Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: 4Bf16zwMnXLrDpm8KoqrPIwniniBvI6tmbFFIiiRq+E=
Subject key identifier: 2E:C0:49:DD:CE:EA:CB:51:9E:A8:0E:69:7E:86:0C:09:CE:EF:72:95
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 019A72CA1EF8A9ABE5A8B652EFD25F093B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 0342
Signing time: Tue 11 Nov 2025 12:00:40 +0000
Manifest this update: Tue 11 Nov 2025 12:00:40 +0000
Manifest next update: Wed 12 Nov 2025 12:00:40 +0000
Files and hashes: 1: BqZIe6gQs5PVIE84eQo2_DOFBSU.roa (hash: U/7+ugA60UPkZBbdU298MJ3Zk+Vay3cife8TG24P130=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: rL7bLUdH0b3LC5SYfxqDW7TmCPf5K2oR8KKnMiPeYsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:1e:f8:a9:ab:e5:a8:b6:52:ef:d2:5f:09:3b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: Nov 11 12:00:40 2025 GMT
Not After : Nov 12 12:00:40 2025 GMT
Subject: CN=2ec049ddceeacb519ea80e697e860c09ceef7295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6e:9b:cf:98:b0:67:f3:01:f1:3c:a8:3e:38:
25:f8:44:09:9a:c7:81:0f:4e:2e:c5:c2:70:59:eb:
c0:a0:64:04:34:96:af:cd:b2:47:52:b1:27:2c:3d:
f5:d4:b2:24:16:ca:d0:42:f8:da:9d:95:32:dd:dd:
cf:65:4c:8b:cf:fd:d3:b7:de:71:4f:f6:9e:0c:a5:
de:72:38:b5:5b:a6:15:78:0e:2a:45:2e:2c:c6:88:
3c:ac:df:da:f2:f5:60:60:30:6d:6a:d6:75:13:35:
4f:a6:ab:f8:c8:f2:37:15:4f:59:87:b7:69:36:c4:
bc:de:1d:2b:da:7a:64:16:93:35:eb:f4:65:d3:2b:
1c:f3:95:8e:c1:54:08:b4:6a:9c:f1:69:e3:f5:e8:
b4:6d:10:5a:24:d9:69:88:de:91:af:72:e9:a5:6a:
71:4d:98:a5:07:7e:55:c8:5d:3a:bb:4c:c5:8e:85:
7e:2d:c5:b0:e8:cb:2f:5b:e5:d8:b1:84:35:26:98:
9b:0d:c6:42:5a:e3:3c:b1:73:4f:2d:10:3e:1f:38:
0f:e4:5c:db:32:45:48:46:80:41:89:db:53:71:ec:
15:04:a9:5c:29:6a:6d:6f:8a:70:41:91:07:20:77:
0c:d8:93:10:a0:03:86:47:14:f1:29:61:4d:30:93:
29:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C0:49:DD:CE:EA:CB:51:9E:A8:0E:69:7E:86:0C:09:CE:EF:72:95
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:73:4b:dc:50:4f:98:25:61:f1:94:59:5c:e1:de:2c:ad:82:
d5:36:f6:37:d7:78:38:39:65:65:f8:50:2e:36:bc:ee:28:ca:
c2:a7:0d:2c:fa:b1:7a:ea:e2:86:a2:5a:e2:dd:e3:95:a9:5b:
42:61:ab:89:3b:bd:26:eb:30:94:b5:dc:13:b0:d2:88:b7:4e:
99:56:e9:67:79:b3:e2:9c:5e:e9:17:aa:24:db:e0:96:c2:dc:
45:50:05:a9:8d:14:1c:94:ba:97:ea:00:73:25:a8:47:de:8c:
c1:dd:f0:b7:b3:a3:97:80:e9:a4:7c:25:d5:f0:09:b7:25:77:
3d:76:5d:0e:93:3c:08:0f:3a:61:3d:8b:e3:98:0e:8f:13:a9:
47:33:f2:ba:52:50:c5:5b:bc:fe:77:a1:10:45:07:88:93:85:
16:3c:1a:07:9f:7b:45:2b:4b:8a:76:c7:45:7c:c4:d2:73:d2:
64:3f:c8:e2:d8:ef:c5:b6:43:ad:88:e5:70:59:a7:09:91:60:
be:27:07:1b:1c:cf:08:73:3d:0a:9d:3f:15:dc:49:d6:46:3c:
91:c4:9b:ce:fd:ec:e5:95:dc:94:5d:dc:30:36:8b:0b:98:14:
85:b8:a4:98:32:b2:58:3d:71:42:88:54:8d:74:48:dd:f0:1d:
30:7d:92:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyh74qavlqLZS79JfCTsMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYzVjMzVkOTg2ODZmM2Q4YTM4NzQxNzFiMTQzMjg3ZjVl
M2U3MzMwHhcNMjUxMTExMTIwMDQwWhcNMjUxMTEyMTIwMDQwWjAzMTEwLwYDVQQD
EygyZWMwNDlkZGNlZWFjYjUxOWVhODBlNjk3ZTg2MGMwOWNlZWY3Mjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom6bz5iwZ/MB8TyoPjgl+EQJmseB
D04uxcJwWevAoGQENJavzbJHUrEnLD311LIkFsrQQvjanZUy3d3PZUyLz/3Tt95x
T/aeDKXecji1W6YVeA4qRS4sxog8rN/a8vVgYDBtatZ1EzVPpqv4yPI3FU9Zh7dp
NsS83h0r2npkFpM16/Rl0ysc85WOwVQItGqc8Wnj9ei0bRBaJNlpiN6Rr3LppWpx
TZilB35VyF06u0zFjoV+LcWw6MsvW+XYsYQ1JpibDcZCWuM8sXNPLRA+HzgP5Fzb
MkVIRoBBidtTcewVBKlcKWptb4pwQZEHIHcM2JMQoAOGRxTxKWFNMJMpGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7ASd3O6stRnqgOaX6GDAnO73KVMB8GA1UdIwQY
MBaAFJzFw12YaG89ijh0FxsUMof14+czMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEt
ZTg3NTEwM2ZhZjEyLzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEtZTg3NTEwM2ZhZjEy
LzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXNL3FBP
mCVh8ZRZXOHeLK2C1Tb2N9d4ODllZfhQLja87ijKwqcNLPqxeurihqJa4t3jlalb
QmGriTu9JuswlLXcE7DSiLdOmVbpZ3mz4pxe6ReqJNvglsLcRVAFqY0UHJS6l+oA
cyWoR96Mwd3wt7Ojl4DppHwl1fAJtyV3PXZdDpM8CA86YT2L45gOjxOpRzPyulJQ
xVu8/nehEEUHiJOFFjwaB597RStLinbHRXzE0nPSZD/I4tjvxbZDrYjlcFmnCZFg
vicHGxzPCHM9Cp0/FdxJ1kY8kcSbzv3s5ZXclF3cMDaLC5gUhbikmDKyWD1xQohU
jXRI3fAdMH2SRg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:27 2025 by rpki-client