Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
File: n4535zgxPmVwaE3RUsLihDMrLFs.mft (raw, json)
Hash identifier: gxjNcNR+Ow8xp70mi72gWcRC2ZktGsjno4ram2uqToA=
Subject key identifier: 6B:9D:51:62:92:7B:13:A0:F2:FA:F1:56:03:EC:CE:C9:6B:D8:52:B7
Authority key identifier: 9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
Certificate issuer: /CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Certificate serial: 0199FCC660C3FB7139B24A36445A19F59EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
Manifest number: 0F8F
Signing time: Sun 19 Oct 2025 14:01:23 +0000
Manifest this update: Sun 19 Oct 2025 14:01:23 +0000
Manifest next update: Mon 20 Oct 2025 14:01:23 +0000
Files and hashes: 1: C5MhC96HxaJKMKNS_jY_WLtyOQI.roa (hash: ESPNEcm8ABrBz0nfnXDJUwVTxpctLOm0CbjyoAr2waU=)
2: n4535zgxPmVwaE3RUsLihDMrLFs.crl (hash: 74lQwjDKvsLij5ZRCjK0Skd5sj+4UFrV2mMw5M/zjtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:60:c3:fb:71:39:b2:4a:36:44:5a:19:f5:9e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Validity
Not Before: Oct 19 14:01:23 2025 GMT
Not After : Oct 20 14:01:23 2025 GMT
Subject: CN=6b9d5162927b13a0f2faf15603eccec96bd852b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:99:05:58:06:55:a4:fb:ad:91:39:30:fe:
89:11:ff:c2:f8:d0:9e:70:22:74:9a:4a:f5:8f:cb:
d9:74:90:96:4e:41:c1:0b:51:4f:8a:77:07:ad:10:
7d:17:fe:67:a7:0e:fd:5e:c1:bd:ec:8d:79:6a:d3:
3d:38:64:a7:ab:da:e6:55:b4:11:8a:f0:b9:18:d3:
7e:9b:3c:a4:1c:af:1d:be:10:fc:b3:97:53:c1:7c:
11:ee:e8:16:5e:0c:36:18:9d:05:59:f5:06:b2:ca:
2e:1f:b7:7c:e3:66:37:0b:fd:4d:f0:e8:fe:f6:f4:
45:cc:be:0c:f0:17:32:e0:ec:55:9a:ee:9b:5a:76:
97:6e:e7:88:7a:3c:13:c9:41:4d:73:fb:bf:b8:a7:
f5:97:94:0b:f0:56:c3:c6:11:8b:ad:5e:98:37:de:
ac:eb:f0:42:d6:00:e6:b0:a9:9b:90:3d:a0:6d:90:
e1:07:13:81:19:ff:0f:e0:ab:ae:9e:b7:51:16:31:
f9:85:8c:95:27:b8:da:cd:ef:40:57:0d:9d:66:91:
fb:b4:13:96:8d:4d:7e:be:a7:ae:71:c2:bc:cf:4f:
42:0d:a1:d5:5d:6a:a7:6b:8f:79:8a:dd:a2:8c:55:
da:90:df:cb:9c:87:5c:e7:0d:92:06:7b:1a:bc:ae:
5c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9D:51:62:92:7B:13:A0:F2:FA:F1:56:03:EC:CE:C9:6B:D8:52:B7
X509v3 Authority Key Identifier:
keyid:9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6f:e0:0d:76:e8:cc:be:b0:fc:4d:98:20:cb:9d:ed:57:7a:
65:3f:49:cb:ec:4d:27:87:24:1f:b9:cf:88:4b:c0:0a:b6:2d:
e9:ea:b0:1a:85:48:27:6b:0e:6f:98:6f:6a:52:ef:bc:af:0b:
68:fe:fa:86:4b:14:87:2a:35:ad:d6:36:57:a5:70:44:c9:21:
49:dd:b6:77:a1:a9:d3:53:e1:06:7b:a9:4c:c7:0b:7b:1d:66:
fd:4a:e7:f7:59:01:26:37:f8:86:72:b1:a4:3c:d2:69:03:6e:
07:29:b2:c8:fb:7b:62:ab:3a:7d:5c:7f:69:d2:bf:04:59:63:
0f:ba:64:23:75:f5:59:8f:33:3d:83:36:3f:36:80:b4:7e:82:
da:80:24:44:9c:42:7f:a8:d5:43:59:11:c4:86:72:a2:10:71:
90:89:42:49:55:2e:c6:84:e7:72:58:9c:1e:16:72:c1:cb:a2:
17:41:b9:4c:43:0b:f3:60:86:04:04:eb:da:56:80:59:4d:69:
eb:05:3e:fb:5e:12:23:4e:25:19:1a:64:cd:8b:f3:b1:68:7f:
e4:b5:2b:c6:54:7f:a2:13:0f:ad:6c:a7:c2:b5:8c:aa:d6:dc:
ea:fa:21:98:c8:63:53:7d:52:d3:c3:3e:69:07:b5:aa:de:fe:
58:e2:d8:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xmDD+3E5sko2RFoZ9Z65MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmOGU3N2U3MzgzMTNlNjU3MDY4NGRkMTUyYzJlMjg0MzMy
YjJjNWIwHhcNMjUxMDE5MTQwMTIzWhcNMjUxMDIwMTQwMTIzWjAzMTEwLwYDVQQD
Eyg2YjlkNTE2MjkyN2IxM2EwZjJmYWYxNTYwM2VjY2VjOTZiZDg1MmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMGZBVgGVaT7rZE5MP6JEf/C+NCe
cCJ0mkr1j8vZdJCWTkHBC1FPincHrRB9F/5npw79XsG97I15atM9OGSnq9rmVbQR
ivC5GNN+mzykHK8dvhD8s5dTwXwR7ugWXgw2GJ0FWfUGssouH7d842Y3C/1N8Oj+
9vRFzL4M8Bcy4OxVmu6bWnaXbueIejwTyUFNc/u/uKf1l5QL8FbDxhGLrV6YN96s
6/BC1gDmsKmbkD2gbZDhBxOBGf8P4KuunrdRFjH5hYyVJ7jaze9AVw2dZpH7tBOW
jU1+vqeuccK8z09CDaHVXWqna495it2ijFXakN/LnIdc5w2SBnsavK5cRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGudUWKSexOg8vrxVgPszslr2FK3MB8GA1UdIwQY
MBaAFJ+Od+c4MT5lcGhN0VLC4oQzKyxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjQ1MzV6Z3hQbVZ3YUUzUlVzTGloRE1yTEZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yMDVjMTktYjczYS00OGZlLWEwODYt
MzU2YzA5MzgwODg3LzEvbjQ1MzV6Z3hQbVZ3YUUzUlVzTGloRE1yTEZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yMDVjMTktYjczYS00OGZlLWEwODYtMzU2YzA5MzgwODg3
LzEvbjQ1MzV6Z3hQbVZ3YUUzUlVzTGloRE1yTEZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYm/gDXbo
zL6w/E2YIMud7Vd6ZT9Jy+xNJ4ckH7nPiEvACrYt6eqwGoVIJ2sOb5hvalLvvK8L
aP76hksUhyo1rdY2V6VwRMkhSd22d6Gp01PhBnupTMcLex1m/Urn91kBJjf4hnKx
pDzSaQNuBymyyPt7Yqs6fVx/adK/BFljD7pkI3X1WY8zPYM2PzaAtH6C2oAkRJxC
f6jVQ1kRxIZyohBxkIlCSVUuxoTnclicHhZywcuiF0G5TEML82CGBATr2laAWU1p
6wU++14SI04lGRpkzYvzsWh/5LUrxlR/ohMPrWynwrWMqtbc6vohmMhjU31S08M+
aQe1qt7+WOLYyQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:52 2025 by rpki-client