Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
File: n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json)
Hash identifier: m2BD7QEbvw1bzaXkc1pSALMwFkYAE22eNgyg9H94/bM=
Subject key identifier: 03:A0:62:FB:0D:92:D6:35:9C:7B:2B:9F:BE:6D:16:4E:BD:F0:60:9A
Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
Certificate issuer: /CN=9fb41d252f120acb140d0fc84334152114b6c826
Certificate serial: 019A52D27C4000E0F7A884444EC9F31447E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
Manifest number: 0237
Signing time: Wed 05 Nov 2025 07:01:57 +0000
Manifest this update: Wed 05 Nov 2025 07:01:57 +0000
Manifest next update: Thu 06 Nov 2025 07:01:57 +0000
Files and hashes: 1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: QxLhDg9OcWMR2gWAY6cj3gFT6z26CtO3UDhOfzGFCq4=)
2: shgH4_EQdby9FFBN3Y5GUQj4Toc.roa (hash: +F1kGaAyVQdETpR4Si2c2G3OanhyfIaqHi8fbDMWM9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:7c:40:00:e0:f7:a8:84:44:4e:c9:f3:14:47:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826
Validity
Not Before: Nov 5 07:01:57 2025 GMT
Not After : Nov 6 07:01:57 2025 GMT
Subject: CN=03a062fb0d92d6359c7b2b9fbe6d164ebdf0609a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:69:9a:6f:f5:22:f2:07:4a:35:80:28:70:e8:
cd:0a:a7:47:61:05:72:98:97:27:c7:fa:21:47:64:
9e:2b:e8:1d:8a:ae:fe:d2:35:a8:ec:b1:87:10:7c:
48:7e:44:10:11:ef:76:91:d4:f0:0b:09:cf:c5:35:
ea:b2:b7:85:8d:a2:89:21:3f:4b:16:7a:0c:8b:e2:
9a:22:f6:20:c3:6e:25:cf:7c:5b:8c:e9:5b:de:6b:
0d:f2:87:5b:d9:f7:e4:af:37:ed:7a:91:95:71:7c:
a0:8d:36:31:1a:23:c6:88:bf:0f:e2:ca:74:e7:e2:
ad:dd:5f:16:9b:21:3f:e8:e7:20:72:46:51:3c:fc:
98:6f:5a:0e:e5:e9:b9:cb:42:e1:6c:85:2b:53:4a:
dd:a6:97:87:a2:ef:10:65:f3:91:84:3c:14:ff:7e:
61:d7:8f:bb:bc:82:40:c2:05:ea:f8:3f:6b:2b:c3:
de:37:2d:26:2b:94:2e:42:cb:a8:e7:8c:02:72:90:
78:2c:e8:25:a5:17:4c:c1:f1:67:08:44:5c:0f:65:
db:85:04:a1:e1:ab:5b:42:cc:bf:7f:59:0f:a7:98:
66:9b:2a:c4:81:7b:ad:aa:eb:5d:fb:d5:1b:6c:0d:
61:b0:b1:e3:23:ec:99:56:fd:6d:3c:08:ef:75:7a:
8b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A0:62:FB:0D:92:D6:35:9C:7B:2B:9F:BE:6D:16:4E:BD:F0:60:9A
X509v3 Authority Key Identifier:
keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a1:a4:cb:e2:af:0c:77:8b:e4:e5:ea:83:a3:33:04:66:7d:
df:97:8f:62:1b:b2:aa:d7:61:cd:1b:08:48:60:b3:db:fe:85:
50:f5:65:a2:38:64:fe:64:30:41:f5:8f:12:55:23:74:1b:1c:
7b:50:34:45:02:5f:c1:dd:11:04:64:86:e6:0c:21:d8:b3:04:
f5:78:b2:db:d6:bf:fd:d2:52:6a:79:75:2d:96:cd:c6:59:a1:
ed:68:2d:91:9e:26:03:08:4f:cf:fb:56:0f:65:c0:f3:3f:49:
15:84:67:48:01:a5:4f:6d:c1:0b:ab:bd:82:67:fc:bc:af:db:
fb:4d:43:ff:c6:6f:4c:42:0f:d4:64:29:24:86:65:a5:d0:fb:
f8:67:d1:b3:71:95:5e:71:ed:40:50:52:8e:f5:c3:0b:3d:ea:
f6:79:ac:fd:20:e8:ac:5f:b6:ed:fd:00:21:4f:17:74:ae:e1:
a5:33:f8:ed:a4:11:6e:45:2f:04:f3:56:e7:51:dd:14:46:5d:
d1:00:5d:54:15:ad:cb:52:d2:73:d6:e8:4a:27:61:03:1d:4b:
be:05:2f:d5:09:7b:74:b1:39:78:d4:a5:08:db:31:89:80:2d:
64:50:ca:09:97:c7:4b:a8:9c:73:24:5b:b4:1a:19:59:3c:ed:
1c:f6:51:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0nxAAOD3qIRETsnzFEfjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYjQxZDI1MmYxMjBhY2IxNDBkMGZjODQzMzQxNTIxMTRi
NmM4MjYwHhcNMjUxMTA1MDcwMTU3WhcNMjUxMTA2MDcwMTU3WjAzMTEwLwYDVQQD
EygwM2EwNjJmYjBkOTJkNjM1OWM3YjJiOWZiZTZkMTY0ZWJkZjA2MDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52mab/Ui8gdKNYAocOjNCqdHYQVy
mJcnx/ohR2SeK+gdiq7+0jWo7LGHEHxIfkQQEe92kdTwCwnPxTXqsreFjaKJIT9L
FnoMi+KaIvYgw24lz3xbjOlb3msN8odb2ffkrzftepGVcXygjTYxGiPGiL8P4sp0
5+Kt3V8WmyE/6OcgckZRPPyYb1oO5em5y0LhbIUrU0rdppeHou8QZfORhDwU/35h
14+7vIJAwgXq+D9rK8PeNy0mK5QuQsuo54wCcpB4LOglpRdMwfFnCERcD2XbhQSh
4atbQsy/f1kPp5hmmyrEgXutqutd+9UbbA1hsLHjI+yZVv1tPAjvdXqL9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOgYvsNktY1nHsrn75tFk698GCaMB8GA1UdIwQY
MBaAFJ+0HSUvEgrLFA0PyEM0FSEUtsgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjdRZEpTOFNDc3NVRFFfSVF6UVZJUlMyeUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hMTgxMWItNjE3Zi00NjlmLWFjZGUt
NjNlMWMxMDRhOGRiLzEvbjdRZEpTOFNDc3NVRFFfSVF6UVZJUlMyeUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hMTgxMWItNjE3Zi00NjlmLWFjZGUtNjNlMWMxMDRhOGRi
LzEvbjdRZEpTOFNDc3NVRFFfSVF6UVZJUlMyeUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6Gky+Kv
DHeL5OXqg6MzBGZ935ePYhuyqtdhzRsISGCz2/6FUPVlojhk/mQwQfWPElUjdBsc
e1A0RQJfwd0RBGSG5gwh2LME9Xiy29a//dJSanl1LZbNxlmh7WgtkZ4mAwhPz/tW
D2XA8z9JFYRnSAGlT23BC6u9gmf8vK/b+01D/8ZvTEIP1GQpJIZlpdD7+GfRs3GV
XnHtQFBSjvXDCz3q9nms/SDorF+27f0AIU8XdK7hpTP47aQRbkUvBPNW51HdFEZd
0QBdVBWty1LSc9boSidhAx1LvgUv1Ql7dLE5eNSlCNsxiYAtZFDKCZfHS6iccyRb
tBoZWTztHPZRUA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:13:18 2025 by rpki-client