Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
File: NztHo87nmYKtsXA0HQICYCczICM.mft (raw, json)
Hash identifier: QmKmbxxsHI2AbppTWh4v488AZOwaZCPWlxQUCeYcwRI=
Subject key identifier: C3:2C:4C:D4:4C:D2:E6:08:96:74:04:C2:0E:9F:0D:95:DE:74:F7:DB
Authority key identifier: 37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
Certificate issuer: /CN=373b47a3cee79982adb170341d02026027332023
Certificate serial: 019A70A4E0097CBC11CF88FB27A6DB908476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 02:00:44 +0000
Manifest this update: Tue 11 Nov 2025 02:00:44 +0000
Manifest next update: Wed 12 Nov 2025 02:00:44 +0000
Files and hashes: 1: 44PWl9t-VK2hhZNHr5AmomvoGFc.roa (hash: OxQ7QHN27yQWahrAlORJzxbYRAyj5Alk9/N2TAEqxrY=)
2: NztHo87nmYKtsXA0HQICYCczICM.crl (hash: e9nu2jKqTd1m0WurbUayrOApCTqBhPGIVgFUwTbJ9F8=)
3: fHM2AB9lWMdrr6W98wCcBfFFZto.roa (hash: O5xk5dJ9bNLjoHECEnZnVJ7Que2qp5xFQYolbd9r+sI=)
4: yGyQiv41kYE21uqhtuih0OLSi9I.roa (hash: tdu5vnXKQDyjaj/70REfOS/T9RJiHmxdfg/dwymFlGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:e0:09:7c:bc:11:cf:88:fb:27:a6:db:90:84:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373b47a3cee79982adb170341d02026027332023
Validity
Not Before: Nov 11 02:00:44 2025 GMT
Not After : Nov 12 02:00:44 2025 GMT
Subject: CN=c32c4cd44cd2e608967404c20e9f0d95de74f7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:29:ea:0e:3c:65:16:25:b4:b0:aa:ec:64:5c:
01:db:66:b0:c4:71:99:a7:5c:6d:13:68:98:26:8f:
a4:35:1f:20:20:54:f9:0e:bd:49:a4:77:44:00:eb:
bd:b5:19:8a:27:83:5a:e8:53:1b:85:d2:aa:3f:fb:
64:8a:fb:ae:c3:a4:db:1c:dd:17:2a:8c:0c:f5:7f:
95:22:cb:0b:98:9f:21:d7:c8:fd:59:49:2a:e9:ee:
8d:01:09:d2:5d:fe:c9:b3:dd:b2:6c:71:48:20:f3:
2d:0b:85:96:f5:94:1a:4d:f0:05:2c:d8:df:1c:05:
60:86:78:86:70:10:64:47:9c:74:5e:dc:4a:e2:f5:
00:04:37:fb:49:3b:b9:74:c1:18:95:dc:b1:a1:65:
d0:4f:34:7b:c6:bd:bb:c5:b4:95:5d:5a:d2:ab:a5:
5f:62:0c:da:93:6f:b5:14:93:96:c4:56:de:3e:29:
c2:d3:df:62:31:95:3c:ea:69:c2:4d:7c:49:e0:8d:
06:93:b0:01:bc:0f:88:4a:cd:89:bb:b9:8b:0d:cc:
4c:b6:bc:a8:60:c1:f9:5c:f5:91:6b:15:9c:38:72:
c7:3a:79:14:d6:49:ca:dc:f6:91:4c:cf:70:24:58:
4c:94:24:46:93:3e:d2:a5:c0:bf:35:93:d4:db:5b:
67:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2C:4C:D4:4C:D2:E6:08:96:74:04:C2:0E:9F:0D:95:DE:74:F7:DB
X509v3 Authority Key Identifier:
keyid:37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8f:15:85:8f:93:10:b9:69:ed:49:f0:2c:bb:a8:4b:29:d6:
16:9d:25:99:cc:72:ac:b1:60:02:c4:35:56:39:c1:36:ec:ac:
61:65:b1:ba:8e:64:07:38:52:cf:14:e8:46:bd:71:3a:19:48:
8e:6d:e4:bc:55:c0:9e:71:fb:dc:c0:e6:f5:1d:87:36:68:8a:
74:99:f9:df:5e:79:6c:7f:a2:6b:2d:80:ab:50:3c:c8:36:f1:
64:1a:0c:d7:9b:c8:6e:7f:88:8b:a7:10:ae:ef:59:0b:4b:74:
a6:47:3a:14:0c:cd:09:2c:9d:de:05:30:ff:0a:38:0c:45:31:
48:be:e4:b1:7f:8d:3e:c4:ef:c8:23:dd:b5:b6:ed:e0:7d:b5:
65:a7:8d:0f:2e:49:42:b7:2b:87:2b:53:d7:41:3b:e1:73:14:
ce:47:0d:64:f5:ca:f3:47:31:02:68:a0:ef:54:9e:4c:d8:e8:
e7:6e:d3:93:f9:fb:b9:00:b1:ec:f8:43:61:1d:f4:02:6f:af:
58:ec:e7:42:06:87:42:d1:3f:74:43:1f:fe:45:27:89:a7:69:
9a:b1:2b:da:5a:ff:64:73:39:46:19:2a:52:e7:14:ed:d0:88:
dc:c8:34:1d:c6:9a:e4:d3:96:c1:99:8d:9f:5d:96:b4:11:bb:
74:b5:51:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpOAJfLwRz4j7J6bbkIR2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3M2I0N2EzY2VlNzk5ODJhZGIxNzAzNDFkMDIwMjYwMjcz
MzIwMjMwHhcNMjUxMTExMDIwMDQ0WhcNMjUxMTEyMDIwMDQ0WjAzMTEwLwYDVQQD
EyhjMzJjNGNkNDRjZDJlNjA4OTY3NDA0YzIwZTlmMGQ5NWRlNzRmN2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvinqDjxlFiW0sKrsZFwB22awxHGZ
p1xtE2iYJo+kNR8gIFT5Dr1JpHdEAOu9tRmKJ4Na6FMbhdKqP/tkivuuw6TbHN0X
KowM9X+VIssLmJ8h18j9WUkq6e6NAQnSXf7Js92ybHFIIPMtC4WW9ZQaTfAFLNjf
HAVghniGcBBkR5x0XtxK4vUABDf7STu5dMEYldyxoWXQTzR7xr27xbSVXVrSq6Vf
Ygzak2+1FJOWxFbePinC099iMZU86mnCTXxJ4I0Gk7ABvA+ISs2Ju7mLDcxMtryo
YMH5XPWRaxWcOHLHOnkU1knK3PaRTM9wJFhMlCRGkz7SpcC/NZPU21tnkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMsTNRM0uYIlnQEwg6fDZXedPfbMB8GA1UdIwQY
MBaAFDc7R6PO55mCrbFwNB0CAmAnMyAjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnp0SG84N25tWUt0c1hBMEhRSUNZQ2N6SUNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83YzJhMTUtYWM0ZC00NjRhLWE3N2Ut
MzJmOWEyODJmNTZjLzEvTnp0SG84N25tWUt0c1hBMEhRSUNZQ2N6SUNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC83YzJhMTUtYWM0ZC00NjRhLWE3N2UtMzJmOWEyODJmNTZj
LzEvTnp0SG84N25tWUt0c1hBMEhRSUNZQ2N6SUNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnY8VhY+T
ELlp7UnwLLuoSynWFp0lmcxyrLFgAsQ1VjnBNuysYWWxuo5kBzhSzxToRr1xOhlI
jm3kvFXAnnH73MDm9R2HNmiKdJn53155bH+iay2Aq1A8yDbxZBoM15vIbn+Ii6cQ
ru9ZC0t0pkc6FAzNCSyd3gUw/wo4DEUxSL7ksX+NPsTvyCPdtbbt4H21ZaeNDy5J
QrcrhytT10E74XMUzkcNZPXK80cxAmig71SeTNjo527Tk/n7uQCx7PhDYR30Am+v
WOznQgaHQtE/dEMf/kUniadpmrEr2lr/ZHM5RhkqUucU7dCI3Mg0Hcaa5NOWwZmN
n12WtBG7dLVRfw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:15 2025 by rpki-client