Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
File: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft (raw, json)
Hash identifier: FPE79VBXrqcejcdwwUUjYaFgjplkbSeCCvM650Z2HU4=
Subject key identifier: 87:51:84:84:35:D8:D0:C3:5F:89:D2:F4:C5:4D:EF:69:D8:3F:2B:2D
Authority key identifier: 9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
Certificate issuer: /CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Certificate serial: 0199FB0EED2477BB8BEEA15E32100F6FDEE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
Manifest number: 064A
Signing time: Sun 19 Oct 2025 06:01:23 +0000
Manifest this update: Sun 19 Oct 2025 06:01:23 +0000
Manifest next update: Mon 20 Oct 2025 06:01:23 +0000
Files and hashes: 1: FKRN7VX-M9zNuJ0Xi5mXAJ-i93Y.roa (hash: tPWo9Bc4jubOwnfbiLhbqZLh4bX+yga6cCmXXhQ2NPA=)
2: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl (hash: HuKD+u9yqi/XTKACEovhEj1nq5UE63deq0mFhx4Mu2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:ed:24:77:bb:8b:ee:a1:5e:32:10:0f:6f:de:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Validity
Not Before: Oct 19 06:01:23 2025 GMT
Not After : Oct 20 06:01:23 2025 GMT
Subject: CN=8751848435d8d0c35f89d2f4c54def69d83f2b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:f8:54:fd:42:49:a0:8c:94:b2:de:cf:4b:
80:42:ea:eb:c3:c7:59:ca:e7:2c:c3:5f:71:be:0a:
bc:f2:72:d9:27:0e:29:e7:75:6f:1c:6a:bf:d9:0e:
2a:f9:de:5b:be:72:fe:bc:c1:45:34:2b:ce:b8:25:
92:66:5d:e8:eb:73:47:8f:f7:9e:9a:e5:98:ba:1e:
ab:33:81:09:48:cb:97:70:73:99:d6:fb:28:9f:12:
4d:1b:ca:f7:bf:49:16:27:f4:dc:6c:20:94:ce:97:
3b:04:93:a1:bb:26:07:a2:e0:b8:c3:bb:42:b5:30:
a1:ae:77:69:31:0b:21:11:5c:53:32:b8:8b:d5:2e:
57:99:b7:22:b6:47:44:b0:d7:22:82:46:c3:84:d6:
1f:83:5d:76:e9:33:cb:00:30:10:81:b1:b8:3d:df:
9d:d8:06:4f:ff:87:22:f1:1f:b2:38:ba:30:d5:3c:
02:f9:26:a7:c0:8e:68:9a:50:5b:b9:82:3c:1c:c1:
dd:4d:97:19:1e:ca:37:b7:09:58:85:7e:7e:f7:fd:
ca:e6:4e:49:5f:07:fa:54:26:43:45:de:bf:97:7a:
3f:06:78:6e:e9:0e:c9:9f:2b:09:34:cf:d7:79:06:
30:50:20:61:4f:35:e5:5c:ac:3f:b1:fc:ab:23:80:
6c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:51:84:84:35:D8:D0:C3:5F:89:D2:F4:C5:4D:EF:69:D8:3F:2B:2D
X509v3 Authority Key Identifier:
keyid:9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6b:40:a6:8a:76:cb:4d:b0:4c:da:a4:af:d5:7a:f2:59:ad:
67:3a:a0:8f:5c:95:d8:8f:64:f3:ba:96:12:c3:f7:89:52:f5:
76:8d:91:5a:e9:db:aa:52:c6:9d:36:62:4a:b6:25:19:21:63:
ba:ba:ca:80:6c:61:c2:3f:1d:9e:f8:5b:83:16:05:87:59:34:
3b:25:9c:f9:4c:cf:21:8b:14:61:9b:94:c6:82:24:1b:ba:33:
13:4e:d6:fd:03:e4:a2:f8:7b:10:44:02:8c:e2:48:f8:57:c3:
e8:6b:29:86:4d:f6:38:5c:ac:0f:09:d7:5d:6b:07:5b:0e:f2:
55:11:ef:5e:ca:99:67:be:e2:82:10:ed:42:28:92:de:a7:d4:
f3:96:5f:0e:12:49:d0:c8:57:22:d6:ba:ba:09:cd:1f:1a:1f:
80:10:e3:51:c2:27:8f:c8:5f:e5:08:0d:c4:23:62:bf:b9:bc:
fb:b9:f7:78:53:5c:2a:28:1c:1c:a3:ea:b2:4e:c5:8d:c2:5e:
0c:70:79:11:8f:ba:47:7a:fc:77:3b:91:ba:dd:6d:74:0b:93:
1c:14:35:c6:7c:26:a8:3a:c5:0d:1f:a6:79:d1:d4:ea:92:1c:
c2:d5:34:98:2a:b8:c1:2c:8c:1a:ea:2d:88:56:30:7f:e9:46:
28:c7:6e:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Du0kd7uL7qFeMhAPb97jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmOTc0ZGE0NWQ1OTE0ZWRlMTM4MWVlYWY5YzJiYjE2NDVi
NjY0M2EwHhcNMjUxMDE5MDYwMTIzWhcNMjUxMDIwMDYwMTIzWjAzMTEwLwYDVQQD
Eyg4NzUxODQ4NDM1ZDhkMGMzNWY4OWQyZjRjNTRkZWY2OWQ4M2YyYjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraf4VP1CSaCMlLLez0uAQurrw8dZ
yucsw19xvgq88nLZJw4p53VvHGq/2Q4q+d5bvnL+vMFFNCvOuCWSZl3o63NHj/ee
muWYuh6rM4EJSMuXcHOZ1vsonxJNG8r3v0kWJ/TcbCCUzpc7BJOhuyYHouC4w7tC
tTChrndpMQshEVxTMriL1S5XmbcitkdEsNcigkbDhNYfg1126TPLADAQgbG4Pd+d
2AZP/4ci8R+yOLow1TwC+SanwI5omlBbuYI8HMHdTZcZHso3twlYhX5+9/3K5k5J
Xwf6VCZDRd6/l3o/Bnhu6Q7JnysJNM/XeQYwUCBhTzXlXKw/sfyrI4BsJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdRhIQ12NDDX4nS9MVN72nYPystMB8GA1UdIwQY
MBaAFJ+XTaRdWRTt4Tge6vnCuxZFtmQ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjVkTnBGMVpGTzNoT0I3cS1jSzdGa1cyWkRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81MWVhNDktNzEyOC00NmUwLTgzOGQt
N2Q1ZWNiNGYxODFmLzEvbjVkTnBGMVpGTzNoT0I3cS1jSzdGa1cyWkRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81MWVhNDktNzEyOC00NmUwLTgzOGQtN2Q1ZWNiNGYxODFm
LzEvbjVkTnBGMVpGTzNoT0I3cS1jSzdGa1cyWkRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2tApop2
y02wTNqkr9V68lmtZzqgj1yV2I9k87qWEsP3iVL1do2RWunbqlLGnTZiSrYlGSFj
urrKgGxhwj8dnvhbgxYFh1k0OyWc+UzPIYsUYZuUxoIkG7ozE07W/QPkovh7EEQC
jOJI+FfD6Gsphk32OFysDwnXXWsHWw7yVRHvXsqZZ77ighDtQiiS3qfU85ZfDhJJ
0MhXIta6ugnNHxofgBDjUcInj8hf5QgNxCNiv7m8+7n3eFNcKigcHKPqsk7FjcJe
DHB5EY+6R3r8dzuRut1tdAuTHBQ1xnwmqDrFDR+medHU6pIcwtU0mCq4wSyMGuot
iFYwf+lGKMduxg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:25 2025 by rpki-client