
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
File: njQ_BMJ9FUVaqlzapFadN6iJUNc.mft (raw, json)
Hash identifier: jmPYerMGWL/m7ACSQGqErNTjSFl7g6QSEHyyFWz9OWw=
Subject key identifier: AA:E7:F2:AD:2F:66:AB:D2:BC:C8:F4:CE:1E:F4:64:0A:CE:A7:10:65
Authority key identifier: 9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
Certificate issuer: /CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
Certificate serial: 0199FB0F05F1D6132E1F58A3496CD07FB3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
Manifest number: 1410
Signing time: Sun 19 Oct 2025 06:01:29 +0000
Manifest this update: Sun 19 Oct 2025 06:01:29 +0000
Manifest next update: Mon 20 Oct 2025 06:01:29 +0000
Files and hashes: 1: MspHMRx79y2hbQhEiM4afU6NUCQ.roa (hash: Umb9OOhu/lMtmCnjDzYDKJVcT/aByAqAtDT/npY6pzk=)
2: njQ_BMJ9FUVaqlzapFadN6iJUNc.crl (hash: noqeY+49kSls4o7hbrRBEEFbOZi7GYx1HpaciQ1aycA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:05:f1:d6:13:2e:1f:58:a3:49:6c:d0:7f:b3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
Validity
Not Before: Oct 19 06:01:29 2025 GMT
Not After : Oct 20 06:01:29 2025 GMT
Subject: CN=aae7f2ad2f66abd2bcc8f4ce1ef4640acea71065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:59:e6:47:27:4a:86:fe:9d:23:1e:09:87:c9:
e8:30:23:43:88:98:44:ee:a0:6c:17:c4:cc:18:c6:
40:b8:75:22:86:51:7a:4d:e7:60:63:3d:cd:b8:b1:
c8:87:18:8b:a9:93:8c:d2:01:2c:df:a3:21:55:56:
1e:8c:7d:72:29:b9:90:23:3b:bc:bf:b1:89:0e:44:
27:6a:01:03:de:22:54:bc:f9:a0:3d:d8:d9:d9:c0:
3c:d8:e8:fc:fa:55:f0:c7:91:5a:40:a1:4b:a8:b6:
1a:67:ba:61:45:8f:c2:09:79:f0:ae:a0:c6:2d:10:
38:0a:0b:69:20:73:6a:09:a0:22:f6:79:8a:3d:1b:
88:fb:82:40:de:2f:e8:f2:1e:0f:12:7f:75:7d:68:
26:c6:bc:b4:94:bd:d6:2b:bb:a2:d0:6e:b8:b6:a6:
43:19:ff:35:72:11:28:2f:17:66:38:0e:f7:30:c3:
4d:56:08:83:b7:47:30:88:d1:58:ba:90:d8:d2:37:
84:ee:eb:e4:13:21:c8:03:4d:8c:87:14:40:3f:9d:
f3:ec:ea:0d:da:05:19:ad:89:32:db:1e:c3:a4:b5:
08:5b:fe:74:24:5b:6c:46:05:15:a6:d3:ba:3b:ed:
3f:21:87:b2:f3:9b:89:23:77:02:b1:c6:81:0b:94:
27:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E7:F2:AD:2F:66:AB:D2:BC:C8:F4:CE:1E:F4:64:0A:CE:A7:10:65
X509v3 Authority Key Identifier:
keyid:9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c9:d5:72:5e:c5:20:56:f9:75:b6:26:32:9e:fa:46:98:9f:
ed:b7:e3:99:fa:83:fc:92:22:f8:6e:55:94:19:c2:16:ea:08:
df:11:73:c6:16:5a:64:3a:f1:d6:f6:96:5c:4b:e5:43:48:a9:
82:a7:98:56:ca:02:33:cc:23:8f:1e:86:2f:de:a7:d4:19:d3:
87:8f:5b:6b:ff:10:e8:64:cf:70:f3:d4:3c:66:60:f2:87:b7:
5e:76:4d:b0:95:00:34:46:63:65:a1:7d:a7:a5:54:83:5c:6d:
df:ea:18:7a:a8:8c:5b:d7:25:2e:67:38:97:7c:64:58:60:dd:
13:b1:5f:04:03:a1:48:52:79:63:f4:6d:c4:9e:53:7f:c3:76:
bf:ce:ee:0c:d5:65:10:fe:03:d4:b2:41:bf:23:0b:4b:09:62:
63:90:58:e2:fb:da:1e:29:db:24:99:88:c4:63:36:1c:3a:0d:
24:3a:80:b4:ab:15:3a:59:ac:65:f8:ea:fc:d6:8a:0c:7a:04:
ea:11:c7:7d:83:71:f4:b4:2e:d8:0a:24:57:3d:15:82:2e:55:
e3:68:db:89:41:5f:f6:20:14:c6:52:b8:51:a0:e8:78:7a:0f:
04:f8:0c:e6:e0:fb:a8:14:e0:1b:08:a5:82:d6:8a:ce:e3:2d:
80:1b:26:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DwXx1hMuH1ijSWzQf7PHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzQzZjA0YzI3ZDE1NDU1YWFhNWNkYWE0NTY5ZDM3YTg4
OTUwZDcwHhcNMjUxMDE5MDYwMTI5WhcNMjUxMDIwMDYwMTI5WjAzMTEwLwYDVQQD
EyhhYWU3ZjJhZDJmNjZhYmQyYmNjOGY0Y2UxZWY0NjQwYWNlYTcxMDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VnmRydKhv6dIx4Jh8noMCNDiJhE
7qBsF8TMGMZAuHUihlF6TedgYz3NuLHIhxiLqZOM0gEs36MhVVYejH1yKbmQIzu8
v7GJDkQnagED3iJUvPmgPdjZ2cA82Oj8+lXwx5FaQKFLqLYaZ7phRY/CCXnwrqDG
LRA4CgtpIHNqCaAi9nmKPRuI+4JA3i/o8h4PEn91fWgmxry0lL3WK7ui0G64tqZD
Gf81chEoLxdmOA73MMNNVgiDt0cwiNFYupDY0jeE7uvkEyHIA02MhxRAP53z7OoN
2gUZrYky2x7DpLUIW/50JFtsRgUVptO6O+0/IYey85uJI3cCscaBC5QnKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrn8q0vZqvSvMj0zh70ZArOpxBlMB8GA1UdIwQY
MBaAFJ40PwTCfRVFWqpc2qRWnTeoiVDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpRX0JNSjlGVVZhcWx6YXBGYWRONmlKVU5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMzMwMzQtZTczNy00MzZkLWIxNDkt
MzExOWQzMzMyMjgyLzEvbmpRX0JNSjlGVVZhcWx6YXBGYWRONmlKVU5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMzMwMzQtZTczNy00MzZkLWIxNDktMzExOWQzMzMyMjgy
LzEvbmpRX0JNSjlGVVZhcWx6YXBGYWRONmlKVU5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMnVcl7F
IFb5dbYmMp76Rpif7bfjmfqD/JIi+G5VlBnCFuoI3xFzxhZaZDrx1vaWXEvlQ0ip
gqeYVsoCM8wjjx6GL96n1BnTh49ba/8Q6GTPcPPUPGZg8oe3XnZNsJUANEZjZaF9
p6VUg1xt3+oYeqiMW9clLmc4l3xkWGDdE7FfBAOhSFJ5Y/RtxJ5Tf8N2v87uDNVl
EP4D1LJBvyMLSwliY5BY4vvaHinbJJmIxGM2HDoNJDqAtKsVOlmsZfjq/NaKDHoE
6hHHfYNx9LQu2AokVz0Vgi5V42jbiUFf9iAUxlK4UaDoeHoPBPgM5uD7qBTgGwil
gtaKzuMtgBsmog==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:51 2025 by rpki-client