Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
File: nwM4t9tUQAKUEDl1Fckw60UtdbA.mft (raw, json)
Hash identifier: SDqyzHUL0HbvdIbFR+L/osW9BHQfaa6NDBTHuIGXR/4=
Subject key identifier: D0:4A:F8:36:45:D5:40:9E:44:96:39:35:BB:76:53:DF:C5:D9:DC:C2
Authority key identifier: 9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
Certificate issuer: /CN=9f0338b7db5440029410397515c930eb452d75b0
Certificate serial: 019A730156A6614FA4930F2CD6E0EE00709B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 13:00:58 +0000
Manifest this update: Tue 11 Nov 2025 13:00:58 +0000
Manifest next update: Wed 12 Nov 2025 13:00:58 +0000
Files and hashes: 1: HhSxQEAct_Hilmn4S8Eq6DvrLvI.roa (hash: crLyXY2X5OyUyjzwP0FotFChrfWXLKr+2gME4D4k2t8=)
2: nwM4t9tUQAKUEDl1Fckw60UtdbA.crl (hash: E/4BJoy0jXtKH9MTeyjXgBib6+S7VR9uyLgAkNRTN7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:56:a6:61:4f:a4:93:0f:2c:d6:e0:ee:00:70:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0338b7db5440029410397515c930eb452d75b0
Validity
Not Before: Nov 11 13:00:58 2025 GMT
Not After : Nov 12 13:00:58 2025 GMT
Subject: CN=d04af83645d5409e44963935bb7653dfc5d9dcc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ff:93:e0:be:32:f1:be:0a:46:a9:96:07:13:
96:90:f0:80:e5:f5:af:db:dd:44:56:24:df:57:4d:
f8:31:ed:fb:a8:66:bb:2a:e9:71:e6:80:7b:31:75:
54:7a:26:0e:f4:ad:2e:60:83:e2:b1:02:3c:6d:72:
ff:f3:26:04:ea:b2:5f:a3:19:f8:fb:b2:9b:24:5c:
6d:16:b1:c0:ad:8a:cf:ee:10:84:7a:69:f7:1c:02:
5c:ca:98:e4:9a:52:5e:4d:ae:62:33:3f:71:f4:ac:
4d:36:1c:9b:14:80:61:4a:e3:a4:27:11:0e:2f:6d:
87:e9:e9:50:54:7e:ed:9f:04:80:00:e3:02:fd:4c:
58:2d:d7:14:d1:b2:76:10:a4:9c:ab:43:6d:0f:c8:
2c:6f:b0:2f:12:c9:76:5e:3e:b2:4c:1f:de:c7:30:
eb:32:19:cb:00:19:45:2f:e0:0c:8d:a6:48:41:f9:
d1:24:74:d1:59:10:f3:da:d8:65:ad:6c:a8:76:4d:
fd:d8:a7:01:52:3c:87:46:f2:18:92:45:91:b4:7d:
af:d6:68:dc:7e:4b:ef:54:e0:6f:70:4d:f1:c2:8c:
e2:83:6f:30:ff:8c:04:e0:72:ab:32:93:2f:e9:a0:
fe:b9:a6:37:32:af:94:9d:ad:ef:b6:b4:18:32:cd:
46:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4A:F8:36:45:D5:40:9E:44:96:39:35:BB:76:53:DF:C5:D9:DC:C2
X509v3 Authority Key Identifier:
keyid:9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c0:61:db:22:a2:7f:e7:6b:c2:be:aa:d4:cb:b9:7e:98:79:
fd:f4:27:3a:b1:90:1c:9c:e0:91:75:60:c5:f9:ad:22:0f:9f:
f4:1f:58:c0:42:1d:9b:20:8f:24:3e:e0:14:44:c3:a3:7f:24:
bd:89:de:3b:9a:1e:ea:ad:e2:d2:20:46:c8:3f:11:51:fd:c7:
64:b4:21:b6:8b:fe:6f:bd:57:73:83:f8:dc:26:61:58:d7:80:
4d:d6:ed:ba:96:b4:ce:fe:1b:49:e6:f8:39:78:8f:89:44:34:
74:07:c2:c9:0a:5c:39:a2:6a:7d:29:2c:79:24:cd:d9:6e:7f:
11:99:b6:06:78:e4:79:0d:4d:7a:43:19:7a:85:cf:d1:b6:44:
01:ef:48:c1:c5:18:dc:fa:9c:74:97:15:26:05:99:d1:e4:b4:
f5:d3:cf:16:ea:a9:3a:9c:d8:4b:5a:c8:13:31:c6:09:ee:33:
5a:08:da:0b:61:27:b9:28:03:3c:80:ba:be:68:a1:e3:bd:34:
7f:13:8d:40:88:1d:2f:b5:2a:9f:59:77:f8:d1:a3:4c:da:fa:
75:1b:52:4a:78:a9:f4:a2:0e:7e:dc:49:36:08:78:7e:88:13:
ca:26:e5:69:a6:2e:01:93:5f:15:2b:8e:86:1a:b1:e8:25:45:
c8:a6:b7:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAVamYU+kkw8s1uDuAHCbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDMzOGI3ZGI1NDQwMDI5NDEwMzk3NTE1YzkzMGViNDUy
ZDc1YjAwHhcNMjUxMTExMTMwMDU4WhcNMjUxMTEyMTMwMDU4WjAzMTEwLwYDVQQD
EyhkMDRhZjgzNjQ1ZDU0MDllNDQ5NjM5MzViYjc2NTNkZmM1ZDlkY2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP+T4L4y8b4KRqmWBxOWkPCA5fWv
291EViTfV034Me37qGa7Kulx5oB7MXVUeiYO9K0uYIPisQI8bXL/8yYE6rJfoxn4
+7KbJFxtFrHArYrP7hCEemn3HAJcypjkmlJeTa5iMz9x9KxNNhybFIBhSuOkJxEO
L22H6elQVH7tnwSAAOMC/UxYLdcU0bJ2EKScq0NtD8gsb7AvEsl2Xj6yTB/exzDr
MhnLABlFL+AMjaZIQfnRJHTRWRDz2thlrWyodk392KcBUjyHRvIYkkWRtH2v1mjc
fkvvVOBvcE3xwozig28w/4wE4HKrMpMv6aD+uaY3Mq+Una3vtrQYMs1GiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBK+DZF1UCeRJY5Nbt2U9/F2dzCMB8GA1UdIwQY
MBaAFJ8DOLfbVEAClBA5dRXJMOtFLXWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndNNHQ5dFVRQUtVRURsMUZja3c2MFV0ZGJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xNjY2MWMtZTc3Yi00MWMzLTgwZTQt
MTRlZTMyZmM1ZDA2LzEvbndNNHQ5dFVRQUtVRURsMUZja3c2MFV0ZGJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8xNjY2MWMtZTc3Yi00MWMzLTgwZTQtMTRlZTMyZmM1ZDA2
LzEvbndNNHQ5dFVRQUtVRURsMUZja3c2MFV0ZGJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsBh2yKi
f+drwr6q1Mu5fph5/fQnOrGQHJzgkXVgxfmtIg+f9B9YwEIdmyCPJD7gFETDo38k
vYneO5oe6q3i0iBGyD8RUf3HZLQhtov+b71Xc4P43CZhWNeATdbtupa0zv4bSeb4
OXiPiUQ0dAfCyQpcOaJqfSkseSTN2W5/EZm2BnjkeQ1NekMZeoXP0bZEAe9IwcUY
3PqcdJcVJgWZ0eS09dPPFuqpOpzYS1rIEzHGCe4zWgjaC2EnuSgDPIC6vmih4700
fxONQIgdL7Uqn1l3+NGjTNr6dRtSSnip9KIOftxJNgh4fogTyiblaaYuAZNfFSuO
hhqx6CVFyKa3bg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:38 2025 by rpki-client