Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
File: NW2albrOGXhcQGR2Y_MdkFYmHC8.mft (raw, json)
Hash identifier: GL+HR5BRHtnutVZrncSO0qN/EanrlX/fipryRRfQPZo=
Subject key identifier: 32:73:1A:3F:58:43:64:69:02:B6:8C:26:B0:EB:FE:51:17:FA:73:29
Authority key identifier: 35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
Certificate issuer: /CN=356d9a95bace19785c40647663f31d9056261c2f
Certificate serial: 019A71B90FFB3EF24CA2562272D91DB6B456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:02:24 +0000
Manifest this update: Tue 11 Nov 2025 07:02:24 +0000
Manifest next update: Wed 12 Nov 2025 07:02:24 +0000
Files and hashes: 1: NW2albrOGXhcQGR2Y_MdkFYmHC8.crl (hash: HHZ8Pauu9dj/RcsjGa8Guz9DrazXFCjbvxyIsE6VYeo=)
2: VMysSyLNDVGWd0vcTeYPwlMA5rc.roa (hash: 6+DEgCnpiKyTQCIOlcuNMISjTH2qj/1LJFyn3yXus8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0f:fb:3e:f2:4c:a2:56:22:72:d9:1d:b6:b4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356d9a95bace19785c40647663f31d9056261c2f
Validity
Not Before: Nov 11 07:02:24 2025 GMT
Not After : Nov 12 07:02:24 2025 GMT
Subject: CN=32731a3f5843646902b68c26b0ebfe5117fa7329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fc:01:21:de:9d:32:0d:f1:fd:be:12:7d:80:
f7:8c:58:1b:f6:17:59:e2:fd:69:3f:34:07:c2:c5:
c1:e5:4d:2b:d4:ea:ef:fc:41:39:29:da:9a:7d:47:
0e:7f:06:b2:02:bf:05:ed:d3:51:1c:a3:d9:9c:8e:
a4:1d:bb:39:2a:ef:41:22:2b:65:d6:99:03:9a:df:
02:68:c5:b8:98:0a:c5:17:d6:5d:b5:ae:d5:83:5c:
5a:8a:15:ba:88:9e:bf:49:a8:5d:9c:99:66:49:06:
e3:8e:f7:a7:47:03:e4:84:b7:bb:12:d6:93:de:08:
78:6c:ed:3d:4f:e2:bc:bc:8d:c0:73:76:20:85:94:
7c:d8:73:f3:49:ed:7f:8b:b1:49:91:f6:cd:06:35:
4b:78:63:09:0d:c7:45:3f:61:fd:6e:31:f5:dd:6b:
a0:3f:f2:30:9d:31:2a:b4:ff:a5:f8:92:8b:93:d1:
d9:ca:c4:63:87:c5:81:60:33:de:e4:3a:3d:71:0c:
90:1a:c6:93:f2:ce:7f:33:1e:74:15:19:cb:a6:dc:
99:31:db:25:42:40:d3:14:b8:ad:5e:df:0c:a2:2b:
4a:0f:01:a1:cc:8a:11:43:f7:32:26:f4:48:95:a2:
2b:dc:b8:d7:fb:43:86:03:ab:21:fc:44:d8:04:53:
4e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:73:1A:3F:58:43:64:69:02:B6:8C:26:B0:EB:FE:51:17:FA:73:29
X509v3 Authority Key Identifier:
keyid:35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:95:e5:67:5a:43:e8:c2:f1:da:31:fd:94:29:e3:4f:ba:8c:
8d:74:94:4b:8c:20:81:98:08:66:6e:17:ad:a3:2c:cb:9f:00:
e0:b5:41:18:d9:df:be:ea:78:9b:97:c2:d7:31:26:f9:1f:3f:
42:1a:de:61:c3:a5:74:32:16:ac:66:e5:67:df:2a:e6:c5:80:
d7:8f:d3:73:2b:a4:bd:5f:ee:2f:96:ba:70:85:a9:57:8b:9e:
89:7b:09:ae:b3:ff:47:be:46:cd:2d:cf:05:fe:21:37:fa:b3:
90:f6:ea:06:c8:b6:8c:21:9c:9c:f7:d7:86:c8:31:e3:d8:a9:
2d:c0:be:e4:21:ae:21:e5:b2:b0:c9:74:19:86:26:da:cf:f2:
0f:b3:68:27:60:0f:0f:aa:a4:0b:80:62:9d:57:c1:4b:67:f3:
c8:42:f2:61:ed:ec:ae:00:9a:cf:03:57:38:7e:51:d8:de:7b:
76:a9:c6:5d:5c:82:6d:02:71:d2:b9:a7:51:db:96:ae:be:94:
75:fa:e2:27:49:55:db:c9:88:b3:a8:1c:b6:58:7a:72:cb:ec:
d9:9e:ad:7c:63:5a:96:25:54:1a:e7:74:8b:dd:e9:24:ae:cc:
df:aa:5c:ff:eb:54:04:81:de:1a:64:d4:ce:da:6b:81:74:d9:
08:5f:e6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:40 2025 by rpki-client