Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
File: nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft (raw, json)
Hash identifier: /Q7ADsrRVAzfMfYVATLRaxMQuo9MkKpUZCqlP0qt9ks=
Subject key identifier: 46:EA:95:B0:9E:4F:A5:69:D2:06:19:4C:BB:20:D1:78:F3:86:F5:A5
Authority key identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
Certificate issuer: /CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Certificate serial: 019A53086346223A9AA10916CD31BB05EAFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
Manifest number: 09BF
Signing time: Wed 05 Nov 2025 08:00:49 +0000
Manifest this update: Wed 05 Nov 2025 08:00:49 +0000
Manifest next update: Thu 06 Nov 2025 08:00:49 +0000
Files and hashes: 1: D6KBZtdhAp7R2Q1YiqESZQ8OeXA.roa (hash: pLl10ejVKSmOKcwrzyb02NjjAckX++6l+yonzmG4CME=)
2: nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl (hash: 3KuiRqgzemdbj8PUackW94ka9QN9ISEqncYZz5GJNdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:63:46:22:3a:9a:a1:09:16:cd:31:bb:05:ea:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Validity
Not Before: Nov 5 08:00:49 2025 GMT
Not After : Nov 6 08:00:49 2025 GMT
Subject: CN=46ea95b09e4fa569d206194cbb20d178f386f5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a6:43:27:d9:f2:35:96:6b:e3:bd:c4:8d:c6:
a0:6a:8e:69:28:bc:2b:f5:5f:41:a1:fb:b9:41:61:
22:e7:fd:11:53:fa:ff:20:f9:45:64:67:51:03:e2:
47:b4:27:0f:15:51:71:c8:c2:62:a8:c9:05:dc:3a:
40:61:af:5e:02:7c:d6:b7:04:1d:dd:82:87:72:d5:
0d:0f:6d:9b:63:11:93:d6:4b:1f:c8:e1:4e:91:8c:
2c:3e:de:3e:b8:99:e6:b1:95:ad:33:64:78:71:52:
8d:3f:3c:1e:05:39:66:d1:3c:80:ff:de:11:15:af:
5d:f6:8f:24:75:94:d1:f4:e9:08:2c:c9:d7:a1:55:
ef:cd:00:41:7b:95:cb:64:78:2c:49:ae:29:4e:fe:
da:67:12:b3:b6:ac:44:41:51:58:75:b4:80:8e:0c:
47:c9:c6:b8:bf:25:a9:11:aa:7f:a2:86:01:b0:a0:
d7:60:4d:6f:32:ec:83:40:9a:f4:1f:cb:8c:26:7b:
86:0d:ea:a9:d4:23:84:3e:f9:84:93:ca:03:da:66:
52:d1:84:34:99:ea:37:d2:92:41:77:16:35:3e:e2:
e8:52:dd:79:8e:9c:01:27:fc:55:f6:ce:a8:74:d0:
7f:d4:4a:ed:a5:94:fd:b6:b8:93:3e:6f:b1:1f:14:
95:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EA:95:B0:9E:4F:A5:69:D2:06:19:4C:BB:20:D1:78:F3:86:F5:A5
X509v3 Authority Key Identifier:
keyid:9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:54:41:34:e2:ac:0a:09:c1:ca:6f:f3:ff:9c:ca:8a:50:a2:
48:9e:ef:f2:4a:a6:6b:7a:0a:0c:0e:e7:ee:2a:22:40:b5:14:
4f:8d:61:9e:1a:6f:c2:2f:a6:72:2b:b9:ea:5c:98:dd:f3:7c:
cd:0f:09:f8:d9:f8:fa:6c:4b:7f:96:91:4b:e2:b4:2d:a6:0a:
b4:a4:d1:53:1b:2b:64:37:1e:a3:c8:ea:92:b3:79:d6:57:8b:
42:e2:5b:1e:81:a3:da:6d:b3:4f:7f:f8:2d:2e:f6:6e:5d:f5:
3a:16:4a:1c:79:3c:19:f8:fe:dd:42:75:be:19:a7:fb:cd:3f:
51:4f:f6:7a:5c:93:67:fd:0a:4f:40:d0:fa:5e:35:67:10:15:
58:52:c9:eb:ca:7c:46:eb:37:7f:98:1c:33:26:e8:b0:73:5b:
0f:d0:e3:3f:2e:d8:35:82:0d:f6:9b:fc:97:58:45:b5:ba:aa:
44:a2:9b:57:f4:01:16:23:4d:b0:9e:d8:ed:db:d7:6c:8d:ec:
4c:73:3e:a5:12:c5:3e:78:1d:7a:ce:d1:30:c3:d8:cf:ed:0e:
8a:66:f5:7d:48:ce:1d:88:b2:04:23:b6:56:07:fd:70:5c:f1:
99:ac:25:51:b3:46:33:55:1a:31:6a:83:ce:a2:50:28:27:b5:
a6:01:42:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTCGNGIjqaoQkWzTG7Ber9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZjI0YWZiZmVjZGY2YTk5YzI4MmJmNTNiMzA0ZjNjMWU4
ZjQ3MGYwHhcNMjUxMTA1MDgwMDQ5WhcNMjUxMTA2MDgwMDQ5WjAzMTEwLwYDVQQD
Eyg0NmVhOTViMDllNGZhNTY5ZDIwNjE5NGNiYjIwZDE3OGYzODZmNWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6ZDJ9nyNZZr473Ejcagao5pKLwr
9V9Bofu5QWEi5/0RU/r/IPlFZGdRA+JHtCcPFVFxyMJiqMkF3DpAYa9eAnzWtwQd
3YKHctUND22bYxGT1ksfyOFOkYwsPt4+uJnmsZWtM2R4cVKNPzweBTlm0TyA/94R
Fa9d9o8kdZTR9OkILMnXoVXvzQBBe5XLZHgsSa4pTv7aZxKztqxEQVFYdbSAjgxH
yca4vyWpEap/ooYBsKDXYE1vMuyDQJr0H8uMJnuGDeqp1COEPvmEk8oD2mZS0YQ0
meo30pJBdxY1PuLoUt15jpwBJ/xV9s6odNB/1ErtpZT9triTPm+xHxSV/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbqlbCeT6Vp0gYZTLsg0XjzhvWlMB8GA1UdIwQY
MBaAFJ3ySvv+zfapnCgr9TswTzwej0cPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lYTljNTktOWUxNC00ZjI1LTg2YmQt
N2VlZGY0ZGQ2YzEzLzEvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lYTljNTktOWUxNC00ZjI1LTg2YmQtN2VlZGY0ZGQ2YzEz
LzEvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFRBNOKs
CgnBym/z/5zKilCiSJ7v8kqma3oKDA7n7ioiQLUUT41hnhpvwi+mciu56lyY3fN8
zQ8J+Nn4+mxLf5aRS+K0LaYKtKTRUxsrZDceo8jqkrN51leLQuJbHoGj2m2zT3/4
LS72bl31OhZKHHk8Gfj+3UJ1vhmn+80/UU/2elyTZ/0KT0DQ+l41ZxAVWFLJ68p8
Rus3f5gcMybosHNbD9DjPy7YNYIN9pv8l1hFtbqqRKKbV/QBFiNNsJ7Y7dvXbI3s
THM+pRLFPngdes7RMMPYz+0Oimb1fUjOHYiyBCO2Vgf9cFzxmawlUbNGM1UaMWqD
zqJQKCe1pgFCng==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:44:33 2025 by rpki-client