Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft
File: NWlXUM1GUx3eil-yZyzcgw09DG4.mft (raw, json)
Hash identifier: cyNvMcpZ6f9OGzgibDP9IoHI6VIaOsiKuFycVf9nNW0=
Subject key identifier: 3A:FA:7D:0B:67:B5:BF:6A:39:48:B0:63:36:64:A4:AA:2D:8A:77:EC
Authority key identifier: 35:69:57:50:CD:46:53:1D:DE:8A:5F:B2:67:2C:DC:83:0D:3D:0C:6E
Certificate issuer: /CN=35695750cd46531dde8a5fb2672cdc830d3d0c6e
Certificate serial: 019A72CAAACEA402BFF24E17698648A3B28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWlXUM1GUx3eil-yZyzcgw09DG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft
Manifest number: 053C
Signing time: Tue 11 Nov 2025 12:01:15 +0000
Manifest this update: Tue 11 Nov 2025 12:01:15 +0000
Manifest next update: Wed 12 Nov 2025 12:01:15 +0000
Files and hashes: 1: NWlXUM1GUx3eil-yZyzcgw09DG4.crl (hash: zxu7tv2qWDJqcaaRZFAbxWfg+05W9dg13NVVOtw+M7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWlXUM1GUx3eil-yZyzcgw09DG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:aa:ce:a4:02:bf:f2:4e:17:69:86:48:a3:b2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35695750cd46531dde8a5fb2672cdc830d3d0c6e
Validity
Not Before: Nov 11 12:01:15 2025 GMT
Not After : Nov 12 12:01:15 2025 GMT
Subject: CN=3afa7d0b67b5bf6a3948b0633664a4aa2d8a77ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3e:fd:ca:44:d4:55:ab:cb:80:c3:9c:1f:4d:
bb:c5:10:54:6e:22:6d:07:64:eb:9a:70:a7:5a:4d:
2b:b4:b8:7b:5c:1e:3f:ee:0e:1c:19:8a:2e:44:19:
87:ea:2d:da:d8:66:06:9d:36:26:25:4c:e4:f2:98:
a9:b5:76:96:ac:b4:fd:a1:d3:ac:61:54:42:f5:dc:
3a:84:b0:cc:6f:ef:12:ab:d2:5a:8d:68:c1:2c:d6:
5b:12:56:19:db:bc:6d:0f:c2:9e:b4:a6:c2:fc:ec:
e9:6c:6f:4c:ad:d3:35:21:3b:e1:31:21:a0:2c:bd:
a7:df:c0:98:2b:49:83:7e:43:9e:60:75:18:02:36:
0b:68:0b:45:62:88:e5:60:1e:91:d6:9f:a6:e2:9a:
b0:b9:29:58:18:d7:50:41:04:fe:30:ce:c4:c0:79:
12:d0:1e:3f:23:ac:29:56:9e:14:40:2c:10:ac:50:
5a:ca:43:8d:1c:cb:29:92:2c:eb:f9:a8:68:42:44:
8d:61:0c:11:76:84:b8:e8:59:f6:08:63:66:da:b1:
3c:2a:35:a1:ef:c3:f9:c4:a8:2d:cd:75:2d:44:1f:
09:70:8b:b0:a6:f5:ba:8c:d2:3a:c3:20:48:0d:d8:
89:d2:80:78:16:68:ed:62:e8:4c:53:ee:26:3c:00:
d8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FA:7D:0B:67:B5:BF:6A:39:48:B0:63:36:64:A4:AA:2D:8A:77:EC
X509v3 Authority Key Identifier:
keyid:35:69:57:50:CD:46:53:1D:DE:8A:5F:B2:67:2C:DC:83:0D:3D:0C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWlXUM1GUx3eil-yZyzcgw09DG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:05:c9:4b:f9:3d:40:61:82:0b:c4:6f:09:81:18:27:68:d0:
8c:24:da:c9:f9:3e:24:5d:7a:3a:9d:af:d4:3d:59:c2:bd:93:
9a:73:e0:be:2c:9c:d9:76:a6:39:f1:2d:66:39:94:6f:7d:e4:
48:82:4d:75:98:79:5a:09:6b:e1:d9:dd:3d:c4:10:7b:aa:d6:
c8:dc:3f:e3:f1:6f:5b:ad:ca:16:03:90:80:84:fd:8d:d6:b7:
78:bf:34:43:12:9f:b0:51:84:ed:33:ae:1a:91:5f:35:91:6f:
68:90:ab:d5:cf:be:a9:fe:bf:66:84:d8:66:c1:da:0c:38:bf:
c9:e9:14:bc:4d:c5:f9:09:a0:e9:e4:4e:e8:91:2d:b3:de:d7:
e9:10:2d:49:59:13:72:46:32:0d:6d:4c:84:6d:63:9f:dc:7c:
6b:19:24:24:4b:33:8d:63:07:fa:18:6c:5f:cc:11:2d:09:6e:
ff:b4:5d:1b:0f:2b:ea:d1:a4:ae:e4:9a:52:24:4b:68:ec:09:
62:1f:c7:57:d3:08:67:30:b4:98:de:3c:72:bc:8f:2f:47:e2:
c5:2d:6a:cb:33:38:04:e8:23:32:8d:d0:e6:a8:7b:e3:01:13:
4e:10:ad:86:29:98:5a:e2:96:8c:c2:89:ba:c7:b5:61:c8:8c:
c3:4c:47:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyqrOpAK/8k4XaYZIo7KOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1Njk1NzUwY2Q0NjUzMWRkZThhNWZiMjY3MmNkYzgzMGQz
ZDBjNmUwHhcNMjUxMTExMTIwMTE1WhcNMjUxMTEyMTIwMTE1WjAzMTEwLwYDVQQD
EygzYWZhN2QwYjY3YjViZjZhMzk0OGIwNjMzNjY0YTRhYTJkOGE3N2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD79ykTUVavLgMOcH027xRBUbiJt
B2TrmnCnWk0rtLh7XB4/7g4cGYouRBmH6i3a2GYGnTYmJUzk8piptXaWrLT9odOs
YVRC9dw6hLDMb+8Sq9JajWjBLNZbElYZ27xtD8KetKbC/OzpbG9MrdM1ITvhMSGg
LL2n38CYK0mDfkOeYHUYAjYLaAtFYojlYB6R1p+m4pqwuSlYGNdQQQT+MM7EwHkS
0B4/I6wpVp4UQCwQrFBaykONHMspkizr+ahoQkSNYQwRdoS46Fn2CGNm2rE8KjWh
78P5xKgtzXUtRB8JcIuwpvW6jNI6wyBIDdiJ0oB4FmjtYuhMU+4mPADYKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDr6fQtntb9qOUiwYzZkpKotinfsMB8GA1UdIwQY
MBaAFDVpV1DNRlMd3opfsmcs3IMNPQxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldsWFVNMUdVeDNlaWwteVp5emNndzA5REc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy82MTU2MTctMDkyZC00MjI4LWE0MDct
NzdiZmEzN2ZhMDcxLzEvTldsWFVNMUdVeDNlaWwteVp5emNndzA5REc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy82MTU2MTctMDkyZC00MjI4LWE0MDctNzdiZmEzN2ZhMDcx
LzEvTldsWFVNMUdVeDNlaWwteVp5emNndzA5REc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQXJS/k9
QGGCC8RvCYEYJ2jQjCTayfk+JF16Op2v1D1Zwr2TmnPgviyc2XamOfEtZjmUb33k
SIJNdZh5Wglr4dndPcQQe6rWyNw/4/FvW63KFgOQgIT9jda3eL80QxKfsFGE7TOu
GpFfNZFvaJCr1c++qf6/ZoTYZsHaDDi/yekUvE3F+Qmg6eRO6JEts97X6RAtSVkT
ckYyDW1MhG1jn9x8axkkJEszjWMH+hhsX8wRLQlu/7RdGw8r6tGkruSaUiRLaOwJ
Yh/HV9MIZzC0mN48cryPL0fixS1qyzM4BOgjMo3Q5qh74wETThCthimYWuKWjMKJ
use1YciMw0xH1g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:01 2025 by rpki-client