Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
File: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft (raw, json)
Hash identifier: 73YM75MBlFFINNYbh/S3tNW1HKuE7z4oivQ9isb82/Y=
Subject key identifier: BB:F5:5C:DC:9E:A6:B6:43:61:81:78:20:8F:4C:B0:4E:D6:3D:D4:F5
Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
Certificate issuer: /CN=35a4ce50d0cde415473313b11b85719408faba24
Certificate serial: 019A56AD83B1AA10FB6E8A696F7C99251778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
Manifest number: 06BB
Signing time: Thu 06 Nov 2025 01:00:03 +0000
Manifest this update: Thu 06 Nov 2025 01:00:03 +0000
Manifest next update: Fri 07 Nov 2025 01:00:03 +0000
Files and hashes: 1: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl (hash: 6KlHSdFEI0JUisSyOXl3uryPE1g3fnEnnc58dFlpcUo=)
2: uaKznLkiq_dgHHhfSIgbJMtsM9Y.roa (hash: 2urEmTA6x5wxy7tL41R+/4xA4ZeFcK1CcklGg3fdBt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 01:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:ad:83:b1:aa:10:fb:6e:8a:69:6f:7c:99:25:17:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24
Validity
Not Before: Nov 6 01:00:03 2025 GMT
Not After : Nov 7 01:00:03 2025 GMT
Subject: CN=bbf55cdc9ea6b643618178208f4cb04ed63dd4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d0:eb:d4:99:6e:c4:a9:a9:19:82:6d:9a:7b:
f8:02:36:c1:fb:7a:4d:95:48:5a:a1:dc:74:6d:60:
09:03:c8:42:52:f4:41:8e:0b:c7:12:e7:a8:3c:c9:
75:26:cf:45:6c:89:e3:e3:6b:00:01:37:ac:70:00:
ea:9d:39:36:46:6f:92:5c:ef:22:bf:59:7f:22:35:
45:2e:16:44:60:80:3a:6c:2b:b0:5b:1a:4d:11:40:
60:ab:e7:2a:61:a7:08:8c:da:d5:40:72:de:b0:95:
38:1d:a7:80:3f:8d:88:aa:2c:5f:98:e9:26:50:ec:
76:a7:f0:7a:15:f5:c3:68:7d:de:a8:a1:47:10:f1:
58:cb:b7:15:60:05:36:43:7d:41:92:4b:f7:19:63:
a1:72:86:db:44:43:c3:3b:4f:73:3d:80:cb:a9:b5:
cd:b1:f4:e9:e9:29:05:8e:9d:50:49:ec:a1:f3:ae:
6d:5e:d0:8b:d9:89:55:17:37:67:b8:84:c8:bc:43:
a6:3e:2e:eb:f7:a5:73:6d:96:86:18:a6:f9:90:35:
5c:17:fc:f4:7d:3e:44:59:73:c4:d3:91:6a:93:3f:
a6:48:6d:49:90:b3:f0:19:e6:06:f3:e2:f6:48:8c:
31:71:1c:8f:40:1f:e7:83:69:18:ee:c1:58:e0:8f:
c5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F5:5C:DC:9E:A6:B6:43:61:81:78:20:8F:4C:B0:4E:D6:3D:D4:F5
X509v3 Authority Key Identifier:
keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:09:e8:76:01:7e:05:93:6a:13:f9:2d:1e:76:55:13:cf:72:
d5:93:df:ae:aa:7c:4b:ae:3c:da:4e:58:7c:d1:d3:83:b9:5c:
25:b3:be:2a:86:ee:d2:88:a8:24:04:09:bf:a8:9e:59:75:86:
85:65:61:a3:fc:12:89:1c:74:03:bf:00:9f:bd:ee:dd:97:b1:
56:8b:12:cf:19:91:63:9d:89:91:8e:50:f3:1a:60:6f:3c:d9:
68:74:0f:a7:34:67:cc:a2:e7:c9:46:a4:b5:37:72:b9:96:78:
da:d9:ba:4a:1e:b9:07:8a:87:4f:65:73:fd:aa:bd:99:1b:bc:
12:a5:a2:25:8b:c1:66:a3:c4:56:1e:65:bd:63:9b:05:0a:2b:
2a:bc:ae:be:2f:11:3e:79:d2:1e:41:9a:47:b0:d0:72:5f:2d:
64:84:fb:56:14:29:76:ae:48:c0:40:0c:61:9c:65:a7:56:bc:
85:25:72:8c:63:16:ba:f8:3f:f0:ab:ed:06:67:9e:90:61:64:
79:4f:4a:c4:f0:63:f6:af:c1:6a:7c:8f:60:0b:de:45:e7:79:
19:f3:55:ed:c7:e3:64:64:38:05:a1:4e:20:6c:8b:43:5c:16:
cd:f8:fc:6a:1b:29:34:22:15:38:1f:0e:57:ae:f1:ef:87:5c:
f6:e8:48:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpWrYOxqhD7boppb3yZJRd4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1YTRjZTUwZDBjZGU0MTU0NzMzMTNiMTFiODU3MTk0MDhm
YWJhMjQwHhcNMjUxMTA2MDEwMDAzWhcNMjUxMTA3MDEwMDAzWjAzMTEwLwYDVQQD
EyhiYmY1NWNkYzllYTZiNjQzNjE4MTc4MjA4ZjRjYjA0ZWQ2M2RkNGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9Dr1JluxKmpGYJtmnv4AjbB+3pN
lUhaodx0bWAJA8hCUvRBjgvHEueoPMl1Js9FbInj42sAATescADqnTk2Rm+SXO8i
v1l/IjVFLhZEYIA6bCuwWxpNEUBgq+cqYacIjNrVQHLesJU4HaeAP42IqixfmOkm
UOx2p/B6FfXDaH3eqKFHEPFYy7cVYAU2Q31Bkkv3GWOhcobbREPDO09zPYDLqbXN
sfTp6SkFjp1QSeyh865tXtCL2YlVFzdnuITIvEOmPi7r96VzbZaGGKb5kDVcF/z0
fT5EWXPE05Fqkz+mSG1JkLPwGeYG8+L2SIwxcRyPQB/ng2kY7sFY4I/FXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLv1XNyeprZDYYF4II9MsE7WPdT1MB8GA1UdIwQY
MBaAFDWkzlDQzeQVRzMTsRuFcZQI+rokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmFUT1VORE41QlZITXhPeEc0VnhsQWo2dWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9iNTBiMWMtMmJjNS00MzgyLWEyN2It
MDNiNjRjMTkxZDRhLzEvTmFUT1VORE41QlZITXhPeEc0VnhsQWo2dWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9iNTBiMWMtMmJjNS00MzgyLWEyN2ItMDNiNjRjMTkxZDRh
LzEvTmFUT1VORE41QlZITXhPeEc0VnhsQWo2dWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQnodgF+
BZNqE/ktHnZVE89y1ZPfrqp8S6482k5YfNHTg7lcJbO+Kobu0oioJAQJv6ieWXWG
hWVho/wSiRx0A78An73u3ZexVosSzxmRY52JkY5Q8xpgbzzZaHQPpzRnzKLnyUak
tTdyuZZ42tm6Sh65B4qHT2Vz/aq9mRu8EqWiJYvBZqPEVh5lvWObBQorKryuvi8R
PnnSHkGaR7DQcl8tZIT7VhQpdq5IwEAMYZxlp1a8hSVyjGMWuvg/8KvtBmeekGFk
eU9KxPBj9q/BanyPYAveRed5GfNV7cfjZGQ4BaFOIGyLQ1wWzfj8ahspNCIVOB8O
V67x74dc9uhIuw==
-----END CERTIFICATE-----
Generated at Thu Nov 6 09:00:13 2025 by rpki-client