Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
File: njXiGCQ9GwYp16OD6v3CBROKGUs.mft (raw, json)
Hash identifier: wezuYV29ztgE6Mx10R2IqHBssz2W6lCyggDBt/yloiE=
Subject key identifier: 05:C2:15:8F:BA:A1:D9:56:15:9A:94:68:ED:B3:FD:37:57:B4:BA:FB
Authority key identifier: 9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B
Certificate issuer: /CN=9e35e218243d1b0629d7a383eafdc205138a194b
Certificate serial: 019A7225993EA2BB68F78627DACC0087E0E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
Manifest number: 0A6A
Signing time: Tue 11 Nov 2025 09:00:57 +0000
Manifest this update: Tue 11 Nov 2025 09:00:57 +0000
Manifest next update: Wed 12 Nov 2025 09:00:57 +0000
Files and hashes: 1: njXiGCQ9GwYp16OD6v3CBROKGUs.crl (hash: y6FX/Iwe/fPK34CpTpq84v1f3Y62EjIS3xHmxIGUTgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:99:3e:a2:bb:68:f7:86:27:da:cc:00:87:e0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e35e218243d1b0629d7a383eafdc205138a194b
Validity
Not Before: Nov 11 09:00:57 2025 GMT
Not After : Nov 12 09:00:57 2025 GMT
Subject: CN=05c2158fbaa1d956159a9468edb3fd3757b4bafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a6:70:09:42:6f:d5:a0:59:8c:18:5f:8d:ef:
73:4b:16:7c:b5:be:17:12:e2:0c:32:2c:e6:36:4e:
cc:04:65:54:d7:3a:b9:c1:09:52:46:18:1e:37:09:
bc:db:a6:8d:ec:27:71:05:b4:7a:b6:92:7d:23:19:
f8:25:5f:55:b8:70:5b:88:59:a1:f6:f7:b6:55:88:
23:5d:46:28:d2:6d:2f:88:72:a1:66:c0:96:5c:a1:
02:bd:01:ac:28:26:71:1c:5b:2a:9d:b5:67:bc:fe:
d7:a7:6b:3e:fb:23:2d:b5:42:b3:19:d9:89:2b:b2:
07:99:af:55:31:d8:df:ed:b5:58:cd:3a:0e:e8:89:
26:b4:3c:cf:bc:b8:d3:30:7c:a8:4a:05:21:96:43:
96:28:02:fd:11:f9:2c:90:1a:51:50:0c:83:ad:39:
9f:e1:6e:7e:86:a7:ae:e2:98:55:78:2e:20:66:6e:
47:f1:8d:63:4b:5f:8d:16:ec:3e:a6:eb:04:03:3b:
67:ea:69:0c:d5:a4:7d:2d:ea:4d:9a:de:6c:d0:f9:
c3:ab:c6:d7:dd:77:27:3b:03:39:44:f7:91:b3:76:
8f:10:a5:b9:db:6a:91:3d:a3:9b:97:1d:de:f7:3c:
e4:63:f9:61:78:04:c0:77:35:00:b4:4a:0d:65:c6:
95:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C2:15:8F:BA:A1:D9:56:15:9A:94:68:ED:B3:FD:37:57:B4:BA:FB
X509v3 Authority Key Identifier:
keyid:9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:25:cb:9d:fe:c5:4b:11:da:14:49:3c:82:68:bc:64:ee:17:
a1:a7:23:81:6f:4e:e2:01:b2:7b:26:38:b6:4b:56:5f:22:a5:
f9:81:7e:29:d9:4a:3a:cf:1b:e3:3a:56:9e:ae:24:55:6e:57:
57:cf:08:6e:91:c9:be:5f:96:68:f7:4e:69:c5:39:76:f3:8d:
32:30:3a:95:8e:94:8d:66:90:0a:5f:70:e1:27:96:30:7f:c0:
31:bb:b7:f5:50:07:58:bf:30:a5:cc:6f:9b:0c:4b:1e:eb:4a:
09:83:e8:73:b7:6a:15:0b:40:c8:55:05:87:6e:2e:f9:bd:83:
7d:9d:05:70:1f:cf:81:94:d1:be:c5:59:66:6b:75:2a:ee:7e:
1b:45:04:d7:72:40:86:d1:8a:1e:b9:1d:9f:fe:63:c0:1f:12:
2e:49:62:91:9f:26:74:07:21:e8:c0:dc:ff:c8:c8:92:42:f7:
09:75:06:19:10:16:04:a2:15:da:d4:0d:be:d9:3d:5a:e9:14:
2b:79:99:30:1f:bd:9a:fe:fd:00:33:e1:a0:f0:9a:0b:b5:f6:
f7:72:8c:ea:cc:c2:7b:ab:36:07:71:37:e8:ab:fc:9a:08:00:
f5:be:e5:91:d5:9c:90:2a:9e:0a:be:00:6a:74:d5:57:32:48:
88:3c:77:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJZk+orto94Yn2swAh+DoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzVlMjE4MjQzZDFiMDYyOWQ3YTM4M2VhZmRjMjA1MTM4
YTE5NGIwHhcNMjUxMTExMDkwMDU3WhcNMjUxMTEyMDkwMDU3WjAzMTEwLwYDVQQD
EygwNWMyMTU4ZmJhYTFkOTU2MTU5YTk0NjhlZGIzZmQzNzU3YjRiYWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qZwCUJv1aBZjBhfje9zSxZ8tb4X
EuIMMizmNk7MBGVU1zq5wQlSRhgeNwm826aN7CdxBbR6tpJ9Ixn4JV9VuHBbiFmh
9ve2VYgjXUYo0m0viHKhZsCWXKECvQGsKCZxHFsqnbVnvP7Xp2s++yMttUKzGdmJ
K7IHma9VMdjf7bVYzToO6IkmtDzPvLjTMHyoSgUhlkOWKAL9EfkskBpRUAyDrTmf
4W5+hqeu4phVeC4gZm5H8Y1jS1+NFuw+pusEAztn6mkM1aR9LepNmt5s0PnDq8bX
3XcnOwM5RPeRs3aPEKW522qRPaOblx3e9zzkY/lheATAdzUAtEoNZcaVuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXCFY+6odlWFZqUaO2z/TdXtLr7MB8GA1UdIwQY
MBaAFJ414hgkPRsGKdejg+r9wgUTihlLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpYaUdDUTlHd1lwMTZPRDZ2M0NCUk9LR1VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81MzgzMDQtMGI4ZS00MjNmLWFlMWMt
NTUwZTU2NDdiYmJmLzEvbmpYaUdDUTlHd1lwMTZPRDZ2M0NCUk9LR1VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81MzgzMDQtMGI4ZS00MjNmLWFlMWMtNTUwZTU2NDdiYmJm
LzEvbmpYaUdDUTlHd1lwMTZPRDZ2M0NCUk9LR1VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyXLnf7F
SxHaFEk8gmi8ZO4XoacjgW9O4gGyeyY4tktWXyKl+YF+KdlKOs8b4zpWnq4kVW5X
V88IbpHJvl+WaPdOacU5dvONMjA6lY6UjWaQCl9w4SeWMH/AMbu39VAHWL8wpcxv
mwxLHutKCYPoc7dqFQtAyFUFh24u+b2DfZ0FcB/PgZTRvsVZZmt1Ku5+G0UE13JA
htGKHrkdn/5jwB8SLklikZ8mdAch6MDc/8jIkkL3CXUGGRAWBKIV2tQNvtk9WukU
K3mZMB+9mv79ADPhoPCaC7X293KM6szCe6s2B3E36Kv8mggA9b7lkdWckCqeCr4A
anTVVzJIiDx3Dg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:17 2025 by rpki-client