Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
File: NXMLuLJiPn9lphY2BNHIX5EGKI8.mft (raw, json)
Hash identifier: IjrS8YYcVxHzXiXxmdXmUsZaFLOUX8Gp0bYXaIOcWxc=
Subject key identifier: C4:0B:70:F6:8C:D6:07:8B:BA:18:05:55:6C:C8:72:96:B2:5C:AF:D2
Authority key identifier: 35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
Certificate issuer: /CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Certificate serial: 019A70DC5FC264E5C94ACBBAE0855769AF51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 03:01:21 +0000
Manifest this update: Tue 11 Nov 2025 03:01:21 +0000
Manifest next update: Wed 12 Nov 2025 03:01:21 +0000
Files and hashes: 1: 3u_UTWM5MnsnNlqUobIqKDYLwKo.roa (hash: veRRLy9ZMKOvJkYp1WIUbOdpjqnYEIFrYe5fkHyfQnc=)
2: NXMLuLJiPn9lphY2BNHIX5EGKI8.crl (hash: Xrcp7i9FymMMueoqaeWX4c6bx/sjV5a99pP8iHJCcd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:5f:c2:64:e5:c9:4a:cb:ba:e0:85:57:69:af:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Validity
Not Before: Nov 11 03:01:21 2025 GMT
Not After : Nov 12 03:01:21 2025 GMT
Subject: CN=c40b70f68cd6078bba1805556cc87296b25cafd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ac:30:5f:5f:59:d6:0d:a1:68:ca:8a:fc:16:
9e:cf:c2:28:93:db:9e:2f:b9:bc:e5:f6:2a:4b:95:
1c:5b:f2:da:b0:56:b8:c6:58:0a:b5:2b:d2:13:e1:
7a:02:e7:57:0d:31:be:38:e5:b2:27:87:fd:6e:c4:
60:bd:06:a9:9a:a2:be:41:0d:59:6b:05:5c:6d:29:
7d:2a:b2:d5:52:b3:d6:00:ef:80:be:fb:55:92:4d:
3e:7f:65:be:11:96:40:c5:81:5c:a0:64:c6:2c:10:
9e:5b:42:43:e8:da:31:9f:2d:eb:9d:4f:0f:66:88:
7c:25:a9:9d:2e:11:9f:54:9f:57:36:04:30:c6:13:
a6:4f:5b:a1:43:74:71:f7:e2:8b:77:6d:ab:b9:4f:
4b:d7:44:b8:45:3d:ab:a5:7a:5a:86:24:01:fc:39:
33:4b:fd:ff:a6:e7:42:01:3a:bb:e5:89:84:2f:65:
3e:43:70:13:d7:6c:d7:9d:05:20:2f:52:10:65:a0:
41:0b:1b:28:b7:3d:ba:00:f7:ad:c5:ea:f0:b1:cc:
01:e4:e7:96:19:55:e0:66:b6:d2:ce:8f:54:83:4e:
c9:d7:ae:d2:81:6e:a6:65:22:1a:e2:1a:70:b1:53:
bb:1e:58:cc:f6:95:93:c8:39:57:31:99:c7:f4:c0:
ac:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0B:70:F6:8C:D6:07:8B:BA:18:05:55:6C:C8:72:96:B2:5C:AF:D2
X509v3 Authority Key Identifier:
keyid:35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1c:84:97:3c:07:20:f9:ea:ba:86:03:64:00:0f:03:23:56:
31:4a:d0:ec:d8:47:e0:6b:9c:94:f5:ab:22:d9:11:86:3c:e9:
49:8f:2d:65:c5:e5:ed:e4:03:e9:8d:9c:2c:3b:d8:1a:b9:7d:
c2:ee:c8:02:70:5e:16:62:51:bc:33:77:91:63:da:0b:28:e7:
03:7b:c4:b9:f0:ef:b2:89:7b:2f:06:0c:70:be:46:1d:64:e9:
3e:23:de:ac:98:93:7d:09:fd:84:19:58:a9:82:bd:c2:1c:33:
9d:45:ee:92:80:4c:cb:ce:46:9d:75:a0:1d:4a:b1:83:15:7f:
6c:35:e3:20:58:63:8b:2a:d9:02:e3:8f:71:aa:e7:dd:d6:23:
4b:ec:f9:98:fe:af:0d:65:a0:1c:a9:0d:b2:26:39:1d:a1:8c:
15:58:e8:fd:6f:95:2b:1b:54:89:23:6d:24:bd:75:0f:85:a5:
c8:45:49:ff:8e:c9:be:d5:79:7d:12:83:cf:5e:3c:30:60:09:
3e:61:6d:2d:6d:36:5a:df:cf:17:f6:1d:72:02:50:39:f6:42:
e8:06:8c:cb:67:12:c3:28:a1:1a:3a:ab:26:bf:c4:4f:51:dd:
ec:82:b8:ae:15:cc:58:70:0d:13:71:f5:b6:7b:0b:d5:c7:1c:
22:00:f9:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3F/CZOXJSsu64IVXaa9RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NzMwYmI4YjI2MjNlN2Y2NWE2MTYzNjA0ZDFjODVmOTEw
NjI4OGYwHhcNMjUxMTExMDMwMTIxWhcNMjUxMTEyMDMwMTIxWjAzMTEwLwYDVQQD
EyhjNDBiNzBmNjhjZDYwNzhiYmExODA1NTU2Y2M4NzI5NmIyNWNhZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6wwX19Z1g2haMqK/Baez8Iok9ue
L7m85fYqS5UcW/LasFa4xlgKtSvSE+F6AudXDTG+OOWyJ4f9bsRgvQapmqK+QQ1Z
awVcbSl9KrLVUrPWAO+AvvtVkk0+f2W+EZZAxYFcoGTGLBCeW0JD6Noxny3rnU8P
Zoh8JamdLhGfVJ9XNgQwxhOmT1uhQ3Rx9+KLd22ruU9L10S4RT2rpXpahiQB/Dkz
S/3/pudCATq75YmEL2U+Q3AT12zXnQUgL1IQZaBBCxsotz26APetxerwscwB5OeW
GVXgZrbSzo9Ug07J167SgW6mZSIa4hpwsVO7HljM9pWTyDlXMZnH9MCsqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQLcPaM1geLuhgFVWzIcpayXK/SMB8GA1UdIwQY
MBaAFDVzC7iyYj5/ZaYWNgTRyF+RBiiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlhNTHVMSmlQbjlscGhZMkJOSElYNUVHS0k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC81YzUxMzgtYWVlNC00ODJjLTkxM2Mt
M2E0ZGZmOGU4ZGVkLzEvTlhNTHVMSmlQbjlscGhZMkJOSElYNUVHS0k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC81YzUxMzgtYWVlNC00ODJjLTkxM2MtM2E0ZGZmOGU4ZGVk
LzEvTlhNTHVMSmlQbjlscGhZMkJOSElYNUVHS0k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxyElzwH
IPnquoYDZAAPAyNWMUrQ7NhH4GuclPWrItkRhjzpSY8tZcXl7eQD6Y2cLDvYGrl9
wu7IAnBeFmJRvDN3kWPaCyjnA3vEufDvsol7LwYMcL5GHWTpPiPerJiTfQn9hBlY
qYK9whwznUXukoBMy85GnXWgHUqxgxV/bDXjIFhjiyrZAuOPcarn3dYjS+z5mP6v
DWWgHKkNsiY5HaGMFVjo/W+VKxtUiSNtJL11D4WlyEVJ/47JvtV5fRKDz148MGAJ
PmFtLW02Wt/PF/YdcgJQOfZC6AaMy2cSwyihGjqrJr/ET1Hd7IK4rhXMWHANE3H1
tnsL1cccIgD5wA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:02 2025 by rpki-client