Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
File: NNEMl2M2XzPU3hEJftXhmsm3qP8.mft (raw, json)
Hash identifier: DjGAxG4XuuhOIP5WqJrqO1Zd77jRUQ6kQDWolkMiTxo=
Subject key identifier: 22:07:96:DE:63:C1:35:BA:61:8C:40:57:DF:85:63:90:D6:8A:89:C5
Authority key identifier: 34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
Certificate issuer: /CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Certificate serial: 019A7180A0EE5456CEE0FD9BAFF4996DE9F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
Manifest number: 013A
Signing time: Tue 11 Nov 2025 06:00:46 +0000
Manifest this update: Tue 11 Nov 2025 06:00:46 +0000
Manifest next update: Wed 12 Nov 2025 06:00:46 +0000
Files and hashes: 1: NNEMl2M2XzPU3hEJftXhmsm3qP8.crl (hash: RpyMo4HsXAQ4fTyERYO9B4x1Utx9MnpKMfomLWq2scQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:a0:ee:54:56:ce:e0:fd:9b:af:f4:99:6d:e9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Validity
Not Before: Nov 11 06:00:46 2025 GMT
Not After : Nov 12 06:00:46 2025 GMT
Subject: CN=220796de63c135ba618c4057df856390d68a89c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:45:9b:ff:71:0f:f9:7d:c1:d5:20:9c:4f:e5:
cc:50:d0:fd:7a:f7:47:3c:d0:f8:32:a2:88:c6:c5:
b2:41:63:ca:39:5c:d9:78:7f:ad:de:be:4b:d7:c2:
86:0b:a7:57:32:db:a3:9c:fd:3b:36:67:77:18:2d:
4b:35:e5:2e:05:7a:b4:d3:26:02:ee:13:62:7b:25:
6b:3b:9a:1c:39:01:03:cc:a8:65:31:f8:3e:f1:a0:
54:de:1e:b8:77:6a:2c:c4:56:3e:04:1f:2a:b5:ef:
43:56:28:a0:c9:50:84:52:74:a3:12:cf:da:57:ad:
df:d9:2e:ad:3b:28:60:a5:8b:a7:08:52:81:17:ec:
58:67:ac:8c:9e:d0:e6:3d:f8:07:df:04:0c:5d:f2:
78:bf:9a:e6:5f:73:59:b3:d1:fe:35:a2:2b:c1:63:
80:1c:2a:b3:d9:95:a2:78:99:71:3f:57:27:af:9f:
c9:c4:a1:31:ca:67:13:f7:3c:48:3c:61:7c:65:4a:
cf:07:4a:bf:a1:be:ec:e1:99:84:f1:00:96:12:59:
45:44:b3:be:ee:60:d6:d6:bd:09:b3:cf:34:e5:f5:
1e:69:da:3e:20:46:7b:91:84:e5:26:97:7f:5a:de:
3b:07:e2:6a:45:94:d3:5c:d7:2c:6c:39:be:33:50:
ab:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:07:96:DE:63:C1:35:BA:61:8C:40:57:DF:85:63:90:D6:8A:89:C5
X509v3 Authority Key Identifier:
keyid:34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fe:c1:d6:0c:3c:ff:46:9e:9e:90:a1:a9:bf:54:96:af:68:
39:43:e7:8a:e2:67:a7:44:c1:82:97:7d:38:30:f6:4b:d4:07:
43:e0:2c:ca:47:e7:60:21:06:6a:dd:68:36:84:4e:22:f4:3a:
21:c6:cc:e2:fc:71:93:3e:5b:c0:cc:68:f8:28:22:44:5c:a6:
a8:3b:89:0f:af:02:dc:9b:ea:57:b0:0a:e3:54:b8:7b:61:98:
47:67:4f:3f:56:ab:d0:69:bf:ba:0e:75:06:95:a8:8d:cf:f0:
59:37:7a:78:bf:6d:36:d9:30:10:5a:63:4d:20:e4:67:8f:31:
ca:27:0e:d1:eb:25:e2:31:bd:c0:ab:9d:c4:c2:ab:76:f6:29:
1c:02:03:96:52:17:0a:27:f8:b6:64:36:e0:f9:6b:e7:b0:99:
bd:60:59:8d:f5:e4:c6:21:c6:b3:a8:08:51:f5:d6:d8:30:17:
5e:5b:f2:76:4b:d8:d6:c5:3a:87:79:38:65:ff:11:49:27:98:
48:30:3e:e0:49:dc:cf:56:b4:a0:fd:70:fd:36:2e:e9:45:19:
7b:d8:ee:27:dc:0e:62:f3:32:84:71:b0:82:12:fb:10:d5:dd:
59:6f:32:d3:e5:44:1e:77:6e:90:05:ae:f4:12:36:f4:3d:9b:
d1:9c:f6:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxgKDuVFbO4P2br/SZbenxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZDEwYzk3NjMzNjVmMzNkNGRlMTEwOTdlZDVlMTlhYzli
N2E4ZmYwHhcNMjUxMTExMDYwMDQ2WhcNMjUxMTEyMDYwMDQ2WjAzMTEwLwYDVQQD
EygyMjA3OTZkZTYzYzEzNWJhNjE4YzQwNTdkZjg1NjM5MGQ2OGE4OWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkWb/3EP+X3B1SCcT+XMUND9evdH
PND4MqKIxsWyQWPKOVzZeH+t3r5L18KGC6dXMtujnP07Nmd3GC1LNeUuBXq00yYC
7hNieyVrO5ocOQEDzKhlMfg+8aBU3h64d2osxFY+BB8qte9DViigyVCEUnSjEs/a
V63f2S6tOyhgpYunCFKBF+xYZ6yMntDmPfgH3wQMXfJ4v5rmX3NZs9H+NaIrwWOA
HCqz2ZWieJlxP1cnr5/JxKExymcT9zxIPGF8ZUrPB0q/ob7s4ZmE8QCWEllFRLO+
7mDW1r0Js8805fUeado+IEZ7kYTlJpd/Wt47B+JqRZTTXNcsbDm+M1CraQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIHlt5jwTW6YYxAV9+FY5DWionFMB8GA1UdIwQY
MBaAFDTRDJdjNl8z1N4RCX7V4ZrJt6j/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk5FTWwyTTJYelBVM2hFSmZ0WGhtc20zcVA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC81N2JjZmYtMTViZS00ZmQ4LWI0OTEt
N2Y4Nzg0ZTIxOWU5LzEvTk5FTWwyTTJYelBVM2hFSmZ0WGhtc20zcVA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC81N2JjZmYtMTViZS00ZmQ4LWI0OTEtN2Y4Nzg0ZTIxOWU5
LzEvTk5FTWwyTTJYelBVM2hFSmZ0WGhtc20zcVA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYf7B1gw8
/0aenpChqb9Ulq9oOUPniuJnp0TBgpd9ODD2S9QHQ+AsykfnYCEGat1oNoROIvQ6
IcbM4vxxkz5bwMxo+CgiRFymqDuJD68C3JvqV7AK41S4e2GYR2dPP1ar0Gm/ug51
BpWojc/wWTd6eL9tNtkwEFpjTSDkZ48xyicO0esl4jG9wKudxMKrdvYpHAIDllIX
Cif4tmQ24Plr57CZvWBZjfXkxiHGs6gIUfXW2DAXXlvydkvY1sU6h3k4Zf8RSSeY
SDA+4Encz1a0oP1w/TYu6UUZe9juJ9wOYvMyhHGwghL7ENXdWW8y0+VEHndukAWu
9BI29D2b0Zz2HA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:35 2025 by rpki-client