Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
File: nFVnZyAcUPayqVXbah5uAR36XUQ.mft (raw, json)
Hash identifier: PKelecdQbvvQYPOi0KU7euq9h9X7hwAGBcGyUffi2D0=
Subject key identifier: 4B:A4:6D:0A:9F:5B:C2:C7:B0:23:61:D7:12:CB:9E:8F:FA:6A:DA:7F
Authority key identifier: 9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44
Certificate issuer: /CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
Certificate serial: 019A4EF5EB29E8426B22781DFBA48CEBCCE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
Manifest number: 0C35
Signing time: Tue 04 Nov 2025 13:02:10 +0000
Manifest this update: Tue 04 Nov 2025 13:02:10 +0000
Manifest next update: Wed 05 Nov 2025 13:02:10 +0000
Files and hashes: 1: cmsoMlIRCcbLziNipTUjZc3lrew.roa (hash: a1CFCcY0jADOuS6DTKGkRSmsv5gzH4GzUcir7HG6pUE=)
2: nFVnZyAcUPayqVXbah5uAR36XUQ.crl (hash: s3H6MJjqsHFNqs2np1N9W3OQd7aUxoBGu+oY42Qt2AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:eb:29:e8:42:6b:22:78:1d:fb:a4:8c:eb:cc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
Validity
Not Before: Nov 4 13:02:10 2025 GMT
Not After : Nov 5 13:02:10 2025 GMT
Subject: CN=4ba46d0a9f5bc2c7b02361d712cb9e8ffa6ada7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:72:f8:8d:b7:10:df:4c:af:8c:ae:63:00:a8:
0d:1f:9f:74:c8:26:d0:d3:f7:d5:f4:a4:be:ec:9d:
d1:fa:26:6a:1b:96:38:4c:d5:92:c1:2a:ca:04:dd:
58:e0:74:c2:23:e1:f9:b8:f8:99:b6:f2:ca:5e:d3:
60:d3:d4:b5:1f:78:17:4f:64:47:6f:3d:d1:b7:fb:
38:ba:3f:a6:ee:2e:bd:8c:3b:6f:dd:cd:53:9b:1d:
9b:de:f3:d1:95:9f:e3:4d:c2:cb:d6:db:f4:e5:d8:
fe:7a:61:be:10:3a:4a:13:1d:ac:71:0e:d3:72:91:
e1:04:72:d9:27:f3:83:fc:cf:fa:67:b5:50:ec:58:
35:de:d1:87:21:76:8e:e3:fb:ee:fe:1f:b0:fe:6c:
d9:20:ea:93:6e:41:51:2d:9a:96:28:f9:13:63:fa:
64:62:24:67:7e:32:41:b6:59:bb:b7:82:67:23:64:
77:ea:15:62:81:fc:89:9a:56:d8:59:82:9b:e8:03:
6e:58:73:2b:91:9a:09:3c:a0:c6:c6:c1:11:3c:ab:
07:17:0c:2d:69:60:d7:48:94:86:b4:69:a2:9f:56:
96:d9:ad:fd:f1:01:52:cb:d4:2c:95:1d:36:9b:17:
0a:3f:45:da:a9:79:57:0e:7f:1d:4a:d9:1f:1a:96:
5f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A4:6D:0A:9F:5B:C2:C7:B0:23:61:D7:12:CB:9E:8F:FA:6A:DA:7F
X509v3 Authority Key Identifier:
keyid:9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fb:e4:59:28:ca:9a:b9:14:7f:59:25:04:85:00:df:8a:23:
f4:49:75:5e:e6:9f:2c:55:08:14:50:60:25:02:14:12:ba:ba:
d6:99:d3:fc:f0:f4:b2:ad:7a:cb:6a:8c:b7:c5:3c:bf:54:a8:
a3:58:b8:c6:e2:4d:46:1f:c2:b3:7f:87:37:38:cf:f2:c3:48:
20:16:e4:fb:1e:b3:1d:29:65:75:fc:6e:ce:68:5e:ef:10:a6:
c9:27:52:69:36:5e:03:ba:8d:db:88:26:a7:e8:39:69:c3:d1:
28:01:e9:45:71:73:99:d5:4d:0e:d9:a8:8e:ec:39:a8:a3:2e:
32:91:3a:6b:cc:6f:f3:28:5a:83:80:3a:43:a0:55:46:2f:d7:
28:4f:d4:4a:78:12:aa:dc:66:4c:82:8b:88:b4:1f:67:17:af:
5d:74:98:b2:14:4d:3d:52:bf:92:03:b7:b0:6a:25:75:9f:f3:
34:41:9f:92:11:05:67:86:a0:74:51:fd:08:b2:66:f0:8d:90:
be:58:f0:3a:21:d9:9c:21:24:70:09:38:c6:49:b3:b7:ce:b9:
9c:a3:18:60:a6:8b:d9:b3:49:ea:72:d4:7b:89:40:69:76:3a:
5f:2d:dd:e9:53:89:80:eb:80:7f:05:ea:61:0b:31:41:2d:9d:
34:c0:51:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9esp6EJrIngd+6SM68zhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNTU2NzY3MjAxYzUwZjZiMmE5NTVkYjZhMWU2ZTAxMWRm
YTVkNDQwHhcNMjUxMTA0MTMwMjEwWhcNMjUxMTA1MTMwMjEwWjAzMTEwLwYDVQQD
Eyg0YmE0NmQwYTlmNWJjMmM3YjAyMzYxZDcxMmNiOWU4ZmZhNmFkYTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHL4jbcQ30yvjK5jAKgNH590yCbQ
0/fV9KS+7J3R+iZqG5Y4TNWSwSrKBN1Y4HTCI+H5uPiZtvLKXtNg09S1H3gXT2RH
bz3Rt/s4uj+m7i69jDtv3c1Tmx2b3vPRlZ/jTcLL1tv05dj+emG+EDpKEx2scQ7T
cpHhBHLZJ/OD/M/6Z7VQ7Fg13tGHIXaO4/vu/h+w/mzZIOqTbkFRLZqWKPkTY/pk
YiRnfjJBtlm7t4JnI2R36hVigfyJmlbYWYKb6ANuWHMrkZoJPKDGxsERPKsHFwwt
aWDXSJSGtGmin1aW2a398QFSy9QslR02mxcKP0XaqXlXDn8dStkfGpZfvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEukbQqfW8LHsCNh1xLLno/6atp/MB8GA1UdIwQY
MBaAFJxVZ2cgHFD2sqlV22oebgEd+l1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkZWblp5QWNVUGF5cVZYYmFoNXVBUjM2WFVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82ZGFjODYtMjI0Yi00YWU1LWIyYTgt
NDk2YmE4MjQ5MmNlLzEvbkZWblp5QWNVUGF5cVZYYmFoNXVBUjM2WFVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82ZGFjODYtMjI0Yi00YWU1LWIyYTgtNDk2YmE4MjQ5MmNl
LzEvbkZWblp5QWNVUGF5cVZYYmFoNXVBUjM2WFVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/vkWSjK
mrkUf1klBIUA34oj9El1XuafLFUIFFBgJQIUErq61pnT/PD0sq16y2qMt8U8v1So
o1i4xuJNRh/Cs3+HNzjP8sNIIBbk+x6zHSlldfxuzmhe7xCmySdSaTZeA7qN24gm
p+g5acPRKAHpRXFzmdVNDtmojuw5qKMuMpE6a8xv8yhag4A6Q6BVRi/XKE/USngS
qtxmTIKLiLQfZxevXXSYshRNPVK/kgO3sGoldZ/zNEGfkhEFZ4agdFH9CLJm8I2Q
vljwOiHZnCEkcAk4xkmzt865nKMYYKaL2bNJ6nLUe4lAaXY6Xy3d6VOJgOuAfwXq
YQsxQS2dNMBRkg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:28 2025 by rpki-client