Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
File: N9IJppWeI1T3POLyuUEib4MpDIw.mft (raw, json)
Hash identifier: mDL+cNsBX/Yp8/Le62dXE37vZfl5AfCOvSBNxAWqlSQ=
Subject key identifier: E0:44:59:C9:61:36:CC:C3:4D:41:78:95:06:75:3E:0C:A7:FD:0C:72
Authority key identifier: 37:D2:09:A6:95:9E:23:54:F7:3C:E2:F2:B9:41:22:6F:83:29:0C:8C
Certificate issuer: /CN=37d209a6959e2354f73ce2f2b941226f83290c8c
Certificate serial: 019A22892F73A9D2C33652052C51FE87F0B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
Manifest number: 01AB
Signing time: Sun 26 Oct 2025 22:00:06 +0000
Manifest this update: Sun 26 Oct 2025 22:00:06 +0000
Manifest next update: Mon 27 Oct 2025 22:00:06 +0000
Files and hashes: 1: N9IJppWeI1T3POLyuUEib4MpDIw.crl (hash: nLNefyOXYdenklj1wECQbiYnoGUzYFyAHUQcRZ16jVo=)
2: p02sjha6oluTWKotOKPITJ53VlU.roa (hash: rLFuslHglQh990YEEpEUg7xz9pfaxlb0KsezlTb7ZC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:2f:73:a9:d2:c3:36:52:05:2c:51:fe:87:f0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d209a6959e2354f73ce2f2b941226f83290c8c
Validity
Not Before: Oct 26 22:00:06 2025 GMT
Not After : Oct 27 22:00:06 2025 GMT
Subject: CN=e04459c96136ccc34d41789506753e0ca7fd0c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:43:4a:6f:d6:22:19:63:6e:18:00:c0:6f:58:
b3:dd:0b:7d:9d:18:63:99:2c:60:bb:da:3d:58:36:
02:1a:b0:01:0d:81:15:4c:bb:11:25:22:20:9f:02:
e5:07:fc:01:15:b0:f3:78:43:fc:1c:8e:b7:5d:31:
6a:52:47:02:1f:08:f6:e8:c1:72:f5:15:6c:00:83:
9d:69:a8:09:3e:87:e3:d5:d8:5d:cf:18:d6:16:3f:
81:d8:30:d3:56:f7:8f:6e:d4:e5:f4:28:f4:4c:6a:
27:81:70:a7:0d:43:53:07:22:cf:dd:d6:2e:ef:95:
26:b3:87:43:b5:a1:3b:20:a9:bb:3b:ed:89:8e:bf:
71:40:a4:39:e9:dd:9f:54:c9:75:b2:1c:7b:b9:7a:
ec:2a:95:f5:b6:73:79:c9:4a:8e:96:96:b7:f8:74:
07:0f:15:2f:b8:7a:1a:77:9d:ec:4f:12:1d:e1:55:
8a:6a:0b:66:c8:72:4a:3c:67:ec:18:97:98:ff:bb:
5a:f6:0e:98:0c:14:5c:40:85:c0:fb:6b:38:66:8a:
a1:c9:9a:ee:ae:d8:7d:15:e4:ee:f4:d8:9c:15:07:
13:ba:ea:2f:81:79:9c:7c:6f:2a:f1:0c:6f:f7:e9:
4e:d6:f5:c4:da:25:2d:05:28:06:22:fd:a4:af:d6:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:44:59:C9:61:36:CC:C3:4D:41:78:95:06:75:3E:0C:A7:FD:0C:72
X509v3 Authority Key Identifier:
keyid:37:D2:09:A6:95:9E:23:54:F7:3C:E2:F2:B9:41:22:6F:83:29:0C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:04:c9:12:ba:aa:9f:15:4f:82:d1:3e:6a:21:48:6b:7e:21:
b8:24:fc:cf:90:0f:9c:23:52:fb:a9:36:9e:65:64:f0:f8:e9:
79:96:b5:14:1b:4b:b1:ab:55:17:74:1f:a9:d5:4f:da:b9:09:
41:4a:99:90:be:2d:dd:db:08:99:e6:9a:e1:d1:c2:cb:e6:b0:
f6:f2:fb:de:ea:07:b3:82:d4:5a:ba:a2:4f:e0:df:7d:07:6c:
4d:0a:e0:ce:3a:f7:7e:6c:83:bd:d6:ad:44:3b:da:7b:5a:e7:
c3:f0:91:04:ec:11:ae:9b:af:a6:eb:d4:07:1b:2b:ba:a0:0c:
10:86:04:49:1e:2e:99:a8:30:19:af:48:c1:b9:e7:42:18:18:
06:41:54:5c:50:cc:20:95:58:05:bd:b3:e0:f7:be:32:c9:fd:
32:6b:70:3c:4d:c0:ca:28:d1:7b:23:b0:ca:8b:bc:1e:90:1d:
d0:67:e8:11:01:30:d6:ac:d3:12:63:bd:e8:3d:29:5e:a5:0c:
2f:55:c1:19:f5:5e:53:68:0c:68:d4:6c:7e:3c:9a:56:0a:b3:
af:aa:a3:59:73:03:27:35:12:0f:1d:41:2b:a0:39:55:73:4d:
ac:c5:67:fd:7a:eb:8a:51:cc:db:30:51:92:9e:2f:a2:c8:8d:
26:42:8b:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiiS9zqdLDNlIFLFH+h/CwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZDIwOWE2OTU5ZTIzNTRmNzNjZTJmMmI5NDEyMjZmODMy
OTBjOGMwHhcNMjUxMDI2MjIwMDA2WhcNMjUxMDI3MjIwMDA2WjAzMTEwLwYDVQQD
EyhlMDQ0NTljOTYxMzZjY2MzNGQ0MTc4OTUwNjc1M2UwY2E3ZmQwYzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30NKb9YiGWNuGADAb1iz3Qt9nRhj
mSxgu9o9WDYCGrABDYEVTLsRJSIgnwLlB/wBFbDzeEP8HI63XTFqUkcCHwj26MFy
9RVsAIOdaagJPofj1dhdzxjWFj+B2DDTVvePbtTl9Cj0TGongXCnDUNTByLP3dYu
75Ums4dDtaE7IKm7O+2Jjr9xQKQ56d2fVMl1shx7uXrsKpX1tnN5yUqOlpa3+HQH
DxUvuHoad53sTxId4VWKagtmyHJKPGfsGJeY/7ta9g6YDBRcQIXA+2s4ZoqhyZru
rth9FeTu9NicFQcTuuovgXmcfG8q8Qxv9+lO1vXE2iUtBSgGIv2kr9ZTJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBEWclhNszDTUF4lQZ1Pgyn/QxyMB8GA1UdIwQY
MBaAFDfSCaaVniNU9zzi8rlBIm+DKQyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjlJSnBwV2VJMVQzUE9MeXVVRWliNE1wREl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9iZDdkY2UtMGRkYy00MzY4LWIwNGQt
MTNmMzRiMDlhZTYxLzEvTjlJSnBwV2VJMVQzUE9MeXVVRWliNE1wREl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9iZDdkY2UtMGRkYy00MzY4LWIwNGQtMTNmMzRiMDlhZTYx
LzEvTjlJSnBwV2VJMVQzUE9MeXVVRWliNE1wREl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQTJErqq
nxVPgtE+aiFIa34huCT8z5APnCNS+6k2nmVk8PjpeZa1FBtLsatVF3QfqdVP2rkJ
QUqZkL4t3dsImeaa4dHCy+aw9vL73uoHs4LUWrqiT+DffQdsTQrgzjr3fmyDvdat
RDvae1rnw/CRBOwRrpuvpuvUBxsruqAMEIYESR4umagwGa9IwbnnQhgYBkFUXFDM
IJVYBb2z4Pe+Msn9MmtwPE3AyijReyOwyou8HpAd0GfoEQEw1qzTEmO96D0pXqUM
L1XBGfVeU2gMaNRsfjyaVgqzr6qjWXMDJzUSDx1BK6A5VXNNrMVn/XrrilHM2zBR
kp4vosiNJkKLdQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:40 2025 by rpki-client