Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
File: NADZSQmD598yx88Xyh6tTwX3lkY.mft (raw, json)
Hash identifier: CS5FqsOr7jM38k/TOlNxgzsBvuul3RxbWkdWjP72+Z4=
Subject key identifier: 2E:65:AD:93:AF:60:F8:AE:D2:00:15:E4:4E:A0:45:B2:DA:88:C7:3E
Authority key identifier: 34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
Certificate issuer: /CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Certificate serial: 019A4E4FF1C1FF0441E2671178DAE0E34C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
Manifest number: 087F
Signing time: Tue 04 Nov 2025 10:00:53 +0000
Manifest this update: Tue 04 Nov 2025 10:00:53 +0000
Manifest next update: Wed 05 Nov 2025 10:00:53 +0000
Files and hashes: 1: NADZSQmD598yx88Xyh6tTwX3lkY.crl (hash: IF0EXm9WfqLxsjCyZsQPEW91c4eQr5vwtzFITZsx8C8=)
2: wGV9gdNmWFtWWUn9dwqAU6O3Xlw.roa (hash: e5ewBGv57i41ziAigHZZOeL98kqI4hYVQ5SbzM8SjnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:f1:c1:ff:04:41:e2:67:11:78:da:e0:e3:4c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Validity
Not Before: Nov 4 10:00:53 2025 GMT
Not After : Nov 5 10:00:53 2025 GMT
Subject: CN=2e65ad93af60f8aed20015e44ea045b2da88c73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d5:6a:08:bf:8b:88:10:94:1b:8f:6b:23:a2:
04:6c:68:4b:bf:15:ef:c8:e7:bc:f9:84:5b:b2:8c:
4c:4c:3d:0c:72:32:ec:47:ef:9d:a8:db:ce:aa:29:
db:41:f4:9e:c8:dd:2f:8f:12:e0:bb:7e:dd:0b:21:
0f:4d:69:2e:44:85:f3:02:97:64:2d:0e:d7:e1:70:
ca:9b:1c:81:36:69:ce:68:ea:3c:b8:b9:4f:bd:7f:
c5:a2:de:86:b5:a2:14:8b:40:2f:f0:5d:b5:3b:2e:
68:ad:5c:ae:5b:a3:62:d8:da:10:5a:08:8c:65:e1:
46:e9:d6:b9:52:18:1f:0c:22:ca:09:ff:73:2f:61:
70:75:e6:ba:60:ea:83:b2:34:7f:a9:1c:9d:28:33:
69:eb:3f:d6:3e:6b:a7:74:d0:df:a1:57:c3:aa:6e:
5a:83:7d:fb:ac:ee:c9:db:1b:12:38:e6:c3:31:7f:
28:c2:0e:d3:b9:53:d3:3f:44:eb:b2:26:d0:d2:17:
eb:6d:a4:98:5d:fb:49:a6:f5:c2:0d:e8:d5:d2:3c:
59:e1:c7:52:f4:bf:41:38:a9:9e:6a:1d:88:ae:c4:
4b:fb:4a:f9:c0:09:ad:25:ce:25:7c:da:e0:bb:43:
4f:2f:3b:17:99:95:c4:9c:f3:f4:92:92:16:0b:e8:
bd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:65:AD:93:AF:60:F8:AE:D2:00:15:E4:4E:A0:45:B2:DA:88:C7:3E
X509v3 Authority Key Identifier:
keyid:34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1c:91:73:38:b5:46:4b:da:f2:7b:af:96:bc:a7:dd:bf:74:
1d:d8:f4:09:c0:a2:f9:e7:c7:63:2b:2c:9d:12:f6:e1:8d:85:
f6:b7:53:30:d7:fe:f7:40:6a:a2:5f:96:a8:c6:f8:00:6f:25:
2e:ac:30:ce:cb:68:85:15:b9:42:98:91:69:73:97:cc:0a:50:
7f:ae:90:60:15:1c:31:79:73:23:97:b9:cf:53:0e:60:2b:e9:
ad:24:a2:ab:13:57:b1:ce:34:9c:83:19:18:db:64:6e:1a:ab:
d0:e8:96:38:cd:37:b6:4a:90:bf:33:7e:4a:b1:33:53:ca:af:
9c:bd:08:b2:f1:d3:17:25:b5:f1:46:3e:3a:3a:58:13:8d:60:
92:24:c9:32:3e:60:cd:3a:74:ad:b5:04:e7:bb:63:67:b6:dd:
22:16:ba:7d:52:53:5a:15:61:54:06:42:3f:d9:75:8c:b4:1e:
1a:f0:36:a8:56:9d:5c:6d:89:fd:fd:1e:5c:b9:0c:53:a5:51:
39:2e:63:c8:4b:1a:a8:32:d0:d3:85:0e:db:f0:1a:9f:6e:ef:
70:37:90:b6:54:96:88:7a:ac:82:bd:96:53:80:33:ec:dc:b8:
27:3a:13:ac:e6:16:47:62:6c:a7:68:04:78:9f:6e:6e:a9:f7:
08:2f:67:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT/HB/wRB4mcReNrg40xEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MDBkOTQ5MDk4M2U3ZGYzMmM3Y2YxN2NhMWVhZDRmMDVm
Nzk2NDYwHhcNMjUxMTA0MTAwMDUzWhcNMjUxMTA1MTAwMDUzWjAzMTEwLwYDVQQD
EygyZTY1YWQ5M2FmNjBmOGFlZDIwMDE1ZTQ0ZWEwNDViMmRhODhjNzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dVqCL+LiBCUG49rI6IEbGhLvxXv
yOe8+YRbsoxMTD0McjLsR++dqNvOqinbQfSeyN0vjxLgu37dCyEPTWkuRIXzApdk
LQ7X4XDKmxyBNmnOaOo8uLlPvX/Fot6GtaIUi0Av8F21Oy5orVyuW6Ni2NoQWgiM
ZeFG6da5UhgfDCLKCf9zL2Fwdea6YOqDsjR/qRydKDNp6z/WPmundNDfoVfDqm5a
g337rO7J2xsSOObDMX8owg7TuVPTP0TrsibQ0hfrbaSYXftJpvXCDejV0jxZ4cdS
9L9BOKmeah2IrsRL+0r5wAmtJc4lfNrgu0NPLzsXmZXEnPP0kpIWC+i9pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5lrZOvYPiu0gAV5E6gRbLaiMc+MB8GA1UdIwQY
MBaAFDQA2UkJg+ffMsfPF8oerU8F95ZGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkFEWlNRbUQ1OTh5eDg4WHloNnRUd1gzbGtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9mZWZjMTItMmZjMi00MzBkLTk2MDYt
ZjQ5NDZmMDNmNTQyLzEvTkFEWlNRbUQ1OTh5eDg4WHloNnRUd1gzbGtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9mZWZjMTItMmZjMi00MzBkLTk2MDYtZjQ5NDZmMDNmNTQy
LzEvTkFEWlNRbUQ1OTh5eDg4WHloNnRUd1gzbGtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRyRczi1
Rkva8nuvlryn3b90Hdj0CcCi+efHYyssnRL24Y2F9rdTMNf+90Bqol+WqMb4AG8l
LqwwzstohRW5QpiRaXOXzApQf66QYBUcMXlzI5e5z1MOYCvprSSiqxNXsc40nIMZ
GNtkbhqr0OiWOM03tkqQvzN+SrEzU8qvnL0IsvHTFyW18UY+OjpYE41gkiTJMj5g
zTp0rbUE57tjZ7bdIha6fVJTWhVhVAZCP9l1jLQeGvA2qFadXG2J/f0eXLkMU6VR
OS5jyEsaqDLQ04UO2/Aan27vcDeQtlSWiHqsgr2WU4Az7Ny4JzoTrOYWR2Jsp2gE
eJ9ubqn3CC9npQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:22 2025 by rpki-client