Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
File: NbHM5NW62NnC7cpADiv8VKJBhb8.mft (raw, json)
Hash identifier: gs25uXRK9UkDOVv9epqT7m3yDarCVwR8vM8P8i9j4JI=
Subject key identifier: 74:81:36:00:D5:BE:14:E3:C4:17:CF:6C:8F:E1:E2:FF:A7:0F:EF:1D
Authority key identifier: 35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
Certificate issuer: /CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Certificate serial: 019A714A21B94D761ED4CD3422AAC97E7ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 05:01:14 +0000
Manifest this update: Tue 11 Nov 2025 05:01:14 +0000
Manifest next update: Wed 12 Nov 2025 05:01:14 +0000
Files and hashes: 1: NbHM5NW62NnC7cpADiv8VKJBhb8.crl (hash: phd6nnicYUj0v0Y4OhE3UfYP6bC9B0zj2Tnc+7HWpYw=)
2: WTiY2Qk1x-geaQsrR6enC5adAMQ.roa (hash: jOYBpT27U7g6ol8yiuxnI6V37MSFQ9qLOBM0L34PdCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:21:b9:4d:76:1e:d4:cd:34:22:aa:c9:7e:7a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Validity
Not Before: Nov 11 05:01:14 2025 GMT
Not After : Nov 12 05:01:14 2025 GMT
Subject: CN=74813600d5be14e3c417cf6c8fe1e2ffa70fef1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:41:33:a8:c2:1b:e0:16:d2:05:ce:f0:e4:0d:
48:76:6e:82:2e:b7:43:0a:e6:af:91:10:10:26:23:
43:6f:8b:28:dd:54:6c:e8:b6:b0:24:15:54:84:0e:
fd:27:38:10:5b:a3:4b:1b:42:71:86:92:a8:8f:65:
0e:17:ec:46:ae:cd:db:fa:38:6a:93:b7:5e:ba:0d:
05:00:05:08:77:a9:ca:40:a3:a1:24:0b:48:9d:46:
c0:d5:ba:34:e9:00:d7:07:be:6a:44:9c:c4:8f:f7:
7f:f3:b2:da:54:45:4b:97:d7:0c:43:c6:65:b3:98:
22:21:e8:fe:89:f7:37:9b:d4:86:f9:b6:7f:5d:95:
d3:4b:88:3f:e7:40:f6:ed:0f:67:f6:7e:b2:5e:6a:
06:9a:cf:51:b4:b9:35:99:fe:22:4d:45:ba:80:08:
e7:ea:45:a6:7c:16:73:1c:68:05:a3:6e:0a:34:aa:
c4:31:e3:74:a1:fe:c5:88:05:98:9c:cb:8f:27:dd:
c7:21:f1:72:42:95:61:75:81:07:31:f6:03:bc:9e:
a0:d7:c6:52:1d:0a:54:b2:c9:27:2b:7a:b4:8c:e7:
6a:7d:87:6f:0c:db:79:0f:5f:cd:89:91:77:d9:7f:
bd:f0:51:36:41:b1:8f:0c:b8:08:5b:19:68:b4:ed:
95:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:81:36:00:D5:BE:14:E3:C4:17:CF:6C:8F:E1:E2:FF:A7:0F:EF:1D
X509v3 Authority Key Identifier:
keyid:35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d5:95:b0:d4:ab:14:62:c4:64:d9:7a:29:cd:78:fa:32:d9:
85:34:be:5c:33:d9:d5:1d:33:b3:4a:75:ed:85:2f:f9:2d:0e:
7e:b1:8f:b6:82:b7:62:ad:4c:df:b7:75:9d:b6:a4:b4:8c:18:
1d:52:26:d6:9a:48:b4:67:d2:0c:ea:65:dc:62:ef:f8:7c:46:
c1:31:a0:96:20:21:e7:ce:82:01:d7:fb:ca:44:de:15:a1:2d:
e0:4c:4c:0f:18:00:74:13:be:a6:6e:ec:66:87:dd:84:db:fe:
e6:bc:06:90:20:4b:cf:75:0d:52:c5:9d:55:95:b1:b7:82:44:
ec:5d:4a:f4:f9:3a:91:69:61:ae:53:71:03:b2:d1:9c:0a:be:
83:18:07:bc:a4:33:3a:7c:dd:c4:51:81:9e:51:fa:9c:93:4f:
4d:e7:8c:c2:69:f1:dd:f8:a4:18:f9:10:96:d7:1c:c4:00:2e:
53:41:54:de:94:7a:91:7e:b2:44:5d:10:f9:09:1d:53:39:07:
dc:42:cc:7b:46:77:0c:1d:b0:dc:05:75:27:b2:69:02:ad:d8:
e3:d5:99:8c:c7:d2:0b:a0:4f:55:dd:58:61:e7:16:5d:26:e5:
53:8e:30:f6:ce:b3:30:28:22:dd:2f:5e:10:75:1a:f4:cb:6f:
ae:df:66:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:49 2025 by rpki-client