Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json)
Hash identifier: XLNiFCi5SLRAQ8kLlSKACn+CdLGn3EJ5eg400rrqVyg=
Subject key identifier: 58:F8:90:A9:52:BE:0C:1D:9D:7D:87:6D:BE:AB:31:64:C5:45:7B:89
Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Certificate serial: 019A4EF5169766387FB2AA7A897CFDFBAFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
Manifest number: 13AC
Signing time: Tue 04 Nov 2025 13:01:15 +0000
Manifest this update: Tue 04 Nov 2025 13:01:15 +0000
Manifest next update: Wed 05 Nov 2025 13:01:15 +0000
Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: UfdGW0pwTb5M/CNoR7XKUOeeQlF2ZGHY9hmcD5lnJGM=)
2: FJfX864pvFwf4qPxQ1uqI0bIaXg.roa (hash: oKD/fS/LmM/Bugiaw6RKm+DzVLCUCTYs+LRezp4BQso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:16:97:66:38:7f:b2:aa:7a:89:7c:fd:fb:af:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Validity
Not Before: Nov 4 13:01:15 2025 GMT
Not After : Nov 5 13:01:15 2025 GMT
Subject: CN=58f890a952be0c1d9d7d876dbeab3164c5457b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:62:04:9f:fe:d8:0d:c8:e2:dc:76:a4:5c:d7:
cd:b0:a9:2f:8f:d3:3f:0d:69:8a:4d:e6:1d:c9:58:
eb:65:8a:2c:56:39:ce:09:e6:27:01:dc:18:d7:73:
e3:7e:bb:15:fe:f6:06:42:a2:a1:7b:21:bb:5e:19:
99:10:42:cc:1b:98:dd:03:9e:a9:59:e3:99:df:d8:
d9:f1:cf:ee:37:14:91:5c:d6:bd:fe:0e:ed:74:59:
41:5b:9b:46:3c:7f:27:ad:a0:dc:41:88:b9:5f:b9:
79:ba:6a:f2:ff:bd:73:81:91:66:9e:84:e2:bc:7b:
e3:de:0d:a9:6d:0c:a0:6c:70:b1:7c:d0:82:92:7b:
3d:f8:ec:92:95:78:7a:b2:23:e8:b3:de:5d:51:3b:
0b:21:13:cd:53:9a:75:c4:3b:3e:e1:3d:2f:7f:ed:
f5:8a:f9:45:fe:f3:e1:f3:3e:3f:e4:c8:76:1c:1b:
54:55:49:6b:02:f4:de:9f:fe:ac:a5:48:71:72:2d:
5e:b4:41:73:ed:53:2a:0f:e0:43:4a:7a:a6:42:da:
c4:b7:8f:46:b2:13:2b:5e:94:02:d8:15:e9:a2:24:
4f:7f:95:80:7b:86:d2:18:e3:3b:f6:a4:a8:4d:25:
40:f1:66:8e:45:fa:f0:27:b1:8c:c6:60:c3:dc:3b:
08:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F8:90:A9:52:BE:0C:1D:9D:7D:87:6D:BE:AB:31:64:C5:45:7B:89
X509v3 Authority Key Identifier:
keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7b:5d:ca:bf:3d:0e:fa:0e:ed:6b:47:93:cf:02:76:38:70:
fb:4d:4c:69:c4:5b:ba:c6:b7:a6:ed:ae:9a:76:3a:25:ff:ee:
10:c9:6f:f3:2c:4e:11:09:89:45:6f:3b:97:17:78:a9:6d:0a:
f6:82:76:7e:0b:76:bc:19:9f:48:e4:b2:d6:2a:58:5d:05:8c:
db:92:e3:45:b0:ea:c3:75:72:a8:6a:1d:2a:b5:84:a7:ee:2f:
37:a6:b8:94:f6:27:4a:7a:f8:51:5f:e6:0f:8c:18:55:08:e6:
b6:e3:e0:ea:02:f1:37:49:7c:ed:9d:ac:19:ba:4a:9e:5a:a7:
08:93:eb:d4:61:15:fd:c8:d6:a4:54:a3:70:73:67:4f:67:2e:
f1:02:0d:86:20:4c:2b:45:20:db:d8:4b:9e:f5:37:25:7d:28:
13:8d:9d:82:97:3a:9f:e4:aa:01:57:aa:ed:bc:40:fb:2b:17:
c3:b5:40:32:68:b1:09:20:73:60:69:b2:3c:08:72:32:63:bc:
58:37:49:57:50:9c:ee:81:bb:a0:46:70:52:e0:71:9f:43:6d:
5c:cd:76:22:86:e2:3d:cf:96:08:aa:5d:7a:bb:ff:8d:7c:20:
56:0a:82:2a:76:95:2a:1f:e5:ff:73:17:d1:34:a9:25:c9:3f:
f8:80:76:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9RaXZjh/sqp6iXz9+6/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZDFmMzI1YmY4YWU2OTRhMTlmMjhmZDQwN2NkNWJiNTAw
ZTFiM2UwHhcNMjUxMTA0MTMwMTE1WhcNMjUxMTA1MTMwMTE1WjAzMTEwLwYDVQQD
Eyg1OGY4OTBhOTUyYmUwYzFkOWQ3ZDg3NmRiZWFiMzE2NGM1NDU3Yjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWIEn/7YDcji3HakXNfNsKkvj9M/
DWmKTeYdyVjrZYosVjnOCeYnAdwY13PjfrsV/vYGQqKheyG7XhmZEELMG5jdA56p
WeOZ39jZ8c/uNxSRXNa9/g7tdFlBW5tGPH8nraDcQYi5X7l5umry/71zgZFmnoTi
vHvj3g2pbQygbHCxfNCCkns9+OySlXh6siPos95dUTsLIRPNU5p1xDs+4T0vf+31
ivlF/vPh8z4/5Mh2HBtUVUlrAvTen/6spUhxci1etEFz7VMqD+BDSnqmQtrEt49G
shMrXpQC2BXpoiRPf5WAe4bSGOM79qSoTSVA8WaORfrwJ7GMxmDD3DsIsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFj4kKlSvgwdnX2Hbb6rMWTFRXuJMB8GA1UdIwQY
MBaAFNTR8yW/iuaUoZ8o/UB81btQDhs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU5IekpiLUs1cFNobnlqOVFIelZ1MUFPR3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85NzcwYTEtNTliZC00MTVhLWJhZGUt
YjI4MmRkNjc0ODIzLzEvMU5IekpiLUs1cFNobnlqOVFIelZ1MUFPR3o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi85NzcwYTEtNTliZC00MTVhLWJhZGUtYjI4MmRkNjc0ODIz
LzEvMU5IekpiLUs1cFNobnlqOVFIelZ1MUFPR3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIntdyr89
DvoO7WtHk88Cdjhw+01MacRbusa3pu2umnY6Jf/uEMlv8yxOEQmJRW87lxd4qW0K
9oJ2fgt2vBmfSOSy1ipYXQWM25LjRbDqw3VyqGodKrWEp+4vN6a4lPYnSnr4UV/m
D4wYVQjmtuPg6gLxN0l87Z2sGbpKnlqnCJPr1GEV/cjWpFSjcHNnT2cu8QINhiBM
K0Ug29hLnvU3JX0oE42dgpc6n+SqAVeq7bxA+ysXw7VAMmixCSBzYGmyPAhyMmO8
WDdJV1Cc7oG7oEZwUuBxn0NtXM12IobiPc+WCKpderv/jXwgVgqCKnaVKh/l/3MX
0TSpJck/+IB2GA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:28 2025 by rpki-client