Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
File: NscJXgRZhgU7mz6HiQNnJoN90fU.mft (raw, json)
Hash identifier: UCL2pU03dIt3nZao4LHRTeQ6OoWW94RrrpfkmsTMIzY=
Subject key identifier: 81:17:9C:9D:58:50:74:71:36:52:18:98:66:8D:DF:15:54:3B:58:5F
Authority key identifier: 36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
Certificate issuer: /CN=36c7095e045986053b9b3e8789036726837dd1f5
Certificate serial: 019A706E7FB6AE6CE70A24645C56CFC05802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
Manifest number: 0647
Signing time: Tue 11 Nov 2025 01:01:21 +0000
Manifest this update: Tue 11 Nov 2025 01:01:21 +0000
Manifest next update: Wed 12 Nov 2025 01:01:21 +0000
Files and hashes: 1: 13YuQXcDJbnIYp9Q74L-JDcuLVM.roa (hash: xxqrr3XwSKukvs1NGhAPXhNBgDJT5zDVkc5duMlGjfY=)
2: NscJXgRZhgU7mz6HiQNnJoN90fU.crl (hash: Vby9aLtte/F27vlxUW01WqsimCvyN9RWutURtMT8BPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:7f:b6:ae:6c:e7:0a:24:64:5c:56:cf:c0:58:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7095e045986053b9b3e8789036726837dd1f5
Validity
Not Before: Nov 11 01:01:21 2025 GMT
Not After : Nov 12 01:01:21 2025 GMT
Subject: CN=81179c9d5850747136521898668ddf15543b585f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:64:37:78:a8:fc:10:29:54:68:ec:09:72:9e:
06:39:1b:7d:9b:17:9e:3d:df:6d:2e:ce:1a:65:f5:
67:e2:23:4d:e5:20:c8:8c:30:d7:f8:45:ef:0c:ac:
59:df:14:f3:ec:a8:31:4a:dd:f1:e3:1b:87:0d:d9:
d1:88:34:13:da:b7:0a:b1:f8:35:90:d4:4b:b1:d2:
94:09:f6:e7:4b:dd:33:7e:ee:cc:ef:c9:5e:60:07:
f5:8f:71:03:7f:69:a0:a9:55:27:1e:03:ab:62:8e:
cd:54:b2:af:37:29:6f:8d:7c:0d:83:ca:b5:2c:70:
e3:c4:98:d2:55:39:9d:8b:8b:67:cb:35:d3:75:9e:
6d:5a:b0:8a:0c:6f:75:3e:1b:dc:88:44:cb:30:61:
4a:af:6f:b2:c2:bf:84:74:a8:2b:9f:73:f5:5c:05:
d7:d2:9e:35:c1:36:f8:c1:c1:7c:56:69:29:26:5d:
f5:f0:20:4c:87:b3:5b:10:86:18:e1:4a:70:c0:66:
3b:b7:0e:9e:e9:66:e4:c0:ee:a6:c8:99:da:0a:bb:
b9:da:63:23:82:78:ce:4c:58:0c:83:1b:f8:15:31:
83:55:ae:f4:93:57:ee:9e:13:41:76:be:b5:44:e5:
1e:65:36:b8:ea:a4:25:4a:74:54:3f:0e:fc:5c:6c:
87:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:17:9C:9D:58:50:74:71:36:52:18:98:66:8D:DF:15:54:3B:58:5F
X509v3 Authority Key Identifier:
keyid:36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:fd:be:62:34:38:15:6e:f4:7b:ce:65:b8:26:53:2e:8c:c9:
de:3d:90:6a:54:c7:12:91:93:0c:36:be:48:14:20:e8:c7:fb:
6b:52:00:46:5e:94:18:35:3c:8a:5e:26:f3:2a:63:c2:a6:d3:
b3:de:c9:cb:e3:4b:3d:46:bd:ee:9b:f2:00:3c:b1:3c:68:4e:
5e:9a:43:4a:db:59:65:a5:f7:c7:08:24:9c:21:f1:d8:95:21:
e0:33:1c:5e:f4:a5:60:7a:71:ed:d5:df:b4:eb:f9:39:12:6b:
8a:e0:25:65:eb:ea:76:98:ce:c3:f2:0b:ef:d2:a0:03:b3:9b:
16:c5:40:40:c3:6b:63:26:49:83:55:4f:67:ad:ed:58:b4:b2:
8f:6f:ee:d8:55:3c:22:4f:3a:20:41:4e:73:cb:13:53:c5:dc:
38:aa:59:2c:28:99:0b:15:ca:e7:ae:51:23:63:79:ac:40:fc:
f2:b5:12:7a:8e:70:6f:e1:0c:77:7a:53:b6:be:fe:dd:74:3f:
7d:3f:ac:14:28:71:0d:40:30:59:28:95:e5:81:10:84:59:a1:
a4:b5:94:5a:7f:83:90:ea:3c:a3:0c:f5:96:86:2c:46:9a:66:
97:59:3d:69:6f:06:77:38:37:63:b1:78:c0:8c:85:df:d7:31:
c3:c9:c8:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbn+2rmznCiRkXFbPwFgCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzcwOTVlMDQ1OTg2MDUzYjliM2U4Nzg5MDM2NzI2ODM3
ZGQxZjUwHhcNMjUxMTExMDEwMTIxWhcNMjUxMTEyMDEwMTIxWjAzMTEwLwYDVQQD
Eyg4MTE3OWM5ZDU4NTA3NDcxMzY1MjE4OTg2NjhkZGYxNTU0M2I1ODVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GQ3eKj8EClUaOwJcp4GORt9mxee
Pd9tLs4aZfVn4iNN5SDIjDDX+EXvDKxZ3xTz7KgxSt3x4xuHDdnRiDQT2rcKsfg1
kNRLsdKUCfbnS90zfu7M78leYAf1j3EDf2mgqVUnHgOrYo7NVLKvNylvjXwNg8q1
LHDjxJjSVTmdi4tnyzXTdZ5tWrCKDG91PhvciETLMGFKr2+ywr+EdKgrn3P1XAXX
0p41wTb4wcF8VmkpJl318CBMh7NbEIYY4UpwwGY7tw6e6WbkwO6myJnaCru52mMj
gnjOTFgMgxv4FTGDVa70k1funhNBdr61ROUeZTa46qQlSnRUPw78XGyHvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEXnJ1YUHRxNlIYmGaN3xVUO1hfMB8GA1UdIwQY
MBaAFDbHCV4EWYYFO5s+h4kDZyaDfdH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNjSlhnUlpoZ1U3bXo2SGlRTm5Kb045MGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80ZDU4ZjUtNWMzZi00YWNhLTk3Yjgt
NmQ4YTY5YTBhZDQzLzEvTnNjSlhnUlpoZ1U3bXo2SGlRTm5Kb045MGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy80ZDU4ZjUtNWMzZi00YWNhLTk3YjgtNmQ4YTY5YTBhZDQz
LzEvTnNjSlhnUlpoZ1U3bXo2SGlRTm5Kb045MGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsf2+YjQ4
FW70e85luCZTLozJ3j2QalTHEpGTDDa+SBQg6Mf7a1IARl6UGDU8il4m8ypjwqbT
s97Jy+NLPUa97pvyADyxPGhOXppDSttZZaX3xwgknCHx2JUh4DMcXvSlYHpx7dXf
tOv5ORJriuAlZevqdpjOw/IL79KgA7ObFsVAQMNrYyZJg1VPZ63tWLSyj2/u2FU8
Ik86IEFOc8sTU8XcOKpZLCiZCxXK565RI2N5rED88rUSeo5wb+EMd3pTtr7+3XQ/
fT+sFChxDUAwWSiV5YEQhFmhpLWUWn+DkOo8owz1loYsRppml1k9aW8Gdzg3Y7F4
wIyF39cxw8nIGw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:17 2025 by rpki-client