Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
File: nozX1qQQV1C_iXWn0LlnlMHv5iI.mft (raw, json)
Hash identifier: t1re/iADVVX14EsViQomhCWJe6KzS5dZDRvCoPzjn/I=
Subject key identifier: 1F:00:02:8C:FA:5F:61:24:2D:2D:D0:59:9C:5C:39:D0:9D:EE:AB:AF
Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
Certificate issuer: /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Certificate serial: 019A72260D4ACDEE89292BC6251A089ABBBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
Manifest number: 1062
Signing time: Tue 11 Nov 2025 09:01:27 +0000
Manifest this update: Tue 11 Nov 2025 09:01:27 +0000
Manifest next update: Wed 12 Nov 2025 09:01:27 +0000
Files and hashes: 1: YqcsRsNWUIAuSWFcG2LkwlaCRpU.roa (hash: JnjUw+oSYZ7zYyFgVViB1dXlZlt1DLN5IKIef4zg43A=)
2: _VhyulaRLMFmy7z_tqs-4L4cWXE.roa (hash: T2PRCy0LrQZ9+r9vTWIgoLmdpeQ4Ly8m5VmmmlXegNc=)
3: i4e34huH3g5sLDHdnkVm8dSr_sE.roa (hash: S/XQJg4OAS7AjMIGPw3l7NpJsp2Db+/obQ9OlOHPkv4=)
4: nozX1qQQV1C_iXWn0LlnlMHv5iI.crl (hash: nIZ6mFK4+ww+GebYOa/JPyQ8Bb29RvUyXgBeziPU4Ak=)
5: qdNG49hIyDFFdCFIGbm6kEPFcbI.roa (hash: oUfCXgwymuAlhA935EnqN9SnikKCG4eVZ1qECppIrzI=)
6: tgtnwoMSuJpvUhZwhk9qFrx7hWQ.roa (hash: rFNa5r+Q4PL0nS416jQMSkeeFMd2IaIQ8Oy1MIANZ/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:0d:4a:cd:ee:89:29:2b:c6:25:1a:08:9a:bb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Validity
Not Before: Nov 11 09:01:27 2025 GMT
Not After : Nov 12 09:01:27 2025 GMT
Subject: CN=1f00028cfa5f61242d2dd0599c5c39d09deeabaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:8d:d4:db:01:67:2c:3f:fa:f6:65:80:59:
9d:89:02:92:76:7e:4e:a6:b4:61:e9:cc:76:ae:4c:
21:0d:0b:fb:dd:79:d4:a8:37:59:64:19:88:63:41:
6f:9c:b9:ce:3e:e8:69:01:54:90:07:40:2a:e9:bf:
b9:57:67:8b:77:00:a0:5e:8b:30:7c:1e:58:0d:ee:
3f:c6:7d:de:4b:f7:55:a5:3b:9c:49:37:37:08:30:
1c:62:a5:5c:e9:d3:84:02:8a:92:98:4c:fc:ac:83:
80:28:da:a3:19:90:2a:c2:a5:5b:25:a6:76:31:3a:
39:56:88:71:0c:af:4b:ac:73:67:24:e0:94:5a:6f:
77:bd:e4:fb:08:8f:56:bd:e5:8c:23:77:4a:3b:81:
c0:db:e8:ab:cb:6b:79:aa:c9:a4:cd:6a:58:c6:37:
76:24:fd:c5:dc:d5:d8:59:de:ff:4e:a1:3b:b8:c9:
a0:4d:e7:46:7d:d4:df:73:4d:29:78:3e:02:fe:2e:
f5:02:58:76:4c:88:33:b8:3b:44:1e:45:27:55:78:
f3:ec:ae:eb:78:3a:20:a4:fe:b4:b3:e1:47:0a:62:
09:23:6e:97:be:33:28:48:a3:5e:75:fe:78:5d:cb:
3c:fc:42:8c:d3:60:d5:eb:dc:cf:02:d4:2e:4b:e6:
55:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:00:02:8C:FA:5F:61:24:2D:2D:D0:59:9C:5C:39:D0:9D:EE:AB:AF
X509v3 Authority Key Identifier:
keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5b:d9:5e:15:c1:97:8a:71:32:2d:54:15:9e:5f:96:d7:cd:
15:ab:2b:56:d3:a5:71:08:68:8b:da:83:3b:ce:bd:5d:05:d1:
76:88:65:6a:ce:05:37:b2:bc:26:53:46:6a:6d:a9:d0:45:20:
27:8f:cd:d3:c6:14:6b:97:6a:81:54:2e:d2:e8:ce:d2:0b:0e:
fc:21:01:e3:07:59:a7:50:ed:a0:64:17:b0:77:c2:7c:ea:e9:
00:a3:af:8a:65:78:dc:31:3f:d9:bb:66:ed:d1:db:55:c7:ec:
a8:6e:2d:51:1f:fd:94:95:3f:52:a7:0c:79:7c:56:ab:e6:85:
af:b7:bc:2d:55:d7:66:b1:fa:29:0e:b7:63:93:88:85:c3:f6:
f3:d5:c5:c7:92:ff:ae:59:96:a5:9a:6c:13:dd:8f:93:60:90:
77:ec:51:e1:e8:52:cf:cb:e0:d5:2d:e7:fd:7f:4d:5e:ad:6f:
63:35:43:b7:0b:a5:91:e8:55:6a:a3:cc:ea:43:96:db:0b:67:
11:b0:51:e2:d0:71:3b:55:17:9e:7b:d4:d3:f4:06:5c:5f:19:
ac:6e:49:ca:75:e8:be:f5:93:58:40:cf:02:41:30:e1:a4:e3:
d5:58:24:03:df:c5:ff:ce:d9:9c:1f:44:fa:f7:92:49:0e:39:
d2:cf:ff:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJg1Kze6JKSvGJRoImru8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOGNkN2Q2YTQxMDU3NTBiZjg5NzVhN2QwYjk2Nzk0YzFl
ZmU2MjIwHhcNMjUxMTExMDkwMTI3WhcNMjUxMTEyMDkwMTI3WjAzMTEwLwYDVQQD
EygxZjAwMDI4Y2ZhNWY2MTI0MmQyZGQwNTk5YzVjMzlkMDlkZWVhYmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i+N1NsBZyw/+vZlgFmdiQKSdn5O
prRh6cx2rkwhDQv73XnUqDdZZBmIY0FvnLnOPuhpAVSQB0Aq6b+5V2eLdwCgXosw
fB5YDe4/xn3eS/dVpTucSTc3CDAcYqVc6dOEAoqSmEz8rIOAKNqjGZAqwqVbJaZ2
MTo5VohxDK9LrHNnJOCUWm93veT7CI9WveWMI3dKO4HA2+iry2t5qsmkzWpYxjd2
JP3F3NXYWd7/TqE7uMmgTedGfdTfc00peD4C/i71Alh2TIgzuDtEHkUnVXjz7K7r
eDogpP60s+FHCmIJI26XvjMoSKNedf54Xcs8/EKM02DV69zPAtQuS+ZVZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8AAoz6X2EkLS3QWZxcOdCd7quvMB8GA1UdIwQY
MBaAFJ6M19akEFdQv4l1p9C5Z5TB7+YiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84NWM2YmQtNmE2OC00ZDExLWI5Y2Qt
OGMyZGY1YTVjNmQ3LzEvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi84NWM2YmQtNmE2OC00ZDExLWI5Y2QtOGMyZGY1YTVjNmQ3
LzEvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlvZXhXB
l4pxMi1UFZ5fltfNFasrVtOlcQhoi9qDO869XQXRdohlas4FN7K8JlNGam2p0EUg
J4/N08YUa5dqgVQu0ujO0gsO/CEB4wdZp1DtoGQXsHfCfOrpAKOvimV43DE/2btm
7dHbVcfsqG4tUR/9lJU/UqcMeXxWq+aFr7e8LVXXZrH6KQ63Y5OIhcP289XFx5L/
rlmWpZpsE92Pk2CQd+xR4ehSz8vg1S3n/X9NXq1vYzVDtwulkehVaqPM6kOW2wtn
EbBR4tBxO1UXnnvU0/QGXF8ZrG5JynXovvWTWEDPAkEw4aTj1VgkA9/F/87ZnB9E
+veSSQ450s//hQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:17 2025 by rpki-client