Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
File: NLjV-ROFaLUssJNuK0yU93zleuw.mft (raw, json)
Hash identifier: dtjgQ6xTAjUIdXBNLc6CvkZpbgk8C5KnwFT3Hwa6EUk=
Subject key identifier: 33:10:65:0C:48:07:D5:C1:B4:13:8F:8D:8F:95:0E:66:3B:18:52:18
Authority key identifier: 34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
Certificate issuer: /CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Certificate serial: 0199FCC67FC30F9C6DD2EE4118D15E798445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
Manifest number: 141C
Signing time: Sun 19 Oct 2025 14:01:31 +0000
Manifest this update: Sun 19 Oct 2025 14:01:31 +0000
Manifest next update: Mon 20 Oct 2025 14:01:31 +0000
Files and hashes: 1: GRpxJM6uak1q4A4UBjGhlwT7Cps.roa (hash: wNBRbInhIrKHJa8W7MC+iDamgy4K7A7SioRTK7a6kK0=)
2: NLjV-ROFaLUssJNuK0yU93zleuw.crl (hash: tlYmqZ2V22ycvCLsrst+K2ZylbeENh38sQ+sj4oAgyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:7f:c3:0f:9c:6d:d2:ee:41:18:d1:5e:79:84:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Validity
Not Before: Oct 19 14:01:31 2025 GMT
Not After : Oct 20 14:01:31 2025 GMT
Subject: CN=3310650c4807d5c1b4138f8d8f950e663b185218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3d:0d:73:eb:69:fb:dc:c5:af:b9:dc:32:77:
d8:7d:69:7f:64:20:60:7a:64:d6:8f:64:37:19:86:
35:a5:2e:e9:6d:d5:fd:30:75:f6:eb:3b:4e:22:4f:
10:62:1e:7d:91:e7:77:83:9c:8a:e2:10:6a:25:90:
d2:a4:ab:d0:f5:b4:17:6e:70:40:53:cf:63:fc:da:
d8:a7:58:44:70:a6:7f:96:3b:21:b9:e0:ba:74:22:
f8:15:b1:b2:6c:a7:3e:7b:06:27:68:91:ef:80:41:
ba:a3:4a:c0:2b:46:4d:56:20:35:6f:6d:56:64:17:
8d:a6:dd:75:08:fb:23:47:74:81:ba:fa:16:be:c5:
c2:bd:cd:84:7f:b7:96:23:a0:5d:8f:d8:0b:2c:29:
97:d0:7d:48:3f:1f:d8:0b:92:e2:64:e8:c9:89:60:
cf:bb:ec:35:f3:c8:e0:63:39:3a:8b:b9:44:33:dc:
31:87:70:04:34:b3:ff:c8:9d:56:d6:38:6a:cf:6e:
76:b8:20:42:82:10:09:60:77:eb:0b:f4:5f:c0:8c:
6d:75:52:c0:16:d1:06:73:84:cd:8b:57:d0:76:40:
24:76:08:17:cf:e3:ed:53:fa:34:44:8b:ae:e0:ae:
f5:05:33:be:ac:e9:f4:45:37:4d:b6:99:51:44:56:
dd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:10:65:0C:48:07:D5:C1:B4:13:8F:8D:8F:95:0E:66:3B:18:52:18
X509v3 Authority Key Identifier:
keyid:34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c1:86:2d:b3:b2:38:3f:b0:26:e0:57:03:99:09:8f:4e:a7:
bb:85:51:d2:52:9a:7e:c1:29:10:6e:90:8d:f3:80:7b:f1:d2:
06:e0:04:b1:29:fd:d6:f7:45:14:43:4c:76:7e:f6:b1:dd:64:
61:79:41:1b:e2:d0:5b:a2:bf:76:8b:c0:a8:58:84:63:c3:22:
2a:c7:88:72:91:cb:d2:d2:82:c0:a1:0f:27:18:2c:50:d5:f5:
a4:12:6a:b2:cd:f2:5c:d1:9e:79:ef:19:5f:93:4c:12:ab:fb:
c3:1b:4d:e4:a4:c6:de:34:16:77:65:4d:cf:2a:86:8c:85:d8:
07:55:83:bd:19:aa:8c:49:a7:18:4c:fd:ba:6a:46:29:c5:31:
e6:b2:7c:1f:6d:bc:a2:b7:c1:ca:3d:ce:c2:de:32:cb:88:ed:
a7:da:7e:54:2d:42:9b:62:f9:b5:07:30:dc:0c:8b:27:3a:55:
1e:ce:83:16:30:6f:85:b5:da:d8:bd:f6:59:2a:04:0c:ed:f7:
e0:09:49:77:e0:ac:32:3c:b3:94:a5:eb:70:0d:19:36:c1:c8:
a9:51:a3:47:18:e5:b7:01:fc:f6:33:fb:15:40:20:90:79:ad:
96:a1:a2:1c:9a:0d:56:99:8b:37:1b:00:d3:e0:47:a0:8a:1d:
56:e2:30:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xn/DD5xt0u5BGNFeeYRFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YjhkNWY5MTM4NTY4YjUyY2IwOTM2ZTJiNGM5NGY3N2Nl
NTdhZWMwHhcNMjUxMDE5MTQwMTMxWhcNMjUxMDIwMTQwMTMxWjAzMTEwLwYDVQQD
EygzMzEwNjUwYzQ4MDdkNWMxYjQxMzhmOGQ4Zjk1MGU2NjNiMTg1MjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT0Nc+tp+9zFr7ncMnfYfWl/ZCBg
emTWj2Q3GYY1pS7pbdX9MHX26ztOIk8QYh59ked3g5yK4hBqJZDSpKvQ9bQXbnBA
U89j/NrYp1hEcKZ/ljshueC6dCL4FbGybKc+ewYnaJHvgEG6o0rAK0ZNViA1b21W
ZBeNpt11CPsjR3SBuvoWvsXCvc2Ef7eWI6Bdj9gLLCmX0H1IPx/YC5LiZOjJiWDP
u+w188jgYzk6i7lEM9wxh3AENLP/yJ1W1jhqz252uCBCghAJYHfrC/RfwIxtdVLA
FtEGc4TNi1fQdkAkdggXz+PtU/o0RIuu4K71BTO+rOn0RTdNtplRRFbdqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMQZQxIB9XBtBOPjY+VDmY7GFIYMB8GA1UdIwQY
MBaAFDS41fkThWi1LLCTbitMlPd85XrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkxqVi1ST0ZhTFVzc0pOdUsweVU5M3psZXV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mYzU4MjAtODE5Ny00ZjNkLWI2MjUt
ZTIwZWJiZDA4NWUxLzEvTkxqVi1ST0ZhTFVzc0pOdUsweVU5M3psZXV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9mYzU4MjAtODE5Ny00ZjNkLWI2MjUtZTIwZWJiZDA4NWUx
LzEvTkxqVi1ST0ZhTFVzc0pOdUsweVU5M3psZXV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8GGLbOy
OD+wJuBXA5kJj06nu4VR0lKafsEpEG6QjfOAe/HSBuAEsSn91vdFFENMdn72sd1k
YXlBG+LQW6K/dovAqFiEY8MiKseIcpHL0tKCwKEPJxgsUNX1pBJqss3yXNGeee8Z
X5NMEqv7wxtN5KTG3jQWd2VNzyqGjIXYB1WDvRmqjEmnGEz9umpGKcUx5rJ8H228
orfByj3Owt4yy4jtp9p+VC1Cm2L5tQcw3AyLJzpVHs6DFjBvhbXa2L32WSoEDO33
4AlJd+CsMjyzlKXrcA0ZNsHIqVGjRxjltwH89jP7FUAgkHmtlqGiHJoNVpmLNxsA
0+BHoIodVuIwtA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:38 2025 by rpki-client