Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
File: NehMBjohgLI_X20xYqdbMJL1wY0.mft (raw, json)
Hash identifier: s7h3XqTsGOrmJS3v4UwvpWxVaI3QOrfXWdS+2nIqgGI=
Subject key identifier: EA:BC:F6:0C:E7:63:64:FA:0C:CB:93:97:56:FD:07:F4:5A:08:32:0E
Authority key identifier: 35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D
Certificate issuer: /CN=35e84c063a2180b23f5f6d3162a75b3092f5c18d
Certificate serial: 019A71EEAD5B447872615B403D7F9009D7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 08:00:58 +0000
Manifest this update: Tue 11 Nov 2025 08:00:58 +0000
Manifest next update: Wed 12 Nov 2025 08:00:58 +0000
Files and hashes: 1: NehMBjohgLI_X20xYqdbMJL1wY0.crl (hash: 1bYV8o8EYBQgaQ4fPesBgK59qfqf1/tOCvsfowOnpmA=)
2: W3mDa3qMM3UMHKwdjXNmQQYwzCo.roa (hash: uhcnNrB9w8L6u9yOsZumoNimMZDsDc9Fp+1S6uVCDDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ad:5b:44:78:72:61:5b:40:3d:7f:90:09:d7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e84c063a2180b23f5f6d3162a75b3092f5c18d
Validity
Not Before: Nov 11 08:00:58 2025 GMT
Not After : Nov 12 08:00:58 2025 GMT
Subject: CN=eabcf60ce76364fa0ccb939756fd07f45a08320e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:98:07:bb:e4:a1:d0:21:16:48:38:16:6c:
1f:1e:32:9b:5e:d6:21:9e:23:32:07:c5:cd:72:53:
27:ed:50:87:7c:2c:88:67:91:d9:8b:a9:e0:f3:5c:
37:7d:e2:7c:35:fc:f0:be:10:57:28:d9:ac:43:e4:
2e:69:f5:67:df:17:5b:18:36:63:bd:8b:74:bb:ce:
a0:84:14:8e:ee:2e:ab:35:37:e6:49:39:84:d8:d7:
99:73:ef:ac:65:6a:4b:2b:93:86:a0:be:9e:bd:e5:
42:f4:ea:34:6e:ed:cc:55:c4:51:29:1d:34:c5:5c:
cd:8d:0d:ef:88:d3:df:f6:69:5b:73:5f:b3:e5:52:
14:f5:18:09:0b:a1:23:02:33:59:14:b4:f9:fc:db:
be:a3:31:6c:14:f6:f0:0d:ee:ea:fe:6a:03:c4:3d:
a6:0c:37:60:3c:96:18:b8:52:86:1e:96:b5:81:6e:
c9:be:60:88:9d:03:8e:56:a6:12:9e:c9:cd:c9:ce:
c9:75:cd:35:a6:e5:64:ac:2e:e7:36:50:0d:0a:d4:
f0:89:26:79:cc:b3:d6:d7:d9:21:94:bd:82:32:f3:
fc:32:f8:18:ba:02:43:af:60:27:37:a3:eb:6c:cd:
61:2c:44:8f:7e:42:2e:dd:f7:6d:c0:eb:b9:69:00:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BC:F6:0C:E7:63:64:FA:0C:CB:93:97:56:FD:07:F4:5A:08:32:0E
X509v3 Authority Key Identifier:
keyid:35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:47:b2:4e:1d:42:64:78:82:ad:ef:1f:55:6a:3a:6e:eb:fd:
29:0b:60:b6:41:dc:0c:45:37:8d:21:62:39:d0:67:56:5e:54:
33:be:f1:a0:6f:5f:fc:10:cd:61:e7:66:b8:84:0a:09:53:7b:
18:dc:dd:fe:07:4d:08:12:7c:92:bb:ea:99:6c:46:2b:6f:45:
18:bd:19:30:69:9f:4a:90:36:7a:3f:bb:9b:8c:5f:07:02:14:
36:42:9b:e9:68:e0:fb:80:8d:10:41:bb:0d:66:54:27:28:c1:
8c:41:98:9e:3d:12:81:95:51:45:cf:9b:52:f6:95:4c:37:3f:
86:33:2b:5c:ba:71:23:f5:87:80:fe:fd:43:c1:3e:b0:e8:4d:
8d:58:6b:51:7e:c0:f7:dd:8b:75:cd:31:90:52:32:be:e8:55:
ec:73:32:b1:90:2e:c8:4d:6b:e3:cd:12:35:fe:91:c2:7a:bf:
b0:ee:f5:87:40:86:29:69:dc:d1:91:f5:80:f0:cb:43:41:65:
41:d0:4c:9e:bd:6b:62:6f:5e:9b:2a:56:75:03:5e:9c:1b:5f:
d1:68:89:67:58:03:17:4d:d5:ad:69:a4:95:aa:e6:19:01:d6:
20:10:5b:e0:02:54:47:1f:b9:05:e2:21:f5:c1:02:99:af:39:
ce:13:37:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:44 2025 by rpki-client