Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
File: nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft (raw, json)
Hash identifier: 6r2ue2WtbA7Rq1vxAdEcfnwM++fT9NBjuiiChxYtv4U=
Subject key identifier: E6:2D:0B:76:3E:6C:4C:35:62:48:22:41:44:00:26:14:A5:35:97:E6
Authority key identifier: 9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
Certificate issuer: /CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
Certificate serial: 019A4FD00916E159331BA260A68E8B315F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
Manifest number: 0ECF
Signing time: Tue 04 Nov 2025 17:00:25 +0000
Manifest this update: Tue 04 Nov 2025 17:00:25 +0000
Manifest next update: Wed 05 Nov 2025 17:00:25 +0000
Files and hashes: 1: SJakYTj9pb3r41qOMQrQf_YPYbc.roa (hash: tab9yW3GhAbdQLvfn40C4/W+qyYm4f+BamJUC4exFC4=)
2: nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl (hash: QBxDG3bvmUBuLVKtnNSsnFh+wv/1etmYiX7Wx7JzC8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:09:16:e1:59:33:1b:a2:60:a6:8e:8b:31:5f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
Validity
Not Before: Nov 4 17:00:25 2025 GMT
Not After : Nov 5 17:00:25 2025 GMT
Subject: CN=e62d0b763e6c4c356248224144002614a53597e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:7b:dc:98:0c:8f:c9:d5:74:65:64:2b:d7:
7e:eb:cb:4f:c9:d3:2a:3b:63:40:0f:b1:fd:51:d9:
88:de:13:59:8c:26:22:c0:95:34:a7:a9:33:2d:de:
ec:0c:96:ac:66:ba:c8:0f:cc:03:f9:b4:e3:7f:46:
bf:13:9e:c3:8b:df:37:62:2e:b3:9e:62:cf:57:73:
ee:36:70:58:bd:2b:31:2c:ba:90:3c:64:b4:b4:78:
ff:00:fc:82:aa:7d:bf:5f:4c:e8:a2:2c:a0:7d:e2:
26:1b:bc:ce:de:ff:08:1c:a9:71:b1:20:14:2d:5e:
5f:18:39:08:35:3c:86:46:30:ad:b5:87:37:26:ec:
8e:6a:da:57:35:a2:db:9c:95:9f:7d:a0:39:0e:6d:
d0:bc:5a:b3:f3:49:cf:cf:14:49:ad:bb:59:12:c9:
c3:14:74:ba:cc:c0:eb:6f:e2:15:1d:48:fd:48:28:
30:50:b6:c7:7d:8d:78:4c:b1:2b:8f:69:d1:94:ae:
76:d5:be:72:9a:51:49:a7:90:43:98:f4:11:40:96:
ba:56:13:6d:b5:28:19:ea:ec:e5:41:0e:3b:9e:12:
99:6f:d4:2d:03:aa:be:35:c7:c8:4e:31:96:ec:72:
a2:19:b5:e4:8d:d3:5f:35:15:53:c2:69:ad:e6:7c:
96:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2D:0B:76:3E:6C:4C:35:62:48:22:41:44:00:26:14:A5:35:97:E6
X509v3 Authority Key Identifier:
keyid:9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:84:e9:82:c2:66:55:18:39:4a:63:50:fb:46:b8:e1:52:cc:
a7:18:86:b6:d0:0a:31:dd:c5:2c:08:06:88:81:46:1d:f0:8c:
cd:f6:0a:94:a6:c4:58:5d:f6:8d:ce:4d:8e:f8:8f:85:02:4d:
66:31:a2:bb:ea:d6:05:4f:aa:04:dd:58:a4:7f:79:45:b3:77:
60:16:f6:92:3e:3a:d2:5e:ba:df:c9:e5:2f:b9:47:60:4b:cb:
d6:14:e6:3c:1a:50:94:d4:6b:63:be:8a:6f:90:be:d1:49:eb:
cd:04:03:e1:6b:37:ed:48:7e:72:45:59:f4:13:5d:7a:66:f7:
e9:6a:a9:29:73:63:f6:ee:2c:c7:9d:59:85:68:71:49:14:91:
c2:41:a8:e3:d4:74:9b:70:10:1f:44:08:47:93:45:8e:7c:4b:
1c:a1:ee:75:27:3d:da:35:3f:07:09:d3:eb:1b:c7:f9:7a:5a:
c0:a7:75:2c:cf:66:9a:55:b6:c4:d1:b4:f8:a6:6f:00:8e:4b:
19:ae:be:6f:0f:39:81:4b:66:5c:3e:f8:ac:a7:e4:d4:ed:36:
07:8a:fd:71:00:93:5f:47:6e:bb:2f:ea:84:73:2e:af:cb:be:
8c:22:fa:05:69:b5:95:32:ee:e8:b8:8b:e3:cb:e6:1d:d6:ae:
3f:68:b9:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0AkW4VkzG6Jgpo6LMV9jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljN2ZhOWVhZjM4NTZjYTRlNzUwNDE0MTRlNTFkODYwMTgw
YzkyNmYwHhcNMjUxMTA0MTcwMDI1WhcNMjUxMTA1MTcwMDI1WjAzMTEwLwYDVQQD
EyhlNjJkMGI3NjNlNmM0YzM1NjI0ODIyNDE0NDAwMjYxNGE1MzU5N2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI173JgMj8nVdGVkK9d+68tPydMq
O2NAD7H9UdmI3hNZjCYiwJU0p6kzLd7sDJasZrrID8wD+bTjf0a/E57Di983Yi6z
nmLPV3PuNnBYvSsxLLqQPGS0tHj/APyCqn2/X0zooiygfeImG7zO3v8IHKlxsSAU
LV5fGDkINTyGRjCttYc3JuyOatpXNaLbnJWffaA5Dm3QvFqz80nPzxRJrbtZEsnD
FHS6zMDrb+IVHUj9SCgwULbHfY14TLErj2nRlK521b5ymlFJp5BDmPQRQJa6VhNt
tSgZ6uzlQQ47nhKZb9QtA6q+NcfITjGW7HKiGbXkjdNfNRVTwmmt5nyW1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYtC3Y+bEw1YkgiQUQAJhSlNZfmMB8GA1UdIwQY
MBaAFJx/qerzhWyk51BBQU5R2GAYDJJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkgtcDZ2T0ZiS1RuVUVGQlRsSFlZQmdNa204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83ZmJjYzYtNjRmZC00ODc0LWFiNDkt
ODI1YjQ3YzE1NDMwLzEvbkgtcDZ2T0ZiS1RuVUVGQlRsSFlZQmdNa204Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83ZmJjYzYtNjRmZC00ODc0LWFiNDktODI1YjQ3YzE1NDMw
LzEvbkgtcDZ2T0ZiS1RuVUVGQlRsSFlZQmdNa204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYTpgsJm
VRg5SmNQ+0a44VLMpxiGttAKMd3FLAgGiIFGHfCMzfYKlKbEWF32jc5NjviPhQJN
ZjGiu+rWBU+qBN1YpH95RbN3YBb2kj460l6638nlL7lHYEvL1hTmPBpQlNRrY76K
b5C+0UnrzQQD4Ws37Uh+ckVZ9BNdemb36WqpKXNj9u4sx51ZhWhxSRSRwkGo49R0
m3AQH0QIR5NFjnxLHKHudSc92jU/BwnT6xvH+XpawKd1LM9mmlW2xNG0+KZvAI5L
Ga6+bw85gUtmXD74rKfk1O02B4r9cQCTX0duuy/qhHMur8u+jCL6BWm1lTLu6LiL
48vmHdauP2i5DQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:49 2025 by rpki-client