Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
File: NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft (raw, json)
Hash identifier: vH51F/kEYKINdCMK00AhQILwC/jM4aZvZJR0rTgeW4k=
Subject key identifier: 60:EE:70:22:EC:2F:10:98:49:CF:59:0E:1E:63:21:BB:E6:50:0E:5B
Authority key identifier: 34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D
Certificate issuer: /CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d
Certificate serial: 019A54C0CF6B7C6F923BD5C7292863EEE327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
Manifest number: 025E
Signing time: Wed 05 Nov 2025 16:01:53 +0000
Manifest this update: Wed 05 Nov 2025 16:01:53 +0000
Manifest next update: Thu 06 Nov 2025 16:01:53 +0000
Files and hashes: 1: NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl (hash: WCYC/WrG0E6qYAf7bdEg3jWsBroLTTY1Y5P2wgyvy5M=)
2: NkwYBQBRVrFsj-xUN7Cv_m6lwSA.roa (hash: gjr66sRTq1kait53s7UP3QklI69yHhHqmsXxB/qlKCc=)
3: V4v-VxZ-7OAHRrY5C50VFKZqDnc.roa (hash: 6nRk9oygeeOeb7rjfRo1H5M200eI6zr7Rlb7ujC3GZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:cf:6b:7c:6f:92:3b:d5:c7:29:28:63:ee:e3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d
Validity
Not Before: Nov 5 16:01:53 2025 GMT
Not After : Nov 6 16:01:53 2025 GMT
Subject: CN=60ee7022ec2f109849cf590e1e6321bbe6500e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:2b:ba:ee:c3:55:5b:ef:7b:93:eb:58:1c:
bb:e0:69:ae:1d:34:e1:2d:0d:bc:fe:2f:c2:db:41:
bb:ef:87:6f:fa:5d:9a:7e:eb:07:f8:b0:54:9c:2a:
b1:c4:76:40:fb:0d:29:67:f4:a6:8f:20:bd:9f:7e:
56:ef:ee:17:65:26:8c:98:e0:13:ed:15:a5:96:2b:
f0:19:66:72:13:00:5d:eb:26:9a:05:95:47:e9:6c:
fa:13:63:a8:84:8c:0d:de:71:97:0b:02:8d:70:1c:
2c:bb:32:a6:6d:a8:fc:f0:61:82:b5:b8:aa:43:0c:
4a:ba:ef:a6:d6:d7:5e:69:40:f1:ab:62:9d:c2:d4:
fe:32:3d:5b:c2:f1:e3:a6:e7:0e:e7:16:0b:59:a1:
8d:81:1a:e9:03:ee:57:40:59:6a:06:35:90:28:9e:
09:e7:c2:a4:6a:eb:05:de:e8:a8:b8:c2:28:0d:a2:
f2:3c:45:4a:45:ed:63:85:7c:76:9f:d2:c2:48:26:
50:c1:33:70:1d:a4:2a:6f:6a:5b:94:d6:eb:9c:fd:
46:fc:42:8e:95:1f:1a:6c:69:ad:9b:de:88:be:63:
ee:1c:66:b2:a1:f7:a3:6a:94:73:bd:99:c4:93:ee:
bb:83:0d:86:11:60:f8:f4:84:74:94:f8:61:0f:32:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EE:70:22:EC:2F:10:98:49:CF:59:0E:1E:63:21:BB:E6:50:0E:5B
X509v3 Authority Key Identifier:
keyid:34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f4:c2:c7:c6:97:83:36:b8:c7:c5:fc:d8:4e:54:53:9c:d4:
bb:37:51:d3:8d:d5:e2:53:5d:fd:e1:05:d6:ae:76:19:f9:cc:
b7:46:29:36:55:4f:17:7a:39:fc:b2:7d:f5:52:1e:a7:78:5b:
c2:cc:8a:34:8c:cd:92:88:31:32:f7:f3:8e:b9:70:a0:7a:a1:
4a:2e:5f:fc:ef:a9:7b:5f:4b:70:25:87:c3:1b:72:2b:05:04:
e7:d3:0c:28:c0:9b:4b:a2:95:62:ad:20:66:9d:f8:1c:af:08:
09:2e:f4:5b:a6:77:bc:0f:2a:a1:44:95:7c:29:c6:11:1f:a8:
f2:01:41:e2:02:06:5b:21:b1:36:ea:20:f8:86:44:8f:68:a7:
be:d0:34:cc:c6:8b:41:25:2b:92:9a:dc:f5:1c:f2:cf:9e:8d:
bc:37:7b:70:23:f1:01:50:d0:3e:41:c0:7a:38:6b:e9:18:c9:
f5:3b:3e:94:a0:cd:b0:c6:fb:64:14:4a:69:51:07:4c:32:b7:
de:1f:04:8e:6d:d1:09:2b:2a:61:b4:08:ca:34:2c:ad:70:bc:
61:78:1a:78:af:19:92:be:96:11:cc:46:3f:3a:d7:99:f8:1d:
b9:d3:6c:2b:2e:99:6d:75:ad:bd:75:71:a6:2f:f0:c0:5c:d7:
7c:94:9a:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUwM9rfG+SO9XHKShj7uMnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZGQ0MDI2ZDI5MGYzMjAxZDI4ZWY2ODRkM2M1YWMxM2M5
NmVjNmQwHhcNMjUxMTA1MTYwMTUzWhcNMjUxMTA2MTYwMTUzWjAzMTEwLwYDVQQD
Eyg2MGVlNzAyMmVjMmYxMDk4NDljZjU5MGUxZTYzMjFiYmU2NTAwZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8Aruu7DVVvve5PrWBy74GmuHTTh
LQ28/i/C20G774dv+l2afusH+LBUnCqxxHZA+w0pZ/SmjyC9n35W7+4XZSaMmOAT
7RWllivwGWZyEwBd6yaaBZVH6Wz6E2OohIwN3nGXCwKNcBwsuzKmbaj88GGCtbiq
QwxKuu+m1tdeaUDxq2KdwtT+Mj1bwvHjpucO5xYLWaGNgRrpA+5XQFlqBjWQKJ4J
58KkausF3uiouMIoDaLyPEVKRe1jhXx2n9LCSCZQwTNwHaQqb2pblNbrnP1G/EKO
lR8abGmtm96IvmPuHGayofejapRzvZnEk+67gw2GEWD49IR0lPhhDzINmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDucCLsLxCYSc9ZDh5jIbvmUA5bMB8GA1UdIwQY
MBaAFDTdQCbSkPMgHSjvaE08WsE8luxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk4xQUp0S1E4eUFkS085b1RUeGF3VHlXN0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MmE0MDUtMTU5OC00MDMzLThlMmIt
ODc4NTA3ZWQ0NmY3LzEvTk4xQUp0S1E4eUFkS085b1RUeGF3VHlXN0cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy83MmE0MDUtMTU5OC00MDMzLThlMmItODc4NTA3ZWQ0NmY3
LzEvTk4xQUp0S1E4eUFkS085b1RUeGF3VHlXN0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPTCx8aX
gza4x8X82E5UU5zUuzdR043V4lNd/eEF1q52GfnMt0YpNlVPF3o5/LJ99VIep3hb
wsyKNIzNkogxMvfzjrlwoHqhSi5f/O+pe19LcCWHwxtyKwUE59MMKMCbS6KVYq0g
Zp34HK8ICS70W6Z3vA8qoUSVfCnGER+o8gFB4gIGWyGxNuog+IZEj2invtA0zMaL
QSUrkprc9Rzyz56NvDd7cCPxAVDQPkHAejhr6RjJ9Ts+lKDNsMb7ZBRKaVEHTDK3
3h8Ejm3RCSsqYbQIyjQsrXC8YXgaeK8Zkr6WEcxGPzrXmfgdudNsKy6ZbXWtvXVx
pi/wwFzXfJSaKQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:35:58 2025 by rpki-client