Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
File: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft (raw, json)
Hash identifier: 7SEOChaHJ47XyjCto3v5hR8JekWFX5sFUitHx+pnHCE=
Subject key identifier: 3E:3E:B9:F0:22:17:73:7C:04:9F:CD:E2:7C:6F:04:39:79:91:5E:01
Authority key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
Certificate issuer: /CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Certificate serial: 019A53762A354437BCF76490652C7290D75C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 10:00:44 +0000
Manifest this update: Wed 05 Nov 2025 10:00:44 +0000
Manifest next update: Thu 06 Nov 2025 10:00:44 +0000
Files and hashes: 1: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl (hash: CDjNqfifzoFY1eX6YwD+P+OZ00/77XLEHJ+oxsmlnqk=)
2: 2LgtOWneA5YvGT4_RnemdJk10ZI.roa (hash: i3ijgdJkTo+0tXZivrTiqDYQJFUVEZ40sKvM/03kC6k=)
3: BKyeRj9qftx8WGEdxVWFVc1273A.roa (hash: nhVWVpplcnh6PS/kPe42Tn4vpV4Cv/wcOxTwDykaiQM=)
4: NyrZFNY0uejKVVI5JPC7FPtdUjc.roa (hash: F1z0p2TvKAcesacsMKTiWmQh7lfOeilS7Yll9HRgTgE=)
5: ZOG0pJ01hXVC3r9SBSUX3nP3iWU.roa (hash: M3TtUoEAKZLP5h7xNaBXjv6fTWKL5P7QGAapCue/jYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:2a:35:44:37:bc:f7:64:90:65:2c:72:90:d7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Validity
Not Before: Nov 5 10:00:44 2025 GMT
Not After : Nov 6 10:00:44 2025 GMT
Subject: CN=3e3eb9f02217737c049fcde27c6f043979915e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d4:0d:ab:cc:c4:23:07:38:4d:8a:93:c1:94:
86:a2:6e:e5:e4:fa:7b:31:39:4e:11:77:16:b9:f3:
21:df:49:ff:f5:b1:31:14:d1:74:34:d0:d2:d4:ee:
b0:b8:87:a3:4f:49:63:23:36:a5:f0:e2:a1:13:f5:
5d:9b:4a:21:88:ea:93:d1:fb:67:23:bb:72:9a:90:
2b:c2:af:ff:78:61:43:b8:4d:bf:77:e9:70:67:22:
52:f8:7a:e4:c4:50:09:df:ea:59:ed:80:b2:5e:40:
a9:b0:ab:1f:40:7f:4f:95:91:4a:3b:4c:41:18:59:
4b:fc:fe:2e:3e:f9:0e:84:02:e2:ab:d1:0b:9c:1a:
04:33:49:2e:21:c6:29:5f:79:d7:f4:82:d0:3c:54:
45:26:a9:a6:8f:ca:f7:48:55:8e:f4:28:a4:a2:ea:
9f:13:46:a3:51:0b:f1:f6:a0:3a:f3:b6:04:e0:f4:
4a:7c:a1:48:4a:f7:d6:05:45:3c:48:32:cd:b4:fe:
fb:bf:bd:f1:bc:4f:34:67:00:cc:e5:9c:68:24:dc:
cd:3a:05:ae:61:a9:af:ba:d9:c4:2c:e7:b2:25:4c:
34:6f:c9:b0:0b:aa:82:c1:a4:10:ba:42:12:eb:3a:
9d:6a:04:2f:24:33:58:f5:f3:39:41:77:72:e4:72:
28:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3E:B9:F0:22:17:73:7C:04:9F:CD:E2:7C:6F:04:39:79:91:5E:01
X509v3 Authority Key Identifier:
keyid:D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1d:87:9f:49:39:be:57:b9:02:af:05:f4:89:28:32:f2:82:
3e:c9:b9:7d:d5:cf:58:ba:43:ac:c2:0c:bc:d7:79:a9:35:2b:
77:d6:4e:da:3a:bc:61:bc:3f:f1:c1:4f:58:1a:6e:84:ad:2b:
a4:50:a5:ff:c4:4c:68:0a:ec:b0:ff:6a:d1:63:c8:12:62:09:
38:79:1d:d2:69:8e:3a:07:28:88:34:ce:24:8f:f5:93:7c:9a:
5c:3f:2b:1f:ff:21:94:7d:ca:2f:f5:47:42:7b:10:ca:e5:39:
f7:f0:67:fc:e5:15:cb:c5:c7:c2:9d:01:5e:02:55:98:35:f7:
e9:86:00:a0:39:32:ae:f9:99:f8:11:88:57:1b:d9:c1:b9:67:
95:e0:97:04:4d:cd:36:d4:4b:78:de:6a:a4:19:89:b1:59:42:
84:b4:86:51:66:8c:4b:5e:30:d8:fc:d0:15:8b:1a:68:72:bc:
93:17:bd:5a:de:cf:ef:9e:b4:96:5d:b0:14:a4:bc:42:f4:58:
3a:6c:f9:85:ad:9e:b4:41:35:d8:80:9f:60:1c:91:ff:ff:c1:
45:ef:91:4f:2f:10:9f:b6:e4:c2:ad:b8:fb:6c:6f:49:56:66:
20:d1:e6:f3:32:bc:5e:aa:3c:32:04:1e:73:a5:4d:ad:0e:51:
2c:36:31:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTdio1RDe892SQZSxykNdcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZGU2MTg4MjJiOGFmNmY5ZWNhZmZjZDdkNTQ1OWI3Y2Mx
MTQ0OWEwHhcNMjUxMTA1MTAwMDQ0WhcNMjUxMTA2MTAwMDQ0WjAzMTEwLwYDVQQD
EygzZTNlYjlmMDIyMTc3MzdjMDQ5ZmNkZTI3YzZmMDQzOTc5OTE1ZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tQNq8zEIwc4TYqTwZSGom7l5Pp7
MTlOEXcWufMh30n/9bExFNF0NNDS1O6wuIejT0ljIzal8OKhE/Vdm0ohiOqT0ftn
I7tympArwq//eGFDuE2/d+lwZyJS+HrkxFAJ3+pZ7YCyXkCpsKsfQH9PlZFKO0xB
GFlL/P4uPvkOhALiq9ELnBoEM0kuIcYpX3nX9ILQPFRFJqmmj8r3SFWO9Cikouqf
E0ajUQvx9qA687YE4PRKfKFISvfWBUU8SDLNtP77v73xvE80ZwDM5ZxoJNzNOgWu
YamvutnELOeyJUw0b8mwC6qCwaQQukIS6zqdagQvJDNY9fM5QXdy5HIocQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4+ufAiF3N8BJ/N4nxvBDl5kV4BMB8GA1UdIwQY
MBaAFNDeYYgiuK9vnsr/zX1UWbfMEUSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81YWNkNzgtZDY3MC00MTkyLWI1NjQt
MDQwZTA2NDRmYmU4LzEvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81YWNkNzgtZDY3MC00MTkyLWI1NjQtMDQwZTA2NDRmYmU4
LzEvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnR2Hn0k5
vle5Aq8F9IkoMvKCPsm5fdXPWLpDrMIMvNd5qTUrd9ZO2jq8Ybw/8cFPWBpuhK0r
pFCl/8RMaArssP9q0WPIEmIJOHkd0mmOOgcoiDTOJI/1k3yaXD8rH/8hlH3KL/VH
QnsQyuU59/Bn/OUVy8XHwp0BXgJVmDX36YYAoDkyrvmZ+BGIVxvZwblnleCXBE3N
NtRLeN5qpBmJsVlChLSGUWaMS14w2PzQFYsaaHK8kxe9Wt7P7560ll2wFKS8QvRY
Omz5ha2etEE12ICfYByR///BRe+RTy8Qn7bkwq24+2xvSVZmINHm8zK8Xqo8MgQe
c6VNrQ5RLDYxog==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:32:25 2025 by rpki-client