Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
File: nla1Ht856_BmKyyDTWXRvR3oJSI.mft (raw, json)
Hash identifier: jML1+mObbSTCiWZaAsuj4ekPE22rism+kB8/aGeChOM=
Subject key identifier: 1D:7B:66:B3:4E:D1:1E:C7:19:D4:B0:4A:64:CA:4F:6E:A3:48:88:C4
Authority key identifier: 9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
Certificate issuer: /CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Certificate serial: 019A725C4A677E11F86BD5B53ECCC51C51F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
Manifest number: 36
Signing time: Tue 11 Nov 2025 10:00:42 +0000
Manifest this update: Tue 11 Nov 2025 10:00:42 +0000
Manifest next update: Wed 12 Nov 2025 10:00:42 +0000
Files and hashes: 1: S1ZGSjewj6X7QycDLE3iWf9Qwtk.roa (hash: OqYqcuN/t0Mh36KLaZS2uCSbFs34/AhD50/Wm6gmQKo=)
2: nla1Ht856_BmKyyDTWXRvR3oJSI.crl (hash: MzKz7hPHBEozDunYFv4whHscD+FvTZLamBSJEAlpdfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:4a:67:7e:11:f8:6b:d5:b5:3e:cc:c5:1c:51:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Validity
Not Before: Nov 11 10:00:42 2025 GMT
Not After : Nov 12 10:00:42 2025 GMT
Subject: CN=1d7b66b34ed11ec719d4b04a64ca4f6ea34888c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:19:75:ce:3b:eb:56:53:4c:46:df:91:2a:
6f:0b:69:80:97:f7:9c:58:78:e4:5f:c4:06:3d:2e:
51:e5:2c:77:c2:cb:cd:5f:2f:82:79:c2:35:24:16:
5f:37:91:03:1b:d6:1e:03:47:97:e5:d2:5e:e8:26:
4e:98:1c:f4:de:62:fa:e3:37:47:17:26:77:f3:8b:
84:86:d3:52:d7:59:05:9c:04:91:15:e9:9a:94:43:
24:39:70:7a:e4:55:ca:74:6c:d2:89:cc:c8:bf:38:
f4:8f:4c:b9:2f:bb:4f:9c:e2:85:c3:64:b8:1c:da:
c0:06:2c:58:93:56:0b:e0:3a:32:ad:5c:d5:fe:ab:
60:0f:da:4f:ac:3b:6a:1a:76:0e:c6:4e:84:3c:fc:
20:de:9a:2f:73:ca:83:41:9a:49:a6:05:2f:83:ca:
a7:01:32:fb:17:e5:b9:15:a8:b1:81:cd:3e:c7:2f:
f2:77:6c:ab:67:30:40:60:28:b9:4f:7c:60:0c:56:
7b:8c:35:2d:c6:1a:7a:7d:e8:1a:9d:5d:5f:20:dd:
c8:2a:3b:cf:4d:c1:b5:ad:64:13:02:09:48:20:e7:
65:53:5c:cd:02:74:a4:83:dc:8c:aa:1f:ac:a0:f2:
5e:15:17:75:61:bf:f1:4d:6f:8c:92:56:05:a9:6b:
df:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7B:66:B3:4E:D1:1E:C7:19:D4:B0:4A:64:CA:4F:6E:A3:48:88:C4
X509v3 Authority Key Identifier:
keyid:9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:77:ff:05:48:8f:00:41:c5:0a:aa:40:5c:72:42:e9:56:05:
d9:92:67:30:0d:3e:ed:97:0c:05:31:4a:23:c5:26:c6:32:32:
78:7b:bf:de:83:53:64:2e:66:eb:67:95:b7:9c:61:5e:5c:12:
eb:27:4f:2a:b9:74:7e:f4:33:80:d0:c7:d2:38:18:2e:a6:0c:
ce:1c:80:3b:61:b7:f9:c4:8c:6a:95:9b:8e:d5:9c:80:74:f0:
88:2e:45:59:21:e8:ba:2c:ec:07:bd:84:85:ad:a3:81:92:63:
d7:0d:b0:10:94:28:3e:9b:2e:39:10:4a:24:32:1a:f3:d9:83:
a7:c8:3b:7e:78:4f:c4:3f:2f:4f:9f:55:08:e2:29:00:8e:2b:
f9:10:32:8b:60:9a:42:ce:9d:76:56:b5:5a:43:93:18:c3:b4:
ed:c7:59:de:3f:6a:81:e3:5f:2f:af:14:a4:a6:fc:5b:52:9c:
8a:98:c5:e7:74:18:c0:33:26:70:20:b5:ed:78:62:4c:af:26:
35:97:56:f6:fa:41:81:07:32:8c:47:4b:e3:8f:70:b9:ee:73:
0c:b9:d9:ee:6b:bc:39:de:02:5e:32:92:d3:3f:5b:d0:46:94:
72:85:ef:9f:f1:7e:2e:3b:6b:49:6a:7e:3c:e7:a7:18:2f:c5:
6e:64:58:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:16 2025 by rpki-client