Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
File: nHLoTFLlxJCdvHAqodIS1HiHX60.mft (raw, json)
Hash identifier: ENMx7ZbvDc+0+yaPlh79Q+U9k70Og8yQR79IGzlpKG0=
Subject key identifier: 50:91:EB:5C:47:52:A5:31:92:B4:BC:EE:7B:84:CF:AC:13:16:9B:78
Authority key identifier: 9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD
Certificate issuer: /CN=9c72e84c52e5c4909dbc702aa1d212d478875fad
Certificate serial: 019A4D068579FDF4275453EB0FCE69EE09A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
Manifest number: 06F7
Signing time: Tue 04 Nov 2025 04:01:04 +0000
Manifest this update: Tue 04 Nov 2025 04:01:04 +0000
Manifest next update: Wed 05 Nov 2025 04:01:04 +0000
Files and hashes: 1: MJgreWjojTG3TWAm0IOsT3PX7yE.roa (hash: QQOCbVX4ydh8RHwVZnu9QI+n2Ns0Q1CadZGcMjFSReI=)
2: nHLoTFLlxJCdvHAqodIS1HiHX60.crl (hash: /EVlDRQgWLsheXU1rN53oZM5aNoQpMZt+QnfYBszqYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:85:79:fd:f4:27:54:53:eb:0f:ce:69:ee:09:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c72e84c52e5c4909dbc702aa1d212d478875fad
Validity
Not Before: Nov 4 04:01:04 2025 GMT
Not After : Nov 5 04:01:04 2025 GMT
Subject: CN=5091eb5c4752a53192b4bcee7b84cfac13169b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:59:63:c9:2e:d0:df:75:d3:00:91:21:1b:3d:
47:0c:ff:84:53:d1:e4:b3:a2:f7:04:42:e0:bb:8a:
6a:4a:f2:a7:fd:f3:19:51:ae:83:ca:22:3b:d8:30:
eb:e1:16:0f:56:b9:58:ab:86:83:ad:44:ab:23:8e:
67:92:b3:76:51:1c:78:ca:eb:33:97:a2:97:7b:46:
91:73:15:55:36:d9:ef:10:1b:08:bb:d2:c9:89:ed:
db:6d:70:1c:bf:b5:fb:ab:2a:a9:46:62:aa:2a:68:
60:ac:64:93:06:96:e3:f8:ae:8a:55:c6:02:84:db:
c8:b5:4d:09:be:96:2a:04:88:4e:f6:08:32:47:3d:
72:c7:bf:b7:69:c4:a0:c7:03:c1:c5:9d:25:dc:39:
49:ed:d5:18:6c:91:3e:f8:46:e6:8f:1a:c6:c2:b9:
fa:b8:12:f5:05:ab:a3:37:43:5d:d4:bb:df:33:79:
8a:cd:ce:a2:3c:21:4d:0d:cd:fb:29:92:1c:ec:e4:
00:45:cc:37:eb:03:0f:ee:d0:0a:36:5e:67:3e:17:
53:0c:c6:a9:22:4b:c4:e3:59:99:54:33:4a:29:7b:
87:09:52:33:33:cd:bb:3c:ad:60:da:be:c1:e5:44:
68:23:43:5e:bd:8c:ed:85:d5:93:fb:ee:bf:cc:c5:
0e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:91:EB:5C:47:52:A5:31:92:B4:BC:EE:7B:84:CF:AC:13:16:9B:78
X509v3 Authority Key Identifier:
keyid:9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a8:e8:a9:ff:ea:71:a0:2f:f0:9d:8a:37:01:d4:f8:3b:13:
f8:8e:5f:ae:28:8e:4c:de:87:a5:9d:33:7a:87:8b:8c:8f:8a:
6c:2f:aa:04:42:58:7c:2e:35:04:ff:7b:68:b6:f2:6c:3f:16:
0a:63:65:83:dc:f3:fb:f1:f7:7f:75:c6:d1:dd:79:e8:90:03:
1b:28:2d:3a:c3:5d:9d:66:9d:62:51:0f:a6:d5:e3:55:25:42:
eb:16:8b:c4:f1:65:27:90:d4:37:90:b4:ee:59:f0:e7:39:3f:
0f:0f:62:05:dc:4e:ef:66:45:43:0b:2d:de:b2:95:90:90:18:
3d:36:61:69:22:a7:2f:e1:1d:c6:0c:d1:b9:24:74:ce:de:ee:
9f:54:44:9c:87:83:58:cf:71:a7:83:81:94:d2:bb:0a:06:f3:
38:f0:94:f9:3e:f1:91:e1:9a:e9:83:ff:e9:37:a9:59:65:8a:
1d:50:74:e5:9f:7c:95:1d:a0:56:68:1a:74:75:53:0f:0d:a9:
61:14:22:ac:04:b2:ed:98:dd:7f:8b:9b:2a:be:59:af:c8:57:
e1:9e:a2:4c:97:7c:08:74:e4:bd:40:fb:c5:62:fb:f4:63:55:
65:00:3a:03:67:e7:0c:47:75:93:e6:cc:28:1a:ba:76:5b:c7:
c0:af:d5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:27 2025 by rpki-client