Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
File: nT67qfosrShqyRJ2V1dF9hXo-nE.mft (raw, json)
Hash identifier: cf53d6sx3Bdr4PrXkPsfYOBT6kvG4SOMq+wqrbzYL6I=
Subject key identifier: EF:BD:6D:59:51:8C:C8:DB:4E:F5:59:BC:9D:E0:6A:31:86:23:2E:EF
Authority key identifier: 9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
Certificate issuer: /CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Certificate serial: 019A4E1877F2093932A57A1863D642AC4617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
Manifest number: 0AA6
Signing time: Tue 04 Nov 2025 09:00:17 +0000
Manifest this update: Tue 04 Nov 2025 09:00:17 +0000
Manifest next update: Wed 05 Nov 2025 09:00:17 +0000
Files and hashes: 1: _O2K9lYrU1ufrJyVF92JtVYbIao.roa (hash: opCkasUjE09S1Hv7hZM9HKqW92oCRoLsRmm8L97k62Q=)
2: nT67qfosrShqyRJ2V1dF9hXo-nE.crl (hash: inVJ7R49d7bKZ/QeUY/4BzG4vOdD/87ccc8LsBY1ynY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:77:f2:09:39:32:a5:7a:18:63:d6:42:ac:46:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Validity
Not Before: Nov 4 09:00:17 2025 GMT
Not After : Nov 5 09:00:17 2025 GMT
Subject: CN=efbd6d59518cc8db4ef559bc9de06a3186232eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:7b:8d:72:2a:55:05:ee:a5:17:73:da:84:
0e:da:42:82:1c:b5:6e:a1:ff:0a:98:36:e1:ac:da:
ff:2f:4a:1c:f5:c6:20:4e:80:a9:e1:f0:b2:7c:a1:
bc:b7:67:01:ce:c5:3d:0b:65:da:14:84:43:9a:f5:
b9:6b:e0:6f:2e:cf:26:e6:38:5a:22:4d:51:5a:1e:
51:31:73:70:5e:f3:e4:66:0c:d1:ff:03:92:eb:6b:
3f:ef:42:05:5a:14:3d:5a:3b:1e:a4:5d:76:44:0e:
7a:f7:13:60:f6:34:b1:ce:92:8a:f8:73:bd:f2:8c:
2d:ca:c6:6e:9a:cd:ba:fb:f3:d8:22:69:9f:88:2f:
bc:62:16:dc:f6:c0:31:32:02:17:48:41:c7:39:29:
ef:04:a6:d2:89:ac:76:10:b8:1d:50:dc:04:f7:98:
42:96:43:40:4d:7e:7a:af:6e:15:9e:d0:79:ec:02:
ef:a8:da:24:03:f9:41:70:b0:df:2c:35:f2:94:79:
5a:d5:89:a3:e3:d3:ef:7f:bf:b0:3b:22:a7:d9:b0:
b8:7e:48:cc:64:4c:96:1d:6b:7e:a4:85:7b:a4:5f:
84:65:2e:f7:06:db:4f:13:bd:11:82:c4:4a:cd:c9:
d1:8d:8d:48:99:8a:95:e1:bb:11:a7:20:7f:82:2e:
1d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BD:6D:59:51:8C:C8:DB:4E:F5:59:BC:9D:E0:6A:31:86:23:2E:EF
X509v3 Authority Key Identifier:
keyid:9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:37:0f:3b:31:36:4d:a5:21:85:3d:de:9f:cf:d3:48:40:d1:
6d:cf:e0:74:df:ab:75:5b:b5:be:9c:40:ae:dc:49:95:0a:34:
6c:c5:b0:c0:93:3a:3a:79:fa:8a:96:e2:b9:f3:94:7e:c1:95:
c0:72:a6:9b:d8:f8:33:33:44:24:6f:fe:5b:7b:ce:be:1d:15:
8b:19:56:1d:cc:3f:80:f6:7f:e6:a4:b5:79:91:56:88:7e:e2:
f5:4c:e4:f9:ce:a7:48:f5:3d:56:c9:a7:63:6e:4c:ed:71:95:
eb:91:3a:18:b9:aa:b7:b1:ae:7a:4c:d9:f6:3b:fd:4b:4a:0d:
cc:a4:0a:cd:d9:2f:dd:f0:ef:22:56:83:31:b3:42:32:4d:35:
7b:3a:35:45:a6:b5:eb:d4:46:e9:15:be:bc:29:b7:9c:06:c9:
4a:c1:42:a6:ce:d6:7f:5b:31:ed:94:b8:b7:01:b2:8d:94:3a:
d8:c6:55:7c:bc:a3:55:87:1d:1f:f9:6a:10:90:55:3a:a8:31:
0e:b2:76:19:03:81:11:37:8e:17:8c:fa:da:fe:de:43:70:e6:
df:3f:a1:f1:11:5f:c0:63:0f:dc:b2:2f:03:af:56:b8:e2:4b:
bf:b7:b1:71:dd:f3:d3:f0:8d:d2:cb:85:0e:ed:61:d7:af:6e:
81:41:8a:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGHfyCTkypXoYY9ZCrEYXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkM2ViYmE5ZmEyY2FkMjg2YWM5MTI3NjU3NTc0NWY2MTVl
OGZhNzEwHhcNMjUxMTA0MDkwMDE3WhcNMjUxMTA1MDkwMDE3WjAzMTEwLwYDVQQD
EyhlZmJkNmQ1OTUxOGNjOGRiNGVmNTU5YmM5ZGUwNmEzMTg2MjMyZWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt157jXIqVQXupRdz2oQO2kKCHLVu
of8KmDbhrNr/L0oc9cYgToCp4fCyfKG8t2cBzsU9C2XaFIRDmvW5a+BvLs8m5jha
Ik1RWh5RMXNwXvPkZgzR/wOS62s/70IFWhQ9WjsepF12RA569xNg9jSxzpKK+HO9
8owtysZums26+/PYImmfiC+8Yhbc9sAxMgIXSEHHOSnvBKbSiax2ELgdUNwE95hC
lkNATX56r24VntB57ALvqNokA/lBcLDfLDXylHla1Ymj49Pvf7+wOyKn2bC4fkjM
ZEyWHWt+pIV7pF+EZS73BttPE70RgsRKzcnRjY1ImYqV4bsRpyB/gi4dcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+9bVlRjMjbTvVZvJ3gajGGIy7vMB8GA1UdIwQY
MBaAFJ0+u6n6LK0oaskSdldXRfYV6PpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblQ2N3Fmb3NyU2hxeVJKMlYxZEY5aFhvLW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85ZmY5YzctZDMyOS00NWE2LTg5OGEt
OWQ5NTlhYmNlNTI2LzEvblQ2N3Fmb3NyU2hxeVJKMlYxZEY5aFhvLW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi85ZmY5YzctZDMyOS00NWE2LTg5OGEtOWQ5NTlhYmNlNTI2
LzEvblQ2N3Fmb3NyU2hxeVJKMlYxZEY5aFhvLW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzcPOzE2
TaUhhT3en8/TSEDRbc/gdN+rdVu1vpxArtxJlQo0bMWwwJM6Onn6ipbiufOUfsGV
wHKmm9j4MzNEJG/+W3vOvh0VixlWHcw/gPZ/5qS1eZFWiH7i9Uzk+c6nSPU9Vsmn
Y25M7XGV65E6GLmqt7GuekzZ9jv9S0oNzKQKzdkv3fDvIlaDMbNCMk01ezo1Raa1
69RG6RW+vCm3nAbJSsFCps7Wf1sx7ZS4twGyjZQ62MZVfLyjVYcdH/lqEJBVOqgx
DrJ2GQOBETeOF4z62v7eQ3Dm3z+h8RFfwGMP3LIvA69WuOJLv7excd3z0/CN0suF
Du1h169ugUGKoQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:54 2025 by rpki-client