Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
File: myNjkGD_h6d_xnpuA8DE3Srkw5E.mft (raw, json)
Hash identifier: OIJD7JbaKQnnZ18DDulIsaMnlgOfjwiir3J7JdV4BCY=
Subject key identifier: C1:23:2A:6C:3E:83:4C:A7:C3:C9:F9:0B:AB:05:17:9F:47:56:81:31
Authority key identifier: 9B:23:63:90:60:FF:87:A7:7F:C6:7A:6E:03:C0:C4:DD:2A:E4:C3:91
Certificate issuer: /CN=9b23639060ff87a77fc67a6e03c0c4dd2ae4c391
Certificate serial: 019A72933142E79DA2367B9FE0F3A32A448B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:00:40 +0000
Manifest this update: Tue 11 Nov 2025 11:00:40 +0000
Manifest next update: Wed 12 Nov 2025 11:00:40 +0000
Files and hashes: 1: NN299CMGcNrQCWLhS0OXaJqVLGQ.roa (hash: 93xwbIS/LqBoxP2s7kvpuTwTAH+EjaA0+8jXoFMAE+Y=)
2: myNjkGD_h6d_xnpuA8DE3Srkw5E.crl (hash: dMMQA95/2U9VEr1cEq1hUiphfq552FnM05jAQ57x6sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:31:42:e7:9d:a2:36:7b:9f:e0:f3:a3:2a:44:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b23639060ff87a77fc67a6e03c0c4dd2ae4c391
Validity
Not Before: Nov 11 11:00:40 2025 GMT
Not After : Nov 12 11:00:40 2025 GMT
Subject: CN=c1232a6c3e834ca7c3c9f90bab05179f47568131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:61:2a:e6:1a:34:c6:40:71:cf:a7:c5:53:
27:f8:69:52:21:cb:d1:84:5b:55:43:cd:ff:10:ab:
38:0d:c3:4f:34:72:3d:df:95:d3:59:67:c3:7d:cb:
bd:ec:cd:a9:10:c0:e0:70:22:74:d0:1d:7c:12:53:
c3:42:ee:e2:f2:10:1d:74:31:01:1c:0c:d9:e5:c1:
fe:b8:29:d2:e1:3e:d0:c9:72:a3:ff:3d:eb:66:c8:
a3:71:ec:33:33:24:da:ec:1f:20:93:32:65:fc:5d:
14:3f:e4:6f:61:f3:a9:b5:a2:65:58:b1:e8:d0:0c:
ab:f5:54:42:e0:72:8d:e6:5a:88:e7:7a:25:47:95:
91:24:b9:34:6c:73:9f:e4:81:a5:10:fe:53:0a:5a:
9e:6b:4d:76:91:f3:f6:39:2b:d3:74:dc:f3:38:38:
37:ea:3b:45:83:89:33:32:d1:7c:64:59:f0:5b:bf:
4d:7c:67:fb:05:cb:64:4c:e9:40:5c:44:6f:0c:04:
bf:aa:2e:56:f2:da:76:de:b2:e3:31:46:72:e5:b4:
ed:fe:61:56:85:c7:74:aa:24:fa:8f:60:ea:10:01:
7e:c2:54:f0:a8:7d:9d:12:86:67:45:72:41:d6:de:
fd:0d:4d:aa:25:fd:61:13:2d:2e:66:87:0c:d7:ce:
63:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:23:2A:6C:3E:83:4C:A7:C3:C9:F9:0B:AB:05:17:9F:47:56:81:31
X509v3 Authority Key Identifier:
keyid:9B:23:63:90:60:FF:87:A7:7F:C6:7A:6E:03:C0:C4:DD:2A:E4:C3:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1f:cf:2c:17:ab:d7:8b:45:3b:c0:7f:2a:56:20:98:8d:e9:
e1:13:8d:e6:db:33:a8:75:48:34:72:3d:8b:59:ff:b0:fc:c5:
5f:61:b0:ec:8e:01:06:f1:c8:5b:5a:94:0c:22:2c:8d:b9:e5:
42:64:3e:56:27:c6:3d:24:08:58:a2:8e:aa:e4:e4:cf:76:7b:
24:6a:42:ca:5a:03:d9:68:51:e8:2a:2e:c2:c4:e0:5e:cd:ea:
53:f8:1a:db:e3:7f:ca:d9:94:d5:74:f9:9f:4d:5c:1e:04:fd:
65:34:8a:9b:40:53:ac:31:a0:7d:25:ac:9c:ad:8e:9c:ba:e3:
4c:10:1b:8f:17:f9:82:2f:28:3a:95:97:a5:5f:22:07:e9:67:
77:d7:a7:ed:53:1e:91:be:42:a8:9f:3e:60:b8:90:ff:44:fb:
52:d3:94:84:54:94:80:07:66:8c:7f:27:dc:c3:6b:9c:46:1b:
76:67:ad:d9:56:4c:a7:88:84:35:20:fe:5c:e8:ea:66:17:9a:
20:c5:55:09:28:42:d2:bf:73:89:15:82:25:84:97:c9:5c:26:
c9:29:d4:e0:44:85:1c:de:99:61:2f:f4:42:e1:41:1c:e3:d6:
ba:20:df:f7:de:dc:76:c7:e4:7b:a7:d9:cc:48:34:ec:af:16:
e3:0f:6e:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpykzFC552iNnuf4POjKkSLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMjM2MzkwNjBmZjg3YTc3ZmM2N2E2ZTAzYzBjNGRkMmFl
NGMzOTEwHhcNMjUxMTExMTEwMDQwWhcNMjUxMTEyMTEwMDQwWjAzMTEwLwYDVQQD
EyhjMTIzMmE2YzNlODM0Y2E3YzNjOWY5MGJhYjA1MTc5ZjQ3NTY4MTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurRhKuYaNMZAcc+nxVMn+GlSIcvR
hFtVQ83/EKs4DcNPNHI935XTWWfDfcu97M2pEMDgcCJ00B18ElPDQu7i8hAddDEB
HAzZ5cH+uCnS4T7QyXKj/z3rZsijcewzMyTa7B8gkzJl/F0UP+RvYfOptaJlWLHo
0Ayr9VRC4HKN5lqI53olR5WRJLk0bHOf5IGlEP5TClqea012kfP2OSvTdNzzODg3
6jtFg4kzMtF8ZFnwW79NfGf7BctkTOlAXERvDAS/qi5W8tp23rLjMUZy5bTt/mFW
hcd0qiT6j2DqEAF+wlTwqH2dEoZnRXJB1t79DU2qJf1hEy0uZocM185jfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEjKmw+g0ynw8n5C6sFF59HVoExMB8GA1UdIwQY
MBaAFJsjY5Bg/4enf8Z6bgPAxN0q5MORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXlOamtHRF9oNmRfeG5wdUE4REUzU3JrdzVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81ZDVmNzMtNjNiOS00YWFhLWE4ZWMt
NWFmYzNhNGZlNTQyLzEvbXlOamtHRF9oNmRfeG5wdUE4REUzU3JrdzVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81ZDVmNzMtNjNiOS00YWFhLWE4ZWMtNWFmYzNhNGZlNTQy
LzEvbXlOamtHRF9oNmRfeG5wdUE4REUzU3JrdzVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEx/PLBer
14tFO8B/KlYgmI3p4RON5tszqHVINHI9i1n/sPzFX2Gw7I4BBvHIW1qUDCIsjbnl
QmQ+VifGPSQIWKKOquTkz3Z7JGpCyloD2WhR6CouwsTgXs3qU/ga2+N/ytmU1XT5
n01cHgT9ZTSKm0BTrDGgfSWsnK2OnLrjTBAbjxf5gi8oOpWXpV8iB+lnd9en7VMe
kb5CqJ8+YLiQ/0T7UtOUhFSUgAdmjH8n3MNrnEYbdmet2VZMp4iENSD+XOjqZhea
IMVVCShC0r9ziRWCJYSXyVwmySnU4ESFHN6ZYS/0QuFBHOPWuiDf997cdsfke6fZ
zEg07K8W4w9urA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:29 2025 by rpki-client