Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
File: nLt3urQ4qT002dXAqOC57zKuXaA.mft (raw, json)
Hash identifier: KdETK5EWdaNcubgUNz/0XdYcZfX4k9wg44jEeP1ZBlY=
Subject key identifier: C7:F1:DB:2F:6E:08:56:02:DF:1F:60:93:0E:F4:DC:29:C0:00:01:DC
Authority key identifier: 9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
Certificate issuer: /CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Certificate serial: 019A4EF55DE8348F7B27796E16E6C774D32E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
Manifest number: 0893
Signing time: Tue 04 Nov 2025 13:01:34 +0000
Manifest this update: Tue 04 Nov 2025 13:01:34 +0000
Manifest next update: Wed 05 Nov 2025 13:01:34 +0000
Files and hashes: 1: TAsOnRZq8fiVm7IgWJUxtwQKXQw.roa (hash: uvW+4Cm/xTtLLngk0h3md/Re7mjqyVC2fS5xyiOuuj4=)
2: nLt3urQ4qT002dXAqOC57zKuXaA.crl (hash: L28FIbEp7FPPMZYFxAICsHlV+Q7xkJ6565kVp82Kg74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:5d:e8:34:8f:7b:27:79:6e:16:e6:c7:74:d3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Validity
Not Before: Nov 4 13:01:34 2025 GMT
Not After : Nov 5 13:01:34 2025 GMT
Subject: CN=c7f1db2f6e085602df1f60930ef4dc29c00001dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:91:db:ad:10:97:74:27:77:90:b6:2e:65:db:
a9:bb:a9:1a:19:a0:58:84:6f:7d:33:89:62:42:3c:
e3:6c:92:de:58:7c:3a:eb:ed:8b:02:08:d7:26:54:
43:63:c3:8d:4e:16:8d:7b:14:ca:d1:06:a1:95:a3:
83:60:c8:37:09:07:c6:5f:4a:d4:7a:5f:62:77:87:
d1:94:cc:30:e0:ff:f4:71:8f:9e:9f:eb:c5:f8:8b:
79:d2:8c:98:c1:e4:72:56:5e:d0:0d:0e:f8:88:3e:
54:9e:88:56:af:f5:e9:48:c8:38:21:10:37:e5:fa:
37:54:7a:ec:82:45:b8:11:5f:b5:3d:19:f7:37:94:
5f:da:23:9d:92:0a:90:5e:ea:49:e5:c1:ed:73:d6:
2f:fc:42:0f:e6:c7:f1:e8:79:98:62:35:37:1f:42:
b2:52:fd:41:62:86:85:be:2b:09:29:89:ea:0a:d3:
cf:a2:cf:d6:a3:b0:f0:1a:ed:90:dc:f2:f5:b7:1d:
67:14:16:a7:85:95:7c:fc:d9:55:08:af:a5:da:d9:
30:80:ae:93:cb:9b:5e:8a:e1:6f:a1:3f:c1:88:3a:
40:38:3d:bd:4e:e2:c8:c0:15:ea:8d:31:cf:b4:0a:
60:20:c0:ce:ab:5f:59:c0:aa:b1:cf:92:f8:fe:eb:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F1:DB:2F:6E:08:56:02:DF:1F:60:93:0E:F4:DC:29:C0:00:01:DC
X509v3 Authority Key Identifier:
keyid:9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:db:28:e2:80:4f:b7:51:5f:22:41:65:a4:c6:d8:00:4d:59:
81:a1:64:ce:e0:c7:1b:f8:9c:49:34:89:23:40:fc:c9:17:ad:
09:98:7f:f4:2f:c5:d1:6a:56:2d:13:b2:87:9d:cb:85:7d:18:
fa:3c:9f:4e:c9:6a:05:44:9d:ec:97:18:82:64:e5:d5:8c:34:
2e:40:7e:11:84:3a:58:1a:b7:a1:52:17:17:00:5a:e3:b2:2a:
f1:0e:1b:d3:10:4d:cc:07:ab:09:33:b2:39:b6:70:43:14:e6:
ef:2e:8a:ac:7a:4f:61:72:46:51:51:50:14:c9:1a:ab:5d:75:
12:cf:bc:99:ca:5e:07:63:39:02:e3:26:2a:cd:05:9e:6d:f3:
34:db:03:a5:c1:fa:69:24:0a:81:20:93:0e:5c:21:ce:b1:0a:
86:3a:dc:34:dc:14:22:0b:dd:30:10:fe:23:71:be:56:28:ac:
fd:a9:11:5c:e2:99:82:68:cb:d0:4b:d9:09:62:04:ce:db:ab:
29:81:a1:49:56:ff:06:05:cd:59:74:b1:85:21:6a:9f:dc:42:
76:c2:0f:a5:7b:2a:e1:07:78:d3:be:0b:f2:f1:a0:3e:57:af:
d5:03:0d:2b:a2:40:24:4c:09:b1:4d:0c:3b:da:e5:6f:95:ff:
c9:f2:c8:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9V3oNI97J3luFubHdNMuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYmI3N2JhYjQzOGE5M2QzNGQ5ZDVjMGE4ZTBiOWVmMzJh
ZTVkYTAwHhcNMjUxMTA0MTMwMTM0WhcNMjUxMTA1MTMwMTM0WjAzMTEwLwYDVQQD
EyhjN2YxZGIyZjZlMDg1NjAyZGYxZjYwOTMwZWY0ZGMyOWMwMDAwMWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35HbrRCXdCd3kLYuZdupu6kaGaBY
hG99M4liQjzjbJLeWHw66+2LAgjXJlRDY8ONThaNexTK0QahlaODYMg3CQfGX0rU
el9id4fRlMww4P/0cY+en+vF+It50oyYweRyVl7QDQ74iD5UnohWr/XpSMg4IRA3
5fo3VHrsgkW4EV+1PRn3N5Rf2iOdkgqQXupJ5cHtc9Yv/EIP5sfx6HmYYjU3H0Ky
Uv1BYoaFvisJKYnqCtPPos/Wo7DwGu2Q3PL1tx1nFBanhZV8/NlVCK+l2tkwgK6T
y5teiuFvoT/BiDpAOD29TuLIwBXqjTHPtApgIMDOq19ZwKqxz5L4/utffwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfx2y9uCFYC3x9gkw703CnAAAHcMB8GA1UdIwQY
MBaAFJy7d7q0OKk9NNnVwKjgue8yrl2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkx0M3VyUTRxVDAwMmRYQXFPQzU3ekt1WGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yMjkxODItNGJkYy00MjM0LWE5ODkt
OTBkNThjNjAzMjU2LzEvbkx0M3VyUTRxVDAwMmRYQXFPQzU3ekt1WGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8yMjkxODItNGJkYy00MjM0LWE5ODktOTBkNThjNjAzMjU2
LzEvbkx0M3VyUTRxVDAwMmRYQXFPQzU3ekt1WGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdso4oBP
t1FfIkFlpMbYAE1ZgaFkzuDHG/icSTSJI0D8yRetCZh/9C/F0WpWLROyh53LhX0Y
+jyfTslqBUSd7JcYgmTl1Yw0LkB+EYQ6WBq3oVIXFwBa47Iq8Q4b0xBNzAerCTOy
ObZwQxTm7y6KrHpPYXJGUVFQFMkaq111Es+8mcpeB2M5AuMmKs0Fnm3zNNsDpcH6
aSQKgSCTDlwhzrEKhjrcNNwUIgvdMBD+I3G+Viis/akRXOKZgmjL0EvZCWIEztur
KYGhSVb/BgXNWXSxhSFqn9xCdsIPpXsq4Qd4074L8vGgPlev1QMNK6JAJEwJsU0M
O9rlb5X/yfLIzg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:35:31 2025 by rpki-client