Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
File: NWrJx2mXb24ugqrM_iObaqGSI3g.mft (raw, json)
Hash identifier: iZuVntxnNqoFqXudT51CWbNbP1myioQP6Q/bUude6Hs=
Subject key identifier: C8:AF:97:E8:DD:54:7A:6B:58:79:E3:D6:14:CF:B2:8E:71:39:05:A2
Authority key identifier: 35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
Certificate issuer: /CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Certificate serial: 019A72933387F65FFDCCA7CD571C60E273B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 11:00:40 +0000
Manifest this update: Tue 11 Nov 2025 11:00:40 +0000
Manifest next update: Wed 12 Nov 2025 11:00:40 +0000
Files and hashes: 1: NWrJx2mXb24ugqrM_iObaqGSI3g.crl (hash: cjOxvSh6ucaWshk/Im0CUH8hS1em4IHfCnk6Ai48aoo=)
2: kVipI_xyp0_kuJlOJOnoAHsePks.roa (hash: 1FUuhHfAvSDiWJAZOii+4sL3nFhAdH6ZW0fC89DJLKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:33:87:f6:5f:fd:cc:a7:cd:57:1c:60:e2:73:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Validity
Not Before: Nov 11 11:00:40 2025 GMT
Not After : Nov 12 11:00:40 2025 GMT
Subject: CN=c8af97e8dd547a6b5879e3d614cfb28e713905a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:f1:94:a0:28:6d:ca:96:7d:65:44:0e:7d:
7e:da:3d:41:d3:23:e8:ae:91:52:5e:8f:07:25:d8:
91:3d:3e:0f:54:5c:38:06:23:6b:37:90:e8:8f:16:
3b:3c:36:5e:b2:5c:bc:f3:d5:6e:f4:3d:d4:77:fa:
12:de:01:aa:4b:4a:68:89:7c:a7:96:a6:78:a3:d7:
f4:8e:a3:f4:d9:be:b4:96:89:54:42:7f:92:67:56:
f2:45:f8:69:fc:05:a9:92:c3:10:e5:96:df:c6:68:
dd:54:dd:f6:b7:58:ec:b7:97:c5:ac:91:01:1a:8d:
c1:d7:27:d4:d7:c5:7b:92:35:87:7f:04:d7:0c:e1:
90:1a:fb:46:7f:9d:c3:ce:0f:07:8d:36:b6:5f:a3:
dc:e5:39:a4:6a:62:de:0d:83:0b:2d:78:93:9a:de:
23:8c:5e:2d:b7:2c:fe:a8:37:f5:ad:1c:25:2e:d2:
04:71:ad:76:11:f4:80:e7:01:bb:72:ff:ca:5f:ed:
55:d5:ba:eb:21:72:56:66:fb:5a:8a:0c:06:d8:ce:
0a:f3:95:a8:24:a6:9f:e2:4e:92:79:b3:a4:46:a0:
a3:27:a1:27:12:0e:f7:45:40:d7:b6:8e:b1:27:c6:
bd:9f:21:d3:77:e4:ae:ed:9e:6b:59:3f:73:c5:d3:
11:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AF:97:E8:DD:54:7A:6B:58:79:E3:D6:14:CF:B2:8E:71:39:05:A2
X509v3 Authority Key Identifier:
keyid:35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0f:34:b6:ba:ca:63:58:96:ed:5f:7e:d8:61:86:83:ad:2e:
e4:ef:a7:b3:12:ab:6e:b3:11:65:c3:b3:1f:7b:ae:24:33:d1:
c0:1f:b3:05:9d:b0:cc:74:e7:0c:13:9c:c1:32:b6:9d:f9:37:
b7:fc:5d:74:37:fa:95:ed:61:38:ac:10:f7:98:e6:b5:00:1b:
43:ce:22:99:cc:66:de:07:50:b1:9c:9a:6a:a1:07:94:c2:b8:
48:bc:63:0b:f6:87:c8:84:d9:08:1b:da:b3:35:ab:5b:85:0d:
8f:2d:1c:31:5b:12:0a:88:d0:18:fb:ec:fe:c2:19:38:5a:55:
e1:4d:5e:4d:74:d1:86:fd:16:51:f7:66:39:0b:c4:cd:be:c1:
b3:5e:bd:8a:c7:cb:74:7b:c4:5b:43:91:af:ed:f1:e5:ee:58:
f2:04:f4:35:8e:69:8f:e8:74:cd:26:9f:ae:b4:ed:00:87:5b:
18:8f:e9:ac:9d:49:5c:25:f7:67:1d:70:e2:2a:3f:02:bc:2b:
e7:55:d9:4f:40:5b:cf:5e:17:e6:33:5b:b2:ee:a0:e8:da:39:
69:17:2f:24:37:dd:c5:87:7d:c4:af:22:90:77:90:22:75:39:
f9:3c:7d:bf:41:16:21:37:47:c2:ff:48:38:a9:10:de:4a:a7:
fc:ef:5a:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpykzOH9l/9zKfNVxxg4nO4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NmFjOWM3Njk5NzZmNmUyZTgyYWFjY2ZlMjM5YjZhYTE5
MjIzNzgwHhcNMjUxMTExMTEwMDQwWhcNMjUxMTEyMTEwMDQwWjAzMTEwLwYDVQQD
EyhjOGFmOTdlOGRkNTQ3YTZiNTg3OWUzZDYxNGNmYjI4ZTcxMzkwNWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbnxlKAobcqWfWVEDn1+2j1B0yPo
rpFSXo8HJdiRPT4PVFw4BiNrN5DojxY7PDZesly889Vu9D3Ud/oS3gGqS0poiXyn
lqZ4o9f0jqP02b60lolUQn+SZ1byRfhp/AWpksMQ5ZbfxmjdVN32t1jst5fFrJEB
Go3B1yfU18V7kjWHfwTXDOGQGvtGf53Dzg8HjTa2X6Pc5TmkamLeDYMLLXiTmt4j
jF4ttyz+qDf1rRwlLtIEca12EfSA5wG7cv/KX+1V1brrIXJWZvtaigwG2M4K85Wo
JKaf4k6SebOkRqCjJ6EnEg73RUDXto6xJ8a9nyHTd+Su7Z5rWT9zxdMRdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMivl+jdVHprWHnj1hTPso5xOQWiMB8GA1UdIwQY
MBaAFDVqycdpl29uLoKqzP4jm2qhkiN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldySngybVhiMjR1Z3FyTV9pT2JhcUdTSTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZWZlNjctM2ViZC00NmNiLWJjYzgt
NmM2MWE5MDIzMTM5LzEvTldySngybVhiMjR1Z3FyTV9pT2JhcUdTSTNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lZWZlNjctM2ViZC00NmNiLWJjYzgtNmM2MWE5MDIzMTM5
LzEvTldySngybVhiMjR1Z3FyTV9pT2JhcUdTSTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQw80trrK
Y1iW7V9+2GGGg60u5O+nsxKrbrMRZcOzH3uuJDPRwB+zBZ2wzHTnDBOcwTK2nfk3
t/xddDf6le1hOKwQ95jmtQAbQ84imcxm3gdQsZyaaqEHlMK4SLxjC/aHyITZCBva
szWrW4UNjy0cMVsSCojQGPvs/sIZOFpV4U1eTXTRhv0WUfdmOQvEzb7Bs169isfL
dHvEW0ORr+3x5e5Y8gT0NY5pj+h0zSafrrTtAIdbGI/prJ1JXCX3Zx1w4io/Arwr
51XZT0Bbz14X5jNbsu6g6No5aRcvJDfdxYd9xK8ikHeQInU5+Tx9v0EWITdHwv9I
OKkQ3kqn/O9aPQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:25 2025 by rpki-client