Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
File: NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft (raw, json)
Hash identifier: XvNDNBRpIqi2pOw2LTmLzppyrGcksQM4PcXNnVyKNZ0=
Subject key identifier: C2:35:69:02:74:34:9A:6B:F8:F3:BA:BD:C0:AF:1C:E8:B7:23:79:EF
Authority key identifier: 35:E6:76:45:94:E0:0D:9A:B8:01:78:93:C7:10:92:CF:51:6B:10:1F
Certificate issuer: /CN=35e6764594e00d9ab8017893c71092cf516b101f
Certificate serial: 019A725C9C84D651F4BAC9F0EAD38D40360A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
Manifest number: 16AD
Signing time: Tue 11 Nov 2025 10:01:03 +0000
Manifest this update: Tue 11 Nov 2025 10:01:03 +0000
Manifest next update: Wed 12 Nov 2025 10:01:03 +0000
Files and hashes: 1: NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl (hash: 9UKzRyyjAOQADvxCaF0Me7ZyDK8VmFf/OZdggJSVwBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:9c:84:d6:51:f4:ba:c9:f0:ea:d3:8d:40:36:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e6764594e00d9ab8017893c71092cf516b101f
Validity
Not Before: Nov 11 10:01:03 2025 GMT
Not After : Nov 12 10:01:03 2025 GMT
Subject: CN=c235690274349a6bf8f3babdc0af1ce8b72379ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:aa:b7:9a:db:fd:a7:1c:3d:4a:3c:78:87:
cc:b4:fa:0f:64:de:1c:e5:81:50:55:18:82:6d:66:
53:b1:27:1b:6b:7b:50:cb:07:96:b1:63:06:70:2e:
bb:6a:79:22:8f:ea:e9:5b:83:bc:1c:4b:7c:47:e9:
40:63:b7:84:07:c9:13:3d:c0:64:e7:d0:6b:db:78:
63:62:df:8f:a3:12:fc:41:a0:07:76:2c:7a:cd:da:
8d:13:93:84:a3:77:63:d4:0e:07:ce:b6:b1:7e:46:
f6:25:a1:31:32:aa:34:50:7b:d3:7b:3d:cb:65:a8:
7a:81:91:d6:6c:4f:9b:93:5a:56:a0:24:df:6e:11:
61:4c:4b:09:84:d3:f1:90:b1:66:12:85:b9:69:03:
13:a9:3d:9b:2d:66:2e:61:d7:aa:ca:6d:ce:8b:bb:
91:0d:b7:6b:19:68:fb:eb:41:cc:f9:97:f4:b2:dc:
d2:46:a4:c4:aa:86:89:74:25:ba:29:bb:94:3b:9b:
bc:6f:19:0b:06:83:1f:10:e5:39:9a:ca:58:2d:56:
35:81:f1:97:5d:7a:f2:a1:b2:10:6c:30:f6:81:a5:
57:a0:95:2d:38:6d:49:62:4a:4f:da:66:63:f7:fd:
b9:23:79:c9:46:72:17:41:e3:7a:31:64:b4:64:f4:
5c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:35:69:02:74:34:9A:6B:F8:F3:BA:BD:C0:AF:1C:E8:B7:23:79:EF
X509v3 Authority Key Identifier:
keyid:35:E6:76:45:94:E0:0D:9A:B8:01:78:93:C7:10:92:CF:51:6B:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e9:ee:f1:60:4e:98:ee:90:3a:34:17:fb:66:42:5c:7f:66:
e1:be:8d:1a:06:b3:ce:fb:e7:3a:09:a0:7a:3f:b9:ea:ae:a7:
ab:e0:9e:29:5e:4e:02:16:a6:7e:fb:b4:71:6d:1b:4d:78:e1:
ba:68:73:cc:4e:2e:94:1a:6c:6d:7d:67:28:f1:2f:1e:28:ed:
d3:33:7e:dc:f7:b8:60:75:64:3d:4f:2a:ae:a5:fa:87:f5:60:
37:48:2e:52:c2:2c:c1:87:03:42:96:31:91:93:37:41:2d:58:
b3:53:33:7d:cb:10:fa:05:08:b8:92:e0:c5:96:d6:8a:c4:68:
90:d4:f0:1f:14:ea:e2:f6:c8:19:15:2b:02:b1:d9:64:6c:8a:
7d:b7:d5:bb:9b:15:83:94:71:8a:f3:31:81:cd:d3:9d:20:ba:
ee:bc:cc:b4:38:b3:4c:ca:e0:49:b1:a3:9c:28:32:fc:0a:0f:
eb:0d:55:70:07:e8:27:5b:25:55:83:ac:96:03:55:22:14:1a:
bb:69:fd:b8:b1:87:5a:b3:29:e2:b4:2d:ce:31:cc:2b:fc:e3:
2d:d4:86:72:07:38:57:ac:7b:8b:62:1c:86:bf:19:74:61:86:
f2:89:c2:d6:00:49:a6:07:ea:9a:55:de:a5:e5:1a:e8:c0:d4:
a5:3b:c4:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXJyE1lH0usnw6tONQDYKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZTY3NjQ1OTRlMDBkOWFiODAxNzg5M2M3MTA5MmNmNTE2
YjEwMWYwHhcNMjUxMTExMTAwMTAzWhcNMjUxMTEyMTAwMTAzWjAzMTEwLwYDVQQD
EyhjMjM1NjkwMjc0MzQ5YTZiZjhmM2JhYmRjMGFmMWNlOGI3MjM3OWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz96qt5rb/accPUo8eIfMtPoPZN4c
5YFQVRiCbWZTsScba3tQyweWsWMGcC67ankij+rpW4O8HEt8R+lAY7eEB8kTPcBk
59Br23hjYt+PoxL8QaAHdix6zdqNE5OEo3dj1A4Hzraxfkb2JaExMqo0UHvTez3L
Zah6gZHWbE+bk1pWoCTfbhFhTEsJhNPxkLFmEoW5aQMTqT2bLWYuYdeqym3Oi7uR
DbdrGWj760HM+Zf0stzSRqTEqoaJdCW6KbuUO5u8bxkLBoMfEOU5mspYLVY1gfGX
XXryobIQbDD2gaVXoJUtOG1JYkpP2mZj9/25I3nJRnIXQeN6MWS0ZPRc5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMI1aQJ0NJpr+PO6vcCvHOi3I3nvMB8GA1UdIwQY
MBaAFDXmdkWU4A2auAF4k8cQks9RaxAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmVaMlJaVGdEWnE0QVhpVHh4Q1N6MUZyRUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy80YzMxZjItOGYzMC00ZGJlLTkzOGQt
YjJmMGIxYmNhZTVjLzEvTmVaMlJaVGdEWnE0QVhpVHh4Q1N6MUZyRUI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy80YzMxZjItOGYzMC00ZGJlLTkzOGQtYjJmMGIxYmNhZTVj
LzEvTmVaMlJaVGdEWnE0QVhpVHh4Q1N6MUZyRUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATenu8WBO
mO6QOjQX+2ZCXH9m4b6NGgazzvvnOgmgej+56q6nq+CeKV5OAhamfvu0cW0bTXjh
umhzzE4ulBpsbX1nKPEvHijt0zN+3Pe4YHVkPU8qrqX6h/VgN0guUsIswYcDQpYx
kZM3QS1Ys1MzfcsQ+gUIuJLgxZbWisRokNTwHxTq4vbIGRUrArHZZGyKfbfVu5sV
g5RxivMxgc3TnSC67rzMtDizTMrgSbGjnCgy/AoP6w1VcAfoJ1slVYOslgNVIhQa
u2n9uLGHWrMp4rQtzjHMK/zjLdSGcgc4V6x7i2Ichr8ZdGGG8onC1gBJpgfqmlXe
peUa6MDUpTvESA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:21 2025 by rpki-client