Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
File: NharGOa87eCFC8quvZWZk-hAhus.mft (raw, json)
Hash identifier: SOOJ6gMjV/a17/JOvmIskHXb2JgN6ce1WzuDsktnNDA=
Subject key identifier: 95:6C:4F:65:E4:C7:B1:C4:B3:48:CE:41:C5:C1:A1:A0:07:DD:9B:34
Authority key identifier: 36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
Certificate issuer: /CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Certificate serial: 019A2A43969D5D1909ECD3ED1309ACC8F061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
Manifest number: 16FE
Signing time: Tue 28 Oct 2025 10:01:03 +0000
Manifest this update: Tue 28 Oct 2025 10:01:03 +0000
Manifest next update: Wed 29 Oct 2025 10:01:03 +0000
Files and hashes: 1: NharGOa87eCFC8quvZWZk-hAhus.crl (hash: xpEbraqnHHL3YnNDt6RePrAa5Myt/l+QwPNXoDKlpnc=)
2: a86URqUjdV6NGR4_Rkuxzk9nvOQ.roa (hash: QkDObpBQb/2gqaSVK2qoFjm69vfVIidcXe/y1fY7jKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:96:9d:5d:19:09:ec:d3:ed:13:09:ac:c8:f0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Validity
Not Before: Oct 28 10:01:03 2025 GMT
Not After : Oct 29 10:01:03 2025 GMT
Subject: CN=956c4f65e4c7b1c4b348ce41c5c1a1a007dd9b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1c:7f:b4:07:b4:22:87:71:51:06:03:4c:79:
53:df:61:e1:a8:b8:51:94:e8:c7:40:85:c2:15:ab:
70:7d:53:50:a9:ed:6c:7f:6d:c3:b5:95:d0:a5:87:
3c:52:f7:71:93:db:b9:da:50:95:db:6f:39:de:3d:
81:25:c1:67:7a:58:84:5b:4f:0d:16:21:e2:b7:2b:
fc:a3:c4:20:ed:01:eb:57:7d:b3:1d:96:e3:02:f2:
67:7a:8b:42:a0:b8:e0:3b:25:58:5b:6f:3a:b8:14:
cf:91:0b:1d:03:cb:c8:1c:0f:85:b3:31:ee:54:f7:
43:37:45:31:98:99:d4:55:24:fa:55:01:a2:cf:77:
d8:2e:52:16:9f:f2:da:2f:8b:58:2e:1a:70:ce:e3:
6c:6f:ce:36:ab:45:e2:39:81:f4:35:80:2c:69:21:
1c:72:74:5f:a4:64:28:d0:84:1a:02:f0:8f:cf:db:
d0:5c:7b:f7:d5:09:30:ba:b6:a5:a4:b5:41:6b:bd:
e5:5f:8d:02:5d:cf:08:ca:a3:76:3d:30:c5:49:c2:
2f:97:4f:a0:e1:22:cb:bb:69:64:b1:d0:46:ac:f2:
94:da:01:69:64:31:a8:6b:a2:67:52:6e:e2:3e:70:
bd:ab:e5:63:21:50:c3:c5:ec:da:10:2c:f3:02:9b:
7e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6C:4F:65:E4:C7:B1:C4:B3:48:CE:41:C5:C1:A1:A0:07:DD:9B:34
X509v3 Authority Key Identifier:
keyid:36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:63:c5:6d:de:73:b9:ca:ec:ca:4d:e2:dd:5d:a5:14:39:e5:
99:de:5b:f7:33:17:1f:4d:bb:a2:a2:f0:5e:67:d6:24:7e:67:
bf:61:20:50:9d:ff:3e:e9:14:b1:92:82:b6:22:18:30:2a:ff:
06:da:68:6a:c8:c2:36:88:a7:3c:ab:7e:7c:fb:a5:a8:57:9e:
2f:f8:0d:01:84:b8:13:50:1b:04:13:1c:99:f1:fb:3b:2c:11:
f6:82:42:3e:d4:ff:9b:9e:68:83:c9:0f:b4:89:e6:5f:05:ae:
c8:d5:c3:e8:6a:c9:e6:1c:dd:1e:44:f4:26:b3:47:0f:14:f1:
a4:7f:77:60:db:f3:85:12:ec:3c:8e:d4:61:ec:55:d8:8d:63:
a2:2b:77:37:95:bb:4f:06:11:dc:94:d3:09:a5:8b:a4:f8:35:
eb:b0:7a:1b:79:4d:4e:41:50:ec:0e:cd:18:9e:c0:e9:2f:90:
ac:98:20:f5:30:f6:fc:6d:7e:a1:8a:60:5f:6f:f4:db:ae:49:
c8:b3:83:e4:97:9e:10:43:90:ba:dd:05:d5:76:94:58:a8:ad:
6c:d7:2f:7e:de:1f:aa:14:7f:f3:bf:1f:9b:d8:a6:71:18:b8:
f3:41:61:80:38:15:de:c0:ba:4c:45:c6:d4:34:88:38:2a:be:
6a:a1:92:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqQ5adXRkJ7NPtEwmsyPBhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTZhYjE4ZTZiY2VkZTA4NTBiY2FhZWJkOTU5OTkzZTg0
MDg2ZWIwHhcNMjUxMDI4MTAwMTAzWhcNMjUxMDI5MTAwMTAzWjAzMTEwLwYDVQQD
Eyg5NTZjNGY2NWU0YzdiMWM0YjM0OGNlNDFjNWMxYTFhMDA3ZGQ5YjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxx/tAe0IodxUQYDTHlT32HhqLhR
lOjHQIXCFatwfVNQqe1sf23DtZXQpYc8Uvdxk9u52lCV22853j2BJcFneliEW08N
FiHityv8o8Qg7QHrV32zHZbjAvJneotCoLjgOyVYW286uBTPkQsdA8vIHA+FszHu
VPdDN0UxmJnUVST6VQGiz3fYLlIWn/LaL4tYLhpwzuNsb842q0XiOYH0NYAsaSEc
cnRfpGQo0IQaAvCPz9vQXHv31QkwuralpLVBa73lX40CXc8IyqN2PTDFScIvl0+g
4SLLu2lksdBGrPKU2gFpZDGoa6JnUm7iPnC9q+VjIVDDxezaECzzApt+IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVsT2Xkx7HEs0jOQcXBoaAH3Zs0MB8GA1UdIwQY
MBaAFDYWqxjmvO3ghQvKrr2VmZPoQIbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhhckdPYTg3ZUNGQzhxdXZaV1prLWhBaHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83ZDJmMzQtYWZmZC00ZDFjLWI0MTYt
YWFjMmViY2JmNWQ0LzEvTmhhckdPYTg3ZUNGQzhxdXZaV1prLWhBaHVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83ZDJmMzQtYWZmZC00ZDFjLWI0MTYtYWFjMmViY2JmNWQ0
LzEvTmhhckdPYTg3ZUNGQzhxdXZaV1prLWhBaHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmPFbd5z
ucrsyk3i3V2lFDnlmd5b9zMXH027oqLwXmfWJH5nv2EgUJ3/PukUsZKCtiIYMCr/
BtpoasjCNoinPKt+fPulqFeeL/gNAYS4E1AbBBMcmfH7OywR9oJCPtT/m55og8kP
tInmXwWuyNXD6GrJ5hzdHkT0JrNHDxTxpH93YNvzhRLsPI7UYexV2I1joit3N5W7
TwYR3JTTCaWLpPg167B6G3lNTkFQ7A7NGJ7A6S+QrJgg9TD2/G1+oYpgX2/0265J
yLOD5JeeEEOQut0F1XaUWKitbNcvft4fqhR/878fm9imcRi480FhgDgV3sC6TEXG
1DSIOCq+aqGSZg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 14:48:24 2025 by rpki-client