Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier: F9zLAVN0CfjGjtT8x7BIErvUVee4VbNikI4Vzmyhhjg=
Subject key identifier: 09:EC:AE:1E:37:62:03:AD:79:D9:F7:F0:9B:17:51:5E:C4:FD:2E:73
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 019A51876DFC3CD40899CE0696A9C26DA892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number: 0BBB
Signing time: Wed 05 Nov 2025 01:00:21 +0000
Manifest this update: Wed 05 Nov 2025 01:00:21 +0000
Manifest next update: Thu 06 Nov 2025 01:00:21 +0000
Files and hashes: 1: 43HN-WojVqeLOGbjlvU4KmuDcw8.roa (hash: lA6GODL3wPZINRy3RkLrOMCh7lQspm9tGiMrGo/nCbk=)
2: CatpJtFda_C5L7VOLYcMS7IQGMg.roa (hash: idVH/OL7AqXzhoz+Z8IbgG5ci5Pbk+MePCPcgx0hXD0=)
3: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: g7hbL1RDTOmDGitIH2ZGZPxRbXSydKm24pHeTyS4zZ0=)
4: NmLjr4D1oVlMUObOTvLM1xAzd4w.roa (hash: 2JPcfWuMTpLj1ICDWdYsPKsfferPa3mavJOhWQcLuVU=)
5: Qv4r9KoCM0llZGGIu0ESO7fsTrk.roa (hash: 2dbd9G4ssUUV7QjZ8jn5D3p3tWBPiALD7SCeLQ3ju+s=)
6: pAzvrIoWwcHpcNO5iNiHfwLiAJA.roa (hash: DLnt9qWRp3EI4stZNmwt/HobGa97g3RTR8iRLREX4YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:6d:fc:3c:d4:08:99:ce:06:96:a9:c2:6d:a8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Nov 5 01:00:21 2025 GMT
Not After : Nov 6 01:00:21 2025 GMT
Subject: CN=09ecae1e376203ad79d9f7f09b17515ec4fd2e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d0:a5:9a:3d:26:ca:9b:90:2a:79:33:e3:fe:
0e:33:a5:07:92:7d:55:fd:35:6f:34:9e:1a:e8:d3:
02:f4:1c:b8:25:6f:5c:2b:32:76:de:08:db:cb:ec:
05:7e:73:1a:0d:ac:3a:a8:20:01:41:c4:05:af:0d:
9f:7e:9c:6f:eb:10:62:8a:06:41:cb:8c:94:94:17:
c4:a1:36:7d:c4:82:44:4c:d8:b4:ce:b0:6c:02:97:
c1:9e:1d:94:7e:47:5d:86:97:7f:9d:f9:c1:f0:76:
14:07:3a:6b:d9:db:d4:e5:7e:1d:54:91:20:26:2f:
eb:c1:12:9c:f8:9a:aa:9b:a6:31:b2:4c:b6:9d:93:
ae:66:b3:50:dd:9c:48:54:5c:9f:d7:d2:c8:50:4d:
63:50:4b:55:64:4d:a0:a6:30:7d:3e:08:c5:36:96:
25:98:20:1a:dc:4a:86:2a:82:32:44:e9:77:3b:54:
61:d1:71:6f:25:4e:16:b2:0a:6d:cf:65:e6:f1:5a:
50:77:a5:d6:9d:a7:db:66:32:2d:c6:4c:76:8a:35:
d3:d6:de:31:74:ab:0a:5d:09:87:c9:50:25:fe:01:
10:0e:40:84:86:f5:8b:fd:2d:8e:46:0a:53:7b:97:
39:e5:53:e3:43:e3:60:8f:02:fa:e3:f2:4d:8e:13:
ce:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EC:AE:1E:37:62:03:AD:79:D9:F7:F0:9B:17:51:5E:C4:FD:2E:73
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:de:a9:c5:08:7c:65:f8:a9:fb:88:fe:29:bc:d7:4a:41:30:
4b:d1:3b:fd:be:fc:a4:22:fa:66:d2:93:1b:05:6e:a3:72:ee:
80:f3:f3:69:d3:ae:11:f2:1d:6c:6a:30:01:a6:d1:43:de:81:
08:5a:38:c6:d2:cc:3c:aa:17:98:4e:96:bd:69:6b:bb:7d:ef:
bb:be:a8:1c:62:e5:e2:67:cb:05:bc:34:be:35:3c:9a:89:3f:
b5:07:02:ba:4c:69:4e:9b:0c:c5:c1:20:d8:aa:91:01:40:64:
02:ea:af:c8:f1:60:57:db:49:b9:2a:0e:bd:43:0e:43:64:7e:
75:d5:f1:dc:21:3b:2d:8c:ea:0c:64:39:6e:70:f0:52:57:db:
00:ec:de:59:86:34:5f:84:64:ae:79:55:4b:85:5d:c3:b3:75:
7b:4b:31:e3:92:e6:c2:69:45:39:49:12:45:79:02:8d:73:85:
d2:cd:98:c2:a3:22:06:db:e0:46:f1:ae:b3:fc:de:b7:38:ef:
73:65:8a:d3:66:65:93:80:a2:b7:bb:76:cf:1e:e5:98:c7:dc:
bd:ee:38:bf:c3:ed:87:c7:33:04:54:41:34:c4:f8:55:3b:e4:
d6:c9:11:04:cd:9b:16:fc:49:2a:4e:5b:b5:6e:08:af:08:95:
8c:ba:3f:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh238PNQImc4GlqnCbaiSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjJmYzJmOGFkOGIwMDgzNTdkYmU2ZjAxOTU5NjBjOWRl
NjFiZDUwHhcNMjUxMTA1MDEwMDIxWhcNMjUxMTA2MDEwMDIxWjAzMTEwLwYDVQQD
EygwOWVjYWUxZTM3NjIwM2FkNzlkOWY3ZjA5YjE3NTE1ZWM0ZmQyZTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldClmj0mypuQKnkz4/4OM6UHkn1V
/TVvNJ4a6NMC9By4JW9cKzJ23gjby+wFfnMaDaw6qCABQcQFrw2ffpxv6xBiigZB
y4yUlBfEoTZ9xIJETNi0zrBsApfBnh2Ufkddhpd/nfnB8HYUBzpr2dvU5X4dVJEg
Ji/rwRKc+Jqqm6Yxsky2nZOuZrNQ3ZxIVFyf19LIUE1jUEtVZE2gpjB9PgjFNpYl
mCAa3EqGKoIyROl3O1Rh0XFvJU4Wsgptz2Xm8VpQd6XWnafbZjItxkx2ijXT1t4x
dKsKXQmHyVAl/gEQDkCEhvWL/S2ORgpTe5c55VPjQ+NgjwL64/JNjhPOiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnsrh43YgOtedn38JsXUV7E/S5zMB8GA1UdIwQY
MBaAFDYi/C+K2LAINX2+bwGVlgyd5hvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmIt
MDg4MzVkZmY2YzRmLzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmItMDg4MzVkZmY2YzRm
LzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkt6pxQh8
Zfip+4j+KbzXSkEwS9E7/b78pCL6ZtKTGwVuo3LugPPzadOuEfIdbGowAabRQ96B
CFo4xtLMPKoXmE6WvWlru33vu76oHGLl4mfLBbw0vjU8mok/tQcCukxpTpsMxcEg
2KqRAUBkAuqvyPFgV9tJuSoOvUMOQ2R+ddXx3CE7LYzqDGQ5bnDwUlfbAOzeWYY0
X4RkrnlVS4Vdw7N1e0sx45LmwmlFOUkSRXkCjXOF0s2YwqMiBtvgRvGus/zetzjv
c2WK02Zlk4Cit7t2zx7lmMfcve44v8Pth8czBFRBNMT4VTvk1skRBM2bFvxJKk5b
tW4IrwiVjLo/CQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:33:58 2025 by rpki-client