Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
File: N1UunJZN5v9U4JnHEVXBod7IpzA.mft (raw, json)
Hash identifier: EzL8148PCi3mSbBzfQbW/jhbUNzxRu4Hn66/dwsMdfI=
Subject key identifier: 60:81:BF:D1:46:1C:28:5C:85:E2:60:C4:AD:69:A8:3B:42:6B:9C:F0
Authority key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
Certificate issuer: /CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Certificate serial: 0199FFFE7B309AD2B64E790473984FEAD27D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 05:01:31 +0000
Manifest this update: Mon 20 Oct 2025 05:01:31 +0000
Manifest next update: Tue 21 Oct 2025 05:01:31 +0000
Files and hashes: 1: N1UunJZN5v9U4JnHEVXBod7IpzA.crl (hash: ElpdvlKjQabuZsKtFwVDPIDsD1EB1q259Jke95UFeGg=)
2: erhlDHo6u2N8SbRRVUL49trJG0Q.roa (hash: 3V4uI/Y1go20Ur/8ybcFLPuVLcruMM7J3PxGXh059Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:7b:30:9a:d2:b6:4e:79:04:73:98:4f:ea:d2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Validity
Not Before: Oct 20 05:01:31 2025 GMT
Not After : Oct 21 05:01:31 2025 GMT
Subject: CN=6081bfd1461c285c85e260c4ad69a83b426b9cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:af:be:5d:1f:94:21:66:66:02:5a:ec:e2:
70:9d:8a:f4:da:f7:a1:50:16:26:26:d5:1c:17:27:
40:c2:9d:84:d0:7a:83:7f:1c:f5:10:9a:fe:86:32:
c4:20:16:69:c2:25:85:b9:c4:ed:d1:2c:f1:90:af:
53:63:64:a0:bb:56:08:e2:ab:bd:94:9e:9d:86:a4:
f9:fa:ad:2b:51:54:8d:f3:de:ee:81:9c:5b:ad:b0:
45:af:99:8c:f3:88:d8:2f:ff:f9:8c:e7:e6:ca:1a:
c3:d2:91:c1:ed:39:f4:0c:61:3e:1b:5f:b7:b8:e1:
75:a2:98:56:c8:9e:73:24:96:a4:8e:73:e2:0f:90:
14:04:01:51:15:bb:96:52:86:da:49:51:67:b4:00:
83:03:54:dd:49:ed:4c:8f:71:da:13:3e:4b:d8:27:
58:72:6e:bd:55:92:ae:e8:2b:50:4c:bb:3e:90:ad:
27:d3:38:9f:d4:2d:da:ab:25:d1:d2:6c:d5:e8:b3:
fd:3c:21:31:99:ec:4a:77:55:97:58:93:bd:a5:cb:
28:97:06:b7:f4:60:6d:c9:3b:5d:03:b7:d1:13:a1:
54:be:23:bd:40:3d:2b:e8:05:1d:75:8c:f3:92:2f:
e2:d5:13:98:95:56:c5:1f:5e:d0:a2:9a:2a:2a:6b:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:81:BF:D1:46:1C:28:5C:85:E2:60:C4:AD:69:A8:3B:42:6B:9C:F0
X509v3 Authority Key Identifier:
keyid:37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c0:bf:b2:d8:78:f9:4c:30:8e:6c:36:19:6a:49:71:64:20:
72:43:5c:ca:1e:d4:26:24:ce:df:4c:12:24:9d:06:03:49:67:
90:05:f4:6f:e8:78:8f:e2:c5:76:c8:cb:f8:b4:ec:1b:66:58:
df:64:32:b8:8f:b0:46:56:bc:31:c4:ed:b9:3f:a9:5b:3d:81:
b6:16:ef:f7:af:e8:40:62:19:ea:e8:a3:16:20:5e:59:13:70:
1f:b6:52:84:89:52:13:7b:62:a0:bb:d5:36:c6:44:79:95:21:
16:24:1e:dd:02:5a:bc:bb:3e:92:9c:d2:d1:95:63:58:e1:e1:
3e:7b:75:19:82:46:57:06:d1:d5:49:06:84:e2:24:ac:9c:f6:
f0:f5:8c:f0:f4:0b:55:5e:24:2c:e5:a3:7c:df:cb:ce:11:8d:
d5:4e:61:32:c9:9e:24:a1:ba:7d:df:23:a5:9f:fe:fa:1a:43:
6b:47:73:48:49:7f:bb:29:02:14:e7:24:29:59:43:e6:05:57:
1a:72:ed:3d:83:35:ab:52:7d:63:7f:81:21:5e:34:64:c8:ab:
81:ab:6e:83:71:12:14:d0:30:d9:aa:53:37:a8:db:77:6f:45:
d3:17:99:f4:90:51:6e:69:b1:ed:7e:f0:b0:a1:c3:d1:c1:ba:
69:ba:e9:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//nswmtK2TnkEc5hP6tJ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NTUyZTljOTY0ZGU2ZmY1NGUwOTljNzExNTVjMWExZGVj
OGE3MzAwHhcNMjUxMDIwMDUwMTMxWhcNMjUxMDIxMDUwMTMxWjAzMTEwLwYDVQQD
Eyg2MDgxYmZkMTQ2MWMyODVjODVlMjYwYzRhZDY5YTgzYjQyNmI5Y2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGSvvl0flCFmZgJa7OJwnYr02veh
UBYmJtUcFydAwp2E0HqDfxz1EJr+hjLEIBZpwiWFucTt0SzxkK9TY2Sgu1YI4qu9
lJ6dhqT5+q0rUVSN897ugZxbrbBFr5mM84jYL//5jOfmyhrD0pHB7Tn0DGE+G1+3
uOF1ophWyJ5zJJakjnPiD5AUBAFRFbuWUobaSVFntACDA1TdSe1Mj3HaEz5L2CdY
cm69VZKu6CtQTLs+kK0n0zif1C3aqyXR0mzV6LP9PCExmexKd1WXWJO9pcsolwa3
9GBtyTtdA7fRE6FUviO9QD0r6AUddYzzki/i1ROYlVbFH17QopoqKmtaXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCBv9FGHChcheJgxK1pqDtCa5zwMB8GA1UdIwQY
MBaAFDdVLpyWTeb/VOCZxxFVwaHeyKcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFVdW5KWk41djlVNEpuSEVWWEJvZDdJcHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9kYzQzZmItNDY1Ni00YWY5LWFhZDIt
ZWUyOGE2NWM4YTIyLzEvTjFVdW5KWk41djlVNEpuSEVWWEJvZDdJcHpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9kYzQzZmItNDY1Ni00YWY5LWFhZDItZWUyOGE2NWM4YTIy
LzEvTjFVdW5KWk41djlVNEpuSEVWWEJvZDdJcHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcC/sth4
+Uwwjmw2GWpJcWQgckNcyh7UJiTO30wSJJ0GA0lnkAX0b+h4j+LFdsjL+LTsG2ZY
32QyuI+wRla8McTtuT+pWz2Bthbv96/oQGIZ6uijFiBeWRNwH7ZShIlSE3tioLvV
NsZEeZUhFiQe3QJavLs+kpzS0ZVjWOHhPnt1GYJGVwbR1UkGhOIkrJz28PWM8PQL
VV4kLOWjfN/LzhGN1U5hMsmeJKG6fd8jpZ/++hpDa0dzSEl/uykCFOckKVlD5gVX
GnLtPYM1q1J9Y3+BIV40ZMirgatug3ESFNAw2apTN6jbd29F0xeZ9JBRbmmx7X7w
sKHD0cG6abrpJw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:07:42 2025 by rpki-client