Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: ULCs1i2ighzj2hBNJ9w9awVyGBpHhkjnEs8LRBiWOpw=
Subject key identifier: 5A:16:A5:B1:61:B4:B6:45:8A:A7:DA:46:50:08:68:01:20:21:C0:7F
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 019A53E3F8AB31FB61971D2DDDDD7ADC26BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 0332
Signing time: Wed 05 Nov 2025 12:00:40 +0000
Manifest this update: Wed 05 Nov 2025 12:00:40 +0000
Manifest next update: Thu 06 Nov 2025 12:00:40 +0000
Files and hashes: 1: BqZIe6gQs5PVIE84eQo2_DOFBSU.roa (hash: U/7+ugA60UPkZBbdU298MJ3Zk+Vay3cife8TG24P130=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: 6asnYA6kzZrZ3dTz8hFL3WlgAa92cEz7HhkjIWCO8EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:f8:ab:31:fb:61:97:1d:2d:dd:dd:7a:dc:26:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: Nov 5 12:00:40 2025 GMT
Not After : Nov 6 12:00:40 2025 GMT
Subject: CN=5a16a5b161b4b6458aa7da46500868012021c07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:33:38:de:fc:11:fb:e3:e9:37:09:f1:a5:ed:
8f:bd:ed:6c:92:5b:33:d4:cc:ac:3e:4e:94:12:66:
d4:cf:7a:70:f7:83:67:fa:b2:20:0a:59:16:78:74:
49:bf:d2:4e:1a:08:1b:ab:03:2e:e3:11:ea:d0:59:
ce:f2:2c:8e:62:d6:64:14:49:f0:43:61:4b:15:1b:
d3:92:8e:dc:23:84:28:83:74:9e:12:8a:42:e7:3c:
99:ae:e2:12:18:16:3b:fb:be:61:cc:85:36:bd:9c:
fb:89:c5:6e:ba:dc:39:6a:7a:aa:0a:51:f9:17:ad:
2d:f9:2d:1a:3e:fa:39:12:7c:2d:90:04:f3:ac:b7:
1b:e8:11:28:cd:6e:3f:18:1d:81:1c:e4:53:e4:c7:
21:88:d3:be:bf:b8:a1:83:a9:3f:ed:d0:77:40:98:
8a:aa:80:aa:8e:31:5d:6c:23:ac:40:4d:b9:f4:ff:
92:aa:e8:cb:4a:02:83:a5:13:5b:7c:7d:d7:a3:b6:
09:41:09:e2:3b:39:87:77:2c:f6:bb:61:28:ff:1d:
c4:41:ec:f8:82:2e:76:35:de:e0:93:db:1e:c3:4e:
36:bb:6d:bd:1f:a8:bf:0b:1c:2c:16:55:55:b6:a4:
46:80:d5:32:c3:a0:c1:e8:90:08:a6:29:95:b2:b5:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:16:A5:B1:61:B4:B6:45:8A:A7:DA:46:50:08:68:01:20:21:C0:7F
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fa:e1:10:10:c2:bb:ca:bc:61:c9:92:2f:7f:02:db:4b:97:
f5:f3:7b:6d:95:62:a4:44:fe:d2:29:a0:dc:c0:62:64:a0:bc:
c7:e8:a4:94:25:85:d7:91:31:60:aa:d7:0b:f3:fa:37:79:4c:
37:27:b7:80:1c:c2:27:e6:08:08:a6:06:5b:3f:9b:fb:d0:1b:
58:0c:6a:94:71:00:07:f8:76:09:6b:f7:dd:c0:65:a5:4d:fb:
88:41:bb:22:a7:5e:d3:e6:0e:07:fc:c0:ba:89:c3:85:89:85:
15:b2:ba:34:ce:b4:23:c3:c9:02:f2:c4:d0:7b:aa:b6:a1:f3:
a5:24:6c:4e:82:87:a8:b1:fc:23:b4:d9:60:86:74:fc:79:3d:
c0:c2:54:e3:a6:46:fd:82:16:75:2c:24:55:0b:36:6e:e8:49:
d2:a7:dd:af:df:bb:e8:af:0b:8f:da:b6:ba:58:1f:26:ee:48:
23:5c:07:34:e8:8e:3b:5e:51:86:9b:cb:53:29:ca:b0:29:2f:
ff:78:47:43:1f:be:63:ef:e0:0f:b2:5f:b3:68:de:bf:a3:7d:
cc:fb:30:6b:b8:49:fb:ff:49:c9:72:0c:63:12:b3:9a:2e:5b:
c2:b0:14:f2:40:45:24:ca:04:47:dc:27:e2:e0:d2:94:4d:9f:
94:77:70:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpT4/irMfthlx0t3d163Ca9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYzVjMzVkOTg2ODZmM2Q4YTM4NzQxNzFiMTQzMjg3ZjVl
M2U3MzMwHhcNMjUxMTA1MTIwMDQwWhcNMjUxMTA2MTIwMDQwWjAzMTEwLwYDVQQD
Eyg1YTE2YTViMTYxYjRiNjQ1OGFhN2RhNDY1MDA4NjgwMTIwMjFjMDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTM43vwR++PpNwnxpe2Pve1sklsz
1MysPk6UEmbUz3pw94Nn+rIgClkWeHRJv9JOGggbqwMu4xHq0FnO8iyOYtZkFEnw
Q2FLFRvTko7cI4Qog3SeEopC5zyZruISGBY7+75hzIU2vZz7icVuutw5anqqClH5
F60t+S0aPvo5EnwtkATzrLcb6BEozW4/GB2BHORT5MchiNO+v7ihg6k/7dB3QJiK
qoCqjjFdbCOsQE259P+SqujLSgKDpRNbfH3Xo7YJQQniOzmHdyz2u2Eo/x3EQez4
gi52Nd7gk9sew042u229H6i/CxwsFlVVtqRGgNUyw6DB6JAIpimVsrUzXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoWpbFhtLZFiqfaRlAIaAEgIcB/MB8GA1UdIwQY
MBaAFJzFw12YaG89ijh0FxsUMof14+czMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEt
ZTg3NTEwM2ZhZjEyLzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEtZTg3NTEwM2ZhZjEy
LzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPrhEBDC
u8q8YcmSL38C20uX9fN7bZVipET+0img3MBiZKC8x+iklCWF15ExYKrXC/P6N3lM
Nye3gBzCJ+YICKYGWz+b+9AbWAxqlHEAB/h2CWv33cBlpU37iEG7Iqde0+YOB/zA
uonDhYmFFbK6NM60I8PJAvLE0HuqtqHzpSRsToKHqLH8I7TZYIZ0/Hk9wMJU46ZG
/YIWdSwkVQs2buhJ0qfdr9+76K8Lj9q2ulgfJu5II1wHNOiOO15RhpvLUynKsCkv
/3hHQx++Y+/gD7Jfs2jev6N9zPswa7hJ+/9JyXIMYxKzmi5bwrAU8kBFJMoER9wn
4uDSlE2flHdwNQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:47:36 2025 by rpki-client