Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
File: _Nq63VYraOxeFY4easdvfalucyM.mft (raw, json)
Hash identifier: HTJ0KRI/2RdN7hDbB/t0zdazvhb0dmVqBYxagbZfqos=
Subject key identifier: 54:2B:0B:5A:17:3D:8F:E1:5D:D9:15:C8:EB:F6:84:EF:48:03:84:B6
Authority key identifier: FC:DA:BA:DD:56:2B:68:EC:5E:15:8E:1E:6A:C7:6F:7D:A9:6E:73:23
Certificate issuer: /CN=fcdabadd562b68ec5e158e1e6ac76f7da96e7323
Certificate serial: 019A4F62A867E1489D4B7F325B3CAB655684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 15:00:56 +0000
Manifest this update: Tue 04 Nov 2025 15:00:56 +0000
Manifest next update: Wed 05 Nov 2025 15:00:56 +0000
Files and hashes: 1: _Nq63VYraOxeFY4easdvfalucyM.crl (hash: 2q1WVAFYiEgcfO4EeyPe4ahpeqzYxrNRsK9eRFvya6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:a8:67:e1:48:9d:4b:7f:32:5b:3c:ab:65:56:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcdabadd562b68ec5e158e1e6ac76f7da96e7323
Validity
Not Before: Nov 4 15:00:56 2025 GMT
Not After : Nov 5 15:00:56 2025 GMT
Subject: CN=542b0b5a173d8fe15dd915c8ebf684ef480384b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:6a:93:4e:00:f8:33:1b:37:16:1e:de:3c:
74:af:78:9e:70:d5:31:ee:8d:3b:10:5b:40:ca:83:
29:dc:cb:4f:16:e1:09:c4:2a:eb:f7:f8:f7:ea:75:
70:76:bd:0c:b1:1d:e4:f4:d5:6e:23:b3:12:2f:40:
14:4f:e4:37:b4:0a:ac:e0:57:12:ef:72:9e:d7:7d:
13:d6:4e:6f:13:8e:23:ef:66:2a:bf:d3:bb:7a:f7:
7d:2b:42:ac:47:4a:d8:8a:5b:2a:c6:2b:8f:2c:c1:
cd:ac:af:1b:9d:eb:92:6e:5f:aa:2c:03:ee:04:1c:
29:aa:88:1d:0a:5b:16:83:80:9b:af:8b:11:30:2b:
19:9e:41:25:aa:ee:1b:56:c0:7a:21:22:0b:8f:10:
ff:38:95:4b:50:80:5a:4c:44:21:f9:c0:2c:f7:fd:
68:d4:0a:a4:f4:60:8d:50:30:13:8f:76:34:f3:75:
a6:86:54:b2:a0:67:b4:0c:af:19:e0:47:57:d8:05:
2c:ec:bd:22:8d:e4:d1:44:53:78:dc:f4:35:8b:53:
be:40:a6:da:9d:1e:05:19:0b:8e:a6:33:37:c6:99:
4a:5d:db:f4:b3:5c:eb:2d:c5:16:85:db:c5:da:86:
43:6c:0b:39:f1:1a:54:51:6a:f3:9f:12:b9:43:29:
d6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2B:0B:5A:17:3D:8F:E1:5D:D9:15:C8:EB:F6:84:EF:48:03:84:B6
X509v3 Authority Key Identifier:
keyid:FC:DA:BA:DD:56:2B:68:EC:5E:15:8E:1E:6A:C7:6F:7D:A9:6E:73:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4a:3e:5e:e7:9e:10:9d:d4:3a:a0:d8:e3:fa:54:6c:9a:fa:
65:1d:0a:37:1c:10:f4:0a:37:ba:b1:e7:8d:ce:64:7f:16:72:
54:29:fe:5c:83:f7:31:59:4f:63:94:08:73:51:bb:65:b3:a5:
b2:d3:82:bb:7d:11:ab:04:23:4b:b1:84:71:65:be:f1:d1:f0:
8c:45:cf:18:0f:c6:88:e6:ca:5d:23:ba:4e:68:8a:45:31:4b:
30:99:ae:ec:33:39:5c:6c:cc:dc:c9:61:34:e2:1f:c1:7f:eb:
11:94:78:43:c4:4b:8e:2a:4a:d1:3f:0c:ae:fa:bb:b0:c8:5d:
e6:04:51:d1:81:67:86:35:16:74:8f:d9:4d:c8:51:f2:a9:09:
98:62:b9:77:d0:7c:fd:67:20:0c:a5:e9:97:78:97:1e:1a:13:
06:bb:55:c5:2f:22:5f:7c:06:8e:0e:89:8d:25:24:76:ae:fe:
00:24:5f:6a:7e:5d:1f:ca:63:d6:c8:cb:b0:88:7f:22:ae:c1:
e1:ea:8e:31:31:44:26:16:8d:3a:6a:8a:07:22:41:8e:31:de:
95:b5:b3:74:83:7f:a6:e8:b1:52:b0:14:01:de:1e:5a:d7:ff:
19:ec:8c:b9:e0:ba:ef:89:ba:fe:86:b0:de:f1:f3:61:95:79:
4e:b3:ab:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYqhn4UidS38yWzyrZVaEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZGFiYWRkNTYyYjY4ZWM1ZTE1OGUxZTZhYzc2ZjdkYTk2
ZTczMjMwHhcNMjUxMTA0MTUwMDU2WhcNMjUxMTA1MTUwMDU2WjAzMTEwLwYDVQQD
Eyg1NDJiMGI1YTE3M2Q4ZmUxNWRkOTE1YzhlYmY2ODRlZjQ4MDM4NGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzlqk04A+DMbNxYe3jx0r3iecNUx
7o07EFtAyoMp3MtPFuEJxCrr9/j36nVwdr0MsR3k9NVuI7MSL0AUT+Q3tAqs4FcS
73Ke130T1k5vE44j72Yqv9O7evd9K0KsR0rYilsqxiuPLMHNrK8bneuSbl+qLAPu
BBwpqogdClsWg4Cbr4sRMCsZnkElqu4bVsB6ISILjxD/OJVLUIBaTEQh+cAs9/1o
1Aqk9GCNUDATj3Y083WmhlSyoGe0DK8Z4EdX2AUs7L0ijeTRRFN43PQ1i1O+QKba
nR4FGQuOpjM3xplKXdv0s1zrLcUWhdvF2oZDbAs58RpUUWrznxK5QynW8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQrC1oXPY/hXdkVyOv2hO9IA4S2MB8GA1UdIwQY
MBaAFPzaut1WK2jsXhWOHmrHb32pbnMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX05xNjNWWXJhT3hlRlk0ZWFzZHZmYWx1Y3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lOGJiMTMtOWY4OS00MGNhLThhNmIt
YTM5NGU4NjZiMzdjLzEvX05xNjNWWXJhT3hlRlk0ZWFzZHZmYWx1Y3lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lOGJiMTMtOWY4OS00MGNhLThhNmItYTM5NGU4NjZiMzdj
LzEvX05xNjNWWXJhT3hlRlk0ZWFzZHZmYWx1Y3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmUo+Xuee
EJ3UOqDY4/pUbJr6ZR0KNxwQ9Ao3urHnjc5kfxZyVCn+XIP3MVlPY5QIc1G7ZbOl
stOCu30RqwQjS7GEcWW+8dHwjEXPGA/GiObKXSO6TmiKRTFLMJmu7DM5XGzM3Mlh
NOIfwX/rEZR4Q8RLjipK0T8Mrvq7sMhd5gRR0YFnhjUWdI/ZTchR8qkJmGK5d9B8
/WcgDKXpl3iXHhoTBrtVxS8iX3wGjg6JjSUkdq7+ACRfan5dH8pj1sjLsIh/Iq7B
4eqOMTFEJhaNOmqKByJBjjHelbWzdIN/puixUrAUAd4eWtf/GeyMueC674m6/oaw
3vHzYZV5TrOrMA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:11 2025 by rpki-client