Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
File: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft (raw, json)
Hash identifier: 908tRZLqHWc9ongrRcfEJMrSlcB/YlQBgfINf2c8uII=
Subject key identifier: FE:EB:1E:07:D4:5D:21:9D:3E:8D:6F:48:43:16:00:BB:D7:E8:46:78
Authority key identifier: 36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F
Certificate issuer: /CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
Certificate serial: 019A7149F96F19E7AA9DB96B7F324DD7A5B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 05:01:04 +0000
Manifest this update: Tue 11 Nov 2025 05:01:04 +0000
Manifest next update: Wed 12 Nov 2025 05:01:04 +0000
Files and hashes: 1: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl (hash: iEzYtXju4ATABrpLeOa6PPJscO7RFTXOj2KgsYHoP40=)
2: Tz8QjBgBmzpa68NzWLRe2iAGU-U.roa (hash: juEtxBf0oAaQHOnDE0wzOzsnnb3wMIZXnN/0qajABas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:f9:6f:19:e7:aa:9d:b9:6b:7f:32:4d:d7:a5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
Validity
Not Before: Nov 11 05:01:04 2025 GMT
Not After : Nov 12 05:01:04 2025 GMT
Subject: CN=feeb1e07d45d219d3e8d6f48431600bbd7e84678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:16:53:28:3a:d4:ef:c9:88:67:f6:fb:2d:
07:d8:26:0d:27:9a:3e:4c:df:76:90:a5:91:13:7a:
ce:97:23:0e:5c:cc:4e:76:b9:e0:45:ba:39:e7:43:
c4:f5:8b:37:09:d4:09:a5:e4:97:0d:d1:c4:c9:d2:
e4:6c:b0:70:4c:29:e2:e2:2a:9e:f1:5b:a2:b0:18:
e1:49:5c:b1:23:c5:9c:1e:67:96:87:87:9a:53:d1:
40:38:b4:e8:3f:db:59:18:5e:57:cc:66:8a:ac:f1:
5b:2b:f3:8a:62:0c:cc:a6:cf:0f:8f:e3:67:02:f1:
4d:d5:f5:18:81:ce:c5:cd:63:ff:61:41:28:a6:a9:
08:28:7c:8f:27:1f:6e:98:e7:f4:2e:42:be:86:0c:
4a:c7:9e:c4:21:4b:c1:50:18:59:e8:44:32:f8:8c:
49:6c:01:01:2d:94:ce:90:3e:b7:a8:14:2d:11:32:
f0:ac:38:43:80:90:ed:c2:70:08:bd:36:57:5d:97:
b2:43:df:d5:c0:ef:c7:85:f0:2c:6e:ea:ee:65:a3:
54:94:02:ce:53:1d:9e:d7:f0:fd:fa:0d:a9:39:42:
4f:a8:98:74:df:c7:55:1e:d5:72:1e:c4:8a:14:2e:
d2:c0:f9:a7:7f:6d:e7:24:5f:0b:64:9e:05:ec:d7:
b2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EB:1E:07:D4:5D:21:9D:3E:8D:6F:48:43:16:00:BB:D7:E8:46:78
X509v3 Authority Key Identifier:
keyid:36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:91:c1:d7:aa:28:16:2d:c3:4a:0e:60:6a:e0:88:88:53:7c:
58:3b:a8:16:d4:2b:5e:d2:c0:5a:46:88:60:5d:31:45:3f:51:
77:99:82:59:ca:ff:2c:e8:ee:d5:1d:14:b8:20:d5:fa:80:e1:
d5:66:e0:8f:3e:69:9f:83:74:d0:55:9d:01:b5:83:c4:86:ba:
32:f7:bc:98:c4:7c:c2:6a:ca:c0:19:aa:46:a5:b4:c7:d6:9d:
e5:2f:b3:b1:d6:05:dc:4a:6e:44:bf:67:3b:20:81:87:7c:de:
27:4d:2b:79:1e:5b:50:8e:14:20:5b:88:ea:13:41:42:d0:09:
83:58:16:65:12:a9:f2:cc:9f:ae:96:90:9d:d3:93:d8:a5:0a:
4d:7e:41:70:5d:c8:c4:77:97:5c:2f:5d:78:38:fa:14:9a:59:
e8:a8:e8:bf:c1:ea:eb:a8:cf:20:81:0e:8d:a3:7a:e8:f2:c5:
41:87:82:68:a0:16:27:30:74:77:ff:35:f9:6f:c5:b4:10:e8:
c0:68:fb:9c:db:06:42:80:67:1c:1e:49:05:b2:9e:40:bc:f3:
f2:39:db:b3:a9:d7:69:a0:2d:92:a5:90:a9:6e:57:ab:2e:c1:
9d:72:88:a6:a3:fc:a4:16:29:af:23:d5:60:1f:73:de:b3:c5:
31:f9:89:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSflvGeeqnblrfzJN16W0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YWFmYTVjM2YyZjhlNGEwODNmODFmMGNiODdiYzdhZWE0
NDg5MWYwHhcNMjUxMTExMDUwMTA0WhcNMjUxMTEyMDUwMTA0WjAzMTEwLwYDVQQD
EyhmZWViMWUwN2Q0NWQyMTlkM2U4ZDZmNDg0MzE2MDBiYmQ3ZTg0Njc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIQWUyg61O/JiGf2+y0H2CYNJ5o+
TN92kKWRE3rOlyMOXMxOdrngRbo550PE9Ys3CdQJpeSXDdHEydLkbLBwTCni4iqe
8VuisBjhSVyxI8WcHmeWh4eaU9FAOLToP9tZGF5XzGaKrPFbK/OKYgzMps8Pj+Nn
AvFN1fUYgc7FzWP/YUEopqkIKHyPJx9umOf0LkK+hgxKx57EIUvBUBhZ6EQy+IxJ
bAEBLZTOkD63qBQtETLwrDhDgJDtwnAIvTZXXZeyQ9/VwO/HhfAsburuZaNUlALO
Ux2e1/D9+g2pOUJPqJh038dVHtVyHsSKFC7SwPmnf23nJF8LZJ4F7NeydQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7rHgfUXSGdPo1vSEMWALvX6EZ4MB8GA1UdIwQY
MBaAFDaq+lw/L45KCD+B8MuHvHrqRIkfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC85MjVkNGEtZjVmNC00Mjk5LWE4Mjkt
MTUyYTU5NDc5ZTY5LzEvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC85MjVkNGEtZjVmNC00Mjk5LWE4MjktMTUyYTU5NDc5ZTY5
LzEvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpHB16oo
Fi3DSg5gauCIiFN8WDuoFtQrXtLAWkaIYF0xRT9Rd5mCWcr/LOju1R0UuCDV+oDh
1Wbgjz5pn4N00FWdAbWDxIa6Mve8mMR8wmrKwBmqRqW0x9ad5S+zsdYF3EpuRL9n
OyCBh3zeJ00reR5bUI4UIFuI6hNBQtAJg1gWZRKp8syfrpaQndOT2KUKTX5BcF3I
xHeXXC9deDj6FJpZ6Kjov8Hq66jPIIEOjaN66PLFQYeCaKAWJzB0d/81+W/FtBDo
wGj7nNsGQoBnHB5JBbKeQLzz8jnbs6nXaaAtkqWQqW5Xqy7BnXKIpqP8pBYpryPV
YB9z3rPFMfmJ+g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:11 2025 by rpki-client