Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File: noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier: 5qdS5pKUbUfrPHiKR7+ZrMwDU6keDm+Gp9v+9FAvxi0=
Subject key identifier: 26:25:69:5B:2E:E4:F3:D4:3B:51:49:FC:CF:70:C1:86:13:F9:18:7E
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer: /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial: 019A73383D737A5F92D34003C035E4768136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number: 0DCB
Signing time: Tue 11 Nov 2025 14:00:56 +0000
Manifest this update: Tue 11 Nov 2025 14:00:56 +0000
Manifest next update: Wed 12 Nov 2025 14:00:56 +0000
Files and hashes: 1: nOieJBaD-sIvzNFw8ys8kgtNYus.roa (hash: mIQiCbdb3uG6eqbgHss6OvqglKI0yQcTc3QtF2YXAwA=)
2: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: 3vJkgHdqFp0L/QvZzQgYb9aaJ5QJKWnSwZZMoaf0L/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:3d:73:7a:5f:92:d3:40:03:c0:35:e4:76:81:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Validity
Not Before: Nov 11 14:00:56 2025 GMT
Not After : Nov 12 14:00:56 2025 GMT
Subject: CN=2625695b2ee4f3d43b5149fccf70c18613f9187e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:27:3b:f2:1d:90:e3:e8:1d:7a:bd:f7:34:51:
3c:09:ad:ce:2f:46:7c:ec:8e:bc:07:94:1f:1d:dc:
d9:b1:ab:d2:3c:77:21:d7:6f:da:33:7b:3b:a6:09:
b5:d7:e8:39:29:5b:98:12:9e:fb:09:3a:8f:7f:62:
5b:b4:f8:1e:58:b4:2d:30:a6:4f:05:3a:7f:68:26:
78:2f:73:d6:d8:42:45:2e:43:50:2e:55:52:d4:64:
b4:87:45:05:0a:47:30:9b:0b:53:34:15:91:80:0b:
c2:0d:b5:d5:78:83:01:fb:5b:37:b2:94:2d:2a:08:
c7:67:19:d0:f6:25:b8:29:8d:5d:00:da:03:96:83:
70:84:e3:32:69:22:ae:e2:63:96:cf:dd:d9:d1:ff:
e3:74:18:f3:87:d8:88:5c:06:50:47:76:a5:59:bc:
f4:6f:1b:1e:4d:de:ff:bd:17:71:5b:a5:6e:db:c7:
4f:c1:6c:2e:0e:af:84:04:29:fe:3c:41:5a:43:55:
bb:7c:65:e6:bf:c8:a7:48:a6:e0:aa:c1:2f:39:2f:
20:14:37:14:16:aa:0a:35:2c:c1:49:fd:66:6b:a8:
b7:3e:2f:fd:80:f1:b7:f4:37:52:82:71:3c:b4:9d:
4d:93:92:db:58:73:80:89:ad:b5:3a:f2:fd:3b:06:
e6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:25:69:5B:2E:E4:F3:D4:3B:51:49:FC:CF:70:C1:86:13:F9:18:7E
X509v3 Authority Key Identifier:
keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:16:3a:d7:45:b8:0a:0e:b3:ba:8e:40:da:87:2c:c2:30:35:
06:49:80:e7:80:3d:cc:93:2a:bd:8a:e5:9d:45:6a:1f:af:a4:
ab:9f:e2:54:e7:5a:1d:7c:8b:89:ae:f1:56:72:ad:0f:02:fd:
6a:90:be:5b:31:58:98:14:ff:77:d0:31:59:10:2c:8a:9c:8e:
0d:b0:d6:43:8b:3a:60:8e:cb:43:b4:d9:41:03:4e:4c:9a:25:
79:71:a0:ea:d9:16:52:03:44:92:6d:43:6e:60:d9:17:77:2e:
e8:67:a1:de:09:d5:c1:a5:5d:86:01:e3:b3:ba:4e:aa:64:bc:
de:23:34:44:52:54:0f:52:59:8d:ac:06:7e:a9:79:a0:76:20:
0b:54:35:9e:29:70:28:15:b8:dc:8f:d8:1f:75:4f:5a:90:13:
01:02:5a:6e:02:ff:83:78:83:ef:e0:3e:fa:09:f2:d4:d4:71:
2c:ae:b2:82:3c:41:99:ae:79:c5:50:a3:1f:d4:d3:b5:6d:24:
1f:4c:4e:e0:2b:ce:f7:33:31:5f:63:63:91:b8:24:c4:e9:d9:
f6:23:cc:85:d1:f5:be:1b:58:93:b6:19:6d:7a:0f:6c:d4:a6:
48:6b:a6:56:58:32:22:2a:89:af:b0:64:d0:22:68:d1:c6:09:
58:d2:e1:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzOD1zel+S00ADwDXkdoE2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllODFkZGFhZDg4ZjcwNzE2MTJkN2MzYjc2MThlMjRkMWE1
MjMzYmIwHhcNMjUxMTExMTQwMDU2WhcNMjUxMTEyMTQwMDU2WjAzMTEwLwYDVQQD
EygyNjI1Njk1YjJlZTRmM2Q0M2I1MTQ5ZmNjZjcwYzE4NjEzZjkxODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Sc78h2Q4+gder33NFE8Ca3OL0Z8
7I68B5QfHdzZsavSPHch12/aM3s7pgm11+g5KVuYEp77CTqPf2JbtPgeWLQtMKZP
BTp/aCZ4L3PW2EJFLkNQLlVS1GS0h0UFCkcwmwtTNBWRgAvCDbXVeIMB+1s3spQt
KgjHZxnQ9iW4KY1dANoDloNwhOMyaSKu4mOWz93Z0f/jdBjzh9iIXAZQR3alWbz0
bxseTd7/vRdxW6Vu28dPwWwuDq+EBCn+PEFaQ1W7fGXmv8inSKbgqsEvOS8gFDcU
FqoKNSzBSf1ma6i3Pi/9gPG39DdSgnE8tJ1Nk5LbWHOAia21OvL9OwbmAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYlaVsu5PPUO1FJ/M9wwYYT+Rh+MB8GA1UdIwQY
MBaAFJ6B3arYj3BxYS18O3YY4k0aUjO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm9IZHF0aVBjSEZoTFh3N2RoamlUUnBTTTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lMjJkYzItZjQwNi00MGM5LWJhNWYt
YmY2OWIxMmE2NzQ0LzEvbm9IZHF0aVBjSEZoTFh3N2RoamlUUnBTTTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lMjJkYzItZjQwNi00MGM5LWJhNWYtYmY2OWIxMmE2NzQ0
LzEvbm9IZHF0aVBjSEZoTFh3N2RoamlUUnBTTTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBY610W4
Cg6zuo5A2ocswjA1BkmA54A9zJMqvYrlnUVqH6+kq5/iVOdaHXyLia7xVnKtDwL9
apC+WzFYmBT/d9AxWRAsipyODbDWQ4s6YI7LQ7TZQQNOTJoleXGg6tkWUgNEkm1D
bmDZF3cu6Geh3gnVwaVdhgHjs7pOqmS83iM0RFJUD1JZjawGfql5oHYgC1Q1nilw
KBW43I/YH3VPWpATAQJabgL/g3iD7+A++gny1NRxLK6ygjxBma55xVCjH9TTtW0k
H0xO4CvO9zMxX2NjkbgkxOnZ9iPMhdH1vhtYk7YZbXoPbNSmSGumVlgyIiqJr7Bk
0CJo0cYJWNLhjw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:33:45 2025 by rpki-client