Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
File: NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft (raw, json)
Hash identifier: wvDC0GjehDz7A+rVvxDu7FxqNKqHT8EP38NiOer4uf4=
Subject key identifier: 65:64:15:5C:C2:27:F6:51:E0:60:D0:7E:DE:50:CC:B7:B3:7F:54:75
Authority key identifier: 36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3
Certificate issuer: /CN=363548ed4628966248204c2fe69065f0d7b527a3
Certificate serial: 019A7225C6938502BB3FD9F01749EC6E1B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:09 +0000
Manifest this update: Tue 11 Nov 2025 09:01:09 +0000
Manifest next update: Wed 12 Nov 2025 09:01:09 +0000
Files and hashes: 1: NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl (hash: 4jFYeN1XejZaiAwG3xA5/DDbU0avhihUt4fHI4ubPz0=)
2: ZTPqCUD63V4eQMXnLn6AnTQCitU.roa (hash: ywlhEvz+62iFTUdrK6be6oxB9Yvs+N63Zrh3s7mdFzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c6:93:85:02:bb:3f:d9:f0:17:49:ec:6e:1b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363548ed4628966248204c2fe69065f0d7b527a3
Validity
Not Before: Nov 11 09:01:09 2025 GMT
Not After : Nov 12 09:01:09 2025 GMT
Subject: CN=6564155cc227f651e060d07ede50ccb7b37f5475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6c:f3:d3:02:0b:cc:4d:97:16:52:5f:31:04:
16:36:91:6a:c5:63:c1:74:c8:c1:5e:f6:59:64:a0:
0f:45:d2:85:dd:3e:d9:04:3b:e4:4f:11:1a:2a:1d:
de:07:42:a4:d9:61:32:92:1e:10:1d:11:a5:eb:fb:
3c:fa:3a:42:36:6c:f3:1a:78:aa:75:ce:6c:5d:9e:
7d:24:18:4b:de:be:f7:b3:93:71:d8:9e:34:a5:4b:
5d:f9:38:ef:c0:cc:d8:d9:4d:a8:31:2d:15:35:fb:
e6:33:4c:e7:cb:82:a5:b9:1f:e8:1b:c4:b8:4b:74:
c1:40:79:0c:eb:b0:31:08:57:ec:52:48:fa:18:57:
1b:ba:79:fc:89:29:91:74:38:f6:59:3c:7e:0d:bc:
a8:03:45:2c:f9:f4:71:c3:b2:91:8e:49:37:7f:52:
05:15:a5:b3:5d:af:4f:49:26:cc:8b:d1:7a:17:85:
e3:22:7b:97:dd:0c:55:07:46:3c:96:32:8c:72:2f:
ae:2d:92:8d:62:b4:81:d7:59:e9:4e:da:86:b0:c5:
36:7f:e0:79:52:36:b1:e7:a3:86:91:95:37:ad:6d:
f1:ff:e6:6d:77:1f:86:61:88:62:1d:f1:6b:bf:94:
8e:93:21:7d:90:1a:98:b5:d9:b8:c0:08:d4:0c:c4:
9b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:64:15:5C:C2:27:F6:51:E0:60:D0:7E:DE:50:CC:B7:B3:7F:54:75
X509v3 Authority Key Identifier:
keyid:36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d1:52:80:bd:a0:a7:0e:cd:8c:27:40:20:aa:e4:d8:a2:bc:
48:4d:5c:46:57:90:a5:51:1e:01:a9:46:db:a6:ab:db:ad:00:
3b:90:e7:f2:40:ba:4e:e5:42:8b:94:e2:06:ee:93:1a:3b:4c:
65:7f:19:a4:32:6f:ff:22:31:1b:ee:0f:bc:30:90:4b:21:ef:
6a:34:1c:4a:1a:54:cf:f1:e5:9d:12:f9:58:3a:a5:4d:24:47:
cf:72:75:61:01:dd:dc:a2:db:e5:30:53:44:ff:06:13:43:2f:
b5:93:d8:b0:42:5e:d1:fa:56:37:3d:8f:13:07:aa:5a:f4:1a:
9a:e9:a3:6d:07:06:01:91:74:9f:f0:8d:cd:d0:bc:06:50:77:
a0:8d:c4:9e:b2:3c:a3:66:d5:d0:b6:c5:5c:57:72:e5:51:de:
0e:05:fb:21:2e:5b:03:bf:7a:cf:56:47:19:34:bc:e0:c8:6a:
5a:ab:93:45:3b:dc:de:d9:50:ea:09:b5:2a:e5:46:10:5d:cd:
63:6c:3d:5e:e3:84:63:eb:f8:5d:d5:3d:2c:07:e9:d6:26:52:
fc:b6:4a:b4:b8:3c:b7:2e:29:d2:29:56:75:b5:c0:2e:79:10:
5e:6d:1b:19:fe:b1:47:45:51:76:c1:84:3f:a7:3d:3e:06:fe:
2c:5d:82:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:11 2025 by rpki-client