Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier: cV9c9ww13bKOOJt02LJQSn/jQxrpuo6sJt6I9SDt0rc=
Subject key identifier: E0:29:35:52:D9:C0:66:0C:AE:E9:89:C2:4E:97:5C:41:2D:4B:A2:1A
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 019A4DE21E2E81A3102807B15C8A030F1D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 08:00:55 +0000
Manifest this update: Tue 04 Nov 2025 08:00:55 +0000
Manifest next update: Wed 05 Nov 2025 08:00:55 +0000
Files and hashes: 1: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: BKWwlynZuv9GRog9RQ53x/SG/Q6f2086k4ajpB5kbmE=)
2: kkI0VJ623ZMpCKAjZsrxAXz6PWk.roa (hash: wTnvsnp3yJHDHnSTINs0tfqN/DigtBsLrefQ3ls6zYA=)
3: uucUmYI6JsmVzUOd6RM4u1Uvm6c.roa (hash: FHR3fbJwd259J3Jj1zln57qgHYJEZGfouW6MVY+3Iko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:1e:2e:81:a3:10:28:07:b1:5c:8a:03:0f:1d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Nov 4 08:00:55 2025 GMT
Not After : Nov 5 08:00:55 2025 GMT
Subject: CN=e0293552d9c0660caee989c24e975c412d4ba21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:47:26:a0:47:b8:96:55:86:ff:a7:55:96:81:
a3:bb:57:ff:df:2d:5f:2d:56:da:5b:91:2e:b9:d7:
d3:97:b7:a7:a7:25:3d:d9:65:ae:66:e0:53:60:b3:
d9:66:ce:64:d8:27:7d:14:18:de:4e:ca:db:ec:33:
34:b9:c3:3c:cd:d7:6b:30:6f:7a:7c:6a:f7:ff:c4:
d2:cd:48:4d:fc:d2:0d:fd:f4:33:4e:f1:77:7d:6c:
40:14:87:a2:4c:eb:57:ca:bc:de:df:76:5b:3d:58:
8d:a1:e0:36:0c:6f:0f:bd:c7:96:fe:89:e3:0d:7f:
7c:2c:66:64:b3:49:ce:c6:50:24:dc:95:41:c2:cf:
07:e3:de:c1:84:39:f5:1b:99:3f:5b:00:44:02:34:
ab:47:9a:23:37:88:b8:6e:d9:08:1e:82:99:1d:ce:
15:bd:6c:f8:f1:cd:ab:16:7a:5c:22:ac:14:f7:24:
4a:8c:01:ac:9a:48:20:d0:b5:55:50:3d:ff:70:ab:
74:c4:b7:65:07:f2:5d:b4:fc:62:18:f9:62:39:81:
52:5e:63:2a:c1:20:9a:15:c2:e4:b0:b2:24:fc:c7:
f2:7c:e5:08:cf:06:9f:38:74:cb:7a:42:27:32:76:
71:fd:e2:72:cb:1e:32:b3:01:03:e9:1f:24:d4:1b:
bc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:29:35:52:D9:C0:66:0C:AE:E9:89:C2:4E:97:5C:41:2D:4B:A2:1A
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b9:8e:94:94:45:52:f7:62:1d:ac:04:36:54:14:d8:ec:3b:
3b:d0:11:1e:da:fe:6f:7b:c6:54:0f:43:d5:ce:22:45:63:54:
f6:cc:a5:e5:99:de:30:a4:8b:cc:87:93:02:4f:83:48:bc:ea:
f5:2b:24:cd:cb:72:be:33:66:28:e9:64:69:29:a2:76:37:95:
6b:b0:6d:13:0e:78:b9:c2:8e:47:b3:6b:42:5e:0d:63:c0:cd:
7c:5a:ab:de:98:88:5b:df:32:40:67:1c:16:46:5b:0a:07:f6:
bd:78:0f:55:48:84:8a:ee:85:56:0d:63:8f:be:65:cd:d7:fa:
77:0a:55:9c:7a:54:bb:61:0e:38:a8:ff:7e:21:19:86:49:e2:
37:2c:92:47:0c:0c:fa:ae:ab:1c:21:70:f8:13:97:33:f9:e9:
fb:a8:e0:9d:4f:cc:6f:37:cf:83:97:03:37:b5:63:e7:ca:78:
70:b3:43:42:54:b6:94:1e:a9:3a:3f:67:85:05:31:ea:94:de:
49:6f:ab:00:06:60:11:9a:c2:a2:b7:c8:5f:7c:f8:e3:61:a8:
86:ad:4e:58:6a:64:0e:fa:4f:34:5d:3b:f8:06:ce:2d:63:f4:
3b:b7:b5:78:a5:66:81:fb:66:cf:3f:3d:31:73:7c:74:b3:db:
98:cc:bd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:51 2025 by rpki-client