Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
File: NHi9VqAesq4wdvaW0B1P_NFAGp8.mft (raw, json)
Hash identifier: B/XQNDOhDkaBGNuHY09ixQ8TVGNjU1ZetV4THx4m8a8=
Subject key identifier: FD:A9:6F:FF:3A:C1:CB:E6:C6:12:D6:A0:D2:F4:75:64:EB:BC:32:FC
Authority key identifier: 34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F
Certificate issuer: /CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f
Certificate serial: 019A71B800DDF291659D786FFF4B1C5419E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:01:15 +0000
Manifest this update: Tue 11 Nov 2025 07:01:15 +0000
Manifest next update: Wed 12 Nov 2025 07:01:15 +0000
Files and hashes: 1: NHi9VqAesq4wdvaW0B1P_NFAGp8.crl (hash: 8QAN46QNHy3JAf7wWAQInQGMiG3DcQFor2v56jgmVHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:00:dd:f2:91:65:9d:78:6f:ff:4b:1c:54:19:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f
Validity
Not Before: Nov 11 07:01:15 2025 GMT
Not After : Nov 12 07:01:15 2025 GMT
Subject: CN=fda96fff3ac1cbe6c612d6a0d2f47564ebbc32fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:1e:ba:1f:75:b7:a3:ea:39:71:e2:20:85:
18:c2:43:db:ce:0b:8b:67:e7:95:20:cd:20:66:7c:
c2:94:3f:7f:63:42:fb:a6:02:dc:4e:3c:d4:02:7a:
d0:5c:ff:e0:83:bc:a0:be:37:c5:a4:1d:b8:77:f8:
5c:a2:18:c0:1f:79:91:4b:f8:86:b8:11:6c:e6:7e:
e7:87:78:cf:87:99:e6:80:ff:5b:50:25:2c:88:4f:
6d:e3:64:4c:53:47:55:89:09:12:4c:13:a3:ed:95:
20:70:7a:ad:ed:f9:49:71:4a:43:6d:bf:68:71:d1:
91:8c:ae:72:45:b6:b0:c2:49:90:6e:84:da:f4:4e:
bc:ae:c8:f6:d6:b5:bc:62:61:4d:d1:24:6b:ff:9f:
fc:83:8b:3a:5a:dc:f2:72:cf:26:c4:eb:6f:9e:a8:
5a:82:65:c4:1f:6e:87:a0:1d:b5:ca:f1:4a:b5:4a:
9f:93:ea:98:90:22:18:36:f9:10:1e:0b:3c:1d:84:
47:2a:db:08:b5:dd:20:53:ac:f2:11:c1:b8:59:d1:
a1:df:04:c2:72:b3:9d:f1:d0:5b:96:fd:ee:bc:cb:
5b:81:41:3d:7f:35:82:15:3c:65:5b:9a:c7:90:d7:
8d:86:a0:c6:ac:7b:db:02:29:87:a0:c5:62:1e:3c:
9c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A9:6F:FF:3A:C1:CB:E6:C6:12:D6:A0:D2:F4:75:64:EB:BC:32:FC
X509v3 Authority Key Identifier:
keyid:34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5b:06:88:ae:27:bc:37:a5:45:be:32:48:0a:5e:a0:39:3c:
1e:f7:60:8c:ef:03:9a:8d:cf:f2:90:0f:5c:70:d1:65:3d:fe:
2b:f6:de:76:1a:b0:02:d1:df:a4:b5:71:81:d4:ec:b8:0d:2f:
ee:97:eb:f2:e2:8e:97:ea:a3:0b:09:18:97:61:fe:92:69:85:
11:d4:1d:90:c2:a7:f0:c0:5e:76:14:eb:cd:bf:13:24:56:e8:
c0:fa:93:b8:bf:fb:d5:08:c0:6a:39:40:89:bd:60:0e:76:17:
30:a7:e8:dd:da:7c:3b:32:b7:81:7c:67:89:ca:80:86:73:f0:
6c:1e:3b:86:80:0f:fa:6a:15:46:ca:27:8e:b7:f7:2f:78:1f:
fa:fe:29:fe:24:5f:17:fd:28:c0:30:34:2e:df:76:08:01:b3:
cc:dd:f8:56:c6:13:fa:38:1a:db:35:26:0e:0a:c5:e5:a0:6c:
88:50:75:0c:73:26:c9:a8:c6:4b:e8:2b:d3:21:f8:22:cf:5d:
fa:d6:7c:fd:41:c7:1a:d3:21:64:3d:28:d1:0b:b3:de:fa:5a:
21:c2:7f:31:fc:7c:02:b4:ff:a5:7d:33:a2:19:08:12:47:1f:
aa:55:8b:b3:a8:6e:be:d1:33:f9:07:6a:37:d5:8f:48:42:dd:
34:4f:a0:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuADd8pFlnXhv/0scVBnpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NzhiZDU2YTAxZWIyYWUzMDc2ZjY5NmQwMWQ0ZmZjZDE0
MDFhOWYwHhcNMjUxMTExMDcwMTE1WhcNMjUxMTEyMDcwMTE1WjAzMTEwLwYDVQQD
EyhmZGE5NmZmZjNhYzFjYmU2YzYxMmQ2YTBkMmY0NzU2NGViYmMzMmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsToeuh91t6PqOXHiIIUYwkPbzguL
Z+eVIM0gZnzClD9/Y0L7pgLcTjzUAnrQXP/gg7ygvjfFpB24d/hcohjAH3mRS/iG
uBFs5n7nh3jPh5nmgP9bUCUsiE9t42RMU0dViQkSTBOj7ZUgcHqt7flJcUpDbb9o
cdGRjK5yRbawwkmQboTa9E68rsj21rW8YmFN0SRr/5/8g4s6Wtzycs8mxOtvnqha
gmXEH26HoB21yvFKtUqfk+qYkCIYNvkQHgs8HYRHKtsItd0gU6zyEcG4WdGh3wTC
crOd8dBblv3uvMtbgUE9fzWCFTxlW5rHkNeNhqDGrHvbAimHoMViHjyctwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2pb/86wcvmxhLWoNL0dWTrvDL8MB8GA1UdIwQY
MBaAFDR4vVagHrKuMHb2ltAdT/zRQBqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wZmM3ZDgtMmE1Zi00YjM4LWEyMzAt
ODM5NmY4YzYyNTVhLzEvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wZmM3ZDgtMmE1Zi00YjM4LWEyMzAtODM5NmY4YzYyNTVh
LzEvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFsGiK4n
vDelRb4ySApeoDk8HvdgjO8Dmo3P8pAPXHDRZT3+K/bedhqwAtHfpLVxgdTsuA0v
7pfr8uKOl+qjCwkYl2H+kmmFEdQdkMKn8MBedhTrzb8TJFbowPqTuL/71QjAajlA
ib1gDnYXMKfo3dp8OzK3gXxnicqAhnPwbB47hoAP+moVRsonjrf3L3gf+v4p/iRf
F/0owDA0Lt92CAGzzN34VsYT+jga2zUmDgrF5aBsiFB1DHMmyajGS+gr0yH4Is9d
+tZ8/UHHGtMhZD0o0Quz3vpaIcJ/Mfx8ArT/pX0zohkIEkcfqlWLs6huvtEz+Qdq
N9WPSELdNE+g9A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:31 2025 by rpki-client