Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
File: NldL5q52zVI7M3h8-9tpJkJj0HQ.mft (raw, json)
Hash identifier: Cv9ZGw4XCHKVZzkHn/tgZ1Kl5kJ0nbWXdbf9Zuj7AqM=
Subject key identifier: A1:E3:9C:3B:64:BB:ED:EB:E4:10:7B:29:1C:C6:FD:CC:61:ED:11:1B
Authority key identifier: 36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74
Certificate issuer: /CN=36574be6ae76cd523b33787cfbdb69264263d074
Certificate serial: 019A533F8C79EE0D131FA54A05CFD68D5787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 09:01:04 +0000
Manifest this update: Wed 05 Nov 2025 09:01:04 +0000
Manifest next update: Thu 06 Nov 2025 09:01:04 +0000
Files and hashes: 1: 1-gyxFvtsdFvYTZX0Y9fbT2PSGFM.roa (hash: EABdk5cioKlboVX+5roxKxOS78qf+VdGIdGNtobQ0pE=)
2: KArVYyPO9fBEhTTRJ1tDthlJCOw.roa (hash: a0gp1BPnbKmQpx9TqJhgPqer5KuegL1mEbSjNdCn0ek=)
3: NldL5q52zVI7M3h8-9tpJkJj0HQ.crl (hash: F0Ub4DCzlytuTj5Ny0r5eJmkkSZiM1Mi+moo/lMsZjM=)
4: SErRHgSbJegvTKQp5_vKPuL-I0M.roa (hash: 5izdqURGD+Gcq0q1le3LSPtQmkAtZ+szcc8AfWWlrxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:8c:79:ee:0d:13:1f:a5:4a:05:cf:d6:8d:57:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36574be6ae76cd523b33787cfbdb69264263d074
Validity
Not Before: Nov 5 09:01:04 2025 GMT
Not After : Nov 6 09:01:04 2025 GMT
Subject: CN=a1e39c3b64bbedebe4107b291cc6fdcc61ed111b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:01:c9:dc:3f:35:90:d5:32:44:08:c8:a8:
a2:c0:f5:8b:53:5e:0a:ec:07:01:80:c1:ee:6f:19:
b1:b0:29:70:75:81:c9:96:e6:53:f0:eb:a6:cf:62:
17:42:43:0f:19:aa:39:e2:3a:df:09:bb:4d:07:e2:
02:2f:73:01:4c:e1:71:7d:aa:95:03:a4:c6:4f:39:
a6:49:c1:a8:29:82:70:86:4c:79:b7:2f:84:f8:3b:
5e:42:24:c0:ec:b1:12:63:ae:83:84:28:2b:41:e5:
0f:ed:62:e1:5e:37:5f:3d:44:1d:2b:d8:87:aa:05:
c4:ed:ca:63:18:48:81:2d:68:ef:a9:72:55:4e:f9:
d0:37:6a:c2:94:fa:2d:ff:59:ee:c2:bd:c3:27:67:
36:e3:f8:df:f2:81:bf:ed:63:e0:ca:98:cf:42:17:
1a:92:02:09:23:fb:80:42:c8:0b:e8:66:94:2c:43:
01:bf:4a:58:83:d4:1d:83:67:8a:76:69:4f:47:9d:
08:34:05:55:b3:ac:bd:93:92:30:68:97:1f:10:ac:
ad:c3:6f:7d:5e:42:87:bb:e5:cd:fc:ca:b6:93:2e:
ef:d2:ea:5b:ed:6d:4c:f2:fa:2e:aa:34:df:2b:04:
fd:59:e0:c0:9b:a1:09:ad:03:f8:f0:5f:b0:71:5e:
66:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E3:9C:3B:64:BB:ED:EB:E4:10:7B:29:1C:C6:FD:CC:61:ED:11:1B
X509v3 Authority Key Identifier:
keyid:36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:96:89:fe:9a:c8:b5:19:e4:56:d6:e9:51:f6:d7:bf:ae:ec:
aa:4d:1c:aa:ba:36:47:43:cd:24:76:cf:a5:b8:7e:56:45:4f:
71:9f:9d:c7:ff:7f:80:93:c6:23:8f:cc:12:d7:bf:5e:14:89:
88:a2:ae:a4:dc:7e:d8:24:b2:fe:1c:3c:76:be:45:1a:7b:97:
7a:93:fc:a4:87:f1:b3:4f:4c:16:d4:d9:1c:a4:75:f7:09:9a:
29:d5:35:a3:28:9d:3b:e4:fb:e9:12:40:e6:4a:8b:74:3d:5d:
ed:ac:be:f8:d8:62:7a:37:d3:93:b3:a5:d0:37:eb:d0:56:fb:
27:e4:2a:b2:57:62:d7:19:61:7c:5f:81:e6:3c:5a:22:90:bf:
ca:6f:1f:a2:0c:64:c4:84:dd:9b:87:73:2e:0b:80:e6:37:83:
13:f7:63:61:02:50:77:9f:a2:d4:93:ca:e1:8e:01:bc:50:0a:
8d:3e:d6:23:00:86:a4:eb:c2:ac:67:68:e8:f5:5a:17:09:0a:
a2:2f:2a:a6:32:3a:93:19:b4:71:87:d7:e6:1c:38:26:fc:bd:
2b:df:c7:14:e2:02:05:30:4b:8f:2e:b7:07:16:12:9b:d2:59:
a2:7e:ef:1d:ca:58:45:3f:0b:3b:07:ed:62:04:53:a6:47:ac:
d4:a1:41:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:59:03 2025 by rpki-client