Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
File: CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json)
Hash identifier: Zvm0z8s1wniiESpRZTpAphQ0zqMisuWiTwo1QquA8ns=
Subject key identifier: 79:7C:0D:B2:E9:A2:6E:12:76:84:4B:9A:94:AD:8F:EB:69:C9:96:9D
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 019A4D07A21A24C57081B1E542440AD9CF35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
Manifest number: 16A9
Signing time: Tue 04 Nov 2025 04:02:17 +0000
Manifest this update: Tue 04 Nov 2025 04:02:17 +0000
Manifest next update: Wed 05 Nov 2025 04:02:17 +0000
Files and hashes: 1: 7YGMzeES1KkLAsbbmtI6ZjvO9Q4.roa (hash: l1BU7g4Ila9ufWlHn68dydGGRXENxO9riUoJiMBfymw=)
2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: LeuUjrPTFz4kN4cZKYQfGuu/BiCXuh+H5zRrlr/qisY=)
3: UJ4AA8lthTvUaOv8y96F5tCFgzY.roa (hash: tgN2dNaoq5w5rynmNpRaU4NnYl8mkFWnYFqCjapx3rI=)
4: nRz9AftCLig4OmS0E1eBTIrPa5M.roa (hash: ea2h97J02X030CkXXWTZE1BGZvnjhrqY95EK1+tYFdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:a2:1a:24:c5:70:81:b1:e5:42:44:0a:d9:cf:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: Nov 4 04:02:17 2025 GMT
Not After : Nov 5 04:02:17 2025 GMT
Subject: CN=797c0db2e9a26e1276844b9a94ad8feb69c9969d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:09:2c:64:3b:1e:2d:b7:ae:68:34:56:34:aa:
15:ab:83:44:7a:b4:83:eb:a2:c6:54:9d:c2:5f:f7:
c2:d9:a7:78:de:b8:bb:ea:4a:0d:33:34:66:a0:fb:
ec:c8:7d:c3:45:a7:25:f6:bf:ba:29:13:89:43:98:
34:f2:64:07:9c:67:76:ad:31:36:79:aa:ef:a7:f2:
3c:1f:56:31:c7:b9:1a:f3:10:a4:1f:40:99:1a:24:
0e:9e:d9:38:bf:1f:1c:0a:a0:1e:c6:ab:8d:45:c9:
34:ed:1b:9b:09:69:ae:1b:f6:de:cd:62:34:75:41:
e6:48:b0:aa:7a:74:cd:fc:85:64:c2:61:92:4b:ba:
f8:f6:c3:a5:28:03:16:36:51:22:e6:82:a7:b7:47:
2a:72:3a:e6:ed:c4:4b:a3:ab:20:a4:1e:31:fd:07:
e9:b7:83:43:99:9f:c3:0e:bc:0b:80:55:d2:58:31:
25:58:70:9f:a7:5f:10:8c:87:36:bb:86:17:00:38:
50:95:2b:40:2b:0e:55:76:d9:bf:19:02:4e:ae:b3:
3b:28:16:00:a5:ab:e2:7b:46:c6:72:da:cf:e7:b2:
04:13:34:89:b0:ea:cd:3c:24:75:5b:5b:70:60:48:
a2:7b:35:29:ba:1b:25:34:a3:68:fa:23:8a:5c:51:
55:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7C:0D:B2:E9:A2:6E:12:76:84:4B:9A:94:AD:8F:EB:69:C9:96:9D
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:32:30:be:e8:23:00:2d:2e:0d:3d:1c:dd:f8:31:d0:55:c2:
df:bc:59:45:bd:35:b6:84:bf:52:60:25:5e:5c:34:08:de:62:
b3:d7:82:49:a3:51:4f:7d:bb:a0:4f:b1:ba:e8:0b:5a:3c:68:
52:9c:24:97:42:38:95:7e:f2:3d:49:6c:a9:ea:23:8e:73:9d:
38:3d:fd:e2:9b:a5:76:67:e3:16:45:de:11:c2:01:50:28:2c:
aa:3c:f2:fc:ab:87:c8:54:33:b7:80:b4:7d:11:52:90:aa:f5:
24:20:ec:9f:94:83:f2:28:56:f6:9d:6b:17:c0:a0:36:a4:03:
4c:56:1b:27:7d:cc:99:07:f0:fd:b5:87:0f:e9:e0:a2:bb:0a:
bb:08:1d:92:3e:b7:d5:f1:fe:34:cf:2b:19:9a:3e:cc:1a:fe:
ab:73:26:02:6a:70:ca:e8:d3:01:3f:4f:01:44:46:25:4e:61:
0d:aa:f1:ab:56:ca:2d:73:3d:f3:93:9c:87:76:b6:c7:a8:b2:
43:5e:0f:2b:7b:36:73:5d:35:14:eb:28:b8:ae:69:15:c0:52:
1b:24:11:78:0e:17:b0:77:0e:4e:75:3c:78:c9:d4:4b:18:ae:
af:57:e7:e1:69:48:1b:2b:97:6e:26:06:7b:77:45:92:de:a5:
1d:6f:60:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNB6IaJMVwgbHlQkQK2c81MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYjM2NjY4ODkzYTgyNDRkNTUzZWZjYTQ2ODhkMGYxMDE5
ZTRlMjUwHhcNMjUxMTA0MDQwMjE3WhcNMjUxMTA1MDQwMjE3WjAzMTEwLwYDVQQD
Eyg3OTdjMGRiMmU5YTI2ZTEyNzY4NDRiOWE5NGFkOGZlYjY5Yzk5NjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QksZDseLbeuaDRWNKoVq4NEerSD
66LGVJ3CX/fC2ad43ri76koNMzRmoPvsyH3DRacl9r+6KROJQ5g08mQHnGd2rTE2
earvp/I8H1Yxx7ka8xCkH0CZGiQOntk4vx8cCqAexquNRck07RubCWmuG/bezWI0
dUHmSLCqenTN/IVkwmGSS7r49sOlKAMWNlEi5oKnt0cqcjrm7cRLo6sgpB4x/Qfp
t4NDmZ/DDrwLgFXSWDElWHCfp18QjIc2u4YXADhQlStAKw5Vdtm/GQJOrrM7KBYA
pavie0bGctrP57IEEzSJsOrNPCR1W1twYEiiezUpuhslNKNo+iOKXFFV4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHl8DbLpom4SdoRLmpStj+tpyZadMB8GA1UdIwQY
MBaAFAqzZmiJOoJE1VPvykaI0PEBnk4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTkt
MmFmMDY3YTEzMGFhLzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTktMmFmMDY3YTEzMGFh
LzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjIwvugj
AC0uDT0c3fgx0FXC37xZRb01toS/UmAlXlw0CN5is9eCSaNRT327oE+xuugLWjxo
Upwkl0I4lX7yPUlsqeojjnOdOD394puldmfjFkXeEcIBUCgsqjzy/KuHyFQzt4C0
fRFSkKr1JCDsn5SD8ihW9p1rF8CgNqQDTFYbJ33MmQfw/bWHD+ngorsKuwgdkj63
1fH+NM8rGZo+zBr+q3MmAmpwyujTAT9PAURGJU5hDarxq1bKLXM985Och3a2x6iy
Q14PK3s2c101FOsouK5pFcBSGyQReA4XsHcOTnU8eMnUSxiur1fn4WlIGyuXbiYG
e3dFkt6lHW9glg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:56 2025 by rpki-client