Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
File: m-NDwvs9a40jeJq02m_NRlppBYM.mft (raw, json)
Hash identifier: PakPCFP3RSwPjnZvgi4G3+EqRr3A8GrpODN1LH42eiA=
Subject key identifier: CE:40:46:8F:AA:99:A0:8D:DA:3A:58:53:09:16:A6:37:F4:88:BC:54
Authority key identifier: 9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83
Certificate issuer: /CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583
Certificate serial: 019A4E18B94DDE75784F9BC940ECEF5DA8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
Manifest number: 0AF7
Signing time: Tue 04 Nov 2025 09:00:34 +0000
Manifest this update: Tue 04 Nov 2025 09:00:34 +0000
Manifest next update: Wed 05 Nov 2025 09:00:34 +0000
Files and hashes: 1: V1rYVkHJ4iIIHNg29wauYpELwcg.roa (hash: 7R1pOTL7gS5y/fLoZFKL53bP7clTOjblHiZzRpiMJxQ=)
2: m-NDwvs9a40jeJq02m_NRlppBYM.crl (hash: /ePtMI19W3zXN1kADPYdtw6SMOeFMtFc5XKDD79VzIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b9:4d:de:75:78:4f:9b:c9:40:ec:ef:5d:a8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583
Validity
Not Before: Nov 4 09:00:34 2025 GMT
Not After : Nov 5 09:00:34 2025 GMT
Subject: CN=ce40468faa99a08dda3a58530916a637f488bc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:83:c5:57:a9:36:bd:43:09:b2:ec:97:8a:45:
65:c3:97:70:84:51:da:35:85:74:26:05:62:2b:78:
8d:1a:27:04:fd:00:23:71:a2:5d:a6:bc:18:c2:35:
e0:a9:23:90:13:bd:a2:2d:ac:ee:d9:2e:b7:64:d7:
51:8c:51:74:c3:e2:16:24:98:f1:6f:a7:d6:5e:89:
82:9e:37:98:4e:9e:ba:d2:a2:02:67:0a:f1:27:ff:
14:ba:2a:ac:22:3c:2a:69:ba:ac:6d:f2:91:65:c0:
84:51:24:89:81:6c:08:ac:ce:28:13:be:b2:4f:c2:
9b:77:7b:53:23:fc:0b:f3:ab:57:77:ce:8b:63:ee:
ad:b9:99:87:d7:7a:68:21:2e:d6:26:5c:24:ad:36:
09:9a:20:93:bc:a4:8d:af:ec:8c:c1:5b:5f:81:8b:
67:c8:75:7f:5d:58:04:a2:21:39:15:87:4d:3f:69:
de:c8:77:bd:26:6c:11:1d:ea:0c:b3:c8:89:76:ef:
51:d5:a8:ca:58:17:0c:74:75:0f:5e:5a:90:64:18:
76:f2:dc:5d:8e:fd:43:6e:71:64:d6:fc:b2:09:05:
2f:31:8b:28:ed:6f:55:be:96:d7:37:71:50:b0:99:
f5:4f:b5:aa:55:47:88:c9:73:89:2f:16:f3:cc:10:
46:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:40:46:8F:AA:99:A0:8D:DA:3A:58:53:09:16:A6:37:F4:88:BC:54
X509v3 Authority Key Identifier:
keyid:9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:60:04:2d:41:ca:af:46:bf:5b:b0:6d:e5:71:96:7a:58:72:
26:8b:26:8a:f6:a3:96:54:c0:1c:6e:0e:40:17:9d:ec:86:41:
b7:82:31:53:b7:17:79:aa:f9:f9:ca:ae:2e:e8:97:91:24:0b:
b4:69:af:32:4c:6d:0b:de:8e:9f:72:53:dd:e2:70:59:c8:ba:
cc:a2:3b:53:a4:0c:57:f0:ad:c2:9d:20:e7:d4:d1:c7:e8:4b:
9d:98:fe:fd:d3:6b:2e:89:ba:fb:b8:73:cf:97:53:0b:a2:e7:
4e:f6:6e:e2:61:a1:68:c9:f1:3a:f1:fe:69:6f:a3:dc:49:4a:
6c:08:3a:41:c3:a1:1e:3f:f4:1a:1e:1a:57:b2:73:8f:03:19:
8d:ab:a5:00:8c:6e:f6:cf:89:14:26:75:46:c7:63:03:83:8b:
82:a8:4d:40:32:c0:3f:22:08:37:f4:56:18:aa:9c:e9:2a:d1:
0f:0e:e5:1b:05:52:a1:99:02:3a:cd:d3:5c:ca:1f:c8:f2:f4:
e6:bb:6f:dc:cf:6a:09:79:4a:58:d9:04:a9:6c:49:c2:21:cb:
e1:c8:18:8e:99:ca:fe:7d:68:e3:6e:11:42:7c:c7:22:18:75:
c6:35:3c:c3:31:7a:9c:89:c8:ed:13:5d:c5:f6:0b:6f:83:f6:
42:a4:8d:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGLlN3nV4T5vJQOzvXajYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZTM0M2MyZmIzZDZiOGQyMzc4OWFiNGRhNmZjZDQ2NWE2
OTA1ODMwHhcNMjUxMTA0MDkwMDM0WhcNMjUxMTA1MDkwMDM0WjAzMTEwLwYDVQQD
EyhjZTQwNDY4ZmFhOTlhMDhkZGEzYTU4NTMwOTE2YTYzN2Y0ODhiYzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24PFV6k2vUMJsuyXikVlw5dwhFHa
NYV0JgViK3iNGicE/QAjcaJdprwYwjXgqSOQE72iLazu2S63ZNdRjFF0w+IWJJjx
b6fWXomCnjeYTp660qICZwrxJ/8UuiqsIjwqabqsbfKRZcCEUSSJgWwIrM4oE76y
T8Kbd3tTI/wL86tXd86LY+6tuZmH13poIS7WJlwkrTYJmiCTvKSNr+yMwVtfgYtn
yHV/XVgEoiE5FYdNP2neyHe9JmwRHeoMs8iJdu9R1ajKWBcMdHUPXlqQZBh28txd
jv1DbnFk1vyyCQUvMYso7W9VvpbXN3FQsJn1T7WqVUeIyXOJLxbzzBBG6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5ARo+qmaCN2jpYUwkWpjf0iLxUMB8GA1UdIwQY
MBaAFJvjQ8L7PWuNI3iatNpvzUZaaQWDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS1ORHd2czlhNDBqZUpxMDJtX05SbHBwQllNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOWJkOTMtOTJiZC00YmY5LWI2NTUt
YWRjZWZkYWExMDI4LzEvbS1ORHd2czlhNDBqZUpxMDJtX05SbHBwQllNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hOWJkOTMtOTJiZC00YmY5LWI2NTUtYWRjZWZkYWExMDI4
LzEvbS1ORHd2czlhNDBqZUpxMDJtX05SbHBwQllNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmAELUHK
r0a/W7Bt5XGWelhyJosmivajllTAHG4OQBed7IZBt4IxU7cXear5+cquLuiXkSQL
tGmvMkxtC96On3JT3eJwWci6zKI7U6QMV/Ctwp0g59TRx+hLnZj+/dNrLom6+7hz
z5dTC6LnTvZu4mGhaMnxOvH+aW+j3ElKbAg6QcOhHj/0Gh4aV7JzjwMZjaulAIxu
9s+JFCZ1RsdjA4OLgqhNQDLAPyIIN/RWGKqc6SrRDw7lGwVSoZkCOs3TXMofyPL0
5rtv3M9qCXlKWNkEqWxJwiHL4cgYjpnK/n1o424RQnzHIhh1xjU8wzF6nInI7RNd
xfYLb4P2QqSNxw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:54 2025 by rpki-client