Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
File: nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft (raw, json)
Hash identifier: fxHoZPffgbg1wfwZshmnxved4AS39kOBjV0SZguBjZg=
Subject key identifier: 6B:07:72:75:0C:03:1B:C6:0F:49:54:F0:74:E4:40:2E:57:F5:97:B3
Authority key identifier: 9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
Certificate issuer: /CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Certificate serial: 019A559B9DAA959835A4A8B797D19717E126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
Manifest number: 1036
Signing time: Wed 05 Nov 2025 20:00:53 +0000
Manifest this update: Wed 05 Nov 2025 20:00:53 +0000
Manifest next update: Thu 06 Nov 2025 20:00:53 +0000
Files and hashes: 1: nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl (hash: 2T3m9zh3pqcu2WCgUolG4KzPLmFtrLzQgHHHCXUIMng=)
2: xk36of5GcRMNZGUJt-_5r_QctTo.roa (hash: BbMVXEvQwTUOBV0n4W+iUw7Na6Uh7I6Smkrm6hqGQWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:9d:aa:95:98:35:a4:a8:b7:97:d1:97:17:e1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Validity
Not Before: Nov 5 20:00:53 2025 GMT
Not After : Nov 6 20:00:53 2025 GMT
Subject: CN=6b0772750c031bc60f4954f074e4402e57f597b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3f:25:e6:f3:a1:41:cc:47:59:77:d8:4c:1c:
22:0f:a4:05:8e:74:f3:da:6f:61:c5:08:2c:64:1d:
db:b0:65:6a:52:06:d7:5d:1d:2f:e5:cd:77:fc:aa:
b2:a4:b1:ff:2d:90:ef:d6:d5:46:f6:c7:59:b8:a2:
1c:d0:03:e8:12:20:e9:c7:26:95:8f:2a:22:09:0f:
ba:c9:8b:62:76:c6:0e:d7:b6:16:4e:ed:2d:ec:d8:
90:bc:a9:59:f5:95:93:b3:87:e8:2b:4d:91:93:06:
5d:ac:b2:96:75:9e:34:f7:39:9e:6f:7c:41:19:d5:
5a:1a:80:fc:95:b8:92:7f:2a:b7:d9:bf:d5:40:07:
bf:a4:1c:ee:5d:78:76:24:56:96:81:2c:a5:20:13:
c9:29:d7:80:b4:3f:64:25:f9:d3:15:b3:9e:33:af:
51:e6:c2:a2:c9:91:f7:43:72:f2:70:98:c0:b1:c2:
d8:82:1f:99:ba:df:ad:b7:db:60:af:db:a8:68:5b:
9c:6a:89:52:a9:f1:d3:04:5b:f2:8a:03:6f:0b:80:
2e:fb:73:6c:5b:7f:69:c6:a0:5e:5c:5b:26:d3:55:
fb:65:ce:ef:51:89:20:b9:9a:49:06:ec:9d:bb:6d:
73:c0:18:09:68:fe:4b:a2:e6:d6:30:db:8e:be:6b:
5f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:07:72:75:0C:03:1B:C6:0F:49:54:F0:74:E4:40:2E:57:F5:97:B3
X509v3 Authority Key Identifier:
keyid:9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fd:78:ed:45:e0:0e:49:ea:00:22:52:36:0d:79:fb:f6:c7:
c8:45:0e:0c:e3:58:ef:2c:55:44:13:2c:58:27:af:88:fd:15:
6e:76:dd:71:e6:d6:08:18:9a:84:2f:6f:f3:17:cc:05:a9:51:
fc:b7:a8:dd:c0:ae:aa:90:48:fb:3a:47:42:f4:9c:d5:b6:0a:
14:4f:1d:73:03:79:43:01:ec:2c:50:c0:4f:32:a6:c7:46:c6:
bf:2c:97:42:5f:1c:3f:b9:f0:13:58:cd:96:b6:8b:e2:89:8b:
2c:3a:d7:80:54:49:04:bc:4e:bd:3b:c8:bf:11:19:de:dd:84:
0c:4d:4c:d7:1d:43:c9:58:af:c4:16:3a:84:fc:b7:ef:bf:38:
47:9d:9a:66:3d:fd:28:a9:ef:d9:27:28:b5:ca:0f:b7:05:84:
be:42:34:c8:a8:f8:03:32:0a:89:76:ce:ab:6a:af:21:0e:61:
5b:71:cf:e4:a9:f7:ee:92:41:33:3c:f0:b4:75:23:6d:75:98:
5b:94:55:f6:b3:d4:7f:87:2d:1f:b1:42:63:af:da:c8:df:79:
81:8d:81:73:51:64:95:87:b7:e4:6a:60:12:5f:95:de:ef:28:
f6:c7:f7:cc:43:9c:f5:14:fe:6b:fd:1b:c9:4c:4d:d9:f1:e8:
66:4c:4a:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpVm52qlZg1pKi3l9GXF+EmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMjQwNjRmOTUzMzFjZjFmMzE1ZGM1MGRlNGRiMDVmZjk1
YWE0MTAwHhcNMjUxMTA1MjAwMDUzWhcNMjUxMTA2MjAwMDUzWjAzMTEwLwYDVQQD
Eyg2YjA3NzI3NTBjMDMxYmM2MGY0OTU0ZjA3NGU0NDAyZTU3ZjU5N2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz8l5vOhQcxHWXfYTBwiD6QFjnTz
2m9hxQgsZB3bsGVqUgbXXR0v5c13/KqypLH/LZDv1tVG9sdZuKIc0APoEiDpxyaV
jyoiCQ+6yYtidsYO17YWTu0t7NiQvKlZ9ZWTs4foK02RkwZdrLKWdZ409zmeb3xB
GdVaGoD8lbiSfyq32b/VQAe/pBzuXXh2JFaWgSylIBPJKdeAtD9kJfnTFbOeM69R
5sKiyZH3Q3LycJjAscLYgh+Zut+tt9tgr9uoaFucaolSqfHTBFvyigNvC4Au+3Ns
W39pxqBeXFsm01X7Zc7vUYkguZpJBuydu21zwBgJaP5LoubWMNuOvmtf8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsHcnUMAxvGD0lU8HTkQC5X9ZezMB8GA1UdIwQY
MBaAFJ8kBk+VMxzx8xXcUN5NsF/5WqQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnlRR1Q1VXpIUEh6RmR4UTNrMndYX2xhcEJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80MDA3OWItZmNhYS00NmQ5LTgxNjEt
NjZhNmM4MGQyNmE1LzEvbnlRR1Q1VXpIUEh6RmR4UTNrMndYX2xhcEJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80MDA3OWItZmNhYS00NmQ5LTgxNjEtNjZhNmM4MGQyNmE1
LzEvbnlRR1Q1VXpIUEh6RmR4UTNrMndYX2xhcEJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAff147UXg
DknqACJSNg15+/bHyEUODONY7yxVRBMsWCeviP0VbnbdcebWCBiahC9v8xfMBalR
/Leo3cCuqpBI+zpHQvSc1bYKFE8dcwN5QwHsLFDATzKmx0bGvyyXQl8cP7nwE1jN
lraL4omLLDrXgFRJBLxOvTvIvxEZ3t2EDE1M1x1DyVivxBY6hPy37784R52aZj39
KKnv2ScotcoPtwWEvkI0yKj4AzIKiXbOq2qvIQ5hW3HP5Kn37pJBMzzwtHUjbXWY
W5RV9rPUf4ctH7FCY6/ayN95gY2Bc1FklYe35GpgEl+V3u8o9sf3zEOc9RT+a/0b
yUxN2fHoZkxKYQ==
-----END CERTIFICATE-----
Generated at Thu Nov 6 06:07:40 2025 by rpki-client