Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
File: t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft (raw, json)
Hash identifier: GvhxK0lfryjOxyUGDyuPPUVY3DKb9FJgw+MFAs+LdC4=
Subject key identifier: 62:2F:1B:19:62:5D:8A:14:8C:7B:15:DB:59:DA:7C:79:37:FB:4D:60
Authority key identifier: B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
Certificate issuer: /CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Certificate serial: 019A1D2BFD43E10D59A6E85B9D4C270C5628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
Manifest number: 0B57
Signing time: Sat 25 Oct 2025 21:00:13 +0000
Manifest this update: Sat 25 Oct 2025 21:00:13 +0000
Manifest next update: Sun 26 Oct 2025 21:00:13 +0000
Files and hashes: 1: 7HgZFirs9to5YNlgGjCrLE4fFdw.roa (hash: gvtNC6tdiAxQLr0n4eBnmWFLLNsQSfj98rKVj8SvSuA=)
2: GFzeRaBmyIOkrDv5Yl4eeRJ9yBo.roa (hash: rZYvabv/j2AaljGdwS148ssayLuXys6DbuYJ6bJxVGw=)
3: t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl (hash: Qgmfv+EQPQxI4rVuRoFJ4kJRelVvUvMA+jmcpujemqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2b:fd:43:e1:0d:59:a6:e8:5b:9d:4c:27:0c:56:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Validity
Not Before: Oct 25 21:00:13 2025 GMT
Not After : Oct 26 21:00:13 2025 GMT
Subject: CN=622f1b19625d8a148c7b15db59da7c7937fb4d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:29:67:7d:af:bd:94:7f:0b:1e:5e:5f:40:
51:cd:72:55:c6:ef:7c:62:7c:35:0a:aa:18:b5:94:
6a:a2:64:e7:c5:c0:7d:33:05:91:f2:20:a7:2b:18:
01:55:e6:3f:df:62:39:c1:8c:ea:c9:db:30:3b:d0:
fd:c0:c9:df:18:d4:ce:7f:78:33:ec:03:84:34:06:
b8:1d:88:bf:d6:6a:d7:f5:d7:42:0d:0f:b4:d9:46:
90:33:c8:a6:a2:b8:8c:c1:90:3b:40:aa:9f:b7:74:
ba:30:45:ae:2b:a7:fe:fe:70:e6:59:25:36:88:27:
03:01:5c:99:35:d5:eb:ed:23:31:c3:06:78:70:4a:
42:e7:d2:7a:3c:b3:21:f1:00:25:73:45:fe:8d:63:
90:31:83:09:84:07:b3:a2:b3:d2:77:f5:3b:ff:bc:
1e:99:90:4f:a9:7f:96:88:0f:ba:a4:05:08:93:7f:
76:33:c5:b9:f3:94:ba:38:c6:c8:33:c9:7a:de:51:
66:45:a4:81:12:b8:78:8a:c2:dd:5c:41:13:9b:05:
da:a5:02:b2:36:7d:a6:6a:d5:d6:b2:e7:67:76:e6:
1c:d2:93:02:ec:47:e0:86:86:e3:03:c2:f8:8a:4b:
c6:00:f1:be:47:f5:96:24:39:6a:f2:32:26:ec:a6:
f0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2F:1B:19:62:5D:8A:14:8C:7B:15:DB:59:DA:7C:79:37:FB:4D:60
X509v3 Authority Key Identifier:
keyid:B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:57:35:19:1e:23:fa:ee:cb:2c:c7:06:9c:d1:39:44:6f:4c:
a1:a2:b8:3f:fc:19:31:17:5c:c7:f1:de:54:11:75:4a:16:cf:
9b:aa:1d:0e:bd:2b:79:5c:ab:c8:a6:3e:16:8a:89:f6:64:f2:
36:50:21:00:d9:1d:ec:32:d9:cd:55:5e:7a:ae:ba:ca:71:07:
2c:14:84:65:e5:fb:05:01:36:f1:75:9b:0a:d9:6a:8e:c3:b7:
c8:ee:b2:2f:54:b5:40:ee:96:b8:bb:04:d5:6b:c2:9d:bd:7c:
ce:a2:b9:1a:ea:53:52:5d:40:f3:fb:33:4a:32:69:cb:dd:bb:
b3:f9:bb:b8:7a:c0:94:c5:1c:20:b0:ec:34:28:4e:a5:19:56:
17:c6:c0:3d:a8:cf:63:c2:02:f2:3e:97:1b:88:45:ac:c9:4e:
7d:cd:56:22:ff:05:01:7e:4a:7f:91:24:a7:ea:af:cf:b5:47:
e2:a7:c1:f2:93:12:6d:2f:fa:12:f8:bd:24:88:a0:95:d0:47:
e6:16:76:a1:3c:e4:6a:85:e9:95:14:20:74:70:8a:17:82:20:
fc:1b:72:7e:d6:10:e2:69:ce:ba:5d:a0:46:50:9f:c2:91:7a:
e5:c3:16:5e:93:15:62:ec:5e:da:30:51:d2:8e:43:07:97:c7:
4b:b5:ff:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZodK/1D4Q1ZpuhbnUwnDFYoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ZTM0ZjU3ZDAwNzE2NmRlZjRkZDg4MWQ4ZjdkNWI2ZWQ5
NWU2NTYwHhcNMjUxMDI1MjEwMDEzWhcNMjUxMDI2MjEwMDEzWjAzMTEwLwYDVQQD
Eyg2MjJmMWIxOTYyNWQ4YTE0OGM3YjE1ZGI1OWRhN2M3OTM3ZmI0ZDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKIpZ32vvZR/Cx5eX0BRzXJVxu98
Ynw1CqoYtZRqomTnxcB9MwWR8iCnKxgBVeY/32I5wYzqydswO9D9wMnfGNTOf3gz
7AOENAa4HYi/1mrX9ddCDQ+02UaQM8imoriMwZA7QKqft3S6MEWuK6f+/nDmWSU2
iCcDAVyZNdXr7SMxwwZ4cEpC59J6PLMh8QAlc0X+jWOQMYMJhAezorPSd/U7/7we
mZBPqX+WiA+6pAUIk392M8W585S6OMbIM8l63lFmRaSBErh4isLdXEETmwXapQKy
Nn2matXWsudnduYc0pMC7EfghobjA8L4ikvGAPG+R/WWJDlq8jIm7Kbw/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIvGxliXYoUjHsV21nafHk3+01gMB8GA1UdIwQY
MBaAFLfjT1fQBxZt703Ygdj31bbtleZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdC1OUFY5QUhGbTN2VGRpQjJQZlZ0dTJWNWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lNWQ1ODAtZWVlOC00NjNlLTg0YTgt
ZWFjY2I4YjQyZGM5LzEvdC1OUFY5QUhGbTN2VGRpQjJQZlZ0dTJWNWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lNWQ1ODAtZWVlOC00NjNlLTg0YTgtZWFjY2I4YjQyZGM5
LzEvdC1OUFY5QUhGbTN2VGRpQjJQZlZ0dTJWNWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlc1GR4j
+u7LLMcGnNE5RG9MoaK4P/wZMRdcx/HeVBF1ShbPm6odDr0reVyryKY+FoqJ9mTy
NlAhANkd7DLZzVVeeq66ynEHLBSEZeX7BQE28XWbCtlqjsO3yO6yL1S1QO6WuLsE
1WvCnb18zqK5GupTUl1A8/szSjJpy927s/m7uHrAlMUcILDsNChOpRlWF8bAPajP
Y8IC8j6XG4hFrMlOfc1WIv8FAX5Kf5Ekp+qvz7VH4qfB8pMSbS/6Evi9JIigldBH
5hZ2oTzkaoXplRQgdHCKF4Ig/BtyftYQ4mnOul2gRlCfwpF65cMWXpMVYuxe2jBR
0o5DB5fHS7X/Vw==
-----END CERTIFICATE-----
Generated at Sat Oct 25 23:14:00 2025 by rpki-client