Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File: nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier: nPIQWU+1SiRdowVVLGRfuMFZAOgnsLRa6D85iaMYw9Q=
Subject key identifier: 47:1E:06:40:94:1D:D2:8F:A7:D4:F1:6A:EA:B3:82:4F:1C:7A:A1:10
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial: 019A7226031EC10A5203599500A7BC082E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:24 +0000
Manifest this update: Tue 11 Nov 2025 09:01:24 +0000
Manifest next update: Wed 12 Nov 2025 09:01:24 +0000
Files and hashes: 1: BhSQf1yX1uLwgzRbSbyaxC2Eyyk.roa (hash: QYypOcFPdcc9ArENcLdBU9X1TsVQ+7g/yqAYCtsdaqk=)
2: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: CH7Z6Arh6zzWPiwyg8VqCXYALt3STHNOoHX7yqja9yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:03:1e:c1:0a:52:03:59:95:00:a7:bc:08:2e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Validity
Not Before: Nov 11 09:01:24 2025 GMT
Not After : Nov 12 09:01:24 2025 GMT
Subject: CN=471e0640941dd28fa7d4f16aeab3824f1c7aa110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c5:76:50:ba:e6:8f:1a:6b:e8:22:66:64:68:
80:c6:93:43:95:e4:35:5b:71:42:87:ec:03:1e:29:
a6:09:c7:c6:97:b9:55:ec:56:77:c4:9c:9f:05:42:
06:68:25:7d:0f:13:a5:0c:67:7b:98:cc:49:a9:8a:
d0:22:3d:37:0a:77:e0:ba:36:8b:73:3e:02:c9:a4:
59:ab:b3:55:b8:46:aa:f0:e2:87:6b:50:db:9a:fc:
91:9b:3c:f5:5a:76:a2:c6:bd:13:fb:14:00:30:e7:
cc:2c:0b:d5:b1:f3:34:31:92:03:78:4f:ba:4d:8c:
d4:c3:86:bd:44:ef:e4:b2:9d:e7:09:37:d6:ae:9c:
3e:e7:bf:c2:f6:6f:c2:aa:39:55:3f:f3:60:30:93:
47:ff:d2:7d:9a:43:84:51:e0:fa:53:48:8a:2f:a8:
58:ca:4b:39:9d:02:25:09:79:44:4a:95:8c:1a:d3:
f2:3d:30:ac:f5:bd:8a:c8:de:67:af:89:31:60:2b:
9f:6a:48:5c:43:11:67:43:4f:36:ac:65:bd:2b:4c:
98:92:6f:b2:53:93:01:93:f9:b5:0c:76:73:f7:fc:
7c:5b:88:c2:59:9b:d9:ee:f6:6c:9b:70:c9:76:23:
d3:22:53:66:54:be:41:19:6b:00:dc:6d:39:29:2e:
6b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1E:06:40:94:1D:D2:8F:A7:D4:F1:6A:EA:B3:82:4F:1C:7A:A1:10
X509v3 Authority Key Identifier:
keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:07:e9:aa:3d:1c:90:f7:4e:94:90:cc:28:5d:83:9a:10:d8:
ce:ed:2a:fa:47:d3:89:b5:30:60:52:38:78:ac:83:51:e2:78:
c8:a8:7d:67:fe:f6:bb:5e:21:aa:2b:78:31:1f:d3:b2:28:38:
be:99:7b:ee:47:92:cd:f7:bd:2c:e5:de:28:0a:24:6e:82:05:
32:c0:0f:4d:cf:8c:36:d0:0d:52:19:69:6c:54:5f:f9:4f:83:
db:a9:bf:77:67:8f:88:c0:d1:97:33:41:47:44:71:9f:b4:9b:
67:22:67:03:6e:3b:e6:87:16:f8:38:17:2d:a6:b8:7a:bb:ab:
39:b8:ef:0d:72:bd:dc:12:60:50:ab:3d:22:74:a1:63:4a:a4:
5e:6b:65:53:bb:c2:d3:27:58:9c:60:10:80:25:74:af:b0:4d:
55:70:d7:80:c2:d2:6a:17:b1:2b:c8:6d:2c:a6:8c:96:dc:0d:
7e:ab:b4:8f:b8:2b:de:9c:48:73:a5:92:a3:41:9d:0c:33:f7:
ee:9f:b5:e7:87:72:c7:6d:d3:a3:37:97:b5:09:a6:d2:28:c2:
cb:4f:c0:19:1a:90:ac:fb:2e:55:9c:3d:ae:2b:22:18:e0:ca:
15:11:93:fe:54:b4:d8:d6:b0:53:cc:c8:f5:49:ae:b1:31:9c:
ac:33:21:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJgMewQpSA1mVAKe8CC42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNzhlZmJlNjc4NmY5ZTIwMmM0Mjc4OGUxYmJmNzE3ODFj
YThjNDcwHhcNMjUxMTExMDkwMTI0WhcNMjUxMTEyMDkwMTI0WjAzMTEwLwYDVQQD
Eyg0NzFlMDY0MDk0MWRkMjhmYTdkNGYxNmFlYWIzODI0ZjFjN2FhMTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosV2ULrmjxpr6CJmZGiAxpNDleQ1
W3FCh+wDHimmCcfGl7lV7FZ3xJyfBUIGaCV9DxOlDGd7mMxJqYrQIj03CnfgujaL
cz4CyaRZq7NVuEaq8OKHa1DbmvyRmzz1Wnaixr0T+xQAMOfMLAvVsfM0MZIDeE+6
TYzUw4a9RO/ksp3nCTfWrpw+57/C9m/CqjlVP/NgMJNH/9J9mkOEUeD6U0iKL6hY
yks5nQIlCXlESpWMGtPyPTCs9b2KyN5nr4kxYCufakhcQxFnQ082rGW9K0yYkm+y
U5MBk/m1DHZz9/x8W4jCWZvZ7vZsm3DJdiPTIlNmVL5BGWsA3G05KS5rHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEceBkCUHdKPp9Txauqzgk8ceqEQMB8GA1UdIwQY
MBaAFJx4775nhvniAsQniOG79xeByoxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80YzE2NDItODBmMy00NTIzLTk3NGQt
NGZjMWNhZDhhYjIyLzEvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80YzE2NDItODBmMy00NTIzLTk3NGQtNGZjMWNhZDhhYjIy
LzEvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkAfpqj0c
kPdOlJDMKF2DmhDYzu0q+kfTibUwYFI4eKyDUeJ4yKh9Z/72u14hqit4MR/Tsig4
vpl77keSzfe9LOXeKAokboIFMsAPTc+MNtANUhlpbFRf+U+D26m/d2ePiMDRlzNB
R0Rxn7SbZyJnA2475ocW+DgXLaa4erurObjvDXK93BJgUKs9InShY0qkXmtlU7vC
0ydYnGAQgCV0r7BNVXDXgMLSahexK8htLKaMltwNfqu0j7gr3pxIc6WSo0GdDDP3
7p+154dyx23TozeXtQmm0ijCy0/AGRqQrPsuVZw9risiGODKFRGT/lS02NawU8zI
9UmusTGcrDMh1A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:55 2025 by rpki-client