Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
File: nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json)
Hash identifier: ePq3kkY4aOBXsP1rPNxUVWa3NXOjyjrXsEoBmXn9HzU=
Subject key identifier: 94:4C:1D:6C:C8:6D:22:48:DF:EE:7C:DA:D2:D0:38:C8:95:FE:7A:BC
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial: 0199FBEC15A20196D8099DB92EF76CE6EE3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
Manifest number: 0A12
Signing time: Sun 19 Oct 2025 10:02:57 +0000
Manifest this update: Sun 19 Oct 2025 10:02:57 +0000
Manifest next update: Mon 20 Oct 2025 10:02:57 +0000
Files and hashes: 1: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: 1qtM0QR4rtkBujDKR0SSg8+5bUfbQX62aM+8ORzdfAc=)
2: udQIyLLEg9QQXb-UkTqLHg_TlmY.roa (hash: tqfLE5OeUFZI9sRR907kQS3AlAfPN5yiahDFaxm0yMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:15:a2:01:96:d8:09:9d:b9:2e:f7:6c:e6:ee:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
Validity
Not Before: Oct 19 10:02:57 2025 GMT
Not After : Oct 20 10:02:57 2025 GMT
Subject: CN=944c1d6cc86d2248dfee7cdad2d038c895fe7abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:d5:87:5b:85:86:a9:f7:c1:ba:91:e0:d2:
36:0d:a9:7a:62:1d:d5:ff:c7:cc:16:ca:30:87:77:
b0:00:60:ad:fd:03:92:ee:5b:a2:fe:8c:19:40:dd:
b4:85:17:9a:e8:1a:91:4b:9b:ce:12:99:4d:62:e6:
2d:0a:24:de:b6:67:b3:e9:59:7b:5b:e5:bf:10:9a:
1b:82:55:bb:69:69:b6:b6:cc:fa:77:75:71:19:60:
74:67:b4:5b:72:eb:83:ee:e4:2e:50:ed:e1:ad:f0:
f1:e5:42:d6:98:c4:1a:80:be:c1:e3:4e:86:e8:f2:
c0:44:88:0c:85:a9:6a:ab:e1:15:83:7e:2d:6c:1c:
84:59:da:49:50:30:c9:7b:d8:08:76:e9:c8:12:a2:
58:9e:d9:5b:2b:36:48:48:dd:01:8e:c8:43:07:4b:
c2:51:6a:f5:82:82:da:4e:4a:74:95:67:69:46:e2:
78:e1:66:8b:af:b3:10:ea:ca:c5:e0:95:ec:26:d8:
33:29:e0:08:4e:99:c2:51:3e:bb:2d:69:90:4f:01:
ea:84:39:c8:79:9d:14:05:b5:c5:90:a0:bf:61:f6:
79:54:55:59:a2:83:f6:b5:3b:a2:69:5a:2c:50:87:
39:f7:1c:a2:44:10:51:0b:e5:89:ac:c6:c9:df:ba:
c6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4C:1D:6C:C8:6D:22:48:DF:EE:7C:DA:D2:D0:38:C8:95:FE:7A:BC
X509v3 Authority Key Identifier:
keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:75:ba:cd:b9:d6:a4:2b:6e:db:f1:f5:b7:9c:bd:f8:ba:6b:
50:1a:b2:d9:6c:60:d5:f1:a4:60:45:9b:3e:b0:db:5a:17:fb:
77:8f:26:12:e6:71:2a:34:fe:c3:4d:a0:44:c7:83:63:7c:4d:
d3:a3:a3:c6:6a:bc:67:0c:9d:e0:4c:a4:8d:51:12:2a:9a:ec:
06:de:c8:94:96:07:fc:f2:6d:b4:ef:f4:77:dc:66:f3:f5:95:
a2:53:ea:8a:30:17:e7:62:c1:e8:42:5b:17:d8:cd:ac:2c:41:
f4:37:32:b5:9d:ce:39:6e:f4:2f:69:52:30:ee:bf:23:56:c5:
20:66:c6:dd:68:ff:ab:4f:7e:41:03:1f:41:93:bf:99:b7:57:
9e:97:df:84:ed:54:99:e6:39:4d:84:a1:03:59:b1:bc:2a:57:
24:06:95:10:39:de:02:a5:8e:d6:5e:fd:fb:4f:f4:67:f0:94:
b2:86:41:57:9e:fe:3c:a4:e1:f5:13:02:93:01:ba:9f:39:f4:
c4:22:9d:4e:99:02:1f:3a:34:71:1f:1e:56:12:94:76:3a:17:
7b:16:a9:3a:25:06:ab:08:e1:cd:bc:3d:4e:ad:03:45:e8:82:
1a:ef:22:ce:2e:90:c0:32:17:f7:57:32:8e:97:64:e7:6a:00:
ac:4c:c6:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77BWiAZbYCZ25Lvds5u48MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNjgzNGFlMzU2MzBhMDRjNzhmMjc3NjA1MjUyNjc4ZmI2
NDVjNDUwHhcNMjUxMDE5MTAwMjU3WhcNMjUxMDIwMTAwMjU3WjAzMTEwLwYDVQQD
Eyg5NDRjMWQ2Y2M4NmQyMjQ4ZGZlZTdjZGFkMmQwMzhjODk1ZmU3YWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9jVh1uFhqn3wbqR4NI2Dal6Yh3V
/8fMFsowh3ewAGCt/QOS7lui/owZQN20hRea6BqRS5vOEplNYuYtCiTetmez6Vl7
W+W/EJobglW7aWm2tsz6d3VxGWB0Z7RbcuuD7uQuUO3hrfDx5ULWmMQagL7B406G
6PLARIgMhalqq+EVg34tbByEWdpJUDDJe9gIdunIEqJYntlbKzZISN0BjshDB0vC
UWr1goLaTkp0lWdpRuJ44WaLr7MQ6srF4JXsJtgzKeAITpnCUT67LWmQTwHqhDnI
eZ0UBbXFkKC/YfZ5VFVZooP2tTuiaVosUIc59xyiRBBRC+WJrMbJ37rGCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRMHWzIbSJI3+582tLQOMiV/nq8MB8GA1UdIwQY
MBaAFJ5oNK41YwoEx48ndgUlJnj7ZFxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYjk3YzgtOTU3Ni00MjQ3LTk2ZTYt
NTI3OTg0ZmMxMTgxLzEvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zYjk3YzgtOTU3Ni00MjQ3LTk2ZTYtNTI3OTg0ZmMxMTgx
LzEvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlXW6zbnW
pCtu2/H1t5y9+LprUBqy2Wxg1fGkYEWbPrDbWhf7d48mEuZxKjT+w02gRMeDY3xN
06Ojxmq8Zwyd4EykjVESKprsBt7IlJYH/PJttO/0d9xm8/WVolPqijAX52LB6EJb
F9jNrCxB9DcytZ3OOW70L2lSMO6/I1bFIGbG3Wj/q09+QQMfQZO/mbdXnpffhO1U
meY5TYShA1mxvCpXJAaVEDneAqWO1l79+0/0Z/CUsoZBV57+PKTh9RMCkwG6nzn0
xCKdTpkCHzo0cR8eVhKUdjoXexapOiUGqwjhzbw9Tq0DReiCGu8izi6QwDIX91cy
jpdk52oArEzG3w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:51 2025 by rpki-client