Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
File: N4G6usaSUnGxeYF1FeBuahCs9rQ.mft (raw, json)
Hash identifier: r2Gl7IRK4kldzJYo5KuOJUpVuG3RcpqcoojmPPEJfSw=
Subject key identifier: D6:C6:08:3C:EE:DF:19:00:71:67:05:F0:32:E9:11:CA:92:9A:FB:78
Authority key identifier: 37:81:BA:BA:C6:92:52:71:B1:79:81:75:15:E0:6E:6A:10:AC:F6:B4
Certificate issuer: /CN=3781babac6925271b179817515e06e6a10acf6b4
Certificate serial: 019A014817DADC00F3ED683C66E8CAF13729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
Manifest number: 068B
Signing time: Mon 20 Oct 2025 11:01:33 +0000
Manifest this update: Mon 20 Oct 2025 11:01:33 +0000
Manifest next update: Tue 21 Oct 2025 11:01:33 +0000
Files and hashes: 1: N4G6usaSUnGxeYF1FeBuahCs9rQ.crl (hash: nlOzV5OoZgumvaUhRcuEkvkFzmE8hEQwLcMCX3qpThw=)
2: R1GLOmkDsdOQU3JmSI6jpWMtr0k.roa (hash: TobK47r5xeGKINzekYR4rqZ5DBGKz/0D1yzbu2xP0c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:48:17:da:dc:00:f3:ed:68:3c:66:e8:ca:f1:37:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3781babac6925271b179817515e06e6a10acf6b4
Validity
Not Before: Oct 20 11:01:33 2025 GMT
Not After : Oct 21 11:01:33 2025 GMT
Subject: CN=d6c6083ceedf1900716705f032e911ca929afb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:24:f3:d6:ee:0e:56:8b:b3:84:fc:57:0b:
5a:09:98:f7:42:55:01:50:52:c4:9b:2f:b4:51:d6:
eb:a6:f4:81:24:92:bd:a5:f7:1e:95:dc:07:8d:0e:
07:6b:c1:ae:f4:e7:f7:d9:79:57:1d:f5:46:21:e0:
71:53:08:2d:83:d2:53:b2:df:04:f2:86:db:b9:15:
60:a4:ff:c2:85:84:e6:bf:7b:bc:3b:40:b5:4a:ef:
b2:32:8b:02:22:43:d8:25:c1:34:52:57:d1:37:87:
7d:e6:e6:f5:85:d5:c4:28:a2:0b:47:83:72:3c:03:
8e:c7:7c:2f:5b:f4:2b:fb:46:da:cf:48:e6:87:06:
79:f1:dd:30:21:cb:6c:f7:a3:7f:ef:fb:99:bb:eb:
7c:73:43:4a:ab:91:ba:c7:36:f0:f0:85:b8:92:ba:
ac:ca:95:90:ce:43:e9:4a:23:ed:ea:a6:dd:14:46:
b5:8e:ea:6e:80:b2:f8:c7:a5:6b:cc:ae:a1:b5:e7:
e8:1d:75:eb:ca:14:79:54:8c:c3:25:18:24:9d:65:
65:c8:3b:c0:bc:64:43:8e:d6:65:20:26:07:8c:bb:
e3:a2:20:7b:ca:e0:e9:0f:50:99:a6:cc:9c:3f:52:
6d:12:96:55:84:79:6f:49:66:21:fe:c5:a0:d2:ad:
8b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C6:08:3C:EE:DF:19:00:71:67:05:F0:32:E9:11:CA:92:9A:FB:78
X509v3 Authority Key Identifier:
keyid:37:81:BA:BA:C6:92:52:71:B1:79:81:75:15:E0:6E:6A:10:AC:F6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b1:72:9f:d4:df:b0:65:2a:fe:86:8d:3a:be:25:dc:75:87:
8a:61:cc:f8:53:74:34:39:ba:c3:b9:7c:cb:18:4f:50:f3:2b:
94:03:bd:01:c7:b3:09:de:40:e2:e3:dc:14:b8:8d:bb:18:09:
96:2f:92:bd:e6:04:54:3a:30:d6:41:36:f9:38:b8:c9:f2:78:
c4:d9:49:38:21:e0:f9:27:aa:60:d1:cc:0a:a6:a0:47:b5:76:
bc:1b:65:20:2c:c8:27:bc:14:27:31:9d:43:f2:29:6b:29:49:
af:4d:a7:9f:ab:fe:c8:72:2b:e7:de:ac:cd:35:80:9f:b2:74:
af:96:5c:42:88:53:1a:44:29:4e:4f:a1:50:d9:37:0d:9e:64:
5e:02:27:19:97:0e:ef:f5:2a:d9:2b:17:1b:d9:97:6b:60:9a:
70:fe:ab:d3:d7:79:60:07:6f:d8:3d:3e:cc:24:05:1e:dc:f7:
d2:8a:d8:c9:4c:eb:6c:57:35:66:a8:46:72:bc:65:a2:96:fd:
14:1a:e9:6b:a1:dc:19:03:c8:ce:cb:49:4a:16:d6:49:32:59:
5c:8b:5f:a6:84:f4:34:cb:fd:dd:79:e3:88:17:46:13:65:20:
49:6f:0b:e8:d9:4a:f8:c8:ba:c9:68:09:c2:bf:2d:bc:b2:84:
df:48:cd:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBSBfa3ADz7Wg8ZujK8TcpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ODFiYWJhYzY5MjUyNzFiMTc5ODE3NTE1ZTA2ZTZhMTBh
Y2Y2YjQwHhcNMjUxMDIwMTEwMTMzWhcNMjUxMDIxMTEwMTMzWjAzMTEwLwYDVQQD
EyhkNmM2MDgzY2VlZGYxOTAwNzE2NzA1ZjAzMmU5MTFjYTkyOWFmYjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHgk89buDlaLs4T8VwtaCZj3QlUB
UFLEmy+0UdbrpvSBJJK9pfceldwHjQ4Ha8Gu9Of32XlXHfVGIeBxUwgtg9JTst8E
8obbuRVgpP/ChYTmv3u8O0C1Su+yMosCIkPYJcE0UlfRN4d95ub1hdXEKKILR4Ny
PAOOx3wvW/Qr+0baz0jmhwZ58d0wIcts96N/7/uZu+t8c0NKq5G6xzbw8IW4krqs
ypWQzkPpSiPt6qbdFEa1jupugLL4x6VrzK6htefoHXXryhR5VIzDJRgknWVlyDvA
vGRDjtZlICYHjLvjoiB7yuDpD1CZpsycP1JtEpZVhHlvSWYh/sWg0q2LFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbGCDzu3xkAcWcF8DLpEcqSmvt4MB8GA1UdIwQY
MBaAFDeBurrGklJxsXmBdRXgbmoQrPa0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjRHNnVzYVNVbkd4ZVlGMUZlQnVhaENzOXJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84ZjgzYzItM2JiMy00ZDQ3LTgwMzEt
ZGU1NzFiODk2MThkLzEvTjRHNnVzYVNVbkd4ZVlGMUZlQnVhaENzOXJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS84ZjgzYzItM2JiMy00ZDQ3LTgwMzEtZGU1NzFiODk2MThk
LzEvTjRHNnVzYVNVbkd4ZVlGMUZlQnVhaENzOXJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLFyn9Tf
sGUq/oaNOr4l3HWHimHM+FN0NDm6w7l8yxhPUPMrlAO9AcezCd5A4uPcFLiNuxgJ
li+SveYEVDow1kE2+Ti4yfJ4xNlJOCHg+SeqYNHMCqagR7V2vBtlICzIJ7wUJzGd
Q/IpaylJr02nn6v+yHIr596szTWAn7J0r5ZcQohTGkQpTk+hUNk3DZ5kXgInGZcO
7/Uq2SsXG9mXa2CacP6r09d5YAdv2D0+zCQFHtz30orYyUzrbFc1ZqhGcrxlopb9
FBrpa6HcGQPIzstJShbWSTJZXItfpoT0NMv93XnjiBdGE2UgSW8L6NlK+Mi6yWgJ
wr8tvLKE30jNAA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:35 2025 by rpki-client