Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
File: N4G6usaSUnGxeYF1FeBuahCs9rQ.mft (raw, json)
Hash identifier: FV0UKmyGiXmrmowxYKEIH8Q+if4NFf8GAgjIVSgCx4Q=
Subject key identifier: E0:74:BF:03:64:31:36:20:24:A6:78:02:E7:74:C0:D5:99:01:C1:C8
Authority key identifier: 37:81:BA:BA:C6:92:52:71:B1:79:81:75:15:E0:6E:6A:10:AC:F6:B4
Certificate issuer: /CN=3781babac6925271b179817515e06e6a10acf6b4
Certificate serial: 019A73383A3C1852719627E71A9EC7371D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
Manifest number: 06C6
Signing time: Tue 11 Nov 2025 14:00:56 +0000
Manifest this update: Tue 11 Nov 2025 14:00:56 +0000
Manifest next update: Wed 12 Nov 2025 14:00:56 +0000
Files and hashes: 1: N4G6usaSUnGxeYF1FeBuahCs9rQ.crl (hash: lRFiqDNaFvCO7/jwfX5dx5B3dZtQzaph6RYecJOLczE=)
2: R1GLOmkDsdOQU3JmSI6jpWMtr0k.roa (hash: TobK47r5xeGKINzekYR4rqZ5DBGKz/0D1yzbu2xP0c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:3a:3c:18:52:71:96:27:e7:1a:9e:c7:37:1d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3781babac6925271b179817515e06e6a10acf6b4
Validity
Not Before: Nov 11 14:00:56 2025 GMT
Not After : Nov 12 14:00:56 2025 GMT
Subject: CN=e074bf036431362024a67802e774c0d59901c1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:ef:85:9e:fc:92:44:e7:5e:7a:b1:ee:1a:
d8:05:ce:c8:e3:e1:f2:7f:a9:3a:e4:c5:61:c0:b6:
d8:09:c1:22:ea:c2:8c:a3:48:d7:8f:be:8c:25:df:
5e:d3:cf:4b:c3:f8:a0:40:2c:5b:e2:1d:6c:6a:4e:
9b:b8:3e:d3:ac:75:cb:b0:3d:f5:a2:53:c9:54:20:
b8:22:f9:93:25:04:b8:9e:b1:5a:5c:5f:c9:e5:2b:
40:73:95:22:11:05:ed:c7:ae:4e:29:8a:c5:68:1a:
91:36:fb:99:e9:a4:31:04:04:cf:9f:c3:85:2b:28:
99:f4:e7:98:bb:01:cf:d8:e7:50:e9:78:c1:67:30:
fb:20:bb:f8:43:7c:ec:e8:13:04:23:b3:f1:ce:d2:
9c:87:12:03:48:f8:43:a4:0c:29:ec:7e:93:20:c9:
81:2a:ee:ed:24:1e:94:b7:86:7a:1f:39:04:42:28:
eb:1d:95:9b:9e:45:17:e6:e7:5f:a2:f5:23:9d:09:
74:cf:6f:ba:6c:d3:5d:39:60:35:cf:e7:23:c4:05:
b3:c1:e0:39:00:18:3a:12:0a:92:b9:3c:3c:f3:87:
af:dc:2f:d9:9e:37:aa:db:53:08:d1:3f:12:d7:6c:
47:46:29:a4:a0:2e:80:a7:a2:41:93:fb:64:a8:60:
d0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:74:BF:03:64:31:36:20:24:A6:78:02:E7:74:C0:D5:99:01:C1:C8
X509v3 Authority Key Identifier:
keyid:37:81:BA:BA:C6:92:52:71:B1:79:81:75:15:E0:6E:6A:10:AC:F6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f3:3b:90:71:f6:af:65:09:59:25:07:68:9a:37:b1:83:ec:
c4:20:9d:ec:67:08:bf:36:26:68:e2:81:d2:51:36:d3:2e:a3:
06:bc:7f:8e:4d:2c:83:aa:ec:6d:5b:c7:e5:39:d0:d5:3c:da:
79:82:d7:0b:a8:56:c2:c9:11:31:af:cf:49:69:90:93:4d:02:
39:3a:00:f5:c6:d0:9d:ff:3c:b0:70:46:f2:1a:61:69:a3:07:
ca:03:95:30:f4:b0:96:dc:06:6a:ed:29:e7:ee:79:dc:70:cf:
ff:89:f6:db:9a:7f:73:b7:fb:75:61:60:cb:a0:01:bd:74:03:
ca:9a:44:60:9e:7e:bc:73:26:35:a3:62:db:75:ca:01:00:a3:
c5:f5:d8:c8:1a:b9:cb:89:a3:0a:f1:b0:28:45:41:26:c6:9c:
29:75:01:50:0a:e9:36:59:f1:f4:18:17:68:a3:55:31:c5:80:
7c:d3:7d:b9:c4:11:9b:5d:8d:8b:e0:79:9d:3a:bd:57:55:4e:
7c:5a:5f:28:03:f9:35:a6:c8:15:ff:7e:a4:bf:b7:c3:42:1f:
34:e9:04:16:fd:88:18:55:54:14:fb:5c:71:31:e3:db:34:92:
40:56:25:05:47:15:61:fb:2a:e2:35:72:3a:91:9d:df:c9:ba:
3b:b7:54:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzODo8GFJxlifnGp7HNx1DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ODFiYWJhYzY5MjUyNzFiMTc5ODE3NTE1ZTA2ZTZhMTBh
Y2Y2YjQwHhcNMjUxMTExMTQwMDU2WhcNMjUxMTEyMTQwMDU2WjAzMTEwLwYDVQQD
EyhlMDc0YmYwMzY0MzEzNjIwMjRhNjc4MDJlNzc0YzBkNTk5MDFjMWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjHvhZ78kkTnXnqx7hrYBc7I4+Hy
f6k65MVhwLbYCcEi6sKMo0jXj76MJd9e089Lw/igQCxb4h1sak6buD7TrHXLsD31
olPJVCC4IvmTJQS4nrFaXF/J5StAc5UiEQXtx65OKYrFaBqRNvuZ6aQxBATPn8OF
KyiZ9OeYuwHP2OdQ6XjBZzD7ILv4Q3zs6BMEI7PxztKchxIDSPhDpAwp7H6TIMmB
Ku7tJB6Ut4Z6HzkEQijrHZWbnkUX5udfovUjnQl0z2+6bNNdOWA1z+cjxAWzweA5
ABg6EgqSuTw884ev3C/Znjeq21MI0T8S12xHRimkoC6Ap6JBk/tkqGDQOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOB0vwNkMTYgJKZ4Aud0wNWZAcHIMB8GA1UdIwQY
MBaAFDeBurrGklJxsXmBdRXgbmoQrPa0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjRHNnVzYVNVbkd4ZVlGMUZlQnVhaENzOXJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84ZjgzYzItM2JiMy00ZDQ3LTgwMzEt
ZGU1NzFiODk2MThkLzEvTjRHNnVzYVNVbkd4ZVlGMUZlQnVhaENzOXJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS84ZjgzYzItM2JiMy00ZDQ3LTgwMzEtZGU1NzFiODk2MThk
LzEvTjRHNnVzYVNVbkd4ZVlGMUZlQnVhaENzOXJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/M7kHH2
r2UJWSUHaJo3sYPsxCCd7GcIvzYmaOKB0lE20y6jBrx/jk0sg6rsbVvH5TnQ1Tza
eYLXC6hWwskRMa/PSWmQk00COToA9cbQnf88sHBG8hphaaMHygOVMPSwltwGau0p
5+553HDP/4n225p/c7f7dWFgy6ABvXQDyppEYJ5+vHMmNaNi23XKAQCjxfXYyBq5
y4mjCvGwKEVBJsacKXUBUArpNlnx9BgXaKNVMcWAfNN9ucQRm12Ni+B5nTq9V1VO
fFpfKAP5NabIFf9+pL+3w0IfNOkEFv2IGFVUFPtccTHj2zSSQFYlBUcVYfsq4jVy
OpGd38m6O7dUmA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:42 2025 by rpki-client