Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
File: Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft (raw, json)
Hash identifier: lWuY4MftNVqjk2H3r5EIpKQUz91aAGVMA3rZLPdFaEA=
Subject key identifier: 98:53:4D:89:A6:6E:DD:2B:0F:E0:02:3F:05:6A:00:53:90:CF:70:43
Authority key identifier: 37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
Certificate issuer: /CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Certificate serial: 019A7293540670FF4E93C25C267B2F294430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:00:49 +0000
Manifest this update: Tue 11 Nov 2025 11:00:49 +0000
Manifest next update: Wed 12 Nov 2025 11:00:49 +0000
Files and hashes: 1: Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl (hash: ejLCQsrbv7TaAZEQsSfW7yLIKmOTcM/MvVcM6dnIUOw=)
2: n5KP5ufURfzYm-dc-9TpGgegI9M.roa (hash: BV7R38C05Kbtl7OcfTA9iXDfsj6OteeTUI52xIrldQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:54:06:70:ff:4e:93:c2:5c:26:7b:2f:29:44:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Validity
Not Before: Nov 11 11:00:49 2025 GMT
Not After : Nov 12 11:00:49 2025 GMT
Subject: CN=98534d89a66edd2b0fe0023f056a005390cf7043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a0:a7:04:b3:fc:65:56:be:13:93:68:f6:b6:
ea:2f:3b:a4:a9:3d:4f:ff:85:e2:76:3d:ed:98:f6:
8c:3f:40:50:a4:58:11:51:28:a9:44:19:e7:83:94:
5a:80:6f:ae:21:77:7b:40:f2:fc:57:32:2e:2d:d3:
28:2a:e8:0f:e7:c4:aa:97:ea:f4:cd:6d:5c:56:92:
05:8f:60:6f:28:24:19:b0:1d:6a:7b:68:8a:25:04:
99:51:aa:b2:11:6b:7d:2c:42:57:e6:4c:bc:8d:db:
d1:a6:98:7b:b6:17:3b:55:59:94:87:4a:24:43:37:
b6:98:25:be:d6:be:3f:4f:c5:f3:bd:36:32:b4:cc:
c5:1f:d5:e1:1f:75:eb:7f:98:5d:9d:c3:87:15:a1:
49:df:73:af:a6:d4:be:92:38:9d:32:c9:ed:9d:00:
f4:b0:4e:0a:ac:5c:72:29:96:23:e3:b1:c9:62:48:
04:c0:ee:11:98:69:f1:38:fb:57:af:4e:c8:c2:3a:
fc:1c:cc:5f:54:33:69:39:13:52:b0:50:fa:35:b8:
ab:fa:cd:f9:92:13:5e:1e:0e:03:49:c7:f4:fa:72:
59:9b:68:49:40:b0:1f:94:66:f8:20:57:1c:34:96:
d0:88:ef:bb:b6:1a:91:17:7c:e6:5d:44:57:9e:8b:
24:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:53:4D:89:A6:6E:DD:2B:0F:E0:02:3F:05:6A:00:53:90:CF:70:43
X509v3 Authority Key Identifier:
keyid:37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:69:3e:92:49:1e:fd:8e:80:11:66:8c:2b:8b:43:09:3a:07:
69:c7:80:b1:a3:07:20:5e:4d:b0:35:06:14:c2:c6:2f:fc:82:
21:91:4b:de:b7:73:07:03:bd:81:bc:21:6f:d2:72:2c:09:50:
1c:47:31:00:0d:df:4d:82:cc:a6:ea:ee:29:a9:01:f1:ba:05:
42:78:4a:82:8f:45:99:e7:bb:75:e6:82:08:9e:c1:74:20:05:
32:bc:d6:80:67:a4:45:5a:f8:52:ae:8b:f1:2b:e6:95:e0:eb:
aa:d1:8d:1d:a3:4c:60:95:ae:c1:24:48:9f:3b:5b:df:97:32:
2c:76:7a:92:a5:99:3f:4b:78:c6:9c:26:eb:dd:11:31:45:c3:
62:bb:74:e5:90:5f:b7:ae:8c:c7:42:2d:fc:ba:c5:31:9a:06:
8a:9c:b3:67:0e:05:bd:98:59:b0:bb:b5:93:ca:13:d3:94:95:
ab:f8:8e:93:7e:36:00:bf:8d:03:b0:b0:1d:3c:91:01:3b:3c:
1b:94:b0:b0:1d:3e:5f:bb:f7:07:e7:95:db:51:c0:dd:3e:64:
a6:c2:b9:67:be:58:53:63:83:97:64:00:5d:b5:37:a8:df:f3:
eb:68:d6:1c:f8:fc:de:66:96:a9:03:d3:a4:84:c5:5e:70:ec:
8f:0f:f9:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk1QGcP9Ok8JcJnsvKUQwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MWZiODVkNGY4MDhjYjE2MDdhMmJlNGY0YTc5OGNhM2Vh
ZDM4MTAwHhcNMjUxMTExMTEwMDQ5WhcNMjUxMTEyMTEwMDQ5WjAzMTEwLwYDVQQD
Eyg5ODUzNGQ4OWE2NmVkZDJiMGZlMDAyM2YwNTZhMDA1MzkwY2Y3MDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6CnBLP8ZVa+E5No9rbqLzukqT1P
/4Xidj3tmPaMP0BQpFgRUSipRBnng5RagG+uIXd7QPL8VzIuLdMoKugP58Sql+r0
zW1cVpIFj2BvKCQZsB1qe2iKJQSZUaqyEWt9LEJX5ky8jdvRpph7thc7VVmUh0ok
Qze2mCW+1r4/T8XzvTYytMzFH9XhH3Xrf5hdncOHFaFJ33OvptS+kjidMsntnQD0
sE4KrFxyKZYj47HJYkgEwO4RmGnxOPtXr07Iwjr8HMxfVDNpORNSsFD6Nbir+s35
khNeHg4DScf0+nJZm2hJQLAflGb4IFccNJbQiO+7thqRF3zmXURXnoskhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhTTYmmbt0rD+ACPwVqAFOQz3BDMB8GA1UdIwQY
MBaAFDcfuF1PgIyxYHor5PSnmMo+rTgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jNWE4NDgtMjYwZC00YWQwLWFlZjMt
ZDdiMmM5MzQ0MmQzLzEvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jNWE4NDgtMjYwZC00YWQwLWFlZjMtZDdiMmM5MzQ0MmQz
LzEvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGk+kkke
/Y6AEWaMK4tDCToHaceAsaMHIF5NsDUGFMLGL/yCIZFL3rdzBwO9gbwhb9JyLAlQ
HEcxAA3fTYLMpuruKakB8boFQnhKgo9Fmee7deaCCJ7BdCAFMrzWgGekRVr4Uq6L
8SvmleDrqtGNHaNMYJWuwSRInztb35cyLHZ6kqWZP0t4xpwm690RMUXDYrt05ZBf
t66Mx0It/LrFMZoGipyzZw4FvZhZsLu1k8oT05SVq/iOk342AL+NA7CwHTyRATs8
G5SwsB0+X7v3B+eV21HA3T5kpsK5Z75YU2ODl2QAXbU3qN/z62jWHPj83maWqQPT
pITFXnDsjw/51w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:42 2025 by rpki-client