Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft
File: NHkVOIV45h2IaEmiHXC6B1FJwaE.mft (raw, json)
Hash identifier: 0/UrcGXW/CjSV/LgmBO7j3EKXPpn339oHU2AYbyM7WY=
Subject key identifier: 96:DD:02:8D:27:7A:11:A5:FE:CA:FC:F6:45:F7:DC:8A:67:AF:06:C1
Authority key identifier: 34:79:15:38:85:78:E6:1D:88:68:49:A2:1D:70:BA:07:51:49:C1:A1
Certificate issuer: /CN=347915388578e61d886849a21d70ba075149c1a1
Certificate serial: 019A71B770C9AEAE74E6C590A3C9EA93074B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHkVOIV45h2IaEmiHXC6B1FJwaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft
Manifest number: 0CAB
Signing time: Tue 11 Nov 2025 07:00:38 +0000
Manifest this update: Tue 11 Nov 2025 07:00:38 +0000
Manifest next update: Wed 12 Nov 2025 07:00:38 +0000
Files and hashes: 1: NHkVOIV45h2IaEmiHXC6B1FJwaE.crl (hash: Dg3pHDA/2JdEYKdxt9NjbRsTGAheV/NkOB+o79pzHCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHkVOIV45h2IaEmiHXC6B1FJwaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:70:c9:ae:ae:74:e6:c5:90:a3:c9:ea:93:07:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347915388578e61d886849a21d70ba075149c1a1
Validity
Not Before: Nov 11 07:00:38 2025 GMT
Not After : Nov 12 07:00:38 2025 GMT
Subject: CN=96dd028d277a11a5fecafcf645f7dc8a67af06c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:1d:e4:b1:ba:2e:3c:d3:37:b0:8f:36:ad:
03:ee:33:30:2e:e1:ad:be:30:dd:ed:bb:d8:31:e1:
64:34:82:43:e2:55:19:c1:6e:9c:23:6a:06:a1:b1:
83:65:b4:f5:1c:1c:33:8e:e7:6c:28:e3:aa:48:f2:
91:88:ff:bc:1e:12:07:91:08:28:9c:bd:14:68:64:
f8:73:fd:59:c8:2a:d7:a0:23:9c:63:4d:89:58:6d:
ce:81:ee:02:12:61:9e:5d:e9:5c:3f:e8:c7:c4:76:
c9:8c:10:13:20:96:6a:03:30:06:4e:86:08:2a:8c:
a3:f4:a5:98:8a:0b:68:84:41:75:b2:ee:75:ed:83:
fb:8a:4e:43:f2:5c:1b:01:d9:4e:b7:21:3c:a7:a2:
fb:a3:ce:a9:ad:ff:39:52:c7:d6:3e:e5:a5:5f:3d:
e1:a4:26:10:66:11:00:95:45:4c:ce:77:3c:f5:dd:
e0:42:09:a7:10:d0:a2:a6:b7:58:90:50:65:e6:6e:
26:8c:d1:1c:38:7b:8e:50:d3:32:82:91:6a:93:77:
90:b5:82:a9:3d:d4:b6:58:f3:8f:f5:94:48:c0:e7:
a9:f7:67:6c:46:ab:00:50:a6:00:f5:7f:9d:cb:5d:
73:7c:e7:34:b0:18:85:75:89:bc:e1:3d:ac:6e:92:
be:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DD:02:8D:27:7A:11:A5:FE:CA:FC:F6:45:F7:DC:8A:67:AF:06:C1
X509v3 Authority Key Identifier:
keyid:34:79:15:38:85:78:E6:1D:88:68:49:A2:1D:70:BA:07:51:49:C1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHkVOIV45h2IaEmiHXC6B1FJwaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:85:1f:d8:2f:94:a2:ac:d5:6d:9c:9e:04:63:00:e7:eb:4e:
df:b7:e3:bf:38:84:e0:55:dd:f5:1c:66:cc:39:cd:4c:96:b0:
f7:f2:25:7d:d8:8e:17:48:2b:aa:26:6f:f0:24:9d:d2:ab:bb:
86:dd:6c:a2:1e:07:d6:ef:8b:52:1f:d5:f4:98:72:84:8d:ac:
17:a7:04:59:92:80:ca:00:92:92:7e:43:a7:7c:78:6b:11:0b:
43:53:62:1b:7b:f4:8e:44:b5:e2:07:28:2b:3a:a9:a5:84:3b:
64:f4:8c:10:07:47:61:db:90:a0:56:a9:0f:e8:35:ed:81:4d:
d4:fc:48:e8:7c:ca:0c:f3:40:20:9a:3b:00:25:57:f5:29:fd:
ab:0f:86:b0:12:d6:cf:98:c3:18:8d:da:de:33:b2:26:b4:c8:
54:a2:eb:f3:ff:69:31:9a:4e:d9:89:2b:ee:2f:91:27:a5:06:
cb:81:1d:64:b5:a9:c8:87:24:8a:9e:a3:b7:76:3b:de:c7:1e:
c1:d8:d9:9a:c6:cc:49:ed:d9:a0:78:e4:f3:a8:8d:dc:8b:02:
78:c8:d0:95:5c:fe:a8:62:37:4e:33:0d:86:be:87:6a:83:3d:
5d:a8:d6:4a:65:0f:0a:eb:14:7c:1e:95:81:60:7a:28:a5:1c:
2e:91:5b:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt3DJrq505sWQo8nqkwdLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NzkxNTM4ODU3OGU2MWQ4ODY4NDlhMjFkNzBiYTA3NTE0
OWMxYTEwHhcNMjUxMTExMDcwMDM4WhcNMjUxMTEyMDcwMDM4WjAzMTEwLwYDVQQD
Eyg5NmRkMDI4ZDI3N2ExMWE1ZmVjYWZjZjY0NWY3ZGM4YTY3YWYwNmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKQd5LG6LjzTN7CPNq0D7jMwLuGt
vjDd7bvYMeFkNIJD4lUZwW6cI2oGobGDZbT1HBwzjudsKOOqSPKRiP+8HhIHkQgo
nL0UaGT4c/1ZyCrXoCOcY02JWG3Oge4CEmGeXelcP+jHxHbJjBATIJZqAzAGToYI
Koyj9KWYigtohEF1su517YP7ik5D8lwbAdlOtyE8p6L7o86prf85UsfWPuWlXz3h
pCYQZhEAlUVMznc89d3gQgmnENCiprdYkFBl5m4mjNEcOHuOUNMygpFqk3eQtYKp
PdS2WPOP9ZRIwOep92dsRqsAUKYA9X+dy11zfOc0sBiFdYm84T2sbpK+3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbdAo0nehGl/sr89kX33IpnrwbBMB8GA1UdIwQY
MBaAFDR5FTiFeOYdiGhJoh1wugdRScGhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkhrVk9JVjQ1aDJJYUVtaUhYQzZCMUZKd2FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80ZWY2OWUtOTk3OC00MzZkLTkwYzkt
ODJkOTdjMDY5NTY2LzEvTkhrVk9JVjQ1aDJJYUVtaUhYQzZCMUZKd2FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80ZWY2OWUtOTk3OC00MzZkLTkwYzktODJkOTdjMDY5NTY2
LzEvTkhrVk9JVjQ1aDJJYUVtaUhYQzZCMUZKd2FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIUf2C+U
oqzVbZyeBGMA5+tO37fjvziE4FXd9RxmzDnNTJaw9/IlfdiOF0grqiZv8CSd0qu7
ht1soh4H1u+LUh/V9JhyhI2sF6cEWZKAygCSkn5Dp3x4axELQ1NiG3v0jkS14gco
KzqppYQ7ZPSMEAdHYduQoFapD+g17YFN1PxI6HzKDPNAIJo7ACVX9Sn9qw+GsBLW
z5jDGI3a3jOyJrTIVKLr8/9pMZpO2Ykr7i+RJ6UGy4EdZLWpyIckip6jt3Y73sce
wdjZmsbMSe3ZoHjk86iN3IsCeMjQlVz+qGI3TjMNhr6HaoM9XajWSmUPCusUfB6V
gWB6KKUcLpFbDQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:10 2025 by rpki-client