Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
File: nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft (raw, json)
Hash identifier: Klmscb7y2ugkUj1HbS0QJbYvlx6pJdRopoCiaoOQY9Y=
Subject key identifier: 65:D6:AF:37:B6:39:D5:22:3F:4A:69:E6:E4:DD:54:DB:1B:BE:D7:3A
Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
Certificate issuer: /CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Certificate serial: 019A71B7EB0569B062776A1425CF59BF804A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
Manifest number: 07E5
Signing time: Tue 11 Nov 2025 07:01:09 +0000
Manifest this update: Tue 11 Nov 2025 07:01:09 +0000
Manifest next update: Wed 12 Nov 2025 07:01:09 +0000
Files and hashes: 1: nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl (hash: YlBE82ELJyBDKreP9UsB+vODqxNswfoWGkJySv/LaNU=)
2: wxRtFa54V_vU8mgLHIqlXUzZMOc.roa (hash: PMULlzIWB9KqtKOtRO+7MsiWSaPQynQGmN9eXMu6mPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:eb:05:69:b0:62:77:6a:14:25:cf:59:bf:80:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Validity
Not Before: Nov 11 07:01:09 2025 GMT
Not After : Nov 12 07:01:09 2025 GMT
Subject: CN=65d6af37b639d5223f4a69e6e4dd54db1bbed73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:27:86:6c:b9:c1:97:66:cc:29:30:5d:fd:
7b:96:be:03:85:f1:d3:ae:e2:4e:06:47:b4:d1:13:
cd:5b:ff:8d:d6:a7:66:14:b4:a9:57:4d:eb:51:2e:
04:0f:ab:28:55:34:c1:5d:52:e2:90:2f:4d:56:e8:
0b:ae:f9:f0:09:36:05:64:aa:37:a2:28:16:07:38:
a6:38:f8:0e:f4:54:00:98:da:35:f6:77:fa:52:c5:
41:5b:eb:a5:0d:c5:80:90:3e:b4:31:e1:03:40:63:
51:61:27:bd:30:cc:46:b7:e2:3a:fc:a6:d1:cb:d1:
ad:65:9c:d8:e8:6e:5c:4d:6c:70:d3:d2:3d:cc:5a:
cc:b0:e9:f7:06:f7:02:2c:4c:a1:b8:cb:4f:7e:0f:
5c:a0:2d:21:56:4c:11:53:81:69:66:d2:06:0c:32:
33:f2:ad:76:35:b9:77:be:2b:d6:d8:06:7e:b4:7a:
6d:dd:47:5a:0d:99:42:73:23:10:f1:3b:19:15:54:
06:02:00:f6:da:f0:b2:66:f4:20:48:63:b0:76:bd:
29:7b:29:dd:97:c0:d0:09:df:17:5c:12:85:64:98:
aa:b4:5a:74:2b:e8:e7:b8:66:1f:31:37:9a:51:1b:
f0:c8:9f:42:ca:65:ac:6a:ee:ab:3d:1c:0b:6e:06:
de:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D6:AF:37:B6:39:D5:22:3F:4A:69:E6:E4:DD:54:DB:1B:BE:D7:3A
X509v3 Authority Key Identifier:
keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3a:d3:89:f7:79:42:84:1d:88:f5:62:6b:a2:20:da:70:1b:
1d:2f:70:fe:b8:52:17:8b:4f:f1:7b:6b:8e:b7:77:10:29:e7:
51:1d:3c:c9:ef:c3:83:f9:c9:0d:ed:5f:e9:f3:53:6f:b7:2e:
8d:e2:57:a0:d9:94:f7:b4:6a:11:52:0c:0e:4d:22:27:70:4c:
6d:96:32:f9:a0:59:2a:31:3f:e1:4c:74:ac:c7:44:c5:42:69:
59:92:ad:2c:69:69:f9:cc:43:98:ae:2e:99:d8:0b:05:91:98:
84:77:1f:2b:77:77:96:e1:37:dc:3b:f4:34:b6:c7:7b:e6:f8:
35:b1:34:14:6e:48:2a:83:45:0d:5b:0e:c3:f7:ce:33:ed:1c:
b5:62:b8:b4:98:ab:14:fa:f6:73:c2:d2:ec:4b:34:e9:f7:1d:
a1:9c:e6:8d:03:c2:17:0b:52:ca:2d:eb:f8:82:74:77:f2:1f:
f3:1a:fb:83:48:ca:97:2f:41:ee:0c:86:d6:94:cb:6a:96:bb:
41:ea:30:16:f4:df:3a:27:ed:46:00:93:de:67:5c:c7:9d:06:
f6:30:31:80:44:bc:52:4d:f8:3d:f3:5b:80:78:3b:25:d3:51:
34:7a:fe:78:07:c3:09:52:5c:69:78:55:2b:01:40:8a:f8:0e:
a7:d0:f1:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt+sFabBid2oUJc9Zv4BKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNjIwZjMxYjQ5OTdjNzM0NWJjNjZiNDZiNDNkNjg2YmYw
MDkzMWEwHhcNMjUxMTExMDcwMTA5WhcNMjUxMTEyMDcwMTA5WjAzMTEwLwYDVQQD
Eyg2NWQ2YWYzN2I2MzlkNTIyM2Y0YTY5ZTZlNGRkNTRkYjFiYmVkNzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa0nhmy5wZdmzCkwXf17lr4DhfHT
ruJOBke00RPNW/+N1qdmFLSpV03rUS4ED6soVTTBXVLikC9NVugLrvnwCTYFZKo3
oigWBzimOPgO9FQAmNo19nf6UsVBW+ulDcWAkD60MeEDQGNRYSe9MMxGt+I6/KbR
y9GtZZzY6G5cTWxw09I9zFrMsOn3BvcCLEyhuMtPfg9coC0hVkwRU4FpZtIGDDIz
8q12Nbl3vivW2AZ+tHpt3UdaDZlCcyMQ8TsZFVQGAgD22vCyZvQgSGOwdr0peynd
l8DQCd8XXBKFZJiqtFp0K+jnuGYfMTeaURvwyJ9CymWsau6rPRwLbgbeBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXWrze2OdUiP0pp5uTdVNsbvtc6MB8GA1UdIwQY
MBaAFJxiDzG0mXxzRbxmtGtD1oa/AJMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2Qt
NGI4NzkzZGI3NDYwLzEvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2QtNGI4NzkzZGI3NDYw
LzEvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzrTifd5
QoQdiPVia6Ig2nAbHS9w/rhSF4tP8Xtrjrd3ECnnUR08ye/Dg/nJDe1f6fNTb7cu
jeJXoNmU97RqEVIMDk0iJ3BMbZYy+aBZKjE/4Ux0rMdExUJpWZKtLGlp+cxDmK4u
mdgLBZGYhHcfK3d3luE33Dv0NLbHe+b4NbE0FG5IKoNFDVsOw/fOM+0ctWK4tJir
FPr2c8LS7Es06fcdoZzmjQPCFwtSyi3r+IJ0d/If8xr7g0jKly9B7gyG1pTLapa7
QeowFvTfOiftRgCT3mdcx50G9jAxgES8Uk34PfNbgHg7JdNRNHr+eAfDCVJcaXhV
KwFAivgOp9DxCQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:10 2025 by rpki-client