Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
File: N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft (raw, json)
Hash identifier: 8xHxhJaUMRX73KaYkGInOjhfq9CI/ABJviy1HkTnIo8=
Subject key identifier: CC:FA:C5:B7:73:F2:4A:99:CB:EB:3E:FF:8F:B6:55:1A:9F:DB:6E:B4
Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
Certificate issuer: /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Certificate serial: 0199C4C4968D206021BBD5244A15D437D936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
Manifest number: 16C9
Signing time: Wed 08 Oct 2025 17:00:41 +0000
Manifest this update: Wed 08 Oct 2025 17:00:41 +0000
Manifest next update: Thu 09 Oct 2025 17:00:41 +0000
Files and hashes: 1: MstP95zOzuruszF1xnk5WwohZes.roa (hash: Dd3ffiYJWQ1ODq8HBmZJ5uvdbho1vmy4ZZ9l1KbRzqQ=)
2: N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl (hash: MvOGGGf0e7U76y1qQh2OfxMsHLyea4uLDN+Sk5WWKck=)
3: hZQ03z7hQseGqeqTK23z9sR3KoU.roa (hash: BE/vA6xe/FX485GgKXSnHBPVCcNJNeizsyA4atJDjzU=)
4: mZJe0dOtlVGQXR5nCGtTxDjtYUg.roa (hash: vhmVQoIhA3FIJBKAD6bm8klXoG45fnkM5F0sTYLfvS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c4:96:8d:20:60:21:bb:d5:24:4a:15:d4:37:d9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Validity
Not Before: Oct 8 17:00:41 2025 GMT
Not After : Oct 9 17:00:41 2025 GMT
Subject: CN=ccfac5b773f24a99cbeb3eff8fb6551a9fdb6eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:fd:63:69:55:c5:d7:a8:e6:35:d1:17:75:
45:d1:35:18:27:1b:23:54:7a:ec:1f:a4:17:88:4a:
cb:9a:27:da:0a:71:65:80:2b:8e:09:cd:69:4e:94:
e8:0b:4b:b3:6e:8e:25:40:ec:b4:9a:88:a5:43:18:
a0:1b:92:16:73:ce:3b:a6:0b:2f:d1:61:95:0f:49:
c4:c2:ee:54:af:74:21:2a:d7:dc:d1:69:a9:e7:db:
d0:be:a6:3c:1d:55:c1:70:c1:d9:b5:aa:5c:22:54:
9e:f0:b0:c8:62:1d:bb:5c:d5:f7:60:60:3f:e5:b1:
59:08:5b:5e:29:9a:d0:fb:7e:1e:b1:8a:7e:4d:89:
ff:b5:c0:44:fd:bb:76:ef:c6:77:9b:b3:f9:73:bc:
83:41:e0:9d:5d:ba:b2:18:72:86:ac:88:92:07:ac:
89:85:07:28:38:95:12:03:56:15:0c:9c:b4:77:05:
24:08:87:4a:7c:ed:c2:68:c0:48:14:c1:06:18:5e:
a7:77:fa:72:3a:d8:24:78:24:75:ea:eb:2e:b3:d7:
8d:22:58:cf:11:65:ee:e5:fa:01:8f:0a:17:f2:f8:
9d:00:94:27:72:b7:9b:5d:07:0b:67:16:02:91:48:
bd:b6:6e:01:c8:81:a4:62:e7:47:40:69:71:70:35:
b0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FA:C5:B7:73:F2:4A:99:CB:EB:3E:FF:8F:B6:55:1A:9F:DB:6E:B4
X509v3 Authority Key Identifier:
keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ad:48:83:85:59:8f:99:46:e7:c4:45:32:98:ad:65:7a:13:
ef:23:7e:2a:48:5a:35:33:af:74:3a:82:a5:b5:ac:22:b5:46:
f2:42:4f:36:3a:86:37:e1:f3:f1:eb:54:0a:fb:84:17:b6:93:
8d:a0:e9:ee:01:09:1b:0b:67:50:57:ed:05:a3:5b:b9:6d:62:
b4:08:69:c0:b9:fb:66:e0:ac:a0:b4:29:d2:7a:84:ae:2f:67:
a0:7d:0a:dd:87:e0:f0:98:a4:57:91:33:b2:69:c7:85:1f:b6:
60:ed:63:c9:04:1d:8f:d5:b6:4e:64:89:5e:87:5e:4e:82:21:
07:07:cc:aa:85:46:0f:be:bf:ae:01:95:d7:2a:64:f9:70:97:
f2:71:89:15:6f:73:03:4c:4b:dd:ed:19:72:65:eb:a0:a7:26:
79:75:3d:1f:8f:62:3d:3e:41:ab:bc:bc:80:22:db:b6:fa:ea:
d1:0d:f2:8e:19:84:e1:9f:05:23:7e:d1:fa:b1:59:7a:ca:41:
9d:b2:b0:c4:af:3e:d0:e4:11:c6:7a:44:73:a3:84:ea:cc:5c:
bc:97:81:28:e7:23:f5:1b:cb:ba:9b:fe:2f:8c:93:04:c7:ef:
fc:17:2c:10:69:ef:47:d8:d3:72:10:26:67:ef:a8:5f:5d:67:
f1:c5:71:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnExJaNIGAhu9UkShXUN9k2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OGFhNmVkNGI2Y2FjNmIzYTUyOTYxYmNmYTIyOWNmZGEw
MDA4MGUwHhcNMjUxMDA4MTcwMDQxWhcNMjUxMDA5MTcwMDQxWjAzMTEwLwYDVQQD
EyhjY2ZhYzViNzczZjI0YTk5Y2JlYjNlZmY4ZmI2NTUxYTlmZGI2ZWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg39Y2lVxdeo5jXRF3VF0TUYJxsj
VHrsH6QXiErLmifaCnFlgCuOCc1pTpToC0uzbo4lQOy0moilQxigG5IWc847pgsv
0WGVD0nEwu5Ur3QhKtfc0Wmp59vQvqY8HVXBcMHZtapcIlSe8LDIYh27XNX3YGA/
5bFZCFteKZrQ+34esYp+TYn/tcBE/bt278Z3m7P5c7yDQeCdXbqyGHKGrIiSB6yJ
hQcoOJUSA1YVDJy0dwUkCIdKfO3CaMBIFMEGGF6nd/pyOtgkeCR16usus9eNIljP
EWXu5foBjwoX8vidAJQncrebXQcLZxYCkUi9tm4ByIGkYudHQGlxcDWwIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMz6xbdz8kqZy+s+/4+2VRqf2260MB8GA1UdIwQY
MBaAFDeKpu1LbKxrOlKWG8+iKc/aAAgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xYmRkYTktNjRlYy00ZmI2LThiNDAt
ZjRiOWRhNDgwZWUyLzEvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xYmRkYTktNjRlYy00ZmI2LThiNDAtZjRiOWRhNDgwZWUy
LzEvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQq1Ig4VZ
j5lG58RFMpitZXoT7yN+KkhaNTOvdDqCpbWsIrVG8kJPNjqGN+Hz8etUCvuEF7aT
jaDp7gEJGwtnUFftBaNbuW1itAhpwLn7ZuCsoLQp0nqEri9noH0K3Yfg8JikV5Ez
smnHhR+2YO1jyQQdj9W2TmSJXodeToIhBwfMqoVGD76/rgGV1ypk+XCX8nGJFW9z
A0xL3e0ZcmXroKcmeXU9H49iPT5Bq7y8gCLbtvrq0Q3yjhmE4Z8FI37R+rFZespB
nbKwxK8+0OQRxnpEc6OE6sxcvJeBKOcj9RvLupv+L4yTBMfv/BcsEGnvR9jTchAm
Z++oX11n8cVxfQ==
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:35:54 2025 by rpki-client