Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
File: nQhzWjV9MfqK2jHinxlYam_9lZI.mft (raw, json)
Hash identifier: Iju3zs6zy6sp2kNuNdg5y/XOy9TXd5HJMbli/w9vei4=
Subject key identifier: FC:E1:87:63:E3:4C:03:90:1E:A6:1F:41:70:41:28:64:FD:EA:8E:6E
Authority key identifier: 9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
Certificate issuer: /CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Certificate serial: 019A2A4427F9D081D1D2958BB471782941F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
Manifest number: 0649
Signing time: Tue 28 Oct 2025 10:01:40 +0000
Manifest this update: Tue 28 Oct 2025 10:01:40 +0000
Manifest next update: Wed 29 Oct 2025 10:01:40 +0000
Files and hashes: 1: nQhzWjV9MfqK2jHinxlYam_9lZI.crl (hash: YdndxxBf842QtnKstlPkksl9MGiU21JM3haQA7DcDaI=)
2: zCy2TEUINZmipMaXJF_ZJiCXKXs.roa (hash: kFNybXZv7aLQUvfMaX6TQe+E+VLOfa/7bi5eq9XGzik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:44:27:f9:d0:81:d1:d2:95:8b:b4:71:78:29:41:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Validity
Not Before: Oct 28 10:01:40 2025 GMT
Not After : Oct 29 10:01:40 2025 GMT
Subject: CN=fce18763e34c03901ea61f4170412864fdea8e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:21:08:78:6e:fc:34:ac:23:47:a2:02:40:
bf:bb:2f:50:79:be:18:b1:7d:48:93:1e:1d:86:82:
7e:dd:a7:eb:e9:58:be:cb:3a:2c:28:7b:ee:59:f0:
22:64:04:89:1d:67:e2:78:33:69:38:43:3c:aa:1f:
69:f3:e2:db:b5:81:b3:4c:a4:96:97:b7:33:b4:94:
3c:84:ac:15:ff:a3:4f:3f:96:bf:d7:ef:3a:bd:fd:
95:e4:a1:46:f0:82:2d:ce:46:e1:f0:45:e3:26:3f:
a1:ee:29:32:f6:46:25:11:26:af:c5:23:e4:80:46:
be:8f:ce:1d:83:bd:17:c9:76:05:39:cb:61:2c:b7:
4c:0d:ee:53:f2:27:e2:7e:40:7d:aa:cc:af:8b:47:
41:ad:a6:a9:8f:53:c0:38:84:e8:4e:6d:57:6f:49:
d0:f9:4d:ee:e6:db:ac:b0:90:51:96:50:86:93:35:
9a:af:fc:ee:44:0d:4d:e5:c1:90:24:59:8e:3d:3e:
5b:1a:f2:17:27:41:30:64:45:06:11:b5:85:ca:bf:
bf:04:ab:3d:dc:6c:10:d9:6a:3b:fb:fc:a7:56:23:
39:4f:2f:ad:3a:17:14:7c:21:cd:30:0f:5c:46:69:
7c:ee:bb:d8:05:b9:ad:d4:9d:c0:3a:02:a6:25:a4:
f2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E1:87:63:E3:4C:03:90:1E:A6:1F:41:70:41:28:64:FD:EA:8E:6E
X509v3 Authority Key Identifier:
keyid:9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f0:dc:f3:dd:7e:e3:8e:3b:9e:24:c5:87:4c:a0:f9:67:59:
e4:ec:80:15:d2:26:35:f7:c5:36:a3:02:64:66:82:14:1c:34:
96:cb:22:2b:bb:26:ee:35:f8:04:02:4c:68:c0:ca:dc:eb:c3:
0a:8b:dc:29:0d:1c:0b:73:fb:eb:dc:c4:ef:84:39:99:83:3b:
7a:7f:1c:7a:08:b7:02:0a:00:18:85:df:01:a4:55:5f:cc:aa:
76:d0:bc:db:73:34:8d:ad:67:54:4a:e6:bf:69:af:ab:9b:3e:
83:f4:f4:0e:22:4d:f2:36:89:65:31:32:ae:29:41:cf:ae:94:
46:c3:b7:4c:c0:b4:0a:79:1a:e8:b5:bc:48:e2:9e:95:45:b4:
3c:b7:f7:0e:2e:53:d3:58:4d:33:a4:60:6e:2c:24:84:b3:08:
6c:21:ea:78:45:5a:d9:46:89:56:7b:c8:7d:ef:70:0b:99:4e:
3a:a8:3a:8f:d5:9b:8d:e0:47:26:d8:37:f9:a1:fc:bf:7c:03:
c9:bf:fd:8b:e4:ce:6e:bf:4f:38:23:48:30:12:af:e0:4a:bf:
a3:eb:aa:7a:5d:f8:e9:bb:a9:77:92:6a:80:eb:58:40:d0:4e:
fc:af:ff:49:f9:09:e2:fe:89:f2:63:23:65:eb:da:92:0f:b3:
ff:82:9d:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqRCf50IHR0pWLtHF4KUH4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMDg3MzVhMzU3ZDMxZmE4YWRhMzFlMjlmMTk1ODZhNmZm
ZDk1OTIwHhcNMjUxMDI4MTAwMTQwWhcNMjUxMDI5MTAwMTQwWjAzMTEwLwYDVQQD
EyhmY2UxODc2M2UzNGMwMzkwMWVhNjFmNDE3MDQxMjg2NGZkZWE4ZTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiUhCHhu/DSsI0eiAkC/uy9Qeb4Y
sX1Ikx4dhoJ+3afr6Vi+yzosKHvuWfAiZASJHWfieDNpOEM8qh9p8+LbtYGzTKSW
l7cztJQ8hKwV/6NPP5a/1+86vf2V5KFG8IItzkbh8EXjJj+h7iky9kYlESavxSPk
gEa+j84dg70XyXYFOcthLLdMDe5T8ififkB9qsyvi0dBraapj1PAOIToTm1Xb0nQ
+U3u5tussJBRllCGkzWar/zuRA1N5cGQJFmOPT5bGvIXJ0EwZEUGEbWFyr+/BKs9
3GwQ2Wo7+/ynViM5Ty+tOhcUfCHNMA9cRml87rvYBbmt1J3AOgKmJaTyUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzhh2PjTAOQHqYfQXBBKGT96o5uMB8GA1UdIwQY
MBaAFJ0Ic1o1fTH6itox4p8ZWGpv/ZWSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblFoeldqVjlNZnFLMmpIaW54bFlhbV85bFpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jZjRkOWUtNTljOS00ZjlmLThmMzIt
YTM0ODgyMWNhMWUwLzEvblFoeldqVjlNZnFLMmpIaW54bFlhbV85bFpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9jZjRkOWUtNTljOS00ZjlmLThmMzItYTM0ODgyMWNhMWUw
LzEvblFoeldqVjlNZnFLMmpIaW54bFlhbV85bFpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/Dc891+
4447niTFh0yg+WdZ5OyAFdImNffFNqMCZGaCFBw0lssiK7sm7jX4BAJMaMDK3OvD
CovcKQ0cC3P769zE74Q5mYM7en8cegi3AgoAGIXfAaRVX8yqdtC823M0ja1nVErm
v2mvq5s+g/T0DiJN8jaJZTEyrilBz66URsO3TMC0Cnka6LW8SOKelUW0PLf3Di5T
01hNM6RgbiwkhLMIbCHqeEVa2UaJVnvIfe9wC5lOOqg6j9WbjeBHJtg3+aH8v3wD
yb/9i+TObr9POCNIMBKv4Eq/o+uqel346bupd5JqgOtYQNBO/K//SfkJ4v6J8mMj
Zevakg+z/4Kd9g==
-----END CERTIFICATE-----
Generated at Tue Oct 28 13:47:18 2025 by rpki-client