Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
File: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft (raw, json)
Hash identifier: 7HP+iw4TX6jMiN8gKcWMXVrAOcDW9+/NwYdZBP+lAEI=
Subject key identifier: A3:96:9E:38:75:1B:9A:E7:3A:3F:CA:1E:C3:F7:E5:55:46:73:17:B0
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Certificate issuer: /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial: 019A7112EEAD0B6C1994EEA4E7ACC7D0E1DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
Manifest number: 042E
Signing time: Tue 11 Nov 2025 04:00:57 +0000
Manifest this update: Tue 11 Nov 2025 04:00:57 +0000
Manifest next update: Wed 12 Nov 2025 04:00:57 +0000
Files and hashes: 1: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl (hash: MmfzPObY/rI4x/IOaa9ffO6yfCD7G6+YulKqT+uIcg0=)
2: Ty3UJCgNQ3PS2OLFdNF3YNXX0mQ.roa (hash: QnxYwenhbTrtLRGoSz1wjARsZncrjAA3uu2YuxoSI9s=)
3: kxxg8INoPPm5ZymFi9ud7T01lQI.roa (hash: QM9vTjTl+v9NavUuaOjQ+5V7HHBDGkMPW3agrJBuI74=)
4: tO7VMSGjBmDk8hJ1xmBwdBXl31A.roa (hash: gnhrOjPPgjYmJ8TeWItEuTYvPoPPGZwGa4Zc7bqd4V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ee:ad:0b:6c:19:94:ee:a4:e7:ac:c7:d0:e1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
Validity
Not Before: Nov 11 04:00:57 2025 GMT
Not After : Nov 12 04:00:57 2025 GMT
Subject: CN=a3969e38751b9ae73a3fca1ec3f7e555467317b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:fd:a4:64:53:0e:f4:bd:d9:49:cd:14:c0:
ad:09:83:ac:74:16:87:04:42:57:7b:fb:31:e2:6e:
bf:92:fe:25:00:e7:d7:ae:6b:74:52:86:3f:14:63:
35:2e:27:4d:15:f6:95:15:80:cd:80:64:73:2f:d4:
1d:57:23:80:f6:60:90:16:a2:ba:ad:f7:bf:01:2e:
bf:80:8e:0d:cf:d2:e9:6d:3f:4a:41:62:ba:8f:f8:
4e:87:a9:50:d9:94:64:4c:85:43:df:ce:0e:a1:55:
38:2b:69:4c:87:7c:64:32:07:4c:ce:1f:d8:dc:f8:
69:16:9a:d8:80:e7:27:fa:54:bf:bf:74:50:52:51:
7a:44:d8:77:b7:cd:5b:e5:2f:52:a9:ae:68:29:ac:
15:8c:25:d7:d2:a6:d0:6c:51:2a:ab:40:99:19:15:
e6:73:93:62:ff:ab:6c:76:40:1f:88:b8:62:9f:f9:
40:24:a2:0b:dc:8b:1e:b6:53:92:b7:5e:5a:9e:f2:
93:0f:0d:5f:bd:54:e6:64:4e:c6:b0:38:f7:f6:e1:
19:56:c3:60:0b:8e:40:ef:84:58:ef:1a:72:ec:20:
cf:e1:73:11:86:19:3a:0f:a8:92:cb:49:52:94:04:
27:05:3d:bf:da:58:44:79:56:b9:79:8a:e9:75:7c:
35:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:96:9E:38:75:1B:9A:E7:3A:3F:CA:1E:C3:F7:E5:55:46:73:17:B0
X509v3 Authority Key Identifier:
keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:98:ac:26:19:5c:04:7a:2c:2a:65:11:30:2c:72:07:56:76:
e1:4c:4b:77:3a:c5:19:5f:97:46:91:99:7e:5f:df:63:9b:6f:
49:ff:e7:62:41:4e:b9:c0:b9:bc:75:df:3a:d1:8b:ef:c3:1f:
a5:22:eb:70:22:64:fd:80:dd:3c:72:ec:95:22:9a:e1:45:ac:
08:9d:2d:e5:0f:66:24:bd:13:a0:72:30:76:39:0a:a4:8d:f5:
6f:2c:1a:fb:94:56:92:a4:4e:60:fa:ae:14:ad:c3:ad:be:50:
46:bd:5c:a5:39:e4:02:f6:d6:52:d5:a3:2e:9a:cf:54:1b:eb:
33:8e:71:bd:94:ac:8a:e1:4b:a8:6a:f9:28:34:4b:96:ec:e3:
39:ed:ce:6e:64:de:38:7c:eb:4f:31:1a:d3:80:89:92:65:1b:
b2:ff:b4:d3:2a:b5:39:8e:f2:90:03:a5:71:73:d1:7f:64:78:
fe:29:33:52:9a:c0:73:1f:06:6d:1c:ee:18:6a:87:ce:ab:ba:
59:d9:9f:e8:67:f7:a3:75:b6:e0:83:14:9b:69:fa:05:10:15:
44:cc:c8:ac:2b:84:0d:ab:d6:0d:4c:06:d8:56:4d:14:81:76:
81:44:88:4a:c7:9e:1b:67:ba:3b:ef:8f:86:2c:38:cc:65:70:
de:26:66:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEu6tC2wZlO6k56zH0OHeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2M2YwOTUwOGZkZjI1NjQ0ODIxOWIyODRiYjA5YjIzYjJi
NTEzOTYwHhcNMjUxMTExMDQwMDU3WhcNMjUxMTEyMDQwMDU3WjAzMTEwLwYDVQQD
EyhhMzk2OWUzODc1MWI5YWU3M2EzZmNhMWVjM2Y3ZTU1NTQ2NzMxN2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2D9pGRTDvS92UnNFMCtCYOsdBaH
BEJXe/sx4m6/kv4lAOfXrmt0UoY/FGM1LidNFfaVFYDNgGRzL9QdVyOA9mCQFqK6
rfe/AS6/gI4Nz9LpbT9KQWK6j/hOh6lQ2ZRkTIVD384OoVU4K2lMh3xkMgdMzh/Y
3PhpFprYgOcn+lS/v3RQUlF6RNh3t81b5S9Sqa5oKawVjCXX0qbQbFEqq0CZGRXm
c5Ni/6tsdkAfiLhin/lAJKIL3IsetlOSt15anvKTDw1fvVTmZE7GsDj39uEZVsNg
C45A74RY7xpy7CDP4XMRhhk6D6iSy0lSlAQnBT2/2lhEeVa5eYrpdXw1XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOWnjh1G5rnOj/KHsP35VVGcxewMB8GA1UdIwQY
MBaAFDY/CVCP3yVkSCGbKEuwmyOytROWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmo4SlVJX2ZKV1JJSVpzb1M3Q2JJN0sxRTVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hZDA1ZjItYWIzOS00MTMyLTg0OTIt
ZmQ4MTQ0NTVhODY4LzEvTmo4SlVJX2ZKV1JJSVpzb1M3Q2JJN0sxRTVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9hZDA1ZjItYWIzOS00MTMyLTg0OTItZmQ4MTQ0NTVhODY4
LzEvTmo4SlVJX2ZKV1JJSVpzb1M3Q2JJN0sxRTVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJisJhlc
BHosKmURMCxyB1Z24UxLdzrFGV+XRpGZfl/fY5tvSf/nYkFOucC5vHXfOtGL78Mf
pSLrcCJk/YDdPHLslSKa4UWsCJ0t5Q9mJL0ToHIwdjkKpI31bywa+5RWkqROYPqu
FK3Drb5QRr1cpTnkAvbWUtWjLprPVBvrM45xvZSsiuFLqGr5KDRLluzjOe3ObmTe
OHzrTzEa04CJkmUbsv+00yq1OY7ykAOlcXPRf2R4/ikzUprAcx8GbRzuGGqHzqu6
Wdmf6Gf3o3W24IMUm2n6BRAVRMzIrCuEDavWDUwG2FZNFIF2gUSISseeG2e6O++P
hiw4zGVw3iZmsw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:49 2025 by rpki-client