Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
File: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft (raw, json)
Hash identifier: xz7f3Xi4jXirFxWp+HryvzubxhpqVLbGYtCvTvYKXWY=
Subject key identifier: BA:F5:BB:BE:07:08:73:9D:98:BB:10:E1:0D:93:D6:3D:F5:A7:72:A4
Authority key identifier: 9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
Certificate issuer: /CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Certificate serial: 019A7113345DE10A35EB1F54A36F90249342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 04:01:15 +0000
Manifest this update: Tue 11 Nov 2025 04:01:15 +0000
Manifest next update: Wed 12 Nov 2025 04:01:15 +0000
Files and hashes: 1: k80BCKNHzgDvKK_3k-MEya8lNoM.roa (hash: XRBQsFrhhLJ6RMDFPAKpPWk13Lc3Ws+YcSUdoLvIOo8=)
2: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl (hash: up3rzMAFMv5Cl159/AaHzJRtizP/Tjv7EjJznS6r490=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:34:5d:e1:0a:35:eb:1f:54:a3:6f:90:24:93:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Validity
Not Before: Nov 11 04:01:15 2025 GMT
Not After : Nov 12 04:01:15 2025 GMT
Subject: CN=baf5bbbe0708739d98bb10e10d93d63df5a772a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:54:b2:19:99:7f:eb:f3:b8:1d:b3:7b:63:3a:
dd:55:7d:1d:4f:2b:34:14:08:01:4d:71:73:e0:6e:
86:ee:eb:7d:24:0f:99:e2:cb:55:78:a6:61:65:57:
df:19:06:3c:9b:9d:ff:e0:4f:0b:53:c3:67:c9:cf:
96:8d:94:ed:f2:43:df:b9:e0:7b:b4:51:64:c4:f1:
5d:11:9a:fe:77:cc:6f:ea:46:a0:89:1d:4e:f7:a5:
81:a1:23:f3:24:01:19:8a:3b:2a:5d:6d:a3:24:7d:
71:9c:e0:2f:0c:e3:5a:16:96:4d:5e:65:07:82:d1:
43:62:58:1a:97:eb:88:2e:47:62:68:5f:b4:20:f0:
82:a2:ae:d8:2a:de:e7:2c:8c:7f:2b:7a:7d:9b:7a:
9a:d2:a9:96:c5:f7:af:83:8e:25:e5:6b:18:92:7b:
10:f7:cf:41:87:ef:ef:e1:4d:68:97:36:b5:29:11:
0a:e8:94:fc:ce:71:e9:f9:0f:f7:51:df:40:5a:bb:
1c:e6:d3:de:fa:61:96:74:13:27:ea:b0:41:ff:82:
f2:f3:70:fa:30:0a:dc:2d:26:63:b0:8f:d2:14:5d:
6b:a5:c8:31:8c:47:7d:72:45:33:eb:5c:a5:aa:cf:
37:d1:ee:47:97:f6:e8:e3:0b:01:a6:0c:30:1a:69:
07:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F5:BB:BE:07:08:73:9D:98:BB:10:E1:0D:93:D6:3D:F5:A7:72:A4
X509v3 Authority Key Identifier:
keyid:9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:55:b0:97:46:0f:d8:5a:60:19:4a:37:30:cc:76:8a:75:ec:
ca:4c:8c:86:25:81:fc:a9:b8:36:82:ac:d5:71:c8:9b:66:5b:
de:90:b2:e5:29:a0:52:86:a9:d0:9a:06:08:27:cc:c8:30:1d:
15:93:4f:f8:fe:38:01:5a:5d:aa:f2:fa:00:3d:f7:6c:90:49:
93:8b:fb:07:6c:b4:a4:d0:b8:63:67:64:1a:5d:a6:c6:24:05:
79:ff:40:6c:2d:e8:8b:ff:d8:8a:2f:00:01:da:00:ae:72:79:
6a:b2:0e:d5:f0:28:9f:88:36:aa:0e:41:d8:08:cd:1f:77:99:
67:b4:2e:74:4d:65:9d:2d:0a:1a:bd:80:a4:98:87:b5:90:85:
5e:45:71:47:a3:00:8a:f2:ad:e9:fb:7c:43:fd:9e:8d:ae:62:
63:0f:d0:dc:c9:d2:c6:8f:d2:ba:64:ff:0b:ce:36:20:6b:39:
4e:c1:ff:8f:fe:31:05:e0:ba:05:e1:a6:0b:8f:cd:df:e6:f4:
e1:7d:fb:2d:da:d2:23:3e:36:62:93:dc:5d:5c:20:fd:9e:ce:
f6:6e:41:ad:0d:59:3d:2e:19:96:90:a4:86:33:7a:ad:7c:7e:
15:b6:3b:02:8c:c8:cc:0a:f8:91:4e:06:ed:49:13:32:b8:70:
a4:f2:ea:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEzRd4Qo16x9Uo2+QJJNCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNjE0MDNhYzY5ZTI4NzRmNTYyMmQ3ZWU1NjhlOGU0OWYw
NjRjMmUwHhcNMjUxMTExMDQwMTE1WhcNMjUxMTEyMDQwMTE1WjAzMTEwLwYDVQQD
EyhiYWY1YmJiZTA3MDg3MzlkOThiYjEwZTEwZDkzZDYzZGY1YTc3MmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFSyGZl/6/O4HbN7YzrdVX0dTys0
FAgBTXFz4G6G7ut9JA+Z4stVeKZhZVffGQY8m53/4E8LU8Nnyc+WjZTt8kPfueB7
tFFkxPFdEZr+d8xv6kagiR1O96WBoSPzJAEZijsqXW2jJH1xnOAvDONaFpZNXmUH
gtFDYlgal+uILkdiaF+0IPCCoq7YKt7nLIx/K3p9m3qa0qmWxfevg44l5WsYknsQ
989Bh+/v4U1olza1KREK6JT8znHp+Q/3Ud9AWrsc5tPe+mGWdBMn6rBB/4Ly83D6
MArcLSZjsI/SFF1rpcgxjEd9ckUz61ylqs830e5Hl/bo4wsBpgwwGmkHvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLr1u74HCHOdmLsQ4Q2T1j31p3KkMB8GA1UdIwQY
MBaAFJ5hQDrGnih09WItfuVo6OSfBkwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm1GQU9zYWVLSFQxWWkxLTVXam81SjhHVEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lY2EzMjctZDU4Zi00OTFjLTk0Yzgt
ZTNkMDQ1NDgzNDEyLzEvbm1GQU9zYWVLSFQxWWkxLTVXam81SjhHVEM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lY2EzMjctZDU4Zi00OTFjLTk0YzgtZTNkMDQ1NDgzNDEy
LzEvbm1GQU9zYWVLSFQxWWkxLTVXam81SjhHVEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVWwl0YP
2FpgGUo3MMx2inXsykyMhiWB/Km4NoKs1XHIm2Zb3pCy5SmgUoap0JoGCCfMyDAd
FZNP+P44AVpdqvL6AD33bJBJk4v7B2y0pNC4Y2dkGl2mxiQFef9AbC3oi//Yii8A
AdoArnJ5arIO1fAon4g2qg5B2AjNH3eZZ7QudE1lnS0KGr2ApJiHtZCFXkVxR6MA
ivKt6ft8Q/2eja5iYw/Q3MnSxo/SumT/C842IGs5TsH/j/4xBeC6BeGmC4/N3+b0
4X37LdrSIz42YpPcXVwg/Z7O9m5BrQ1ZPS4ZlpCkhjN6rXx+FbY7AozIzAr4kU4G
7UkTMrhwpPLqRw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:38 2025 by rpki-client