Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
File: NW5HRHMdpE8I-l6SxesqR01JqJI.mft (raw, json)
Hash identifier: QhcEUatB/NNMdsJh42dfAFFLNikXGpJAo0r4ULrqHHM=
Subject key identifier: 84:EE:A3:B1:25:79:B1:1E:96:B4:58:A2:1B:29:8D:59:84:EB:96:29
Authority key identifier: 35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
Certificate issuer: /CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Certificate serial: 019A71EEB68BA09F44AADEC3F23BB1A5A922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:01:00 +0000
Manifest this update: Tue 11 Nov 2025 08:01:00 +0000
Manifest next update: Wed 12 Nov 2025 08:01:00 +0000
Files and hashes: 1: NW5HRHMdpE8I-l6SxesqR01JqJI.crl (hash: zrQNwiTRynOD8MADJxcoc1mXmO0d6/JVosJUlvMizz4=)
2: sWXWz9KHFQhAxmDZ0n63KNEzRYA.roa (hash: VInHBflevKh8uKrJkW73psQEtmEHrPxva/qTjQRvp1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b6:8b:a0:9f:44:aa:de:c3:f2:3b:b1:a5:a9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Validity
Not Before: Nov 11 08:01:00 2025 GMT
Not After : Nov 12 08:01:00 2025 GMT
Subject: CN=84eea3b12579b11e96b458a21b298d5984eb9629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cb:99:b3:0b:a5:58:8f:8f:d6:87:c7:98:95:
46:21:32:5d:c3:f5:4a:35:fe:b0:e9:3c:a6:9f:3c:
f2:5f:b7:05:9b:a5:be:4b:37:3b:2c:96:7f:0e:d9:
81:fd:ee:ce:35:8b:7e:3b:67:c8:5c:11:6d:bd:95:
2f:fb:52:f7:e2:e7:89:13:7d:aa:47:c4:ea:48:0a:
e2:13:35:66:87:0e:44:02:5e:42:20:1a:ab:8c:c4:
6b:ee:55:f1:24:c6:7c:28:50:c2:63:85:7c:ba:f3:
47:66:88:a2:41:11:99:72:05:af:d8:e4:8f:95:0f:
5e:29:da:58:32:cd:8f:db:ff:82:5f:00:f3:61:73:
32:66:84:21:22:d8:c2:f7:60:0d:3a:c6:1f:d0:e8:
6d:7a:86:b2:d3:6b:23:24:14:f5:d1:fa:12:1f:40:
96:17:d0:19:fe:36:37:f4:27:be:e6:7f:46:b3:84:
46:5b:c5:54:f5:ab:64:d1:7a:22:18:f0:05:a3:6c:
8e:fe:1a:f1:2a:b2:e9:af:eb:a5:40:57:43:ac:73:
e4:2b:0a:e9:bf:59:b1:ca:8c:e3:1c:53:30:22:3f:
8f:ac:fb:11:d7:97:d9:9e:3c:76:3c:36:d2:8f:79:
e2:e5:70:f9:7f:fe:2a:a0:59:2c:8a:b9:0b:06:85:
c9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EE:A3:B1:25:79:B1:1E:96:B4:58:A2:1B:29:8D:59:84:EB:96:29
X509v3 Authority Key Identifier:
keyid:35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4d:35:90:d9:7d:fb:69:08:c6:fc:1b:27:98:8e:ef:f5:1a:
dd:98:66:35:56:f6:b8:a8:ec:52:b8:28:b1:98:37:3f:8b:33:
98:56:fd:38:e3:fa:f9:73:cc:1c:c7:59:85:9c:47:34:04:6f:
47:b7:05:15:72:2d:15:8c:0f:75:66:d6:a1:c8:ad:2d:e3:fe:
f4:3d:62:2e:5d:e2:d2:c4:d2:02:84:1d:c0:e5:0f:c6:3c:ef:
93:32:96:da:70:4f:32:95:7b:97:05:c9:33:93:f2:68:5a:81:
a8:a4:60:82:7c:e0:39:1e:d9:4d:6c:5b:bb:b3:6d:90:02:e8:
b5:5c:e8:e9:a7:13:65:e1:ea:c7:84:0d:f9:20:25:6b:fb:06:
ea:e6:89:9b:68:98:16:e2:c9:0f:67:8e:b1:7a:14:5b:a4:42:
4e:ad:0e:b5:1a:f9:73:98:98:eb:5b:53:72:d1:5d:d4:79:1f:
1e:f2:dd:0c:f0:3f:1d:dd:f5:78:b2:26:9c:32:ea:59:ca:eb:
07:97:eb:9e:43:17:2b:ae:5f:51:64:62:c8:ca:36:ac:2d:43:
8b:39:9d:2a:d1:06:df:9d:22:1b:7d:24:c9:60:3c:9d:88:d5:
c6:f5:36:61:ad:f4:65:48:2c:ea:5c:89:be:dc:e6:44:f1:02:
19:45:50:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:16 2025 by rpki-client