Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
File: nRfZOI52MabRmvsrJkJ5WiTIQIE.mft (raw, json)
Hash identifier: CTuVZQ4JjqxQDOsHfr4IiG1wUJy5wrXvqj+kySxeMFE=
Subject key identifier: D6:CE:DB:5B:45:1C:57:6F:DF:D4:93:B5:60:19:10:14:C0:C6:1B:15
Authority key identifier: 9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
Certificate issuer: /CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Certificate serial: 019A72261CDA6595C37CAE691CC768B4E30A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 09:01:31 +0000
Manifest this update: Tue 11 Nov 2025 09:01:31 +0000
Manifest next update: Wed 12 Nov 2025 09:01:31 +0000
Files and hashes: 1: nRfZOI52MabRmvsrJkJ5WiTIQIE.crl (hash: X9P7K6Zp7QVikj89IcPkk71Yl4PGJKl1fkSuAwLWZVw=)
2: u2BNAAC7Dm0euPOTB8HOX-QylyE.roa (hash: GNqBAmVB3is0CDKmPUm0vfs8TWmU1YL168pv/EKk5Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:1c:da:65:95:c3:7c:ae:69:1c:c7:68:b4:e3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Validity
Not Before: Nov 11 09:01:31 2025 GMT
Not After : Nov 12 09:01:31 2025 GMT
Subject: CN=d6cedb5b451c576fdfd493b560191014c0c61b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:fe:83:5e:4d:29:c5:cf:36:a7:5e:c9:52:
28:54:40:c9:86:15:41:50:d8:7e:ba:c9:ef:62:24:
da:1d:ff:b6:a9:a8:9f:32:f3:9e:11:cb:23:92:59:
04:68:ab:0c:b5:b8:1d:31:53:1f:7c:58:2a:4b:d8:
33:23:91:29:01:ae:99:ca:f0:36:eb:7b:d4:a5:a5:
19:65:28:31:b4:d5:25:49:dc:f5:d3:b7:9e:0f:ee:
ab:b6:9f:4f:b4:51:46:9d:ab:b7:f4:ae:e6:fa:45:
2c:f4:61:b3:e8:16:39:5c:e6:83:31:a5:37:20:0c:
0b:00:5d:bf:ac:1a:8a:9b:80:ce:41:b9:c5:da:9b:
a2:96:02:03:21:63:59:0b:28:84:25:09:06:e9:7f:
22:5f:4b:27:aa:85:b1:0b:9e:cd:44:5f:0d:1a:09:
02:d1:db:11:68:4b:88:6b:43:34:08:4d:9a:6e:50:
31:b8:de:ce:45:65:8c:b2:2b:26:2a:ff:1a:11:d8:
de:d5:4f:bc:3b:e7:4f:97:f3:7b:c7:b8:e9:f5:ed:
c9:5f:17:0d:1e:d3:80:53:f0:ff:a6:d3:a1:1b:7b:
7a:0d:dd:07:41:9e:f3:e0:35:fe:90:cc:f2:47:cb:
c3:ec:04:75:19:8e:92:33:b6:16:5f:58:56:a5:f3:
06:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CE:DB:5B:45:1C:57:6F:DF:D4:93:B5:60:19:10:14:C0:C6:1B:15
X509v3 Authority Key Identifier:
keyid:9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4c:d9:1a:8a:fc:a2:30:21:1f:ab:5a:3e:32:8e:0a:7a:37:
ec:d7:3d:7d:7c:d2:7c:67:d2:12:9b:59:89:80:0f:d5:03:b2:
60:53:1d:22:6e:25:74:34:9c:f0:0b:3c:b9:0a:2b:5c:4c:40:
58:9e:06:15:3e:2d:3e:76:36:68:f6:b3:f3:50:b8:75:d4:b1:
fd:a5:55:75:b3:63:46:05:b5:4c:a4:d2:5f:35:17:95:17:c1:
33:2a:6b:c8:93:ca:b1:27:a4:8f:a3:d5:b6:89:6d:a1:bb:95:
85:26:3b:6d:ea:31:11:0a:14:dd:6b:60:d3:5a:7d:38:55:d8:
5e:9c:43:26:26:a7:f6:2c:67:98:51:00:31:36:4d:59:a6:49:
5e:fb:95:e6:cc:ba:b3:c2:0e:df:07:35:df:75:39:df:c3:13:
7a:db:c3:02:fc:ed:21:fc:19:3d:5f:53:53:c5:da:22:a3:a0:
62:6d:41:d1:a4:13:10:cf:0f:34:97:a2:0b:8b:55:5c:68:fd:
86:d5:e3:d5:69:ad:91:46:c2:46:a6:51:ff:c9:a5:e0:74:32:
fd:e1:27:d0:34:ee:b0:e4:9f:4f:ac:1a:65:f0:09:e9:e3:37:
3c:30:1f:0f:7d:56:58:5d:bc:0b:65:ab:d6:68:c8:b8:fd:14:
50:26:1e:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJhzaZZXDfK5pHMdotOMKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMTdkOTM4OGU3NjMxYTZkMTlhZmIyYjI2NDI3OTVhMjRj
ODQwODEwHhcNMjUxMTExMDkwMTMxWhcNMjUxMTEyMDkwMTMxWjAzMTEwLwYDVQQD
EyhkNmNlZGI1YjQ1MWM1NzZmZGZkNDkzYjU2MDE5MTAxNGMwYzYxYjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuML+g15NKcXPNqdeyVIoVEDJhhVB
UNh+usnvYiTaHf+2qaifMvOeEcsjklkEaKsMtbgdMVMffFgqS9gzI5EpAa6ZyvA2
63vUpaUZZSgxtNUlSdz107eeD+6rtp9PtFFGnau39K7m+kUs9GGz6BY5XOaDMaU3
IAwLAF2/rBqKm4DOQbnF2puilgIDIWNZCyiEJQkG6X8iX0snqoWxC57NRF8NGgkC
0dsRaEuIa0M0CE2ablAxuN7ORWWMsismKv8aEdje1U+8O+dPl/N7x7jp9e3JXxcN
HtOAU/D/ptOhG3t6Dd0HQZ7z4DX+kMzyR8vD7AR1GY6SM7YWX1hWpfMGpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbO21tFHFdv39STtWAZEBTAxhsVMB8GA1UdIwQY
MBaAFJ0X2TiOdjGm0Zr7KyZCeVokyECBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblJmWk9JNTJNYWJSbXZzckprSjVXaVRJUUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82ZTg0NDQtOGRhNS00NjZiLTg0MDAt
N2JkOTZkOWM2Mjg2LzEvblJmWk9JNTJNYWJSbXZzckprSjVXaVRJUUlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82ZTg0NDQtOGRhNS00NjZiLTg0MDAtN2JkOTZkOWM2Mjg2
LzEvblJmWk9JNTJNYWJSbXZzckprSjVXaVRJUUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0zZGor8
ojAhH6taPjKOCno37Nc9fXzSfGfSEptZiYAP1QOyYFMdIm4ldDSc8As8uQorXExA
WJ4GFT4tPnY2aPaz81C4ddSx/aVVdbNjRgW1TKTSXzUXlRfBMypryJPKsSekj6PV
toltobuVhSY7beoxEQoU3Wtg01p9OFXYXpxDJian9ixnmFEAMTZNWaZJXvuV5sy6
s8IO3wc133U538MTetvDAvztIfwZPV9TU8XaIqOgYm1B0aQTEM8PNJeiC4tVXGj9
htXj1WmtkUbCRqZR/8ml4HQy/eEn0DTusOSfT6waZfAJ6eM3PDAfD31WWF28C2Wr
1mjIuP0UUCYeTg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:32 2025 by rpki-client