Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
File: NhIf0uc0bus8H451uTyE-VhB9EY.mft (raw, json)
Hash identifier: H3NBxSrLW6k+0P+wKIyfvjOsD7rYsozfgmRodo2L/bU=
Subject key identifier: 62:FC:31:13:83:00:57:25:19:D0:0F:D4:51:38:85:FC:3F:9F:18:99
Authority key identifier: 36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46
Certificate issuer: /CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446
Certificate serial: 019A72CA18042615F5047838F7D3E82D941C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
Manifest number: 0436
Signing time: Tue 11 Nov 2025 12:00:38 +0000
Manifest this update: Tue 11 Nov 2025 12:00:38 +0000
Manifest next update: Wed 12 Nov 2025 12:00:38 +0000
Files and hashes: 1: NhIf0uc0bus8H451uTyE-VhB9EY.crl (hash: tQOawYWPs+eqjLxlxHh+HLRROj7YLcasvS8Bp/DnkYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:18:04:26:15:f5:04:78:38:f7:d3:e8:2d:94:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446
Validity
Not Before: Nov 11 12:00:38 2025 GMT
Not After : Nov 12 12:00:38 2025 GMT
Subject: CN=62fc31138300572519d00fd4513885fc3f9f1899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:df:4e:8a:03:97:fb:a3:0c:78:74:89:d3:fd:
b2:e3:21:cf:ad:0c:63:ce:24:86:f0:0c:be:5d:94:
c4:ae:c9:0d:1d:14:8c:3b:a9:18:18:e3:d1:73:6e:
80:88:cb:67:38:f8:55:7c:e2:b5:54:9a:3e:f6:08:
47:73:3b:0a:25:ba:68:db:6b:96:5a:b0:17:9d:9f:
3f:7a:5f:2d:09:51:87:3c:fb:ef:56:41:42:ef:89:
d3:fd:1a:79:40:a8:40:22:5d:e8:0b:ed:65:0d:67:
44:b7:32:69:c7:e4:d9:bb:be:6d:20:85:65:7d:30:
77:00:51:5b:16:27:33:b7:b4:d1:fc:a7:2c:68:a2:
39:3d:fc:74:a7:33:c1:d7:4c:1e:58:0e:7f:db:b7:
c8:eb:31:cc:08:11:ec:e3:78:d6:17:af:3d:2e:d8:
ac:6f:a2:11:8f:6b:71:a0:fa:92:e8:fe:ec:2f:63:
fd:b6:66:56:bb:b7:c0:2e:59:bc:63:85:f4:97:1f:
ec:db:4e:19:45:0d:b5:a3:e3:d6:52:f9:1e:3a:08:
7a:c7:2c:1b:87:c3:60:30:a4:5f:3b:0f:4e:f3:56:
35:c2:0b:98:e9:7b:e5:34:3f:3c:0b:e0:99:b6:80:
19:a6:51:69:e2:45:d4:ea:3b:7b:0a:af:3b:0e:1b:
bb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FC:31:13:83:00:57:25:19:D0:0F:D4:51:38:85:FC:3F:9F:18:99
X509v3 Authority Key Identifier:
keyid:36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2b:56:3d:09:fd:95:b4:f8:68:e9:69:d3:56:63:a1:d7:a7:
8d:f2:3c:d8:0f:22:c6:45:e9:8d:41:30:bb:da:1a:ac:72:39:
df:11:33:3b:05:e6:c6:f2:0b:83:41:68:eb:8d:30:b7:ed:a8:
0c:d1:f7:7e:cf:85:24:5c:fc:51:e3:db:3f:83:d5:39:4e:c8:
c6:f9:de:fd:cf:d0:db:d1:8a:da:4d:05:82:db:5f:7a:c7:84:
33:29:79:57:9a:63:2f:8b:20:cf:7e:c3:e1:24:3b:d3:a8:0c:
f8:52:3e:a1:e9:6c:5b:01:34:7a:f8:88:9c:a6:07:e5:06:0f:
41:d4:14:66:26:8f:fa:21:a9:e0:9b:24:ae:90:81:42:1d:c2:
8c:87:ed:0b:95:43:a4:20:de:cb:ed:3a:15:75:b2:7b:85:c4:
21:7d:ff:7d:84:fc:17:15:b6:d2:8b:d0:d0:2e:41:58:34:2e:
b3:79:07:d4:9e:2a:d7:22:7e:15:1b:31:33:90:1e:59:e0:af:
80:b7:a6:2c:6f:9a:26:4b:47:f6:32:f8:83:da:4d:9a:f6:50:
fc:36:61:d5:be:3c:3d:1a:a5:9f:ef:be:69:a8:32:97:c7:42:
e0:09:5e:c7:60:fa:6a:0d:f9:55:e2:34:8c:00:fc:21:1a:dd:
23:59:f9:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyhgEJhX1BHg499PoLZQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTIxZmQyZTczNDZlZWIzYzFmOGU3NWI5M2M4NGY5NTg0
MWY0NDYwHhcNMjUxMTExMTIwMDM4WhcNMjUxMTEyMTIwMDM4WjAzMTEwLwYDVQQD
Eyg2MmZjMzExMzgzMDA1NzI1MTlkMDBmZDQ1MTM4ODVmYzNmOWYxODk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN9OigOX+6MMeHSJ0/2y4yHPrQxj
ziSG8Ay+XZTErskNHRSMO6kYGOPRc26AiMtnOPhVfOK1VJo+9ghHczsKJbpo22uW
WrAXnZ8/el8tCVGHPPvvVkFC74nT/Rp5QKhAIl3oC+1lDWdEtzJpx+TZu75tIIVl
fTB3AFFbFiczt7TR/KcsaKI5Pfx0pzPB10weWA5/27fI6zHMCBHs43jWF689Ltis
b6IRj2txoPqS6P7sL2P9tmZWu7fALlm8Y4X0lx/s204ZRQ21o+PWUvkeOgh6xywb
h8NgMKRfOw9O81Y1wguY6XvlND88C+CZtoAZplFp4kXU6jt7Cq87Dhu7DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGL8MRODAFclGdAP1FE4hfw/nxiZMB8GA1UdIwQY
MBaAFDYSH9LnNG7rPB+Odbk8hPlYQfRGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhJZjB1YzBidXM4SDQ1MXVUeUUtVmhCOUVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yMWQ1NjAtY2IxNS00NmMzLWFmMzQt
YTg5ZTkzN2UyOWQxLzEvTmhJZjB1YzBidXM4SDQ1MXVUeUUtVmhCOUVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yMWQ1NjAtY2IxNS00NmMzLWFmMzQtYTg5ZTkzN2UyOWQx
LzEvTmhJZjB1YzBidXM4SDQ1MXVUeUUtVmhCOUVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfStWPQn9
lbT4aOlp01ZjodenjfI82A8ixkXpjUEwu9oarHI53xEzOwXmxvILg0Fo640wt+2o
DNH3fs+FJFz8UePbP4PVOU7Ixvne/c/Q29GK2k0FgttfeseEMyl5V5pjL4sgz37D
4SQ706gM+FI+oelsWwE0eviInKYH5QYPQdQUZiaP+iGp4JskrpCBQh3CjIftC5VD
pCDey+06FXWye4XEIX3/fYT8FxW20ovQ0C5BWDQus3kH1J4q1yJ+FRsxM5AeWeCv
gLemLG+aJktH9jL4g9pNmvZQ/DZh1b48PRqln+++aagyl8dC4Alex2D6ag35VeI0
jAD8IRrdI1n5oA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:57 2025 by rpki-client