Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
File: nL6cQ-51mJYAORlQhzRyM0a_cBY.mft (raw, json)
Hash identifier: NQ5ddhQ2qeKLNWhRhha8KT5DbQ3AtuAePlRTm6q7hSg=
Subject key identifier: 24:62:54:F4:9B:AF:76:67:08:E3:EB:29:76:7B:13:84:6E:BC:1A:F9
Authority key identifier: 9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
Certificate issuer: /CN=9cbe9c43ee759896003919508734723346bf7016
Certificate serial: 019A71B8D525F5408A20982AC74F73E895E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
Manifest number: 12E2
Signing time: Tue 11 Nov 2025 07:02:09 +0000
Manifest this update: Tue 11 Nov 2025 07:02:09 +0000
Manifest next update: Wed 12 Nov 2025 07:02:09 +0000
Files and hashes: 1: UZ53Oxv_ea1DJibe26VPgv4-Vpo.roa (hash: hiy12f2VyI89A+R22FhEyFKlin2hs0EKoXos1apn778=)
2: nL6cQ-51mJYAORlQhzRyM0a_cBY.crl (hash: tyPB2gDVMusO0AB/3jB5cK+MS7aRNgtdWf4zP5M/3Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d5:25:f5:40:8a:20:98:2a:c7:4f:73:e8:95:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbe9c43ee759896003919508734723346bf7016
Validity
Not Before: Nov 11 07:02:09 2025 GMT
Not After : Nov 12 07:02:09 2025 GMT
Subject: CN=246254f49baf766708e3eb29767b13846ebc1af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:84:c0:ff:05:99:1b:b6:cb:77:3d:82:80:34:
7b:9f:b3:81:38:a0:a6:6d:9c:62:5d:c8:c0:cc:04:
87:0a:19:59:78:bb:a4:57:fc:64:6c:7a:ef:04:85:
25:16:94:3a:c9:88:d8:76:1e:d7:56:98:e3:7d:f7:
d3:d6:d9:8a:df:89:d6:c7:78:5e:a1:3e:64:d2:22:
52:47:29:59:11:3d:3f:b4:aa:d8:9f:77:a4:07:40:
7a:d9:c4:32:69:c5:8f:ed:fe:e8:bd:3d:a2:39:71:
10:f6:3c:6e:dc:ed:d0:c4:de:d0:c3:85:db:fa:68:
1f:47:41:61:db:09:bf:70:54:c0:06:09:80:c4:e9:
15:5c:2d:4c:5e:e1:97:6d:f6:09:6a:35:88:08:4a:
91:cb:06:10:fa:37:20:83:8d:c2:d2:c8:ae:a7:f5:
bf:c8:61:c5:1a:13:96:6b:f9:66:60:e6:4a:b7:a6:
fd:83:db:fc:28:3a:70:51:cd:66:97:04:ed:10:45:
8c:8a:43:8d:a7:fa:04:05:94:41:91:4f:bc:68:33:
4b:74:5c:29:7c:c1:42:b9:56:dc:fc:a4:2d:ab:8d:
c8:b4:e5:c0:f2:04:1e:ca:e5:62:ad:eb:ed:7e:8a:
1b:c9:33:c3:e7:89:87:5d:bc:1e:0f:1d:6f:a3:10:
0c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:62:54:F4:9B:AF:76:67:08:E3:EB:29:76:7B:13:84:6E:BC:1A:F9
X509v3 Authority Key Identifier:
keyid:9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:bd:5f:cc:af:92:d7:a5:a5:83:bb:95:b1:f3:76:c1:0d:64:
2e:b1:50:59:6a:40:50:42:ec:4b:da:1d:53:13:d0:ad:86:79:
24:2d:ad:36:f7:2b:34:b4:e8:8b:f3:34:40:69:37:8d:50:06:
1b:93:23:79:10:9a:8c:98:1f:78:73:ef:1b:a8:fe:a3:3c:ae:
e0:11:28:0a:d6:9b:3b:8d:9f:43:bb:2f:80:be:af:41:a8:fd:
44:36:db:9f:4b:57:77:1a:96:1f:b7:95:e7:39:e2:f3:d5:a8:
07:74:2c:f8:71:18:6e:e7:36:97:07:9d:61:70:af:13:ec:0a:
07:3a:a7:ad:ce:9e:30:32:f8:e8:25:a2:f8:7d:20:81:76:eb:
fe:6d:54:79:7e:67:aa:79:27:34:f3:30:57:a7:14:88:c6:97:
e4:a2:15:22:5d:8f:01:1f:9a:9e:de:eb:85:15:e7:24:ef:a0:
0a:84:d4:9c:78:38:41:c4:b3:b0:06:d9:44:69:62:6c:8f:2f:
60:2b:17:e5:67:64:e4:40:39:b2:a0:dd:38:27:51:de:fc:50:
27:bc:62:6e:d5:d3:24:bc:28:2a:9d:ea:41:f5:b2:f9:06:d3:
aa:db:8f:c4:92:ef:b7:91:78:9f:ae:f2:d8:19:6c:6c:ea:f8:
73:aa:84:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuNUl9UCKIJgqx09z6JXkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYmU5YzQzZWU3NTk4OTYwMDM5MTk1MDg3MzQ3MjMzNDZi
ZjcwMTYwHhcNMjUxMTExMDcwMjA5WhcNMjUxMTEyMDcwMjA5WjAzMTEwLwYDVQQD
EygyNDYyNTRmNDliYWY3NjY3MDhlM2ViMjk3NjdiMTM4NDZlYmMxYWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oTA/wWZG7bLdz2CgDR7n7OBOKCm
bZxiXcjAzASHChlZeLukV/xkbHrvBIUlFpQ6yYjYdh7XVpjjfffT1tmK34nWx3he
oT5k0iJSRylZET0/tKrYn3ekB0B62cQyacWP7f7ovT2iOXEQ9jxu3O3QxN7Qw4Xb
+mgfR0Fh2wm/cFTABgmAxOkVXC1MXuGXbfYJajWICEqRywYQ+jcgg43C0siup/W/
yGHFGhOWa/lmYOZKt6b9g9v8KDpwUc1mlwTtEEWMikONp/oEBZRBkU+8aDNLdFwp
fMFCuVbc/KQtq43ItOXA8gQeyuVirevtfoobyTPD54mHXbweDx1voxAMJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRiVPSbr3ZnCOPrKXZ7E4RuvBr5MB8GA1UdIwQY
MBaAFJy+nEPudZiWADkZUIc0cjNGv3AWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTc0ZTktNDc0My00NmRiLWEzNDgt
MWQxOTg5ZjA2NjE4LzEvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTc0ZTktNDc0My00NmRiLWEzNDgtMWQxOTg5ZjA2NjE4
LzEvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKb1fzK+S
16Wlg7uVsfN2wQ1kLrFQWWpAUELsS9odUxPQrYZ5JC2tNvcrNLToi/M0QGk3jVAG
G5MjeRCajJgfeHPvG6j+ozyu4BEoCtabO42fQ7svgL6vQaj9RDbbn0tXdxqWH7eV
5zni89WoB3Qs+HEYbuc2lwedYXCvE+wKBzqnrc6eMDL46CWi+H0ggXbr/m1UeX5n
qnknNPMwV6cUiMaX5KIVIl2PAR+ant7rhRXnJO+gCoTUnHg4QcSzsAbZRGlibI8v
YCsX5Wdk5EA5sqDdOCdR3vxQJ7xibtXTJLwoKp3qQfWy+QbTqtuPxJLvt5F4n67y
2BlsbOr4c6qEAg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:24 2025 by rpki-client