Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
File: nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft (raw, json)
Hash identifier: ZK2vNR1qJYMbKvT5nhIlh+2oko1HXdaRQr0cfu9tBgM=
Subject key identifier: CE:8E:83:91:F1:CC:75:13:AA:6B:DC:C0:7E:DE:33:D4:FC:2D:43:F1
Authority key identifier: 9D:0E:2B:9E:69:F5:62:DF:14:CF:77:2B:DE:05:F7:DA:CD:E2:59:61
Certificate issuer: /CN=9d0e2b9e69f562df14cf772bde05f7dacde25961
Certificate serial: 0199FD341A66265B4E0BC85EF77AE8E0AEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
Manifest number: 0DB5
Signing time: Sun 19 Oct 2025 16:01:14 +0000
Manifest this update: Sun 19 Oct 2025 16:01:14 +0000
Manifest next update: Mon 20 Oct 2025 16:01:14 +0000
Files and hashes: 1: aRmXLbWgvqCrB_ieixDwg5bWHH4.roa (hash: NkuU0nUuwUULqqtGwJsRiK14f6VjdQm0HvAAtBo3GJQ=)
2: nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl (hash: rWOQwJBid18r2cojPaTTcmLUwa4E4iQ/Hdm/awCMOlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:1a:66:26:5b:4e:0b:c8:5e:f7:7a:e8:e0:ae:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e2b9e69f562df14cf772bde05f7dacde25961
Validity
Not Before: Oct 19 16:01:14 2025 GMT
Not After : Oct 20 16:01:14 2025 GMT
Subject: CN=ce8e8391f1cc7513aa6bdcc07ede33d4fc2d43f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:29:c0:db:de:a0:e0:ae:a1:18:dc:77:c2:
e3:65:c8:84:3b:34:36:a4:fb:7e:58:94:5a:d5:e7:
36:dd:78:e6:3d:6d:16:84:9a:fb:3b:09:ef:f9:1c:
bb:bf:f6:b0:af:66:f4:53:e6:c4:3e:27:bf:eb:49:
6b:4f:a6:76:25:d8:2e:3b:b5:f4:35:11:ed:eb:59:
e7:4f:9a:58:6b:22:b0:d9:84:19:ea:c1:c1:2c:0d:
d9:08:2f:16:c2:f0:4b:3f:f5:2a:33:36:03:c9:0f:
4e:53:bb:3b:ab:58:ea:d7:cc:19:4d:fc:96:9f:70:
8f:ad:40:e5:b8:6c:cb:37:10:59:50:b1:63:f9:ed:
45:db:42:26:ca:35:13:ed:8c:d8:b5:57:b8:4f:3b:
2a:95:15:9b:d1:e3:9f:b5:c4:a8:cc:44:54:0a:79:
8b:ea:1c:f3:d4:6e:61:84:63:71:48:f8:23:91:a9:
17:0f:76:a7:53:6e:5b:8d:55:ab:f4:14:c9:9b:cc:
e6:f1:eb:f2:2c:a1:86:50:86:a5:9e:f5:7f:27:96:
03:41:fe:79:1a:d3:57:4a:ef:09:d9:a9:04:d4:f6:
3e:9b:88:e6:b2:ed:f7:77:2d:6b:ee:74:39:a3:e4:
55:6c:04:86:ed:01:b7:a2:4b:1e:6b:99:b1:a6:9e:
9e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8E:83:91:F1:CC:75:13:AA:6B:DC:C0:7E:DE:33:D4:FC:2D:43:F1
X509v3 Authority Key Identifier:
keyid:9D:0E:2B:9E:69:F5:62:DF:14:CF:77:2B:DE:05:F7:DA:CD:E2:59:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:da:e4:ce:06:d1:b6:3f:e1:5f:d5:e8:09:49:fa:e0:80:88:
75:8a:44:b1:2a:22:ac:c1:d4:ba:04:91:19:b0:7b:88:e1:d3:
ab:58:75:e6:ec:76:e1:2e:ce:81:33:15:c7:9a:66:66:67:f0:
85:d4:63:e1:41:88:3e:3c:eb:e8:9b:83:83:86:f1:73:ef:a2:
d7:72:80:af:a0:64:60:c8:06:5c:a6:d2:4b:f9:48:ea:13:d8:
c2:19:7c:56:ee:a0:d7:f6:82:dc:3c:b7:1a:8c:dd:32:44:3b:
dd:0b:be:95:49:7d:3c:3d:04:81:62:0c:c0:12:af:59:62:89:
2a:81:69:15:1c:c3:ce:9e:8b:16:71:41:3e:a2:c6:81:aa:8d:
23:f7:89:88:e4:8b:f4:3c:53:e9:fd:6a:4d:79:36:f7:68:51:
15:b8:ea:e3:8b:1e:a8:be:f6:89:22:7e:11:2e:70:f6:d1:6e:
3c:61:1c:79:b8:af:02:ae:52:50:83:de:d0:03:ba:f4:c4:03:
26:b9:3f:ae:c0:59:b2:1c:6a:9e:51:43:6b:76:61:58:52:45:
bc:8c:6c:67:ee:ab:07:2b:8a:1c:dc:1f:7f:1d:41:df:ac:62:
19:17:c9:5c:a4:eb:da:e3:a6:1a:16:b6:98:d1:53:2c:a6:a0:
71:d2:f7:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NBpmJltOC8he93ro4K6mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMGUyYjllNjlmNTYyZGYxNGNmNzcyYmRlMDVmN2RhY2Rl
MjU5NjEwHhcNMjUxMDE5MTYwMTE0WhcNMjUxMDIwMTYwMTE0WjAzMTEwLwYDVQQD
EyhjZThlODM5MWYxY2M3NTEzYWE2YmRjYzA3ZWRlMzNkNGZjMmQ0M2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxUpwNveoOCuoRjcd8LjZciEOzQ2
pPt+WJRa1ec23XjmPW0WhJr7Ownv+Ry7v/awr2b0U+bEPie/60lrT6Z2JdguO7X0
NRHt61nnT5pYayKw2YQZ6sHBLA3ZCC8WwvBLP/UqMzYDyQ9OU7s7q1jq18wZTfyW
n3CPrUDluGzLNxBZULFj+e1F20ImyjUT7YzYtVe4TzsqlRWb0eOftcSozERUCnmL
6hzz1G5hhGNxSPgjkakXD3anU25bjVWr9BTJm8zm8evyLKGGUIalnvV/J5YDQf55
GtNXSu8J2akE1PY+m4jmsu33dy1r7nQ5o+RVbASG7QG3oksea5mxpp6eKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6Og5HxzHUTqmvcwH7eM9T8LUPxMB8GA1UdIwQY
MBaAFJ0OK55p9WLfFM93K94F99rN4llhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblE0cm5tbjFZdDhVejNjcjNnWDMyczNpV1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yNWJlMmYtOTJlYi00Y2RlLWEyNDct
ZDhkYzM0MDM2Y2U3LzEvblE0cm5tbjFZdDhVejNjcjNnWDMyczNpV1dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8yNWJlMmYtOTJlYi00Y2RlLWEyNDctZDhkYzM0MDM2Y2U3
LzEvblE0cm5tbjFZdDhVejNjcjNnWDMyczNpV1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAotrkzgbR
tj/hX9XoCUn64ICIdYpEsSoirMHUugSRGbB7iOHTq1h15ux24S7OgTMVx5pmZmfw
hdRj4UGIPjzr6JuDg4bxc++i13KAr6BkYMgGXKbSS/lI6hPYwhl8Vu6g1/aC3Dy3
GozdMkQ73Qu+lUl9PD0EgWIMwBKvWWKJKoFpFRzDzp6LFnFBPqLGgaqNI/eJiOSL
9DxT6f1qTXk292hRFbjq44seqL72iSJ+ES5w9tFuPGEcebivAq5SUIPe0AO69MQD
Jrk/rsBZshxqnlFDa3ZhWFJFvIxsZ+6rByuKHNwffx1B36xiGRfJXKTr2uOmGha2
mNFTLKagcdL3Yw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:38 2025 by rpki-client