Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
File: NFMcVLHnlWwsw3GyPgp1VnqidRg.mft (raw, json)
Hash identifier: fRhE8RhAaWTFGPGddhUldyy+Ii5T6DH2qNDIVKN9TBA=
Subject key identifier: 45:DD:7F:E2:3C:F4:2A:3B:BB:F6:CF:6D:91:47:53:6E:32:BA:FC:76
Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
Certificate issuer: /CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Certificate serial: 019934929E02E0782BD6A5C0ADE82C25C3F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
Manifest number: 0E2B
Signing time: Wed 10 Sep 2025 17:00:47 +0000
Manifest this update: Wed 10 Sep 2025 17:00:47 +0000
Manifest next update: Thu 11 Sep 2025 17:00:47 +0000
Files and hashes: 1: 3YiK7LZ7AMKa5EcFW6jtHBACtD8.roa (hash: JkF6y7HhM9pOrm+1lX0wSDkEqrCfWM0YVrPhtMo1N3g=)
2: IMuaaqkXSGjmCph5e3uk681ceAc.roa (hash: IjS3EjK/LCrXgvu7toh9AQWnzqQYr/P4/Fdrho/vCP8=)
3: NFMcVLHnlWwsw3GyPgp1VnqidRg.crl (hash: a+8qI2R2wGbiLYNnF9OjzlLgrRYSsTqNzGvKHl3BqF4=)
4: o5Ci2OOaaozGkEZOG_f7fDu7-XY.roa (hash: 8C555rwsYeFI3kPoKdTROpSMNzbablYPsT0+Vk3NrV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:9e:02:e0:78:2b:d6:a5:c0:ad:e8:2c:25:c3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Validity
Not Before: Sep 10 17:00:47 2025 GMT
Not After : Sep 11 17:00:47 2025 GMT
Subject: CN=45dd7fe23cf42a3bbbf6cf6d9147536e32bafc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e5:67:fb:84:8f:71:6e:39:33:3b:1c:b7:f6:
16:42:31:06:1d:fb:88:1d:4a:5c:ea:43:b2:1f:eb:
09:47:29:f5:56:12:ff:5c:f0:94:c6:03:59:ab:a1:
2d:5c:d7:a1:83:4b:7c:4f:6e:3c:37:e9:22:2e:cd:
25:16:f3:07:bf:55:72:2d:93:eb:57:2e:ae:a8:ae:
7d:fe:45:e9:2a:4a:32:a9:62:68:3f:70:18:12:ae:
e5:c0:60:2b:2e:16:f9:20:c9:7b:a6:4c:13:b7:88:
f9:f9:22:b8:ac:20:f2:35:9f:b8:cd:ba:24:da:77:
39:7c:15:b6:6c:6d:42:02:53:9f:ea:c8:07:16:cb:
78:4a:8a:2c:4b:3e:eb:48:a4:ea:94:0a:0e:0e:8e:
d3:ed:50:1e:ac:98:dc:f8:be:8c:d9:ff:7d:a7:e6:
0b:0c:10:b9:1e:5b:fb:67:03:c1:a2:0a:82:eb:9e:
2a:69:63:9a:81:16:9b:e8:0c:67:93:ba:30:1b:3b:
dd:78:c6:ab:b9:15:05:dc:08:d7:af:e3:94:73:6d:
54:23:4d:10:03:70:b5:50:71:89:30:fb:44:36:67:
08:90:62:09:4f:55:92:23:3d:88:f4:9c:27:f0:7a:
31:cc:96:62:0d:68:29:cf:12:d9:a6:39:fc:f4:b2:
68:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DD:7F:E2:3C:F4:2A:3B:BB:F6:CF:6D:91:47:53:6E:32:BA:FC:76
X509v3 Authority Key Identifier:
keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:68:f8:73:0f:98:e5:81:6f:bf:8d:4a:e3:7b:98:7a:e5:fd:
75:03:4f:93:39:8f:e3:07:ea:9a:f7:15:77:b4:f1:36:0d:c3:
c6:c6:32:f0:ee:13:13:f8:c8:17:fd:37:9b:dc:0d:ce:74:fa:
f3:39:bf:12:fa:77:a6:ef:d0:84:a0:b3:c2:8c:f5:8f:25:ea:
04:60:db:99:4d:cf:56:16:3b:4a:e1:ed:59:97:44:fa:29:91:
d3:44:0c:0a:43:7a:f5:30:a4:1f:72:22:b2:50:cf:3a:58:e6:
c7:ff:2b:03:b1:17:77:54:f3:68:27:66:42:45:a1:89:8c:c0:
47:51:df:06:5c:69:58:42:fb:a3:50:a1:86:ab:88:09:c5:f2:
d1:1f:06:c3:53:e6:1e:13:70:ec:77:f7:65:d3:09:e5:71:04:
7e:ac:b1:6a:6f:7a:e1:33:aa:f3:10:07:96:3d:14:de:4b:16:
61:91:55:9b:13:82:1c:06:03:bf:1e:1d:65:e2:8d:2c:e6:d1:
f5:44:94:ce:0b:6e:18:41:25:18:b9:29:21:48:9a:7a:cb:ec:
bc:cc:b2:41:5e:67:c2:b0:90:eb:38:de:f0:03:3b:3b:5d:7c:
b8:0a:3b:ee:60:d2:4f:38:67:a8:73:48:15:79:1e:74:1d:17:
42:0f:1f:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk0kp4C4Hgr1qXAregsJcPzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NTMxYzU0YjFlNzk1NmMyY2MzNzFiMjNlMGE3NTU2N2Fh
Mjc1MTgwHhcNMjUwOTEwMTcwMDQ3WhcNMjUwOTExMTcwMDQ3WjAzMTEwLwYDVQQD
Eyg0NWRkN2ZlMjNjZjQyYTNiYmJmNmNmNmQ5MTQ3NTM2ZTMyYmFmYzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OVn+4SPcW45Mzsct/YWQjEGHfuI
HUpc6kOyH+sJRyn1VhL/XPCUxgNZq6EtXNehg0t8T248N+kiLs0lFvMHv1VyLZPr
Vy6uqK59/kXpKkoyqWJoP3AYEq7lwGArLhb5IMl7pkwTt4j5+SK4rCDyNZ+4zbok
2nc5fBW2bG1CAlOf6sgHFst4SoosSz7rSKTqlAoODo7T7VAerJjc+L6M2f99p+YL
DBC5Hlv7ZwPBogqC654qaWOagRab6Axnk7owGzvdeMaruRUF3AjXr+OUc21UI00Q
A3C1UHGJMPtENmcIkGIJT1WSIz2I9Jwn8HoxzJZiDWgpzxLZpjn89LJoywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXdf+I89Co7u/bPbZFHU24yuvx2MB8GA1UdIwQY
MBaAFDRTHFSx55VsLMNxsj4KdVZ6onUYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkZNY1ZMSG5sV3dzdzNHeVBncDFWbnFpZFJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS84ZWZhODYtYzM1Zi00MWI2LWFkMDEt
NDkwNjEwM2RiZDE2LzEvTkZNY1ZMSG5sV3dzdzNHeVBncDFWbnFpZFJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS84ZWZhODYtYzM1Zi00MWI2LWFkMDEtNDkwNjEwM2RiZDE2
LzEvTkZNY1ZMSG5sV3dzdzNHeVBncDFWbnFpZFJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWj4cw+Y
5YFvv41K43uYeuX9dQNPkzmP4wfqmvcVd7TxNg3DxsYy8O4TE/jIF/03m9wNznT6
8zm/Evp3pu/QhKCzwoz1jyXqBGDbmU3PVhY7SuHtWZdE+imR00QMCkN69TCkH3Ii
slDPOljmx/8rA7EXd1TzaCdmQkWhiYzAR1HfBlxpWEL7o1ChhquICcXy0R8Gw1Pm
HhNw7Hf3ZdMJ5XEEfqyxam964TOq8xAHlj0U3ksWYZFVmxOCHAYDvx4dZeKNLObR
9USUzgtuGEElGLkpIUiaesvsvMyyQV5nwrCQ6zje8AM7O118uAo77mDSTzhnqHNI
FXkedB0XQg8fUA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 21:28:25 2025 by rpki-client