Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
File: nD_Ua11gbBzKtVixc24mIaS8BAM.mft (raw, json)
Hash identifier: xUHulnbdsEkxrL6/Zf2pbDVzzApGNTCAiQnWadgUv20=
Subject key identifier: 1E:A5:F4:EF:53:80:94:82:15:1B:67:01:0F:09:F7:53:A9:8F:58:E3
Authority key identifier: 9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03
Certificate issuer: /CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403
Certificate serial: 019A4D3CD161BCA96A3DD17B8B34FC7F2E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
Manifest number: 0999
Signing time: Tue 04 Nov 2025 05:00:22 +0000
Manifest this update: Tue 04 Nov 2025 05:00:22 +0000
Manifest next update: Wed 05 Nov 2025 05:00:22 +0000
Files and hashes: 1: nD_Ua11gbBzKtVixc24mIaS8BAM.crl (hash: dEfD/61U2LsKg6qvCts2jWnjIJAzJzdfS158HpNJNGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:d1:61:bc:a9:6a:3d:d1:7b:8b:34:fc:7f:2e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403
Validity
Not Before: Nov 4 05:00:22 2025 GMT
Not After : Nov 5 05:00:22 2025 GMT
Subject: CN=1ea5f4ef53809482151b67010f09f753a98f58e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:92:2d:7e:cd:41:73:03:c1:72:dd:65:bc:e9:
61:a6:90:c4:ab:18:a7:70:06:2b:b1:0c:db:6a:fa:
c7:41:3c:b1:1a:7a:1c:27:8b:03:79:ff:b2:46:ff:
07:06:55:7e:50:18:aa:1b:21:e0:7e:b8:b1:89:12:
4d:a8:c5:66:97:2b:2d:f4:95:68:79:32:29:f9:e0:
e0:a2:dd:78:e0:0b:dc:a6:9f:95:f2:5c:ff:86:2b:
02:98:ec:e0:89:8d:e2:81:d1:a5:97:cc:26:dd:8c:
2b:9f:8b:02:61:99:88:62:02:1c:a8:5b:9f:07:ca:
67:70:04:f0:c9:dd:c6:e2:44:80:6b:31:f9:0e:45:
b1:80:f3:10:8e:11:6e:04:86:c5:ad:16:59:a4:59:
f2:bb:fe:62:c4:9b:4d:fd:4d:73:ff:39:12:93:21:
a1:b8:75:56:97:dd:69:3c:ad:a9:27:46:c5:9b:7f:
bb:44:7c:63:6f:c4:45:94:7a:ed:cc:21:4d:94:22:
31:74:d7:aa:9c:f0:a8:43:bd:31:fa:6e:a9:37:b7:
32:d7:3f:b3:ad:6e:79:9e:c9:2a:83:fb:f3:0d:f1:
92:e2:ba:2a:95:17:27:ec:15:aa:ab:02:b3:f9:9f:
05:7f:0a:ad:8f:3f:0d:22:a5:85:25:37:5e:38:9a:
53:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A5:F4:EF:53:80:94:82:15:1B:67:01:0F:09:F7:53:A9:8F:58:E3
X509v3 Authority Key Identifier:
keyid:9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:05:ac:1c:ee:b6:ae:fa:c2:1b:ce:85:62:d8:b8:2f:32:2f:
af:85:54:26:e5:3a:1a:d7:d9:b0:27:06:3b:47:39:07:ed:0d:
1a:0f:30:5f:f9:84:03:cf:5f:c1:4b:38:ef:11:21:45:66:03:
93:65:b3:b5:12:c1:30:1a:be:03:b8:be:8c:6d:5f:c7:6b:bf:
9c:f3:12:55:2d:e2:00:15:40:fe:1c:bc:d7:15:bb:d4:c0:d2:
62:56:5d:be:d6:1c:35:10:1a:ee:e8:9b:03:18:65:10:df:b8:
1e:4f:ed:45:80:26:67:28:70:b8:53:27:0c:93:56:a3:cf:59:
61:9c:b5:b0:0f:ac:0c:f4:1a:e4:32:1d:62:45:3e:80:d0:f0:
44:9f:01:f5:b7:cc:7a:72:f0:17:6e:52:0a:49:99:85:c2:eb:
55:14:4e:db:bd:35:f3:56:06:51:85:39:2b:a2:0c:7a:34:85:
c9:ea:d2:fa:cc:47:69:44:76:ee:14:e1:c6:bf:ac:c5:0d:62:
9f:bf:35:de:e0:57:08:04:c0:2e:c1:1c:9a:7f:13:e6:eb:df:
b0:95:5b:e3:3f:a7:d2:fb:e3:68:63:d3:ff:0e:70:33:b3:b2:
d2:88:e8:02:5e:f3:72:b4:49:44:ef:8a:02:51:87:35:21:e9:
71:c6:61:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPNFhvKlqPdF7izT8fy5fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljM2ZkNDZiNWQ2MDZjMWNjYWI1NThiMTczNmUyNjIxYTRi
YzA0MDMwHhcNMjUxMTA0MDUwMDIyWhcNMjUxMTA1MDUwMDIyWjAzMTEwLwYDVQQD
EygxZWE1ZjRlZjUzODA5NDgyMTUxYjY3MDEwZjA5Zjc1M2E5OGY1OGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ZItfs1BcwPBct1lvOlhppDEqxin
cAYrsQzbavrHQTyxGnocJ4sDef+yRv8HBlV+UBiqGyHgfrixiRJNqMVmlyst9JVo
eTIp+eDgot144Avcpp+V8lz/hisCmOzgiY3igdGll8wm3Ywrn4sCYZmIYgIcqFuf
B8pncATwyd3G4kSAazH5DkWxgPMQjhFuBIbFrRZZpFnyu/5ixJtN/U1z/zkSkyGh
uHVWl91pPK2pJ0bFm3+7RHxjb8RFlHrtzCFNlCIxdNeqnPCoQ70x+m6pN7cy1z+z
rW55nskqg/vzDfGS4roqlRcn7BWqqwKz+Z8Ffwqtjz8NIqWFJTdeOJpT4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6l9O9TgJSCFRtnAQ8J91Opj1jjMB8GA1UdIwQY
MBaAFJw/1GtdYGwcyrVYsXNuJiGkvAQDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81Y2VkMjUtOTA5Ni00NzUwLTgyMTkt
MGIzMWMzMzJkNTBkLzEvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi81Y2VkMjUtOTA5Ni00NzUwLTgyMTktMGIzMWMzMzJkNTBk
LzEvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgWsHO62
rvrCG86FYti4LzIvr4VUJuU6GtfZsCcGO0c5B+0NGg8wX/mEA89fwUs47xEhRWYD
k2WztRLBMBq+A7i+jG1fx2u/nPMSVS3iABVA/hy81xW71MDSYlZdvtYcNRAa7uib
AxhlEN+4Hk/tRYAmZyhwuFMnDJNWo89ZYZy1sA+sDPQa5DIdYkU+gNDwRJ8B9bfM
enLwF25SCkmZhcLrVRRO270181YGUYU5K6IMejSFyerS+sxHaUR27hThxr+sxQ1i
n7813uBXCATALsEcmn8T5uvfsJVb4z+n0vvjaGPT/w5wM7Oy0ojoAl7zcrRJRO+K
AlGHNSHpccZh/g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:39 2025 by rpki-client