05 Nov 2025 18:00:13 +0000
Manifest this update: Wed 05 Nov 2025 18:00:13 +0000
Manifest next update: Thu 06 Nov 2025 18:00:13 +0000
Files and hashes: 1: JP_mk9oH8p5bvlYYSWGek7KXox0.roa (hash: QozdhhJZu+Cfz+XSJNvXYpnVEpaUzqrN6lM64Dbcl70=)
2: nYHLUEMmdDsX02SiBIdcOcbtvAk.crl (hash: j09p4ohacRffwxP4UHuTBD6odla2DPzmzKWva6DrMLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:26:52:f4:dc:de:70:50:37:7c:98:e0:ad:18:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09
Validity
Not Before: Nov 5 18:00:13 2025 GMT
Not After : Nov 6 18:00:13 2025 GMT
Subject: CN=15e475ff169a5b738b78062070c16137484ad427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:d0:cd:8f:a3:eb:cd:eb:56:06:53:ee:c6:
94:57:9f:63:18:45:f2:08:14:f4:41:20:7c:bc:ec:
2f:22:63:06:d9:93:10:13:b6:42:80:3d:a9:7d:8b:
56:8a:fa:3f:f6:50:d1:de:fb:b6:31:df:87:7c:c2:
ac:13:aa:35:c9:59:49:8c:42:cd:12:6a:d4:29:58:
f2:b1:23:65:85:47:77:63:1b:9b:7c:b4:1d:35:73:
1a:5f:85:03:fe:ed:28:ed:a0:b2:69:67:ba:59:c6:
7f:52:7b:ca:22:72:1e:ac:12:60:27:58:94:5a:87:
a2:f5:ef:14:c4:4a:21:e1:52:aa:8a:4a:05:ae:ae:
51:c0:82:df:32:18:cc:3a:88:9e:8f:36:96:90:18:
b8:b5:b0:54:21:c9:94:9f:f5:e5:56:2b:76:35:00:
e5:47:8e:92:a4:55:9d:18:29:a4:95:91:fd:c7:27:
3c:13:c1:dd:0c:f3:1f:d0:9a:71:98:af:0e:dd:87:
51:49:e3:94:f9:72:ff:e8:a8:76:26:a8:67:a3:e3:
dc:a9:de:b1:0f:0c:da:07:2a:11:c1:e5:95:02:3f:
8d:1b:3b:2f:1b:54:85:59:b5:3f:85:16:02:8c:9f:
52:92:9c:6b:3f:66:97:7f:37:3e:25:42:16:11:62:
3d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E4:75:FF:16:9A:5B:73:8B:78:06:20:70:C1:61:37:48:4A:D4:27
X509v3 Authority Key Identifier:
keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:72:60:8d:ba:a3:19:25:58:ef:9f:1d:ec:9f:99:c5:32:1d:
eb:c9:d3:47:d2:61:81:42:1e:41:ea:55:c4:fc:a9:8e:ea:b5:
45:14:41:cb:56:7c:bb:d2:3b:ff:dd:2d:4b:04:4a:bb:2c:c4:
b0:a1:91:d7:0b:0e:bf:99:5e:c2:bd:ea:30:89:41:b0:3d:93:
25:ff:24:87:ea:bf:f1:fc:d4:ce:bd:04:c5:fd:af:3f:74:9f:
d3:29:ff:04:17:b4:6b:6b:ba:b0:fc:3c:c3:1a:96:d9:c8:ce:
95:67:ff:1e:d3:c2:0c:72:cc:c2:fc:8a:0a:f2:c9:da:c1:16:
8b:bf:22:e5:c5:22:c1:9c:3c:fa:45:87:21:a0:79:f4:d0:7d:
cd:ab:e3:9d:a1:97:91:31:fc:97:ec:85:44:17:0c:df:cd:7b:
93:7d:d1:26:ef:bf:ad:26:58:77:ad:8b:3c:f7:ce:62:af:82:
82:52:4c:00:80:82:82:1b:f0:12:00:57:4a:54:e4:e8:67:6c:
b9:b8:92:d6:d0:cb:43:d6:2e:52:c6:02:1e:25:83:94:59:21:
0d:9d:82:27:dd:cf:99:07:08:62:48:c6:ba:e8:96:7e:b9:88:
22:7d:42:62:1b:44:33:be:eb:9b:21:f5:98:4b:78:c5:22:36:
e9:2b:20:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpVLSZS9NzecFA3fJjgrRjFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkODFjYjUwNDMyNjc0M2IxN2QzNjRhMjA0ODc1YzM5YzZl
ZGJjMDkwHhcNMjUxMTA1MTgwMDEzWhcNMjUxMTA2MTgwMDEzWjAzMTEwLwYDVQQD
EygxNWU0NzVmZjE2OWE1YjczOGI3ODA2MjA3MGMxNjEzNzQ4NGFkNDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEzQzY+j683rVgZT7saUV59jGEXy
CBT0QSB8vOwvImMG2ZMQE7ZCgD2pfYtWivo/9lDR3vu2Md+HfMKsE6o1yVlJjELN
EmrUKVjysSNlhUd3YxubfLQdNXMaX4UD/u0o7aCyaWe6WcZ/UnvKInIerBJgJ1iU
Woei9e8UxEoh4VKqikoFrq5RwILfMhjMOoiejzaWkBi4tbBUIcmUn/XlVit2NQDl
R46SpFWdGCmklZH9xyc8E8HdDPMf0JpxmK8O3YdRSeOU+XL/6Kh2Jqhno+Pcqd6x
DwzaByoRweWVAj+NGzsvG1SFWbU/hRYCjJ9SkpxrP2aXfzc+JUIWEWI9mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXkdf8Wmltzi3gGIHDBYTdIStQnMB8GA1UdIwQY
MBaAFJ2By1BDJnQ7F9NkogSHXDnG7bwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMzlkMjktNzEyYS00Yzg2LTk1MTAt
ZTRkNmJjZjMzNmI3LzEvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zMzlkMjktNzEyYS00Yzg2LTk1MTAtZTRkNmJjZjMzNmI3
LzEvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnJgjbqj
GSVY758d7J+ZxTId68nTR9JhgUIeQepVxPypjuq1RRRBy1Z8u9I7/90tSwRKuyzE
sKGR1wsOv5lewr3qMIlBsD2TJf8kh+q/8fzUzr0Exf2vP3Sf0yn/BBe0a2u6sPw8
wxqW2cjOlWf/HtPCDHLMwvyKCvLJ2sEWi78i5cUiwZw8+kWHIaB59NB9zavjnaGX
kTH8l+yFRBcM3817k33RJu+/rSZYd62LPPfOYq+CglJMAICCghvwEgBXSlTk6Gds
ubiS1tDLQ9YuUsYCHiWDlFkhDZ2CJ93PmQcIYkjGuuiWfrmIIn1CYhtEM77rmyH1
mEt4xSI26SsgWg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:53:45 2025 by rpki-client