Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
File: N9IJppWeI1T3POLyuUEib4MpDIw.mft (raw, json)
Hash identifier: Q+346dlhfsfg2vakKs+KGYXeOldfBQB98jKDrtYnCn4=
Subject key identifier: BC:D6:6F:8F:C5:61:D5:F9:A1:A9:5E:D8:0C:18:33:D7:0A:49:ED:3D
Authority key identifier: 37:D2:09:A6:95:9E:23:54:F7:3C:E2:F2:B9:41:22:6F:83:29:0C:8C
Certificate issuer: /CN=37d209a6959e2354f73ce2f2b941226f83290c8c
Certificate serial: 019A52D0EA2C9E4F433C88BE89A68A4436AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
Manifest number: 01C4
Signing time: Wed 05 Nov 2025 07:00:14 +0000
Manifest this update: Wed 05 Nov 2025 07:00:14 +0000
Manifest next update: Thu 06 Nov 2025 07:00:14 +0000
Files and hashes: 1: N9IJppWeI1T3POLyuUEib4MpDIw.crl (hash: qZOOqTW2vjBKvTqI9FGbLzK8IEfiIjIoeUY0xUJEwT0=)
2: p02sjha6oluTWKotOKPITJ53VlU.roa (hash: rLFuslHglQh990YEEpEUg7xz9pfaxlb0KsezlTb7ZC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d0:ea:2c:9e:4f:43:3c:88:be:89:a6:8a:44:36:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d209a6959e2354f73ce2f2b941226f83290c8c
Validity
Not Before: Nov 5 07:00:14 2025 GMT
Not After : Nov 6 07:00:14 2025 GMT
Subject: CN=bcd66f8fc561d5f9a1a95ed80c1833d70a49ed3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:9e:64:5e:d1:e4:05:1d:31:e8:d4:8e:34:
90:eb:26:77:24:4a:07:11:a8:93:b7:1f:68:ed:19:
cd:b8:ab:d4:f0:5e:f1:30:4b:7e:e9:1d:50:0d:f4:
1b:49:e2:20:70:1f:ab:69:4f:b5:df:6c:5a:09:d1:
b3:ce:26:50:26:de:3e:f6:dc:ea:24:7d:55:bc:32:
7b:db:9a:2f:37:09:2f:de:53:01:02:83:a2:35:e0:
16:a3:cf:96:e0:05:d9:06:0e:8e:b3:5a:f7:d7:37:
3d:4f:04:68:82:99:6a:96:21:62:f8:dd:04:7a:a4:
90:2e:2d:1d:47:7a:02:43:95:2b:93:bd:cd:2e:39:
f3:0e:5b:9a:2f:e9:e0:be:45:fa:e4:9a:33:7d:01:
82:f0:1a:72:b4:09:d2:f7:21:cc:51:1f:de:98:56:
14:68:f6:37:94:2d:f6:18:91:20:7c:3b:68:7b:d3:
e9:ff:6d:e4:4b:f6:63:30:a5:97:3e:1d:78:ce:3e:
e7:63:d6:78:2a:b1:6b:ec:57:46:dc:89:d3:86:42:
b4:ab:3d:d1:41:c5:ae:be:ce:18:df:93:5a:d3:ba:
77:57:e3:e8:29:60:8b:ac:52:78:36:ee:13:ff:84:
d4:dc:25:50:c1:74:e8:a3:6c:39:99:c4:35:bd:99:
08:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D6:6F:8F:C5:61:D5:F9:A1:A9:5E:D8:0C:18:33:D7:0A:49:ED:3D
X509v3 Authority Key Identifier:
keyid:37:D2:09:A6:95:9E:23:54:F7:3C:E2:F2:B9:41:22:6F:83:29:0C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3c:fa:21:aa:d5:61:2b:f0:30:d6:69:e8:19:ae:72:32:a0:
a4:4a:18:00:b1:70:56:d9:14:f7:00:50:74:46:4d:3d:c1:2e:
a9:60:1a:ba:ec:6b:61:3f:d9:b5:1f:da:a3:7e:f3:bf:28:20:
77:63:07:af:6b:00:01:0a:1b:d1:d6:e2:37:77:32:26:de:f1:
22:50:ed:c0:43:29:3e:fe:8e:91:5a:60:3c:f7:73:a6:70:cc:
61:c9:36:fe:3f:c6:b5:70:fe:6b:ec:64:0e:84:97:cb:94:af:
24:7d:51:c5:1e:ca:21:8a:5d:e5:27:0f:ff:d9:1f:8b:a3:e3:
d3:30:30:80:ba:9d:e1:d0:1e:ae:b7:22:a0:b4:dd:1f:c7:ac:
1c:42:86:00:54:ed:e8:c2:a7:c5:31:bb:32:32:75:5b:a8:ea:
e4:d6:9c:3e:05:6a:5d:91:13:cb:2b:01:24:c6:fc:18:08:ae:
8d:3b:8e:29:de:b3:38:b9:39:f0:46:14:66:d0:43:f8:57:67:
d7:fc:2f:ec:48:1c:9e:ba:44:30:84:b5:ec:43:44:78:71:0f:
28:21:60:da:61:0f:35:17:8b:54:5d:17:3a:9d:ba:f4:54:9d:
92:2d:e8:4f:66:cc:a2:ba:03:86:4b:05:24:05:ba:5d:e4:21:
ab:95:34:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0Oosnk9DPIi+iaaKRDavMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZDIwOWE2OTU5ZTIzNTRmNzNjZTJmMmI5NDEyMjZmODMy
OTBjOGMwHhcNMjUxMTA1MDcwMDE0WhcNMjUxMTA2MDcwMDE0WjAzMTEwLwYDVQQD
EyhiY2Q2NmY4ZmM1NjFkNWY5YTFhOTVlZDgwYzE4MzNkNzBhNDllZDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpaeZF7R5AUdMejUjjSQ6yZ3JEoH
EaiTtx9o7RnNuKvU8F7xMEt+6R1QDfQbSeIgcB+raU+132xaCdGzziZQJt4+9tzq
JH1VvDJ725ovNwkv3lMBAoOiNeAWo8+W4AXZBg6Os1r31zc9TwRogplqliFi+N0E
eqSQLi0dR3oCQ5Urk73NLjnzDluaL+ngvkX65JozfQGC8BpytAnS9yHMUR/emFYU
aPY3lC32GJEgfDtoe9Pp/23kS/ZjMKWXPh14zj7nY9Z4KrFr7FdG3InThkK0qz3R
QcWuvs4Y35Na07p3V+PoKWCLrFJ4Nu4T/4TU3CVQwXToo2w5mcQ1vZkInwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzWb4/FYdX5oale2AwYM9cKSe09MB8GA1UdIwQY
MBaAFDfSCaaVniNU9zzi8rlBIm+DKQyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjlJSnBwV2VJMVQzUE9MeXVVRWliNE1wREl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9iZDdkY2UtMGRkYy00MzY4LWIwNGQt
MTNmMzRiMDlhZTYxLzEvTjlJSnBwV2VJMVQzUE9MeXVVRWliNE1wREl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9iZDdkY2UtMGRkYy00MzY4LWIwNGQtMTNmMzRiMDlhZTYx
LzEvTjlJSnBwV2VJMVQzUE9MeXVVRWliNE1wREl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjz6IarV
YSvwMNZp6BmucjKgpEoYALFwVtkU9wBQdEZNPcEuqWAauuxrYT/ZtR/ao37zvygg
d2MHr2sAAQob0dbiN3cyJt7xIlDtwEMpPv6OkVpgPPdzpnDMYck2/j/GtXD+a+xk
DoSXy5SvJH1RxR7KIYpd5ScP/9kfi6Pj0zAwgLqd4dAerrcioLTdH8esHEKGAFTt
6MKnxTG7MjJ1W6jq5NacPgVqXZETyysBJMb8GAiujTuOKd6zOLk58EYUZtBD+Fdn
1/wv7EgcnrpEMIS17ENEeHEPKCFg2mEPNReLVF0XOp269FSdki3oT2bMoroDhksF
JAW6XeQhq5U0Ww==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:05:39 2025 by rpki-client