Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json)
Hash identifier: Euc2+bnI3IWopUEex/3mBQz3LO4e1EQUmppl2EKLwO4=
Subject key identifier: 75:53:EF:B0:4C:C0:CF:F2:8A:EC:DF:C8:92:B3:68:0B:71:7B:A1:E1
Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Certificate serial: 019A06364FA4DC268119F79386768F488608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
Manifest number: 043F
Signing time: Tue 21 Oct 2025 10:00:13 +0000
Manifest this update: Tue 21 Oct 2025 10:00:13 +0000
Manifest next update: Wed 22 Oct 2025 10:00:13 +0000
Files and hashes: 1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: i2vBmAwt7XFsMwZeayBGDdVo/nROpWgd3BcuyUqS6p8=)
2: HexBDB0ALKRx19vAL_olvRM_0pc.roa (hash: ajSzA7jvEEstqpYQIZuBqV7eWXJVONLQH581vvaQYJc=)
3: PrcLqHgKnfIRGf3YM80gSjoYr6I.roa (hash: ZkwH8oTWm6e+gIX3jU/BvkpmjX7EH4UuYT++yIKL1DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:36:4f:a4:dc:26:81:19:f7:93:86:76:8f:48:86:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Validity
Not Before: Oct 21 10:00:13 2025 GMT
Not After : Oct 22 10:00:13 2025 GMT
Subject: CN=7553efb04cc0cff28aecdfc892b3680b717ba1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:cd:dc:c1:e6:7e:88:eb:dc:2d:9a:06:51:d5:
9b:4d:98:1d:fb:10:79:30:ae:aa:71:1d:e1:29:8c:
6d:6a:78:f3:29:5d:0f:84:12:5b:7f:7b:5d:16:1a:
3d:7d:d5:3e:89:18:21:fb:2b:71:6d:2b:ba:05:28:
09:27:5b:6e:d2:6d:9b:71:31:24:fa:5b:a0:36:07:
6a:12:5e:1d:21:5c:41:e3:9b:e1:22:f9:6f:d5:29:
6e:01:6e:e2:6f:fe:b7:31:99:33:e8:6d:53:a7:55:
e7:90:e4:6b:62:fb:19:7b:28:08:d1:8a:09:ca:32:
da:fb:57:13:1a:d4:99:d9:01:86:a7:e5:7f:50:73:
64:45:19:9e:ec:ff:54:2c:ee:ed:6b:5f:ca:30:0f:
c9:87:f7:9b:d8:3c:90:d6:2f:91:f1:a2:f4:1c:bd:
e1:fb:39:f4:a9:ac:5b:d9:fa:54:24:8a:2f:1b:92:
2d:cb:b8:08:3e:81:0f:36:94:c4:4a:96:58:d7:1c:
9c:92:16:41:df:94:08:cf:06:e4:c6:48:7a:85:3d:
f6:1c:5e:a9:11:9f:80:71:3f:99:28:dc:f8:14:6c:
5a:b1:41:80:d0:76:a9:13:f6:0e:4e:75:42:b2:fa:
8e:ad:27:16:5b:c5:25:c3:f8:17:0f:e1:99:34:49:
01:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:53:EF:B0:4C:C0:CF:F2:8A:EC:DF:C8:92:B3:68:0B:71:7B:A1:E1
X509v3 Authority Key Identifier:
keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7a:a7:00:26:51:d5:70:6f:22:f2:a4:98:88:97:85:14:95:
db:c2:38:7d:67:f2:43:0b:ff:30:4f:48:28:cb:e1:0c:84:d3:
0e:10:1b:ce:79:f2:87:44:27:2d:9a:4e:bd:2e:ff:57:02:45:
6a:8f:69:76:57:bd:7b:ea:9b:9c:06:a3:71:3e:f5:58:7f:fd:
6b:32:e7:88:6f:3f:e5:0d:45:82:ff:7e:b8:4f:15:61:c3:79:
22:4f:8b:48:59:c4:e5:32:ca:a2:e4:eb:c1:7d:4c:fa:3c:c6:
49:25:03:fa:e6:93:9f:f6:26:38:4a:4a:81:8f:55:38:0c:dd:
1a:ce:ed:88:c6:3c:8f:ef:dd:6b:d9:95:52:92:59:9d:b4:75:
fa:bd:69:fa:c2:7c:aa:bb:89:20:0a:d3:db:85:b6:c6:07:3e:
c2:58:56:89:ca:c8:3b:53:55:c7:6e:49:d7:ba:e5:31:93:30:
34:b1:33:f1:5b:1a:62:01:10:ef:bc:01:c4:04:df:00:75:52:
b0:88:b5:59:9a:6a:19:50:0e:7d:c0:bc:c5:e2:29:5b:3d:3e:
ba:b0:ca:29:ec:f1:15:88:69:a6:04:32:6f:63:b2:2b:02:09:
10:a0:1d:8f:7a:ba:bb:0c:d6:8d:1d:90:d1:b1:ce:7f:f8:3e:
c3:02:75:6c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZoGNk+k3CaBGfeThnaPSIYIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZDZkZGVlMzRjNWJiOGVjMGViOTE5Y2UyNjU2YmYwY2Q4
NTVkNTQwHhcNMjUxMDIxMTAwMDEzWhcNMjUxMDIyMTAwMDEzWjAzMTEwLwYDVQQD
Eyg3NTUzZWZiMDRjYzBjZmYyOGFlY2RmYzg5MmIzNjgwYjcxN2JhMWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9M3cweZ+iOvcLZoGUdWbTZgd+xB5
MK6qcR3hKYxtanjzKV0PhBJbf3tdFho9fdU+iRgh+ytxbSu6BSgJJ1tu0m2bcTEk
+lugNgdqEl4dIVxB45vhIvlv1SluAW7ib/63MZkz6G1Tp1XnkORrYvsZeygI0YoJ
yjLa+1cTGtSZ2QGGp+V/UHNkRRme7P9ULO7ta1/KMA/Jh/eb2DyQ1i+R8aL0HL3h
+zn0qaxb2fpUJIovG5Ity7gIPoEPNpTESpZY1xyckhZB35QIzwbkxkh6hT32HF6p
EZ+AcT+ZKNz4FGxasUGA0HapE/YOTnVCsvqOrScWW8Ulw/gXD+GZNEkBSQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHVT77BMwM/yiuzfyJKzaAtxe6HhMB8GA1UdIwQY
MBaAFPjW3e40xbuOwOuRnOJla/DNhV1UMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1OYmQ3alRGdTQ3QTY1R2M0bVZyOE0yRlhWUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvNzgzZGE1LTY1NzItNDEzZC05ZDZi
LTA5NGQwZGIxYWQyYy8xLzEtTmJkN2pURnU0N0E2NUdjNG1WcjhNMkZYVlEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2E2Lzc4M2RhNS02NTcyLTQxM2QtOWQ2Yi0wOTRkMGRiMWFk
MmMvMS8xLU5iZDdqVEZ1NDdBNjVHYzRtVnI4TTJGWFZRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnnqn
ACZR1XBvIvKkmIiXhRSV28I4fWfyQwv/ME9IKMvhDITTDhAbznnyh0QnLZpOvS7/
VwJFao9pdle9e+qbnAajcT71WH/9azLniG8/5Q1Fgv9+uE8VYcN5Ik+LSFnE5TLK
ouTrwX1M+jzGSSUD+uaTn/YmOEpKgY9VOAzdGs7tiMY8j+/da9mVUpJZnbR1+r1p
+sJ8qruJIArT24W2xgc+wlhWicrIO1NVx25J17rlMZMwNLEz8VsaYgEQ77wBxATf
AHVSsIi1WZpqGVAOfcC8xeIpWz0+urDKKezxFYhppgQyb2OyKwIJEKAdj3q6uwzW
jR2Q0bHOf/g+wwJ1bA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 12:13:45 2025 by rpki-client