Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
File: nAqubUXQbffEJ4708hjkLbgHCUw.mft (raw, json)
Hash identifier: pTzfcovvymIVfB72Oh7O6SDkkD8nt8nUVzNH6m5OEaA=
Subject key identifier: 0D:BE:5D:7D:48:41:8A:D8:97:89:95:19:1D:CA:E6:79:B3:46:F4:4B
Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Certificate serial: 019A37FEEB5F11706C972AA2AE0DD78814AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
Manifest number: 1701
Signing time: Fri 31 Oct 2025 02:00:44 +0000
Manifest this update: Fri 31 Oct 2025 02:00:44 +0000
Manifest next update: Sat 01 Nov 2025 02:00:44 +0000
Files and hashes: 1: MJMdhZnjDE7HHdif7jOifgXeBWw.roa (hash: OAM+4dNU25EOni1NCJmygQc3McNUoy2zZaTz7W6MCZg=)
2: nAqubUXQbffEJ4708hjkLbgHCUw.crl (hash: mccw9/TM+Yt1egfcCytp+pZjT/V7PEME6PHXToq/OY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:37:fe:eb:5f:11:70:6c:97:2a:a2:ae:0d:d7:88:14:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Validity
Not Before: Oct 31 02:00:44 2025 GMT
Not After : Nov 1 02:00:44 2025 GMT
Subject: CN=0dbe5d7d48418ad8978995191dcae679b346f44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8b:2c:81:aa:53:0a:d5:67:fd:e5:fc:98:9b:
76:6c:14:1b:52:23:0a:6c:8c:4d:3c:65:a1:c8:42:
da:7c:af:3c:23:0b:ea:34:5f:5d:b4:11:27:73:c9:
e1:39:ab:fd:7d:39:1f:17:b8:ea:64:3a:6f:fb:b5:
26:81:3b:df:31:df:aa:2e:60:f4:f0:82:c5:a3:a8:
fb:58:74:54:7e:7f:a4:09:7e:c9:c0:9b:aa:07:22:
27:fa:c8:bd:6f:a2:e1:31:1f:7b:c7:2c:9a:42:c3:
f1:5d:18:7b:b6:71:36:ee:b3:5d:b5:a1:cb:a9:4b:
f1:56:8e:05:4f:fe:02:94:d7:32:c9:d9:07:b1:ae:
e6:53:d7:24:40:e6:83:72:75:07:fe:51:b9:86:7f:
70:e9:b4:71:56:74:8f:52:b3:92:47:a0:e1:83:76:
28:4c:8c:97:bd:c3:8e:04:57:dc:7b:9b:78:4c:08:
82:34:e7:50:cb:d1:d1:6e:0a:26:f4:98:5a:47:02:
d2:93:fa:87:2f:d9:e0:6d:52:21:fd:46:70:63:28:
14:db:39:9d:78:a7:b6:c7:92:ef:44:28:d0:f7:85:
89:71:4f:f7:f5:cc:5f:bb:ee:c0:98:43:09:c2:86:
4f:64:86:43:15:34:25:69:3d:8c:07:5f:b3:83:07:
cf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BE:5D:7D:48:41:8A:D8:97:89:95:19:1D:CA:E6:79:B3:46:F4:4B
X509v3 Authority Key Identifier:
keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:dc:76:15:40:96:3a:44:48:d0:15:25:ec:ba:14:e8:42:db:
f2:a6:10:e8:5c:4f:05:4c:c2:4a:8c:4e:77:e6:9b:f7:fa:bc:
f1:7e:f3:5d:f6:cc:23:76:67:1b:20:49:d6:0f:42:86:70:98:
97:44:be:b4:72:2b:d0:b4:2c:41:fd:40:c2:20:44:78:92:ef:
2b:54:8f:1c:09:4c:45:ec:ee:75:98:ea:12:b3:4f:d9:fc:da:
e0:32:c8:00:fc:6c:c1:25:ca:9a:70:7e:1c:b6:e2:66:b2:69:
fb:d9:97:55:14:c9:4e:26:b4:7c:fd:ac:1c:fc:16:13:36:f5:
7e:a6:c7:dc:e3:75:c6:46:e5:fa:50:90:ac:93:f1:ab:fc:fc:
b9:b9:98:51:93:9e:61:96:53:3a:7a:54:dd:b6:43:7e:00:8e:
9e:28:18:ec:b3:02:6d:38:69:f0:33:53:56:55:b6:fe:5a:dd:
63:d9:40:e3:af:55:56:90:8b:d1:86:f7:95:ec:fb:7b:88:fc:
ba:4a:16:25:fe:11:e8:1e:7a:65:a7:67:16:bd:f0:6b:d4:f4:
d1:a9:26:af:c5:69:4e:01:db:0b:0b:85:e1:2b:0e:bc:9e:7d:
7e:81:f7:b7:94:b7:7c:d7:10:f3:cb:44:4f:fa:0a:bf:de:1a:
b2:26:1b:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZo3/utfEXBslyqirg3XiBSqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMGFhZTZkNDVkMDZkZjdjNDI3OGVmNGYyMThlNDJkYjgw
NzA5NGMwHhcNMjUxMDMxMDIwMDQ0WhcNMjUxMTAxMDIwMDQ0WjAzMTEwLwYDVQQD
EygwZGJlNWQ3ZDQ4NDE4YWQ4OTc4OTk1MTkxZGNhZTY3OWIzNDZmNDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4ssgapTCtVn/eX8mJt2bBQbUiMK
bIxNPGWhyELafK88IwvqNF9dtBEnc8nhOav9fTkfF7jqZDpv+7UmgTvfMd+qLmD0
8ILFo6j7WHRUfn+kCX7JwJuqByIn+si9b6LhMR97xyyaQsPxXRh7tnE27rNdtaHL
qUvxVo4FT/4ClNcyydkHsa7mU9ckQOaDcnUH/lG5hn9w6bRxVnSPUrOSR6Dhg3Yo
TIyXvcOOBFfce5t4TAiCNOdQy9HRbgom9JhaRwLSk/qHL9ngbVIh/UZwYygU2zmd
eKe2x5LvRCjQ94WJcU/39cxfu+7AmEMJwoZPZIZDFTQlaT2MB1+zgwfPoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2+XX1IQYrYl4mVGR3K5nmzRvRLMB8GA1UdIwQY
MBaAFJwKrm1F0G33xCeO9PIY5C24BwlMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkFxdWJVWFFiZmZFSjQ3MDhoamtMYmdIQ1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9jOTIwZWMtMDdkYy00NjlkLWI4ODQt
Yjk4YmJiMTYzN2MwLzEvbkFxdWJVWFFiZmZFSjQ3MDhoamtMYmdIQ1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9jOTIwZWMtMDdkYy00NjlkLWI4ODQtYjk4YmJiMTYzN2Mw
LzEvbkFxdWJVWFFiZmZFSjQ3MDhoamtMYmdIQ1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNx2FUCW
OkRI0BUl7LoU6ELb8qYQ6FxPBUzCSoxOd+ab9/q88X7zXfbMI3ZnGyBJ1g9ChnCY
l0S+tHIr0LQsQf1AwiBEeJLvK1SPHAlMRezudZjqErNP2fza4DLIAPxswSXKmnB+
HLbiZrJp+9mXVRTJTia0fP2sHPwWEzb1fqbH3ON1xkbl+lCQrJPxq/z8ubmYUZOe
YZZTOnpU3bZDfgCOnigY7LMCbThp8DNTVlW2/lrdY9lA469VVpCL0Yb3lez7e4j8
ukoWJf4R6B56ZadnFr3wa9T00akmr8VpTgHbCwuF4SsOvJ59foH3t5S3fNcQ88tE
T/oKv94asiYb7Q==
-----END CERTIFICATE-----
Generated at Fri Oct 31 08:11:20 2025 by rpki-client