Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
File: NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft (raw, json)
Hash identifier: UTWu4hyT2VnEp5cPXz5CZMdqvEIlmYmMcG2CuLdClUs=
Subject key identifier: 79:01:24:05:0E:F5:BB:05:DC:4E:AF:B3:BA:81:E2:8B:0D:64:A9:00
Authority key identifier: 35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
Certificate issuer: /CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Certificate serial: 019A729370678A69FB5DD6AD4651BC326BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
Manifest number: 057A
Signing time: Tue 11 Nov 2025 11:00:56 +0000
Manifest this update: Tue 11 Nov 2025 11:00:56 +0000
Manifest next update: Wed 12 Nov 2025 11:00:56 +0000
Files and hashes: 1: NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl (hash: TtVJDsRoWX4dtDimiAtex00Ffo+J7cQ22u5hX4OA3g0=)
2: YYXnMCAt040NcLATlrH2pdrRzy4.roa (hash: //AxvWil0+RRuTzD9Iyynz1Qj6s3Pa74fW9rqeU5a2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:70:67:8a:69:fb:5d:d6:ad:46:51:bc:32:6b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Validity
Not Before: Nov 11 11:00:56 2025 GMT
Not After : Nov 12 11:00:56 2025 GMT
Subject: CN=790124050ef5bb05dc4eafb3ba81e28b0d64a900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:29:3b:cd:63:05:c6:90:fa:05:52:c5:e5:18:
dc:dd:24:ff:81:6b:aa:10:8c:0b:4d:59:81:75:07:
41:7b:1f:10:54:f0:a2:19:85:c0:5f:df:b2:db:f0:
ad:1e:69:a7:76:23:f2:ca:ee:6b:4c:e8:75:01:46:
5b:10:2e:4e:3c:e8:54:3b:f3:51:79:72:94:99:0b:
04:ef:fc:3e:9c:ed:fa:cf:e3:63:3c:19:74:01:6a:
43:0e:4d:d0:5c:d9:74:34:9c:c5:fe:cc:68:cd:dc:
02:83:2a:e4:2e:52:c1:8e:fe:bc:f9:0b:34:b5:09:
96:e3:6f:d6:b5:26:d1:bc:34:a8:cc:be:54:71:b6:
74:ab:3e:7e:8b:66:83:02:17:e6:6d:da:c5:6f:a6:
87:65:e4:e0:00:16:12:71:46:01:d0:bd:44:e7:53:
ab:34:dc:2a:77:ad:de:3b:04:63:e0:28:90:e8:cf:
2a:56:b4:ab:1d:41:d5:af:f5:0c:27:2e:10:a2:75:
47:4d:ac:31:0c:7c:b7:48:21:3c:c4:56:f7:bb:d8:
fc:08:ea:21:c4:b9:1a:71:01:95:ea:0f:30:6e:42:
0e:f8:4f:61:74:68:4a:bd:47:55:a1:c8:49:16:f0:
c4:fc:6b:e4:01:f2:5c:30:0e:85:80:ad:6c:de:07:
43:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:01:24:05:0E:F5:BB:05:DC:4E:AF:B3:BA:81:E2:8B:0D:64:A9:00
X509v3 Authority Key Identifier:
keyid:35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:54:4b:1e:92:61:ea:c5:24:34:35:f4:f8:f0:6a:f7:82:df:
1c:2e:f4:cc:ea:8f:7e:68:86:05:da:83:69:c3:04:3f:91:a7:
4a:e3:c9:b0:59:ba:0a:ac:8b:d5:23:f3:88:da:2c:61:25:f5:
61:d9:20:19:a3:9d:f6:9e:fd:32:d0:67:1e:06:91:6d:50:15:
f1:88:56:0c:f4:fa:98:0e:d7:02:75:be:cf:86:6a:82:43:c5:
43:b0:c0:03:ce:32:bb:3a:43:fa:77:da:c5:cc:70:6f:af:d4:
0b:92:79:4b:d5:8c:3a:31:42:40:61:f6:ea:06:75:7f:3d:79:
d4:40:7b:61:89:1e:9d:a2:81:16:fa:db:03:3c:5c:5f:34:0f:
c5:94:8f:15:70:8b:4c:ef:31:b3:2c:ca:a7:0e:32:74:aa:d5:
4f:21:15:63:0c:8e:50:3c:12:bc:47:94:fc:b4:d8:30:71:bf:
f0:de:9a:bf:e1:44:6f:b9:ab:e9:be:8d:3b:b6:06:83:b1:25:
60:f9:3f:37:74:fd:b6:e4:93:03:12:f7:ac:27:75:a5:44:4e:
6c:df:78:7b:7e:da:f7:b2:58:f0:a2:7d:f2:ab:59:cd:f4:eb:
67:9f:fc:a7:89:a5:33:3a:09:fd:77:f1:65:fa:49:12:93:07:
4d:4e:3f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:29 2025 by rpki-client