Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
File: N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft (raw, json)
Hash identifier: YphFZbJE6vYhxqwzsq1Jc3wHA8EG40O/wX+kYD8Bs1w=
Subject key identifier: 3A:D9:33:C6:80:0C:85:D8:6A:1B:EB:93:0C:1F:61:16:BD:34:31:21
Authority key identifier: 37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
Certificate issuer: /CN=37778681361b1fff87ce398402efa63869e5bfd1
Certificate serial: 019A2F69CF678F8E91AF7DF181BD3E88279C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
Manifest number: 0CA9
Signing time: Wed 29 Oct 2025 10:00:54 +0000
Manifest this update: Wed 29 Oct 2025 10:00:54 +0000
Manifest next update: Thu 30 Oct 2025 10:00:54 +0000
Files and hashes: 1: N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl (hash: /ObVGsYEeyIyTLXp+r38sGTNEaCGhiMBI8+8NTlfKdY=)
2: vmuvpxt5NWFRchGpjymjM-OTFyk.roa (hash: xudIwgzuBx5c488Lg5NntvMmtHShvLXZUS8ATmxeVvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:69:cf:67:8f:8e:91:af:7d:f1:81:bd:3e:88:27:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37778681361b1fff87ce398402efa63869e5bfd1
Validity
Not Before: Oct 29 10:00:54 2025 GMT
Not After : Oct 30 10:00:54 2025 GMT
Subject: CN=3ad933c6800c85d86a1beb930c1f6116bd343121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:bb:8c:90:85:e6:c6:ef:b3:c9:22:23:37:
b6:a6:fd:4f:75:fa:86:85:32:78:b9:df:ab:ce:8d:
ad:36:c4:4d:78:45:40:43:cf:4b:54:fb:c3:9c:0f:
32:a8:4f:a7:da:75:dd:c1:43:e9:81:dd:a5:d6:67:
c1:19:3f:0a:6f:87:b2:f1:43:db:2c:36:af:22:62:
47:93:07:bd:cd:b3:3b:6d:ee:7b:b6:ac:78:8c:66:
58:ca:8b:1c:81:cf:6e:c4:35:a6:09:e8:92:4d:a7:
71:a3:3d:4a:65:e8:dc:d1:84:ca:df:0d:f6:40:80:
5d:d2:aa:b4:2c:5a:90:1a:16:86:b5:5b:c9:6a:1a:
ed:8b:a9:b3:0c:03:38:fa:b1:3b:e8:d5:e5:90:8f:
32:7c:2b:46:9c:49:ba:84:d6:05:bd:3b:03:3e:6c:
b4:a3:aa:4d:66:63:7d:4c:2b:ce:ce:d3:91:d0:4f:
60:53:a7:33:ae:6c:b1:1d:3b:c3:61:21:cf:f0:75:
92:5d:0e:98:6a:10:a1:c6:70:f0:60:60:4a:9a:08:
68:59:0c:b0:8a:94:31:fb:c1:68:b5:97:0f:28:dd:
a6:28:02:14:45:98:9d:56:81:4d:75:a1:5e:e4:da:
f1:3b:1a:34:49:a1:2c:37:01:88:98:3d:f6:1e:be:
d4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D9:33:C6:80:0C:85:D8:6A:1B:EB:93:0C:1F:61:16:BD:34:31:21
X509v3 Authority Key Identifier:
keyid:37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:27:49:58:af:f8:42:80:d6:54:ba:62:bc:e7:6c:94:80:85:
dd:3a:26:05:92:81:bb:f2:fb:ff:96:b4:66:8c:2a:7c:86:3c:
22:a2:6b:69:9e:ca:fe:2c:9f:a9:93:d9:e3:2c:13:df:86:5a:
60:fd:42:07:f6:9d:6c:14:cd:88:c5:80:35:fc:4c:92:8c:e2:
44:52:0d:0f:6b:ad:81:0b:9d:65:ed:c0:70:53:69:22:01:41:
b6:2c:fc:f8:08:74:6f:de:2e:3b:59:3f:2b:be:25:ec:be:f4:
c1:bd:28:b4:e7:47:99:4a:5b:d1:6f:36:8d:e9:24:a6:6f:fb:
3e:44:23:39:44:a5:87:82:d4:87:1a:7b:72:fa:94:ec:4e:2f:
81:9a:ec:41:96:c0:e7:c0:d4:1b:5c:bf:0c:49:43:aa:21:23:
67:4e:69:78:7f:31:fc:96:3e:c6:34:d8:3e:cf:0b:26:28:5f:
65:37:a6:94:14:46:d0:8a:93:05:a0:0c:2b:91:e5:5a:3b:e0:
ed:fb:24:34:bc:65:49:b9:6c:4d:5a:ff:ce:a2:bc:57:29:8f:
e9:be:93:27:ff:65:da:c7:34:39:8a:c8:db:ef:9a:1c:be:31:
8d:9a:85:27:fa:b2:91:ef:8a:16:14:92:82:6c:df:b1:cd:d1:
d0:c3:ac:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZovac9nj46Rr33xgb0+iCecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3Nzc4NjgxMzYxYjFmZmY4N2NlMzk4NDAyZWZhNjM4Njll
NWJmZDEwHhcNMjUxMDI5MTAwMDU0WhcNMjUxMDMwMTAwMDU0WjAzMTEwLwYDVQQD
EygzYWQ5MzNjNjgwMGM4NWQ4NmExYmViOTMwYzFmNjExNmJkMzQzMTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHu7jJCF5sbvs8kiIze2pv1PdfqG
hTJ4ud+rzo2tNsRNeEVAQ89LVPvDnA8yqE+n2nXdwUPpgd2l1mfBGT8Kb4ey8UPb
LDavImJHkwe9zbM7be57tqx4jGZYyoscgc9uxDWmCeiSTadxoz1KZejc0YTK3w32
QIBd0qq0LFqQGhaGtVvJahrti6mzDAM4+rE76NXlkI8yfCtGnEm6hNYFvTsDPmy0
o6pNZmN9TCvOztOR0E9gU6czrmyxHTvDYSHP8HWSXQ6YahChxnDwYGBKmghoWQyw
ipQx+8FotZcPKN2mKAIURZidVoFNdaFe5NrxOxo0SaEsNwGImD32Hr7UuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrZM8aADIXYahvrkwwfYRa9NDEhMB8GA1UdIwQY
MBaAFDd3hoE2Gx//h845hALvpjhp5b/RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjNlR2dUWWJIXy1IemptRUF1LW1PR25sdjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82NjBjY2EtYzFhYS00NTU4LWFkMWUt
ZTUzZjkwNGExZjU4LzEvTjNlR2dUWWJIXy1IemptRUF1LW1PR25sdjlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC82NjBjY2EtYzFhYS00NTU4LWFkMWUtZTUzZjkwNGExZjU4
LzEvTjNlR2dUWWJIXy1IemptRUF1LW1PR25sdjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCdJWK/4
QoDWVLpivOdslICF3TomBZKBu/L7/5a0ZowqfIY8IqJraZ7K/iyfqZPZ4ywT34Za
YP1CB/adbBTNiMWANfxMkoziRFIND2utgQudZe3AcFNpIgFBtiz8+Ah0b94uO1k/
K74l7L70wb0otOdHmUpb0W82jekkpm/7PkQjOUSlh4LUhxp7cvqU7E4vgZrsQZbA
58DUG1y/DElDqiEjZ05peH8x/JY+xjTYPs8LJihfZTemlBRG0IqTBaAMK5HlWjvg
7fskNLxlSblsTVr/zqK8VymP6b6TJ/9l2sc0OYrI2++aHL4xjZqFJ/qyke+KFhSS
gmzfsc3R0MOshQ==
-----END CERTIFICATE-----
Generated at Wed Oct 29 11:32:45 2025 by rpki-client