Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
File: NjSXIAQAsPGq56h_yjbwd-DtYs4.mft (raw, json)
Hash identifier: T8372lTakSK1/r6VsGh3vfE+XubcL7TDiyCtD9mlBjM=
Subject key identifier: 9A:B6:23:6C:AE:C8:A8:D9:AE:1E:85:4B:F1:5B:27:0C:D3:C6:BF:80
Authority key identifier: 36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
Certificate issuer: /CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Certificate serial: 019A725CC518EA8DD35250F378C7AF2AD7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
Manifest number: 1094
Signing time: Tue 11 Nov 2025 10:01:13 +0000
Manifest this update: Tue 11 Nov 2025 10:01:13 +0000
Manifest next update: Wed 12 Nov 2025 10:01:13 +0000
Files and hashes: 1: LXHGZAjXqV3BVckN7vOFelHq2Tc.roa (hash: M+8avj4WOOMDQtO8QC9UxKExN0zGnS4KkBKl/qQeGUg=)
2: NjSXIAQAsPGq56h_yjbwd-DtYs4.crl (hash: p35SXpJYJlNciDqouDnfvmLYfruwQZiIfpF/HYQ+y08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c5:18:ea:8d:d3:52:50:f3:78:c7:af:2a:d7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Validity
Not Before: Nov 11 10:01:13 2025 GMT
Not After : Nov 12 10:01:13 2025 GMT
Subject: CN=9ab6236caec8a8d9ae1e854bf15b270cd3c6bf80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:89:fa:21:0d:0d:4d:8b:bf:5c:85:78:b5:52:
7d:82:16:7b:59:4a:13:de:79:41:e7:72:ff:5b:0d:
fc:a7:5a:4f:31:b6:4f:a7:22:7c:35:66:11:a6:fb:
47:83:67:1e:be:4a:6b:dc:fd:06:86:2c:c7:2d:07:
77:c5:8b:af:50:29:2d:f1:e2:dc:a7:bb:a0:92:2f:
a6:73:76:9d:30:61:c2:22:b7:4b:25:b0:a1:c6:46:
05:48:a8:4f:d1:8e:4c:33:47:1a:33:4c:a0:06:06:
9b:3f:38:10:2d:03:81:d0:1b:20:87:45:0b:3d:a2:
14:9e:d3:15:9b:75:ff:cc:53:86:cc:30:f8:67:a2:
d9:2f:24:b5:4c:0f:b1:7d:6b:ec:77:5c:08:c3:dc:
14:16:27:e2:d5:c0:81:59:9a:bd:26:d5:ea:75:95:
dc:83:04:84:4b:37:00:a7:3d:9d:fd:d3:7a:0a:56:
4c:7a:b0:8e:b6:d8:c2:68:21:5e:f5:38:3c:2a:b6:
62:1f:1c:ff:83:60:40:6f:5a:e2:3a:50:69:fa:48:
84:2a:2d:54:ad:70:67:3f:8d:37:99:48:ca:8c:11:
a2:ce:19:9b:ed:3a:9a:3c:f3:0e:c9:53:98:ee:44:
5f:97:94:21:5a:79:e9:25:86:34:17:bf:90:cc:f7:
16:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B6:23:6C:AE:C8:A8:D9:AE:1E:85:4B:F1:5B:27:0C:D3:C6:BF:80
X509v3 Authority Key Identifier:
keyid:36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:94:20:54:22:54:72:77:e1:f8:db:a2:34:fc:cc:d1:4d:7a:
a6:3a:5b:cc:fd:7c:50:af:2e:7f:3e:02:6b:45:da:c2:11:b2:
dc:7b:02:12:6f:98:72:95:88:02:54:f4:0d:cb:bd:87:21:81:
42:92:0f:fb:18:32:91:11:ae:4a:04:16:29:db:f8:d4:98:99:
ab:02:77:74:b8:88:a5:7a:4f:fa:85:2a:03:d4:45:b2:4e:0b:
32:31:73:45:bf:e6:a7:5c:ef:eb:bb:a2:c4:e1:91:b4:c2:4e:
eb:5e:95:80:75:d2:de:d3:87:70:4e:d2:2a:e8:6d:3d:ab:5e:
4f:db:8b:9a:bb:91:36:ca:35:26:89:31:30:e5:ec:55:18:ed:
56:c7:a2:77:7c:93:cd:df:50:91:13:b4:78:d5:54:92:5c:38:
ea:e8:fe:55:a7:6b:a8:7c:1e:8d:c8:7b:26:5e:63:5e:54:16:
22:ae:c6:6d:b7:29:c1:c5:9f:5a:76:a9:dc:2f:fb:0e:04:61:
d2:08:27:53:0d:70:31:84:4f:bf:69:8c:f0:58:dd:a3:c3:0d:
c0:bb:bd:da:39:59:c6:49:9a:67:bc:b9:63:f9:63:c8:78:d6:
d1:70:e9:a5:87:b1:23:d2:04:6a:af:82:60:1e:6b:11:1b:ed:
93:f7:e6:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXMUY6o3TUlDzeMevKtfUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MzQ5NzIwMDQwMGIwZjFhYWU3YTg3ZmNhMzZmMDc3ZTBl
ZDYyY2UwHhcNMjUxMTExMTAwMTEzWhcNMjUxMTEyMTAwMTEzWjAzMTEwLwYDVQQD
Eyg5YWI2MjM2Y2FlYzhhOGQ5YWUxZTg1NGJmMTViMjcwY2QzYzZiZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9In6IQ0NTYu/XIV4tVJ9ghZ7WUoT
3nlB53L/Ww38p1pPMbZPpyJ8NWYRpvtHg2cevkpr3P0GhizHLQd3xYuvUCkt8eLc
p7ugki+mc3adMGHCIrdLJbChxkYFSKhP0Y5MM0caM0ygBgabPzgQLQOB0Bsgh0UL
PaIUntMVm3X/zFOGzDD4Z6LZLyS1TA+xfWvsd1wIw9wUFifi1cCBWZq9JtXqdZXc
gwSESzcApz2d/dN6ClZMerCOttjCaCFe9Tg8KrZiHxz/g2BAb1riOlBp+kiEKi1U
rXBnP403mUjKjBGizhmb7TqaPPMOyVOY7kRfl5QhWnnpJYY0F7+QzPcWvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJq2I2yuyKjZrh6FS/FbJwzTxr+AMB8GA1UdIwQY
MBaAFDY0lyAEALDxqueof8o28Hfg7WLOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmpTWElBUUFzUEdxNTZoX3lqYndkLUR0WXM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wZGUwYjQtYzk5YS00MzYwLWE0NGEt
MTlhMTk5OWQ5ZDdlLzEvTmpTWElBUUFzUEdxNTZoX3lqYndkLUR0WXM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8wZGUwYjQtYzk5YS00MzYwLWE0NGEtMTlhMTk5OWQ5ZDdl
LzEvTmpTWElBUUFzUEdxNTZoX3lqYndkLUR0WXM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZQgVCJU
cnfh+NuiNPzM0U16pjpbzP18UK8ufz4Ca0XawhGy3HsCEm+YcpWIAlT0Dcu9hyGB
QpIP+xgykRGuSgQWKdv41JiZqwJ3dLiIpXpP+oUqA9RFsk4LMjFzRb/mp1zv67ui
xOGRtMJO616VgHXS3tOHcE7SKuhtPateT9uLmruRNso1JokxMOXsVRjtVseid3yT
zd9QkRO0eNVUklw46uj+VadrqHwejch7Jl5jXlQWIq7GbbcpwcWfWnap3C/7DgRh
0ggnUw1wMYRPv2mM8Fjdo8MNwLu92jlZxkmaZ7y5Y/ljyHjW0XDppYexI9IEaq+C
YB5rERvtk/fmMw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:48 2025 by rpki-client