Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
File: nA1VQL3NMwUrwA__JmM4vzzIKoA.mft (raw, json)
Hash identifier: ReafUhgW4t8PAqYUE3w9KzIY6fUjVWALgJP+agdwnVM=
Subject key identifier: D7:9B:AF:07:19:24:1C:5B:B7:6D:F4:2C:13:BA:F6:F4:01:B0:EC:A3
Authority key identifier: 9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
Certificate issuer: /CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Certificate serial: 019A71EEB3D373D6F161CCCAEF29DCD5B02E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
Manifest number: 0C11
Signing time: Tue 11 Nov 2025 08:01:00 +0000
Manifest this update: Tue 11 Nov 2025 08:01:00 +0000
Manifest next update: Wed 12 Nov 2025 08:01:00 +0000
Files and hashes: 1: dOMaomaM3zc_oZf2l_KGgZkjQjM.roa (hash: ZA8CPvYUiDN0MdAy8uYPcmT72kE+r1MAEa1eMhF5nMk=)
2: nA1VQL3NMwUrwA__JmM4vzzIKoA.crl (hash: f+dGb+hUfBeJIgccaOXwwS4qp6L/lnSxLU0kOKBPjNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b3:d3:73:d6:f1:61:cc:ca:ef:29:dc:d5:b0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Validity
Not Before: Nov 11 08:01:00 2025 GMT
Not After : Nov 12 08:01:00 2025 GMT
Subject: CN=d79baf0719241c5bb76df42c13baf6f401b0eca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:9e:28:60:f3:2c:4a:09:02:92:5a:65:8f:
9a:04:6b:3c:99:10:21:96:6e:2d:77:0a:ea:6d:45:
2a:1d:be:53:55:94:fb:11:fa:04:81:4b:a1:e3:db:
d3:07:59:ef:51:fb:25:38:27:d9:fe:55:4d:72:ca:
8c:b9:a2:49:cf:fb:98:64:9b:06:60:3e:4f:a7:de:
e6:a3:d1:a1:de:b7:bd:31:30:da:ce:58:98:ea:63:
60:d9:be:55:57:e4:00:15:d8:33:df:6b:36:f7:1b:
57:55:ae:2d:1c:9e:90:56:bc:06:57:93:cd:9e:fe:
7e:a8:89:9c:d5:86:5e:77:5b:22:d5:fa:57:f1:90:
5a:ef:2d:d2:2d:77:24:30:ab:1f:57:92:39:18:4c:
f1:85:75:0d:1c:aa:93:4f:9a:df:7c:21:38:62:ce:
d8:8d:1e:a6:95:a1:4d:43:0a:17:a3:3f:7b:64:b8:
f7:39:54:34:90:03:6d:68:6e:52:45:73:88:5a:66:
c8:fa:68:b8:2e:0e:36:29:be:71:9d:6b:b3:d9:78:
1d:ff:c9:d9:de:5c:47:71:0c:b9:4b:93:39:e8:92:
9d:72:79:a6:10:0b:14:1e:6c:e3:2b:ab:a2:07:26:
fa:0e:ee:39:88:4b:3d:67:8d:bb:e5:04:fc:3f:15:
c3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9B:AF:07:19:24:1C:5B:B7:6D:F4:2C:13:BA:F6:F4:01:B0:EC:A3
X509v3 Authority Key Identifier:
keyid:9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f9:16:96:21:3b:29:49:1d:f8:52:b6:f4:55:80:0b:a7:1e:
c6:a6:ce:97:f4:bf:a4:13:7a:e7:59:fe:dd:f4:e3:6f:80:6c:
7d:66:18:2a:8c:25:19:a3:d4:51:f0:e2:e4:36:11:fb:6d:53:
f9:2c:9e:07:59:0d:77:9b:c3:48:ce:b9:86:7f:99:f8:65:4d:
e8:5b:9c:b9:80:b8:87:26:b9:6d:4d:a7:4e:7e:0e:74:54:70:
7c:11:d4:b7:9a:36:3f:bd:92:62:c3:d9:8f:93:b0:1d:22:db:
ae:fd:65:49:e2:a0:d0:a9:d4:3f:1b:4d:2f:fc:a3:ee:5b:11:
74:33:d9:af:2f:0d:92:fd:e2:23:b4:6f:76:e0:93:29:4a:75:
62:bd:78:5b:4b:f3:8b:91:88:b1:72:06:7a:e2:ad:35:59:46:
a4:38:86:25:4d:ec:77:f2:3a:4d:3f:53:89:be:f6:5c:cc:98:
3a:8d:c7:ec:b4:d0:2e:b1:82:78:06:02:11:ac:be:b0:81:25:
21:b0:90:c1:11:7a:56:7a:83:8f:1e:d8:db:8c:42:a1:b9:74:
45:de:72:be:60:51:a6:16:72:4e:55:e1:c3:68:df:31:6c:12:
4b:d5:eb:16:dd:80:cf:e6:a6:52:2b:d3:e6:46:2c:5a:c5:e3:
94:c1:49:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7rPTc9bxYczK7ync1bAuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMGQ1NTQwYmRjZDMzMDUyYmMwMGZmZjI2NjMzOGJmM2Nj
ODJhODAwHhcNMjUxMTExMDgwMTAwWhcNMjUxMTEyMDgwMTAwWjAzMTEwLwYDVQQD
EyhkNzliYWYwNzE5MjQxYzViYjc2ZGY0MmMxM2JhZjZmNDAxYjBlY2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVmeKGDzLEoJApJaZY+aBGs8mRAh
lm4tdwrqbUUqHb5TVZT7EfoEgUuh49vTB1nvUfslOCfZ/lVNcsqMuaJJz/uYZJsG
YD5Pp97mo9Gh3re9MTDazliY6mNg2b5VV+QAFdgz32s29xtXVa4tHJ6QVrwGV5PN
nv5+qImc1YZed1si1fpX8ZBa7y3SLXckMKsfV5I5GEzxhXUNHKqTT5rffCE4Ys7Y
jR6mlaFNQwoXoz97ZLj3OVQ0kANtaG5SRXOIWmbI+mi4Lg42Kb5xnWuz2Xgd/8nZ
3lxHcQy5S5M56JKdcnmmEAsUHmzjK6uiByb6Du45iEs9Z4275QT8PxXDPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNebrwcZJBxbt230LBO69vQBsOyjMB8GA1UdIwQY
MBaAFJwNVUC9zTMFK8AP/yZjOL88yCqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkExVlFMM05Nd1Vyd0FfX0ptTTR2enpJS29BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83MGRkYzQtZjljNC00OThiLTg1ZWUt
MTZmYzlkNDRlYzdkLzEvbkExVlFMM05Nd1Vyd0FfX0ptTTR2enpJS29BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi83MGRkYzQtZjljNC00OThiLTg1ZWUtMTZmYzlkNDRlYzdk
LzEvbkExVlFMM05Nd1Vyd0FfX0ptTTR2enpJS29BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfkWliE7
KUkd+FK29FWAC6cexqbOl/S/pBN651n+3fTjb4BsfWYYKowlGaPUUfDi5DYR+21T
+SyeB1kNd5vDSM65hn+Z+GVN6FucuYC4hya5bU2nTn4OdFRwfBHUt5o2P72SYsPZ
j5OwHSLbrv1lSeKg0KnUPxtNL/yj7lsRdDPZry8Nkv3iI7RvduCTKUp1Yr14W0vz
i5GIsXIGeuKtNVlGpDiGJU3sd/I6TT9Tib72XMyYOo3H7LTQLrGCeAYCEay+sIEl
IbCQwRF6VnqDjx7Y24xCobl0Rd5yvmBRphZyTlXhw2jfMWwSS9XrFt2Az+amUivT
5kYsWsXjlMFJEg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:55:17 2025 by rpki-client