Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
File: NNUZJHQCvPvfDs6QIK1kYi6dO64.mft (raw, json)
Hash identifier: cUr4gwX+uHeC0RI+jZwCEw1iFyYpmyO9hMHZN7zAsI0=
Subject key identifier: 46:BD:B8:4A:3F:C5:D4:E8:29:90:6B:08:89:0B:94:F8:BA:6A:E7:FC
Authority key identifier: 34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE
Certificate issuer: /CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
Certificate serial: 019A52D103CC1AE96DBAE5A8FDB43BC78E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
Manifest number: 0FA1
Signing time: Wed 05 Nov 2025 07:00:20 +0000
Manifest this update: Wed 05 Nov 2025 07:00:20 +0000
Manifest next update: Thu 06 Nov 2025 07:00:20 +0000
Files and hashes: 1: 1-UL9cqmZR86h5znGrLr9rng1OoA.roa (hash: E9P7J2BtII/1SfdjE4hkF/I8cNTQ+7Tkvjo9UHiDiQ4=)
2: 16Vx9JFdsAydCBt8o5HI01kMvEY.roa (hash: uE6o+4HCde5Q2IcMEoOR7KpTVTAt1VCw3Ve7SEAAgA8=)
3: AVkM8pQNQe4Lv2gygeYw_iwNR8o.roa (hash: eBDfXYDOLbSmgkFxViph+uhEyXOWfI38ugg/5BV4TtY=)
4: NNUZJHQCvPvfDs6QIK1kYi6dO64.crl (hash: 0cIqzyyEjDnmu/HfcxloVYqEIDfeaTVNmfRcv5x6dmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:03:cc:1a:e9:6d:ba:e5:a8:fd:b4:3b:c7:8e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
Validity
Not Before: Nov 5 07:00:20 2025 GMT
Not After : Nov 6 07:00:20 2025 GMT
Subject: CN=46bdb84a3fc5d4e829906b08890b94f8ba6ae7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:87:92:19:88:3d:b6:43:d6:2d:e7:f4:40:
a6:2f:21:3f:46:fb:8a:4b:38:d4:3c:92:4a:bf:6e:
34:33:26:cc:3d:ee:7d:25:02:dd:0d:1b:24:c6:5b:
fa:e6:03:1d:a8:c5:61:57:5a:ce:79:d8:3a:da:0a:
0b:78:d7:d9:7c:8a:42:52:0c:76:e2:43:6b:13:0b:
4c:30:56:b1:da:9d:cd:4c:09:01:da:ab:50:78:5c:
2b:c5:4e:c6:e3:75:7e:cc:fa:ac:16:7a:b4:f5:7f:
ac:1e:d7:f8:44:ee:7a:07:c1:4d:a4:6d:7d:67:5f:
25:af:3c:20:6a:b4:6b:4a:4a:5f:e2:51:88:78:c6:
a8:a0:f6:78:67:85:a8:42:c3:63:3c:8e:21:d9:e5:
b5:19:05:e6:25:21:a7:65:6a:76:5e:46:71:f7:47:
1b:47:6a:69:db:73:d6:8e:ac:79:2c:db:99:6f:a6:
52:b0:97:0a:94:6e:b2:ff:99:8c:53:48:d3:33:ed:
bf:07:96:27:c5:48:18:96:9d:59:43:9f:c8:d3:eb:
1c:6b:b7:a3:43:12:59:59:0f:fa:fe:f5:84:34:96:
57:57:4b:77:1a:cf:5d:e3:97:8a:de:40:03:b3:8d:
e5:02:1e:38:a1:68:66:c2:a6:c6:00:be:8d:0c:b2:
ce:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BD:B8:4A:3F:C5:D4:E8:29:90:6B:08:89:0B:94:F8:BA:6A:E7:FC
X509v3 Authority Key Identifier:
keyid:34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:2c:50:ed:d3:69:e4:89:62:29:f3:3b:a7:9a:51:6c:ee:20:
c9:cc:76:e2:3a:0f:75:a2:00:a7:c5:4a:6c:f8:31:69:ba:2f:
0d:c4:6d:47:84:79:70:b0:03:44:12:0d:70:29:a9:4d:e6:68:
d6:af:3a:24:82:c4:95:a8:77:b5:c4:0e:b6:49:8a:b0:e4:95:
33:f6:03:d5:18:8f:48:30:90:aa:fb:d4:68:93:42:02:0f:e2:
d6:b0:c0:2f:e4:cf:38:e3:58:e2:66:34:e9:57:28:d6:e7:7f:
a2:aa:ce:d7:97:6b:ee:a8:c7:c1:d6:c9:03:0c:e6:e0:69:6f:
43:6c:8f:7d:d5:ba:f7:9f:db:6e:64:f0:b1:1b:9a:76:5a:f9:
35:09:88:40:60:54:4e:bf:e4:fd:21:d9:22:c4:41:68:b8:59:
78:97:22:95:71:8e:69:7c:85:5a:60:69:2d:40:a1:f5:63:31:
cc:fc:92:6f:ae:a3:8a:7f:1d:20:88:21:d0:9e:ff:ed:ea:70:
a8:7f:06:a8:cd:95:6a:5e:1b:7f:7e:33:c1:f7:a9:7c:f8:7c:
e5:c5:b2:34:15:bb:af:93:5d:c9:18:31:89:d7:78:6f:86:c7:
89:22:f9:ac:96:7b:ed:47:ba:f0:06:58:ab:2e:b4:03:0f:e6:
0a:c4:98:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0QPMGultuuWo/bQ7x45uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZDUxOTI0NzQwMmJjZmJkZjBlY2U5MDIwYWQ2NDYyMmU5
ZDNiYWUwHhcNMjUxMTA1MDcwMDIwWhcNMjUxMTA2MDcwMDIwWjAzMTEwLwYDVQQD
Eyg0NmJkYjg0YTNmYzVkNGU4Mjk5MDZiMDg4OTBiOTRmOGJhNmFlN2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEaHkhmIPbZD1i3n9ECmLyE/RvuK
SzjUPJJKv240MybMPe59JQLdDRskxlv65gMdqMVhV1rOedg62goLeNfZfIpCUgx2
4kNrEwtMMFax2p3NTAkB2qtQeFwrxU7G43V+zPqsFnq09X+sHtf4RO56B8FNpG19
Z18lrzwgarRrSkpf4lGIeMaooPZ4Z4WoQsNjPI4h2eW1GQXmJSGnZWp2XkZx90cb
R2pp23PWjqx5LNuZb6ZSsJcKlG6y/5mMU0jTM+2/B5YnxUgYlp1ZQ5/I0+sca7ej
QxJZWQ/6/vWENJZXV0t3Gs9d45eK3kADs43lAh44oWhmwqbGAL6NDLLO4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEa9uEo/xdToKZBrCIkLlPi6auf8MB8GA1UdIwQY
MBaAFDTVGSR0Arz73w7OkCCtZGIunTuuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk5VWkpIUUN2UHZmRHM2UUlLMWtZaTZkTzY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zMDgxNzktYmU2OS00YzEwLTg2OTQt
ZmJkMzk5YTQ0NzVlLzEvTk5VWkpIUUN2UHZmRHM2UUlLMWtZaTZkTzY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zMDgxNzktYmU2OS00YzEwLTg2OTQtZmJkMzk5YTQ0NzVl
LzEvTk5VWkpIUUN2UHZmRHM2UUlLMWtZaTZkTzY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCxQ7dNp
5IliKfM7p5pRbO4gycx24joPdaIAp8VKbPgxabovDcRtR4R5cLADRBINcCmpTeZo
1q86JILElah3tcQOtkmKsOSVM/YD1RiPSDCQqvvUaJNCAg/i1rDAL+TPOONY4mY0
6Vco1ud/oqrO15dr7qjHwdbJAwzm4GlvQ2yPfdW695/bbmTwsRuadlr5NQmIQGBU
Tr/k/SHZIsRBaLhZeJcilXGOaXyFWmBpLUCh9WMxzPySb66jin8dIIgh0J7/7epw
qH8GqM2Val4bf34zwfepfPh85cWyNBW7r5NdyRgxidd4b4bHiSL5rJZ77Ue68AZY
qy60Aw/mCsSYAg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:29:37 2025 by rpki-client