Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
File: nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft (raw, json)
Hash identifier: +bF571W7hXVpWPMva64BMYJtYn6emtPjNb2zfW+ztLw=
Subject key identifier: 7F:90:1D:0E:E9:2A:5A:BB:52:17:F0:EF:05:95:B3:6E:81:2E:CD:66
Authority key identifier: 9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
Certificate issuer: /CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Certificate serial: 019A71B7C17A5F5C9AAA32F4A04791D8947C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
Manifest number: 0322
Signing time: Tue 11 Nov 2025 07:00:59 +0000
Manifest this update: Tue 11 Nov 2025 07:00:59 +0000
Manifest next update: Wed 12 Nov 2025 07:00:59 +0000
Files and hashes: 1: TC7wZtb8eH22VqPATxdM0AYHsBI.roa (hash: WSEkQ29EN6gMplRxrm+JsVbPQFVHYc/Oyz8wGNQAkUY=)
2: nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl (hash: tldoxAxbrUdj2A20IM/rEZgGVN36YG0rpDTs70r0Auk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c1:7a:5f:5c:9a:aa:32:f4:a0:47:91:d8:94:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Validity
Not Before: Nov 11 07:00:59 2025 GMT
Not After : Nov 12 07:00:59 2025 GMT
Subject: CN=7f901d0ee92a5abb5217f0ef0595b36e812ecd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:01:60:38:0b:ed:e1:78:24:8b:c7:ae:c6:
c7:0f:ee:39:c8:68:54:e6:c5:01:e7:df:2f:b0:74:
ec:a6:6e:13:5b:9b:24:ce:07:bb:ae:31:d8:c1:05:
e0:e9:37:73:3e:69:e4:77:27:aa:78:cb:f4:bf:f1:
5a:05:1c:c1:a0:0c:44:59:04:26:71:32:f8:e9:0a:
20:d2:12:93:09:06:38:63:77:c4:de:32:62:71:2c:
06:16:ec:57:b6:f2:b1:ea:ad:46:70:f7:e1:c6:45:
93:be:08:5c:66:67:aa:65:88:50:6c:9a:71:25:be:
d3:6f:51:1c:b7:01:c1:94:d0:c0:68:05:a9:d1:f3:
e5:b7:78:7e:d4:ae:95:f4:d8:04:24:79:b3:86:3b:
88:50:94:0a:1a:08:22:5a:3a:ab:48:40:d6:8a:2f:
39:eb:86:00:3a:02:58:1c:19:e5:a3:fd:d9:cd:be:
64:c2:55:72:10:19:c2:3d:45:6c:c4:4a:2a:e1:6f:
32:66:3c:5c:b7:e4:a4:31:e7:8b:e7:30:43:fb:29:
32:43:0f:88:ff:6f:dd:a5:9d:b1:e9:8d:4a:7f:50:
29:8c:e7:5f:6d:dc:a6:a1:90:f6:0d:24:4b:d6:33:
b7:92:00:88:81:f5:d3:27:15:d0:36:a8:4e:62:7a:
0e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:90:1D:0E:E9:2A:5A:BB:52:17:F0:EF:05:95:B3:6E:81:2E:CD:66
X509v3 Authority Key Identifier:
keyid:9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:11:8a:99:ea:28:b9:d8:95:b5:b2:8b:5e:11:e9:cc:98:70:
65:54:e2:a6:67:c9:62:99:41:a8:23:a2:d9:95:b7:09:20:c8:
0a:72:9d:91:9e:b4:bc:02:9d:fc:f0:25:1b:12:fc:4b:78:bc:
79:b8:da:48:47:67:93:d4:ef:6f:52:ff:3a:de:ab:a5:83:bf:
34:7b:2f:77:73:68:71:6f:b8:33:c6:31:6d:b9:52:51:c5:15:
a6:b5:af:55:15:49:c6:d4:ae:82:6b:11:d3:09:16:5b:3b:fd:
b2:af:b0:f6:e8:ff:7a:33:a8:3b:2c:fe:02:b8:57:36:f7:78:
53:c1:57:ea:a9:a3:28:1b:10:ed:64:a3:80:22:f8:e4:ec:ab:
c9:64:0d:07:af:47:ae:60:ba:71:64:b0:66:9f:cb:d5:bc:1e:
7e:29:23:de:8e:7e:2c:70:bc:62:bc:8c:d8:d0:05:0a:e9:57:
e5:37:1b:1c:22:62:4d:f6:44:63:04:f4:d1:58:7c:38:3d:74:
72:fb:5a:f2:2e:b6:de:8b:42:91:2d:45:18:4e:05:37:da:6a:
b6:5a:59:e1:d3:53:b5:8a:6a:95:03:eb:8d:57:ba:79:f5:84:
1e:c3:2b:46:31:e7:06:c2:0b:ce:8b:fd:7f:5c:ca:94:1d:82:
1d:a5:c7:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt8F6X1yaqjL0oEeR2JR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljY2UxNjAwZjUwNzM1OTYwZjg2ZDYyMWNkNGY1ZjU5Zjg3
OWEwZTgwHhcNMjUxMTExMDcwMDU5WhcNMjUxMTEyMDcwMDU5WjAzMTEwLwYDVQQD
Eyg3ZjkwMWQwZWU5MmE1YWJiNTIxN2YwZWYwNTk1YjM2ZTgxMmVjZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpEBYDgL7eF4JIvHrsbHD+45yGhU
5sUB598vsHTspm4TW5skzge7rjHYwQXg6TdzPmnkdyeqeMv0v/FaBRzBoAxEWQQm
cTL46Qog0hKTCQY4Y3fE3jJicSwGFuxXtvKx6q1GcPfhxkWTvghcZmeqZYhQbJpx
Jb7Tb1EctwHBlNDAaAWp0fPlt3h+1K6V9NgEJHmzhjuIUJQKGggiWjqrSEDWii85
64YAOgJYHBnlo/3Zzb5kwlVyEBnCPUVsxEoq4W8yZjxct+SkMeeL5zBD+ykyQw+I
/2/dpZ2x6Y1Kf1ApjOdfbdymoZD2DSRL1jO3kgCIgfXTJxXQNqhOYnoOAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+QHQ7pKlq7Uhfw7wWVs26BLs1mMB8GA1UdIwQY
MBaAFJzOFgD1BzWWD4bWIc1PX1n4eaDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk00V0FQVUhOWllQaHRZaHpVOWZXZmg1b09nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My80ZjE3ZmEtZDVlOC00MzlkLTg3YTIt
ZGYzMmEyNWM1ZjJmLzEvbk00V0FQVUhOWllQaHRZaHpVOWZXZmg1b09nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My80ZjE3ZmEtZDVlOC00MzlkLTg3YTItZGYzMmEyNWM1ZjJm
LzEvbk00V0FQVUhOWllQaHRZaHpVOWZXZmg1b09nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxGKmeoo
udiVtbKLXhHpzJhwZVTipmfJYplBqCOi2ZW3CSDICnKdkZ60vAKd/PAlGxL8S3i8
ebjaSEdnk9Tvb1L/Ot6rpYO/NHsvd3NocW+4M8YxbblSUcUVprWvVRVJxtSugmsR
0wkWWzv9sq+w9uj/ejOoOyz+ArhXNvd4U8FX6qmjKBsQ7WSjgCL45OyryWQNB69H
rmC6cWSwZp/L1bwefikj3o5+LHC8YryM2NAFCulX5TcbHCJiTfZEYwT00Vh8OD10
cvta8i623otCkS1FGE4FN9pqtlpZ4dNTtYpqlQPrjVe6efWEHsMrRjHnBsILzov9
f1zKlB2CHaXHBw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:41 2025 by rpki-client