Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
File: NsxJTEqTS7s89Gulgk1mZsiUei8.mft (raw, json)
Hash identifier: +7/vCTHi+JBrpUJQRJ0GOtR7yLqSAp30wUIVAMqU8ds=
Subject key identifier: B9:F5:1D:E3:72:DC:7E:4A:83:AB:87:4E:4A:D5:A9:48:5C:38:3A:FE
Authority key identifier: 36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F
Certificate issuer: /CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f
Certificate serial: 019A7293E821E81066EA8D041A30D2A44123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
Manifest number: 06DD
Signing time: Tue 11 Nov 2025 11:01:27 +0000
Manifest this update: Tue 11 Nov 2025 11:01:27 +0000
Manifest next update: Wed 12 Nov 2025 11:01:27 +0000
Files and hashes: 1: NsxJTEqTS7s89Gulgk1mZsiUei8.crl (hash: 4+DQTTMRO2XXlMqhWGkNxa9RZA2kQlOmirqBnhkpBO4=)
2: StdZuEMdBW7X4NXLCF7XI4ppVlw.roa (hash: iq6H8WyI/GcnhvxxJGW8O2+6IQ6zatbRbbXOnldRxIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:e8:21:e8:10:66:ea:8d:04:1a:30:d2:a4:41:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f
Validity
Not Before: Nov 11 11:01:27 2025 GMT
Not After : Nov 12 11:01:27 2025 GMT
Subject: CN=b9f51de372dc7e4a83ab874e4ad5a9485c383afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dc:ba:f7:08:20:b8:11:e8:e9:60:14:94:f5:
2c:e7:47:ae:d5:27:5c:70:f2:a8:ec:00:fa:c5:29:
38:ee:d3:d6:ec:d6:a9:54:5a:82:60:0d:1e:b4:8f:
21:00:5f:ec:b9:19:b8:ff:c1:56:1b:60:53:33:15:
ef:72:7d:b2:15:97:d5:88:f7:a4:cc:65:0c:f0:a2:
80:47:d7:dd:63:4e:2c:56:7e:5c:99:ab:4c:79:05:
b4:5c:14:c9:83:91:a9:dd:c8:39:d8:0e:df:82:7a:
e7:f2:14:3a:ef:58:67:b8:0c:22:ab:33:4a:70:51:
ef:e9:48:b2:ba:7d:98:61:c1:c3:5a:26:dc:f0:51:
fc:b5:f0:a9:5b:50:fc:9a:11:bc:f6:02:d7:f5:81:
b4:5a:d3:5b:6d:85:3f:8f:5a:20:1d:72:57:b7:26:
f7:97:61:bd:ef:3b:81:5a:71:a7:08:b9:fd:c6:63:
35:c9:f1:6e:3b:ba:8c:70:7f:a0:92:cf:98:a8:e1:
7f:fb:e8:67:9c:3b:a3:ca:07:45:26:ef:36:c9:a1:
ca:75:26:42:1c:ee:6b:d4:02:d6:b4:62:97:ba:cc:
a9:c6:db:ed:65:31:a4:7a:b8:25:29:6d:49:f5:8d:
e6:61:de:fe:dc:fc:13:bb:13:6b:9f:49:7e:18:be:
69:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F5:1D:E3:72:DC:7E:4A:83:AB:87:4E:4A:D5:A9:48:5C:38:3A:FE
X509v3 Authority Key Identifier:
keyid:36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:64:a0:5d:0c:a4:07:4b:bb:88:67:74:7c:16:40:48:5e:fd:
f7:c0:4f:2c:1e:7e:fc:3d:4b:35:0a:1f:ff:c3:bd:37:e4:ce:
09:0b:79:14:ad:e4:76:69:ee:0d:85:c8:da:83:c4:3f:82:45:
ba:6c:de:e0:3b:11:dc:8a:e5:31:28:b5:ab:a9:d7:ac:1b:ac:
4d:35:4f:8a:31:fb:21:57:4f:85:df:dd:30:69:fb:b5:63:ec:
73:f7:4e:82:c9:82:46:d4:82:c3:a4:fe:55:77:74:df:62:1d:
3d:67:01:88:b1:a0:59:64:f1:c0:a1:31:dd:80:f2:9f:61:06:
fd:5a:17:bf:a6:19:7c:19:56:5e:b6:32:a8:da:2a:b9:dd:d6:
d3:89:5a:24:0f:9a:b3:c9:df:34:5f:1e:97:30:e4:f0:00:2d:
a5:61:d1:ac:77:35:35:25:b7:02:28:ec:1f:02:e1:20:d4:1e:
f8:a3:34:91:e5:92:37:24:07:2a:83:ed:03:93:62:86:0b:fe:
67:cd:36:c1:30:9e:f4:0b:ee:40:9f:74:23:3b:ed:df:e5:9a:
a0:05:a4:aa:65:a9:2f:9a:a5:ce:2d:8a:e8:fa:65:dc:f6:67:
92:63:a7:0d:fd:fd:89:70:20:68:12:e6:77:5a:7e:6d:71:d2:
e7:e0:cd:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk+gh6BBm6o0EGjDSpEEjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Y2M0OTRjNGE5MzRiYmIzY2Y0NmJhNTgyNGQ2NjY2Yzg5
NDdhMmYwHhcNMjUxMTExMTEwMTI3WhcNMjUxMTEyMTEwMTI3WjAzMTEwLwYDVQQD
EyhiOWY1MWRlMzcyZGM3ZTRhODNhYjg3NGU0YWQ1YTk0ODVjMzgzYWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuty69wgguBHo6WAUlPUs50eu1Sdc
cPKo7AD6xSk47tPW7NapVFqCYA0etI8hAF/suRm4/8FWG2BTMxXvcn2yFZfViPek
zGUM8KKAR9fdY04sVn5cmatMeQW0XBTJg5Gp3cg52A7fgnrn8hQ671hnuAwiqzNK
cFHv6Uiyun2YYcHDWibc8FH8tfCpW1D8mhG89gLX9YG0WtNbbYU/j1ogHXJXtyb3
l2G97zuBWnGnCLn9xmM1yfFuO7qMcH+gks+YqOF/++hnnDujygdFJu82yaHKdSZC
HO5r1ALWtGKXusypxtvtZTGkerglKW1J9Y3mYd7+3PwTuxNrn0l+GL5p9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLn1HeNy3H5Kg6uHTkrVqUhcODr+MB8GA1UdIwQY
MBaAFDbMSUxKk0u7PPRrpYJNZmbIlHovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnN4SlRFcVRTN3M4OUd1bGdrMW1ac2lVZWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83YTkwMDQtZTRkOS00ZjU0LTk5Mjgt
YjljODE2OTY1YTA0LzEvTnN4SlRFcVRTN3M4OUd1bGdrMW1ac2lVZWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS83YTkwMDQtZTRkOS00ZjU0LTk5MjgtYjljODE2OTY1YTA0
LzEvTnN4SlRFcVRTN3M4OUd1bGdrMW1ac2lVZWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGSgXQyk
B0u7iGd0fBZASF7998BPLB5+/D1LNQof/8O9N+TOCQt5FK3kdmnuDYXI2oPEP4JF
umze4DsR3IrlMSi1q6nXrBusTTVPijH7IVdPhd/dMGn7tWPsc/dOgsmCRtSCw6T+
VXd032IdPWcBiLGgWWTxwKEx3YDyn2EG/VoXv6YZfBlWXrYyqNoqud3W04laJA+a
s8nfNF8elzDk8AAtpWHRrHc1NSW3AijsHwLhINQe+KM0keWSNyQHKoPtA5Nihgv+
Z802wTCe9AvuQJ90Izvt3+WaoAWkqmWpL5qlzi2K6Ppl3PZnkmOnDf39iXAgaBLm
d1p+bXHS5+DNLQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:08 2025 by rpki-client