Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.mft
File: Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.mft (raw, json)
Hash identifier: dNJo0iWuAl6D1lop6xi308LTKXW4GdrVRtQ/EIoT2Ms=
Subject key identifier: DB:D2:B1:DE:C8:C8:AC:E4:F2:61:93:E8:4F:D3:EB:69:6C:AB:C2:73
Authority key identifier: 36:4D:48:8B:8C:73:1B:91:D4:A5:A2:B9:0A:66:6C:EE:BC:0E:18:C9
Certificate issuer: /CN=364d488b8c731b91d4a5a2b90a666ceebc0e18c9
Certificate serial: 019A71B7FA714C092022A7C19F28FC90C5BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.mft
Manifest number: 0231
Signing time: Tue 11 Nov 2025 07:01:13 +0000
Manifest this update: Tue 11 Nov 2025 07:01:13 +0000
Manifest next update: Wed 12 Nov 2025 07:01:13 +0000
Files and hashes: 1: Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.crl (hash: N5otaoqpCUzc2aUD3VYnz+hJmRNwqBVXgBqiSXCGsq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:fa:71:4c:09:20:22:a7:c1:9f:28:fc:90:c5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=364d488b8c731b91d4a5a2b90a666ceebc0e18c9
Validity
Not Before: Nov 11 07:01:13 2025 GMT
Not After : Nov 12 07:01:13 2025 GMT
Subject: CN=dbd2b1dec8c8ace4f26193e84fd3eb696cabc273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:82:96:02:ca:7e:a1:99:2e:39:f4:3b:60:
b0:9a:82:f2:14:85:97:15:0c:61:8a:fe:97:27:57:
d8:2c:de:02:ce:4c:0a:86:46:5b:ca:a3:04:31:05:
8c:4f:cf:ee:f4:93:33:e2:dc:e3:96:58:3e:9e:75:
7b:cc:3e:63:66:26:26:6b:56:40:71:bc:b2:a3:a9:
4d:87:bd:d7:e1:0c:95:a7:79:4d:39:27:37:20:e3:
a4:2c:16:b3:e5:47:86:2a:02:4d:dc:0a:f8:26:46:
2b:55:1a:e3:0c:2a:14:6c:5b:2d:d5:65:cf:71:02:
cf:f4:a3:d2:64:fb:10:20:d9:f9:b2:ee:8d:4e:f5:
40:fd:4a:c1:9b:b4:41:52:cf:9f:d9:32:21:21:b2:
b9:2c:2e:e3:d0:28:d2:e9:a4:c5:1f:e2:c7:d6:d7:
a7:1a:a3:ba:96:67:a6:5e:a0:90:30:cb:64:0a:d0:
5c:69:f2:81:ba:87:61:1d:25:f5:bd:6b:8f:5e:08:
ba:eb:c8:e2:b7:de:43:94:bf:39:9c:24:86:c5:bd:
b8:af:e2:18:25:ac:b0:26:e4:44:13:a7:22:20:ce:
b0:6a:71:72:40:9a:64:b1:0f:e0:81:5b:25:e0:66:
08:c4:3a:20:aa:0a:ef:47:5c:07:65:d1:0a:99:fe:
7f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D2:B1:DE:C8:C8:AC:E4:F2:61:93:E8:4F:D3:EB:69:6C:AB:C2:73
X509v3 Authority Key Identifier:
keyid:36:4D:48:8B:8C:73:1B:91:D4:A5:A2:B9:0A:66:6C:EE:BC:0E:18:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bf:1a:6d:3e:ac:66:3e:96:bb:32:9b:e8:c2:33:29:71:f4:
c8:70:21:08:1d:8a:b6:dd:0e:72:a9:1b:82:b3:09:6e:54:d1:
f0:80:67:96:fb:bc:d4:f1:2c:ec:ff:b3:59:34:e6:78:29:77:
a7:c1:76:25:33:9c:6d:81:25:60:45:53:44:64:01:26:a8:d6:
12:3c:fd:90:58:9d:ee:25:da:e1:48:7a:42:cb:5d:8a:79:93:
cd:eb:1b:08:11:41:70:dd:a6:28:a0:a2:ed:43:d0:0a:ba:0e:
ce:10:42:a2:ef:d0:78:f0:82:c8:c5:e5:95:f9:87:dc:e6:13:
d0:29:bc:2f:18:39:c9:6d:ef:fb:21:7a:bf:11:a7:c9:99:48:
b0:59:1a:0f:6a:e3:4e:60:22:09:5c:67:4f:46:2a:c0:d7:24:
fa:a3:bb:f6:65:8e:0c:46:98:0a:11:6a:17:6a:ae:40:42:b4:
84:8f:5c:eb:43:48:06:4c:c6:35:3c:46:64:ce:89:27:4d:ed:
8a:47:ff:5b:43:05:bb:7a:54:30:8c:bf:9b:33:4f:81:2f:e8:
4f:32:42:63:50:b1:0f:55:66:40:6b:41:19:48:0f:36:6a:30:
4e:f9:5c:37:ae:b8:19:b6:e7:96:7c:b7:07:7a:cd:0c:24:07:
ea:ac:67:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt/pxTAkgIqfBnyj8kMW/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NGQ0ODhiOGM3MzFiOTFkNGE1YTJiOTBhNjY2Y2VlYmMw
ZTE4YzkwHhcNMjUxMTExMDcwMTEzWhcNMjUxMTEyMDcwMTEzWjAzMTEwLwYDVQQD
EyhkYmQyYjFkZWM4YzhhY2U0ZjI2MTkzZTg0ZmQzZWI2OTZjYWJjMjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+GClgLKfqGZLjn0O2CwmoLyFIWX
FQxhiv6XJ1fYLN4CzkwKhkZbyqMEMQWMT8/u9JMz4tzjllg+nnV7zD5jZiYma1ZA
cbyyo6lNh73X4QyVp3lNOSc3IOOkLBaz5UeGKgJN3Ar4JkYrVRrjDCoUbFst1WXP
cQLP9KPSZPsQINn5su6NTvVA/UrBm7RBUs+f2TIhIbK5LC7j0CjS6aTFH+LH1ten
GqO6lmemXqCQMMtkCtBcafKBuodhHSX1vWuPXgi668jit95DlL85nCSGxb24r+IY
JaywJuREE6ciIM6wanFyQJpksQ/ggVsl4GYIxDogqgrvR1wHZdEKmf5/gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvSsd7IyKzk8mGT6E/T62lsq8JzMB8GA1UdIwQY
MBaAFDZNSIuMcxuR1KWiuQpmbO68DhjJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmsxSWk0eHpHNUhVcGFLNUNtWnM3cndPR01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS84N2YyYTAtZTA3Zi00ZDEwLWFhOWIt
MmQwNmViN2YyOTlmLzEvTmsxSWk0eHpHNUhVcGFLNUNtWnM3cndPR01rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS84N2YyYTAtZTA3Zi00ZDEwLWFhOWItMmQwNmViN2YyOTlm
LzEvTmsxSWk0eHpHNUhVcGFLNUNtWnM3cndPR01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATr8abT6s
Zj6WuzKb6MIzKXH0yHAhCB2Ktt0OcqkbgrMJblTR8IBnlvu81PEs7P+zWTTmeCl3
p8F2JTOcbYElYEVTRGQBJqjWEjz9kFid7iXa4Uh6QstdinmTzesbCBFBcN2mKKCi
7UPQCroOzhBCou/QePCCyMXllfmH3OYT0Cm8Lxg5yW3v+yF6vxGnyZlIsFkaD2rj
TmAiCVxnT0YqwNck+qO79mWODEaYChFqF2quQEK0hI9c60NIBkzGNTxGZM6JJ03t
ikf/W0MFu3pUMIy/mzNPgS/oTzJCY1CxD1VmQGtBGUgPNmowTvlcN664Gbbnlny3
B3rNDCQH6qxnmQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:12 2025 by rpki-client