Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
File: nHEi8vf6UwvxqP_Plqkw9psw94Y.mft (raw, json)
Hash identifier: bOWWfLeBmDIgfHwVyM8f0YkctmAmMIcyXAuDQj6Ou1g=
Subject key identifier: CD:2F:A0:5C:FC:47:4B:12:3C:32:DE:52:3B:84:9C:82:5E:80:6D:A5
Authority key identifier: 9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86
Certificate issuer: /CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786
Certificate serial: 019A7226738ABD17000F929814B17AD403CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
Manifest number: 0427
Signing time: Tue 11 Nov 2025 09:01:53 +0000
Manifest this update: Tue 11 Nov 2025 09:01:53 +0000
Manifest next update: Wed 12 Nov 2025 09:01:53 +0000
Files and hashes: 1: Jf1OKx1njasgUepF7NPQjYFePjY.roa (hash: +FbY8K3ltw3fRzjGzqv270MBVQe3sjgedLIQtn2lOs0=)
2: nHEi8vf6UwvxqP_Plqkw9psw94Y.crl (hash: m596ZosapYjFRByE5VLDR9lBnd1RwwOdbMMIxaRgyo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:73:8a:bd:17:00:0f:92:98:14:b1:7a:d4:03:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786
Validity
Not Before: Nov 11 09:01:53 2025 GMT
Not After : Nov 12 09:01:53 2025 GMT
Subject: CN=cd2fa05cfc474b123c32de523b849c825e806da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:ff:33:10:2e:af:e5:9f:61:73:72:ee:d1:
55:0b:23:d9:78:04:90:e5:4e:22:7d:ed:fe:18:6c:
d8:2e:a4:97:07:90:dc:35:44:b5:71:8c:2e:0c:79:
0f:ac:ef:b4:27:07:cc:0a:bb:ad:10:d0:a0:38:44:
a0:1a:09:26:71:c3:d1:4c:c4:a8:33:89:6b:d4:1a:
57:d2:30:e1:fc:4d:64:58:ec:dc:ea:b0:e5:06:77:
60:58:90:cb:2d:f3:ea:28:b5:74:0b:af:99:08:44:
16:79:44:40:7c:ec:cc:ab:d0:2d:3a:55:e2:c9:5e:
58:3d:ac:57:9a:cb:f9:95:1f:61:c0:59:00:de:c3:
9f:19:9d:01:d8:6d:7f:3f:d8:2e:76:1b:ea:0c:d4:
82:15:70:e4:b8:2b:b8:8d:64:fa:6c:aa:57:f8:e2:
7a:bb:16:4e:b0:1c:5f:2f:af:84:2f:67:9b:0f:a7:
dd:f5:d1:13:2a:b0:53:6b:8c:0b:f1:1b:70:b8:6f:
e3:0e:0c:1b:12:e3:88:a2:55:aa:4b:a2:8b:86:90:
ad:71:66:cb:93:6c:d6:3a:1c:dd:23:ac:52:9f:fe:
cc:5f:c9:b1:2c:3a:3c:70:ac:f9:6a:4f:26:3a:20:
9a:6d:2d:fd:c3:d0:4f:d2:24:dc:f9:57:6e:8f:31:
3b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2F:A0:5C:FC:47:4B:12:3C:32:DE:52:3B:84:9C:82:5E:80:6D:A5
X509v3 Authority Key Identifier:
keyid:9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:43:e6:76:a7:a7:ff:0c:a4:dd:b8:4b:0c:f9:66:d5:3a:e5:
c4:2f:99:7f:85:97:ee:48:9e:cd:ad:71:f5:99:5b:80:19:f7:
7d:f4:e5:ab:a1:02:69:78:ef:b4:87:a1:ca:ab:dc:94:25:50:
b1:76:b5:83:14:bc:f5:6d:ea:bd:74:98:30:77:c7:99:76:1d:
81:db:69:3c:e5:8b:20:4b:69:36:2b:f2:bf:3d:5d:2a:92:99:
14:92:3e:9f:3d:37:b0:dc:cc:d2:1d:dc:5f:f2:e3:c5:41:bd:
6e:3c:60:eb:2e:4d:ee:93:27:3b:57:fe:78:ef:b8:00:47:04:
f9:44:c2:93:42:1c:d7:37:a6:80:ec:aa:8b:56:b8:a8:83:d2:
4b:f2:80:d2:44:6d:2b:3d:02:2a:99:0f:01:5f:4d:b8:12:a4:
e3:44:f0:18:c2:46:c6:d7:f5:a8:cf:f7:f7:0b:8b:99:08:aa:
52:ee:94:a8:f1:47:6e:92:bc:e2:bb:e9:ed:cc:a4:81:bc:67:
9a:d3:a7:8f:a2:95:83:c7:be:18:d2:ea:34:20:79:7e:c8:53:
8f:f7:10:01:aa:fd:14:5b:d5:84:86:4a:71:a0:f8:d0:eb:c3:
69:55:c6:f2:6b:29:cd:1f:84:23:76:5f:05:fb:e5:3f:ab:82:
8b:a7:80:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJnOKvRcAD5KYFLF61APLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNzEyMmYyZjdmYTUzMGJmMWE4ZmZjZjk2YTkzMGY2OWIz
MGY3ODYwHhcNMjUxMTExMDkwMTUzWhcNMjUxMTEyMDkwMTUzWjAzMTEwLwYDVQQD
EyhjZDJmYTA1Y2ZjNDc0YjEyM2MzMmRlNTIzYjg0OWM4MjVlODA2ZGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEf/MxAur+WfYXNy7tFVCyPZeASQ
5U4ife3+GGzYLqSXB5DcNUS1cYwuDHkPrO+0JwfMCrutENCgOESgGgkmccPRTMSo
M4lr1BpX0jDh/E1kWOzc6rDlBndgWJDLLfPqKLV0C6+ZCEQWeURAfOzMq9AtOlXi
yV5YPaxXmsv5lR9hwFkA3sOfGZ0B2G1/P9gudhvqDNSCFXDkuCu4jWT6bKpX+OJ6
uxZOsBxfL6+EL2ebD6fd9dETKrBTa4wL8RtwuG/jDgwbEuOIolWqS6KLhpCtcWbL
k2zWOhzdI6xSn/7MX8mxLDo8cKz5ak8mOiCabS39w9BP0iTc+VdujzE7aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0voFz8R0sSPDLeUjuEnIJegG2lMB8GA1UdIwQY
MBaAFJxxIvL3+lML8aj/z5apMPabMPeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkhFaTh2ZjZVd3Z4cVBfUGxxa3c5cHN3OTRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS84M2UxZmUtM2Q0OC00Y2Q2LWE2MGIt
NmIyNzMzNmQyNjllLzEvbkhFaTh2ZjZVd3Z4cVBfUGxxa3c5cHN3OTRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS84M2UxZmUtM2Q0OC00Y2Q2LWE2MGItNmIyNzMzNmQyNjll
LzEvbkhFaTh2ZjZVd3Z4cVBfUGxxa3c5cHN3OTRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0Pmdqen
/wyk3bhLDPlm1TrlxC+Zf4WX7kieza1x9ZlbgBn3ffTlq6ECaXjvtIehyqvclCVQ
sXa1gxS89W3qvXSYMHfHmXYdgdtpPOWLIEtpNivyvz1dKpKZFJI+nz03sNzM0h3c
X/LjxUG9bjxg6y5N7pMnO1f+eO+4AEcE+UTCk0Ic1zemgOyqi1a4qIPSS/KA0kRt
Kz0CKpkPAV9NuBKk40TwGMJGxtf1qM/39wuLmQiqUu6UqPFHbpK84rvp7cykgbxn
mtOnj6KVg8e+GNLqNCB5fshTj/cQAar9FFvVhIZKcaD40OvDaVXG8mspzR+EI3Zf
BfvlP6uCi6eAFw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:29 2025 by rpki-client