Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
File: n-lNLu3NgkrB3nSt42wfnWnUlso.mft (raw, json)
Hash identifier: Aj4BHR7P4sresDOMg+g/USq7ltqE47Yuciadk+ZpaqU=
Subject key identifier: 96:89:20:CC:21:D9:AD:82:4A:D7:E4:50:5B:FF:B9:8F:E1:4A:EB:49
Authority key identifier: 9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
Certificate issuer: /CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Certificate serial: 019A7149B1D6DF8E5B912F6B271096934F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
Manifest number: 060A
Signing time: Tue 11 Nov 2025 05:00:46 +0000
Manifest this update: Tue 11 Nov 2025 05:00:46 +0000
Manifest next update: Wed 12 Nov 2025 05:00:46 +0000
Files and hashes: 1: 6Zp9qhuJ7dxdBCAgd5__iELlPCk.roa (hash: cToJ6urjtRkBvRK35UPrzOd0uWCJVgb7/Yiw0ySoKxo=)
2: GwcrTxprlO5D_UngU1k7ofqb2vQ.roa (hash: /dEUoEaQYiKNd7FRn0741i8r3OopdTq+ENqKdnvasIg=)
3: n-lNLu3NgkrB3nSt42wfnWnUlso.crl (hash: IcvcZWQCivjlngiNNn8P508e5PxpOakMujrGU647hJg=)
4: yV6fiEspLXOEx7U1Asa7uW-HDiw.roa (hash: RlXdlJwRE38rpzhsxwT5lygoPGRsWFRdfhjDcsqFbQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b1:d6:df:8e:5b:91:2f:6b:27:10:96:93:4f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Validity
Not Before: Nov 11 05:00:46 2025 GMT
Not After : Nov 12 05:00:46 2025 GMT
Subject: CN=968920cc21d9ad824ad7e4505bffb98fe14aeb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:d3:38:65:39:e1:ec:42:83:a7:9a:39:27:
f0:0d:ec:bb:8d:67:66:b4:31:dd:8a:bc:45:62:68:
3b:5b:18:c4:c6:59:a0:a0:12:55:9f:a4:a5:6d:c6:
73:e5:bb:47:8b:08:b5:fa:8b:85:cb:0a:62:bf:4b:
bd:f3:4d:4e:67:ae:c1:de:4a:55:d0:5d:ae:7e:0b:
7a:a2:bb:e9:37:e0:a6:6b:a0:44:b2:42:fc:d9:86:
98:25:dc:7b:3f:a0:e0:8c:04:79:25:49:a4:ef:6a:
5a:05:6d:23:e5:0d:18:22:2d:a4:41:e4:35:48:ab:
ad:38:1d:8b:90:7a:8c:dc:97:e2:a7:8b:7a:83:61:
d3:1d:9d:af:ef:ad:54:2f:9f:5c:46:da:e0:9b:ce:
e3:52:5e:3a:4d:aa:3b:a1:32:7a:4f:ef:01:86:76:
eb:aa:c5:74:38:4e:a5:19:63:ec:23:63:41:df:9b:
48:71:8e:5f:75:b7:f2:03:ae:fa:9a:55:1f:0e:66:
9b:c8:43:91:5a:f4:9a:4c:ca:fa:f4:b5:b6:d2:11:
a4:a7:a2:c9:cf:05:05:b1:7f:7b:cf:01:d2:2c:8d:
e3:9d:59:ef:16:ee:e5:4c:2e:78:15:d1:9d:00:43:
4e:51:7a:99:eb:9c:0f:88:f8:a8:ee:f7:a3:67:18:
52:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:89:20:CC:21:D9:AD:82:4A:D7:E4:50:5B:FF:B9:8F:E1:4A:EB:49
X509v3 Authority Key Identifier:
keyid:9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3b:98:b0:42:51:52:40:32:e3:af:be:bc:cc:fd:48:87:52:
e7:05:6c:84:47:4c:d9:c7:64:51:19:1b:d3:c5:bb:6f:80:52:
9b:14:5b:0d:a7:c1:05:ef:bf:0b:22:84:e8:ff:f7:fe:e6:c9:
9c:27:a8:e3:6b:8b:42:df:b3:5b:c3:4a:ca:d6:5d:6a:f6:a1:
ed:71:46:90:be:5f:4c:a2:b2:ed:d1:a1:c7:6c:23:f3:a5:87:
92:1e:ec:a0:93:62:67:e0:a5:35:a4:ce:8b:6d:6a:a2:7e:01:
68:50:d3:2f:27:a3:77:ac:b2:f2:df:e8:90:1d:9a:88:3b:5e:
1a:e4:45:2c:e0:81:62:18:7f:3b:97:00:cc:3c:1a:53:df:08:
88:a5:05:23:d3:50:62:47:6a:f1:f7:e3:b3:74:71:4b:3e:17:
58:88:e8:07:69:f6:d1:0b:a0:88:f2:c9:3b:f8:25:27:62:ba:
df:60:4d:b3:cb:11:39:a4:95:9c:70:73:80:13:da:66:3b:79:
00:98:4d:4d:ff:8c:e4:7c:c8:e8:8e:a8:40:51:be:9d:44:d3:
dd:a4:e6:75:70:a7:c9:e0:ac:49:0a:b2:e7:0a:a7:c1:ab:73:
a6:e0:86:0e:40:c3:b7:5e:1b:cd:8d:91:cf:e8:70:51:22:64:
de:5a:52:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSbHW345bkS9rJxCWk08CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZTk0ZDJlZWRjZDgyNGFjMWRlNzRhZGUzNmMxZjlkNjlk
NDk2Y2EwHhcNMjUxMTExMDUwMDQ2WhcNMjUxMTEyMDUwMDQ2WjAzMTEwLwYDVQQD
Eyg5Njg5MjBjYzIxZDlhZDgyNGFkN2U0NTA1YmZmYjk4ZmUxNGFlYjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQXTOGU54exCg6eaOSfwDey7jWdm
tDHdirxFYmg7WxjExlmgoBJVn6SlbcZz5btHiwi1+ouFywpiv0u9801OZ67B3kpV
0F2ufgt6orvpN+Cma6BEskL82YaYJdx7P6DgjAR5JUmk72paBW0j5Q0YIi2kQeQ1
SKutOB2LkHqM3Jfip4t6g2HTHZ2v761UL59cRtrgm87jUl46Tao7oTJ6T+8Bhnbr
qsV0OE6lGWPsI2NB35tIcY5fdbfyA676mlUfDmabyEORWvSaTMr69LW20hGkp6LJ
zwUFsX97zwHSLI3jnVnvFu7lTC54FdGdAENOUXqZ65wPiPio7vejZxhScwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaJIMwh2a2CStfkUFv/uY/hSutJMB8GA1UdIwQY
MBaAFJ/pTS7tzYJKwd50reNsH51p1JbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbi1sTkx1M05na3JCM25TdDQyd2ZuV25VbHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82NjBlNTQtNWM4NS00ZDI1LThlNjEt
N2NhMTFkYzNhZTgyLzEvbi1sTkx1M05na3JCM25TdDQyd2ZuV25VbHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82NjBlNTQtNWM4NS00ZDI1LThlNjEtN2NhMTFkYzNhZTgy
LzEvbi1sTkx1M05na3JCM25TdDQyd2ZuV25VbHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDuYsEJR
UkAy46++vMz9SIdS5wVshEdM2cdkURkb08W7b4BSmxRbDafBBe+/CyKE6P/3/ubJ
nCeo42uLQt+zW8NKytZdavah7XFGkL5fTKKy7dGhx2wj86WHkh7soJNiZ+ClNaTO
i21qon4BaFDTLyejd6yy8t/okB2aiDteGuRFLOCBYhh/O5cAzDwaU98IiKUFI9NQ
Ykdq8ffjs3RxSz4XWIjoB2n20QugiPLJO/glJ2K632BNs8sROaSVnHBzgBPaZjt5
AJhNTf+M5HzI6I6oQFG+nUTT3aTmdXCnyeCsSQqy5wqnwatzpuCGDkDDt14bzY2R
z+hwUSJk3lpS5w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:53 2025 by rpki-client