Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
File: NNDsesTDkeTsup0KN0kZGxjr-TQ.mft (raw, json)
Hash identifier: a9OSRbXT6zKsETbFuOMtBnF3bMSCdZVg32+ATeo0Ilo=
Subject key identifier: DA:3B:0C:7D:D0:01:D8:6B:73:26:56:61:50:10:8A:68:26:A1:7E:8F
Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Certificate serial: 019A4D3D37A07B85E2DA86550B732A7BD9B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
Manifest number: 0F8E
Signing time: Tue 04 Nov 2025 05:00:48 +0000
Manifest this update: Tue 04 Nov 2025 05:00:48 +0000
Manifest next update: Wed 05 Nov 2025 05:00:48 +0000
Files and hashes: 1: IhSZr0Z9WAryW3beq7rPy6X_4sU.roa (hash: 14IyrHQZmrwmRvkqbCvXFLBTUIcbof5P325HFm3nQa8=)
2: NNDsesTDkeTsup0KN0kZGxjr-TQ.crl (hash: wsqiIxXcvY/fEkq60AYviTTm5V9mggiiHB0l6COJivk=)
3: Yzl-TsBruLbp6clu7Q2IexOaQIA.roa (hash: h8cj0MpyodNclAF4X/OllC8+HNKuBQ3B2EFgEqM9+5A=)
4: Z_1dKKg5j_ZVIIzCoIHjWYwlm20.roa (hash: jvis9yjIVYHSkVBmx62d0kYrYZu0QAElVmLUpHW0GZM=)
5: fSqRfFQj3Q__dsTUhVMBI1HPSHg.roa (hash: Y+WWgHfgxkTIhIEndSO+xaSkFkDz1wgH6w0m5aWvWfU=)
6: pI3W8C1ZxuPusTptKHP1u0YPtbM.roa (hash: CThv60vq5lrTC7BFI5QFq4GFsEIpVjwpFNsuFKoLpYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:37:a0:7b:85:e2:da:86:55:0b:73:2a:7b:d9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Validity
Not Before: Nov 4 05:00:48 2025 GMT
Not After : Nov 5 05:00:48 2025 GMT
Subject: CN=da3b0c7dd001d86b7326566150108a6826a17e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:cd:a6:15:84:68:ec:1b:9c:97:d1:eb:4e:
b0:af:23:40:65:d3:63:39:8b:a1:64:fd:75:be:4d:
4e:37:21:81:f2:55:13:c2:51:04:90:3f:37:cc:5c:
23:e8:03:b7:98:57:4f:42:dc:a0:86:dd:ba:f8:17:
c4:9f:07:ac:2b:7e:15:a3:a6:5a:7c:58:37:e6:67:
7a:32:d5:06:82:7d:72:bc:d8:56:3a:24:2e:b6:2d:
5f:42:8f:3a:50:21:f3:84:f0:d1:f1:e3:03:04:90:
52:b7:73:61:7f:5b:2f:00:7e:ae:18:53:07:75:dd:
28:75:16:e7:3b:c2:f0:7f:a0:83:f1:7f:6b:45:c2:
2a:45:da:97:1f:58:83:00:db:20:12:d7:08:6f:3a:
21:af:35:b0:20:79:a6:0e:b0:79:1f:05:61:d2:5f:
ea:20:b8:ce:b2:1c:15:44:f5:d6:e3:31:d5:bd:25:
d8:97:07:ca:60:bf:79:1a:a3:96:3d:1b:75:d9:a5:
e0:aa:ba:cb:0f:69:db:0a:0f:fa:47:93:82:ba:79:
cb:8c:20:bc:0a:d5:f6:a8:81:57:dd:b0:4b:af:26:
79:18:f6:80:ff:ba:0a:e5:6e:4c:9c:bd:0b:24:2c:
65:c3:eb:b1:d0:6a:1d:66:dc:d5:a0:65:b3:5d:f0:
e5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3B:0C:7D:D0:01:D8:6B:73:26:56:61:50:10:8A:68:26:A1:7E:8F
X509v3 Authority Key Identifier:
keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:52:f3:1f:48:a0:87:10:67:43:4e:a8:7b:60:0d:ed:92:d9:
22:0e:e3:61:bc:81:55:59:89:02:7d:a7:50:74:38:81:4c:4b:
96:ee:ca:1c:ad:5f:ed:d1:bc:a2:35:1e:71:2e:62:6a:32:3e:
d6:78:c1:a9:13:8e:dc:7b:d2:d4:c0:8d:e5:cf:ef:95:94:43:
a3:02:8a:19:38:35:13:ba:63:45:e6:e5:33:56:d2:20:85:80:
fa:3e:44:b2:64:ff:99:ff:ff:fd:18:b3:1d:ac:40:0e:ca:f5:
78:5b:2d:93:84:05:d6:43:4a:2b:52:4c:6c:58:af:fc:48:97:
e5:bf:21:94:57:fa:39:3f:c8:a2:a2:2e:de:cc:39:ca:b4:f0:
b9:1d:a5:fe:fa:bb:69:1f:25:03:d9:4f:fa:9c:59:78:a7:97:
f5:f2:b7:ae:45:1c:70:e0:a3:21:88:29:49:66:74:89:a5:3b:
b9:35:3b:f4:04:eb:46:4e:fe:81:d4:ee:6e:60:2c:b0:30:6b:
f9:ad:2b:cd:fa:96:c9:0d:68:19:28:35:84:cf:e6:46:db:40:
42:81:7c:96:a8:c1:24:ca:61:86:73:1d:cb:c6:17:20:2d:3c:
2a:55:bd:36:c4:de:ec:52:2b:12:0c:5e:ee:58:ea:84:10:03:
f6:ce:34:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPTege4Xi2oZVC3Mqe9m1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZDBlYzdhYzRjMzkxZTRlY2JhOWQwYTM3NDkxOTFiMThl
YmY5MzQwHhcNMjUxMTA0MDUwMDQ4WhcNMjUxMTA1MDUwMDQ4WjAzMTEwLwYDVQQD
EyhkYTNiMGM3ZGQwMDFkODZiNzMyNjU2NjE1MDEwOGE2ODI2YTE3ZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHrNphWEaOwbnJfR606wryNAZdNj
OYuhZP11vk1ONyGB8lUTwlEEkD83zFwj6AO3mFdPQtyght26+BfEnwesK34Vo6Za
fFg35md6MtUGgn1yvNhWOiQuti1fQo86UCHzhPDR8eMDBJBSt3Nhf1svAH6uGFMH
dd0odRbnO8Lwf6CD8X9rRcIqRdqXH1iDANsgEtcIbzohrzWwIHmmDrB5HwVh0l/q
ILjOshwVRPXW4zHVvSXYlwfKYL95GqOWPRt12aXgqrrLD2nbCg/6R5OCunnLjCC8
CtX2qIFX3bBLryZ5GPaA/7oK5W5MnL0LJCxlw+ux0GodZtzVoGWzXfDlRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNo7DH3QAdhrcyZWYVAQimgmoX6PMB8GA1UdIwQY
MBaAFDTQ7HrEw5Hk7LqdCjdJGRsY6/k0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUt
YjdjMjY5NmJhZTUwLzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUtYjdjMjY5NmJhZTUw
LzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1LzH0ig
hxBnQ06oe2AN7ZLZIg7jYbyBVVmJAn2nUHQ4gUxLlu7KHK1f7dG8ojUecS5iajI+
1njBqROO3HvS1MCN5c/vlZRDowKKGTg1E7pjReblM1bSIIWA+j5EsmT/mf///Riz
HaxADsr1eFstk4QF1kNKK1JMbFiv/EiX5b8hlFf6OT/IoqIu3sw5yrTwuR2l/vq7
aR8lA9lP+pxZeKeX9fK3rkUccOCjIYgpSWZ0iaU7uTU79ATrRk7+gdTubmAssDBr
+a0rzfqWyQ1oGSg1hM/mRttAQoF8lqjBJMphhnMdy8YXIC08KlW9NsTe7FIrEgxe
7ljqhBAD9s40/A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:30 2025 by rpki-client