Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
File: _N6Mo-LOUrvM5TxKKSbTycQQwEs.mft (raw, json)
Hash identifier: c4droORDgYUs/z9Bd7ibAWbxMC00DcrMtie7zOF8tC0=
Subject key identifier: 09:93:6D:0F:62:2A:94:FD:2B:F8:B8:C9:CC:05:A3:78:FA:77:C9:62
Authority key identifier: FC:DE:8C:A3:E2:CE:52:BB:CC:E5:3C:4A:29:26:D3:C9:C4:10:C0:4B
Certificate issuer: /CN=fcde8ca3e2ce52bbcce53c4a2926d3c9c410c04b
Certificate serial: 019A70A50168E34DE9DDA801C96F3375AE5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 02:00:53 +0000
Manifest this update: Tue 11 Nov 2025 02:00:53 +0000
Manifest next update: Wed 12 Nov 2025 02:00:53 +0000
Files and hashes: 1: MiVzKZibX-3It-xgfseflvN2L_A.roa (hash: aH26xuV9XAHKD/zeZjQBB+/hzYVLDuUtsC+DOjTxZxI=)
2: _N6Mo-LOUrvM5TxKKSbTycQQwEs.crl (hash: e9UpUXD3NluoQ8Avjp8akusHD1ZdD8YQtuuuKvbNB0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:01:68:e3:4d:e9:dd:a8:01:c9:6f:33:75:ae:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcde8ca3e2ce52bbcce53c4a2926d3c9c410c04b
Validity
Not Before: Nov 11 02:00:53 2025 GMT
Not After : Nov 12 02:00:53 2025 GMT
Subject: CN=09936d0f622a94fd2bf8b8c9cc05a378fa77c962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:90:cd:15:76:60:95:eb:b6:b1:b7:61:29:11:
61:cd:53:cf:cf:38:25:0a:d6:a7:5c:df:d8:ee:6a:
72:e7:12:9a:4a:08:95:bd:2c:92:78:d3:20:a3:fa:
45:ec:34:39:47:7f:6f:81:b8:95:36:3a:3e:cd:76:
99:a1:da:ed:20:16:03:0b:2a:d9:1d:ff:f4:99:01:
61:c6:cf:39:4a:07:d2:a6:d9:36:c0:80:74:fb:38:
5a:a1:71:cc:08:ca:67:72:aa:21:8c:56:54:57:d1:
52:1f:99:8b:f5:8e:85:96:1e:a6:95:ed:d9:b4:f2:
e0:cb:6f:64:36:e7:04:13:9a:d8:d1:50:c4:df:7f:
d8:24:b7:9d:cd:31:b6:b4:75:4a:0c:d2:55:53:f7:
3c:c3:ab:38:52:e4:15:e4:00:76:bd:01:b3:02:10:
9e:5d:88:7c:ab:e4:f8:47:15:d5:a2:e3:3a:32:36:
22:f8:be:90:cf:3f:e2:f3:26:2a:85:f9:3d:27:ea:
2e:d8:87:10:b9:cb:12:05:4c:5a:14:84:17:0e:8b:
a1:e0:d7:8e:9c:42:7d:13:bb:0a:3e:77:d9:c8:4b:
ec:dc:d4:53:d2:2e:5c:10:c6:ab:4c:dc:3a:b0:37:
9c:39:86:54:61:49:2f:ae:90:c8:84:bf:92:b3:3f:
3d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:93:6D:0F:62:2A:94:FD:2B:F8:B8:C9:CC:05:A3:78:FA:77:C9:62
X509v3 Authority Key Identifier:
keyid:FC:DE:8C:A3:E2:CE:52:BB:CC:E5:3C:4A:29:26:D3:C9:C4:10:C0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:68:58:10:fe:42:c7:2a:fa:7c:e9:72:77:83:65:dc:ce:0c:
59:34:40:7c:2e:8e:1e:c8:63:d3:ed:51:1d:1d:d2:64:ee:76:
18:03:2c:45:45:01:5e:6a:5f:2a:5f:53:6f:5f:73:df:1d:78:
41:34:17:8d:0d:1b:d8:61:f4:16:32:2e:fe:ec:df:d7:6b:51:
d1:d1:c8:02:0f:d7:f4:fc:ab:e5:e0:23:ac:ec:fc:85:df:3a:
e8:11:0b:c2:90:e4:88:41:17:54:c5:2d:6f:6f:15:73:a3:fd:
90:b2:1a:3c:32:57:6c:07:3d:c2:09:0e:b6:8f:23:5e:73:bc:
6f:3c:39:79:ea:f8:10:e2:82:50:90:88:20:7d:cf:17:2e:cc:
e5:ed:33:e3:77:b2:a9:bb:d5:02:a5:40:63:a3:d1:a9:4c:db:
a7:19:21:10:0d:0f:f2:c3:ba:1e:c2:27:8a:83:73:df:ea:2d:
44:ec:9f:33:36:5a:61:dc:f0:ce:08:66:10:27:b8:84:d4:fe:
fc:ca:52:1b:00:17:42:63:a4:c1:1f:16:3a:be:46:2b:80:e5:
e5:95:de:c4:5a:9c:a6:74:d0:3e:d1:67:61:54:f8:c4:bc:ff:
2c:6f:88:27:72:5e:4c:86:86:ac:1a:7f:08:66:c1:96:48:97:
90:34:eb:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpQFo403p3agByW8zda5dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZGU4Y2EzZTJjZTUyYmJjY2U1M2M0YTI5MjZkM2M5YzQx
MGMwNGIwHhcNMjUxMTExMDIwMDUzWhcNMjUxMTEyMDIwMDUzWjAzMTEwLwYDVQQD
EygwOTkzNmQwZjYyMmE5NGZkMmJmOGI4YzljYzA1YTM3OGZhNzdjOTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJDNFXZgleu2sbdhKRFhzVPPzzgl
CtanXN/Y7mpy5xKaSgiVvSySeNMgo/pF7DQ5R39vgbiVNjo+zXaZodrtIBYDCyrZ
Hf/0mQFhxs85SgfSptk2wIB0+zhaoXHMCMpncqohjFZUV9FSH5mL9Y6Flh6mle3Z
tPLgy29kNucEE5rY0VDE33/YJLedzTG2tHVKDNJVU/c8w6s4UuQV5AB2vQGzAhCe
XYh8q+T4RxXVouM6MjYi+L6Qzz/i8yYqhfk9J+ou2IcQucsSBUxaFIQXDouh4NeO
nEJ9E7sKPnfZyEvs3NRT0i5cEMarTNw6sDecOYZUYUkvrpDIhL+Ssz89WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmTbQ9iKpT9K/i4ycwFo3j6d8liMB8GA1UdIwQY
MBaAFPzejKPizlK7zOU8Sikm08nEEMBLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX042TW8tTE9VcnZNNVR4S0tTYlR5Y1FRd0VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84NGM3NmUtYTE1Yy00NTRmLWE2ODYt
MDAwOTIyYTVjZjE5LzEvX042TW8tTE9VcnZNNVR4S0tTYlR5Y1FRd0VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84NGM3NmUtYTE1Yy00NTRmLWE2ODYtMDAwOTIyYTVjZjE5
LzEvX042TW8tTE9VcnZNNVR4S0tTYlR5Y1FRd0VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2hYEP5C
xyr6fOlyd4Nl3M4MWTRAfC6OHshj0+1RHR3SZO52GAMsRUUBXmpfKl9Tb19z3x14
QTQXjQ0b2GH0FjIu/uzf12tR0dHIAg/X9Pyr5eAjrOz8hd866BELwpDkiEEXVMUt
b28Vc6P9kLIaPDJXbAc9wgkOto8jXnO8bzw5eer4EOKCUJCIIH3PFy7M5e0z43ey
qbvVAqVAY6PRqUzbpxkhEA0P8sO6HsInioNz3+otROyfMzZaYdzwzghmECe4hNT+
/MpSGwAXQmOkwR8WOr5GK4Dl5ZXexFqcpnTQPtFnYVT4xLz/LG+IJ3JeTIaGrBp/
CGbBlkiXkDTr5g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:45 2025 by rpki-client