Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
File: NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft (raw, json)
Hash identifier: zBMsOtOESeKvjaRzFbWfzBHCzWCiQFqwf9PIoZrr388=
Subject key identifier: 85:55:A1:71:66:E6:95:88:2E:A1:99:5F:91:50:9A:39:B8:44:A2:FE
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial: 019A4DAB1BAE4911145EF9BB00166BEFF2C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 07:00:50 +0000
Manifest this update: Tue 04 Nov 2025 07:00:50 +0000
Manifest next update: Wed 05 Nov 2025 07:00:50 +0000
Files and hashes: 1: 92pgx6QNH23m1sb49k-ykMttkN0.roa (hash: 6x2mradcGTZ+q9pm81EMeP+6J3k4A+BvCK17T29Njxw=)
2: NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl (hash: d71ZMjGmZFByVAKvm1OvyOx3cBPbLEy6cmLBNEhojjs=)
3: lZsMnzEe-znnn1V93iNCRM_YAak.roa (hash: z+dECtyUmhjS80QJzbvWDw1cRN0vxIcWCWIADf50+Fg=)
4: oYs8paRk9JPLOaUCIoa9pxPnmCs.roa (hash: kBYq1h4wg3W+NuRYMWAaTbphy585KIiOSln9Rszwvtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:1b:ae:49:11:14:5e:f9:bb:00:16:6b:ef:f2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Validity
Not Before: Nov 4 07:00:50 2025 GMT
Not After : Nov 5 07:00:50 2025 GMT
Subject: CN=8555a17166e695882ea1995f91509a39b844a2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:73:4b:e7:9e:5b:d1:d0:64:bf:82:61:13:
46:1b:0f:56:70:c1:da:13:36:8c:0d:4e:c8:6d:fa:
a8:71:d7:9c:cf:01:c6:10:f4:33:3d:9d:08:51:bc:
76:21:3e:0f:3d:89:ff:2a:b2:21:38:9d:14:23:7e:
22:c7:a8:6f:6b:2e:4e:d2:79:49:c8:b1:ba:9b:ab:
e6:c3:8a:89:50:ff:41:5b:87:a5:4d:ba:9b:38:65:
d9:34:24:2f:5d:bb:ae:4a:be:5d:93:fd:a6:0a:c4:
46:5e:ea:bf:15:f6:3d:9d:4d:7f:e9:3d:4c:cc:8b:
f9:5e:ee:2c:f3:7e:67:93:91:39:ad:ca:5f:0b:f8:
21:77:7a:08:a5:45:02:e6:17:15:ae:1a:71:4e:41:
b3:18:f5:63:c9:77:a4:00:d8:2a:54:5d:2c:26:97:
14:de:1d:f3:86:b6:83:bf:31:92:1b:73:1e:10:95:
5b:4f:c4:14:59:8d:a5:32:91:e1:65:cc:93:90:e2:
78:70:02:44:eb:79:08:66:36:26:92:37:d2:f8:e5:
aa:06:b5:78:fb:31:49:5e:01:26:87:1f:59:e4:95:
80:ca:96:f3:c9:f5:fb:57:b2:c4:89:28:86:de:43:
cf:aa:26:56:2e:c4:ef:72:da:f0:71:54:11:17:4e:
53:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:55:A1:71:66:E6:95:88:2E:A1:99:5F:91:50:9A:39:B8:44:A2:FE
X509v3 Authority Key Identifier:
keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:79:2c:09:3d:3c:95:7b:a0:65:e6:1a:3c:c6:2c:56:9a:cf:
e4:ad:b1:b1:59:11:fc:f3:30:52:ea:c0:dd:61:17:e2:ed:f5:
94:c3:84:e3:9c:0f:84:b0:61:c0:42:33:4a:14:64:8a:e4:cf:
a1:8e:aa:b5:98:4e:56:26:3c:7e:cd:d6:6d:6a:e2:24:94:da:
c3:1d:65:a2:79:4b:0e:6a:18:4f:29:c2:2b:29:99:0c:e1:53:
80:b3:44:35:99:3c:a2:de:c5:47:d1:cd:fc:ad:6a:4d:0c:7b:
da:fa:6e:66:d1:8e:0b:54:3a:ad:72:e2:d0:83:4b:b9:9c:2c:
a6:51:ae:b6:33:df:01:2b:3b:92:8c:0e:7c:b3:bc:24:00:bc:
9e:1d:c2:7e:1f:d0:4e:26:93:1c:b3:7f:21:c1:a7:a3:aa:9e:
ec:8b:5a:02:bc:5a:4a:fa:46:fb:91:18:78:bf:0c:86:bf:d6:
ea:e7:86:14:67:55:4f:92:45:49:b8:68:4b:44:fb:45:4d:07:
fc:77:1a:5e:80:b4:23:da:f4:80:64:f4:53:c1:ba:ea:86:b1:
07:52:70:01:3b:b0:19:bd:51:6a:7d:9e:be:d2:8e:17:8e:9d:
2d:82:b1:84:7c:00:e6:93:e7:c2:8b:61:13:94:53:c9:3d:1f:
29:be:51:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqxuuSREUXvm7ABZr7/LFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MGJlYTNmY2MzY2JjZWRjODI5MTljZjU3Yzc0MTA4YmFl
YTM2OWUwHhcNMjUxMTA0MDcwMDUwWhcNMjUxMTA1MDcwMDUwWjAzMTEwLwYDVQQD
Eyg4NTU1YTE3MTY2ZTY5NTg4MmVhMTk5NWY5MTUwOWEzOWI4NDRhMmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/VzS+eeW9HQZL+CYRNGGw9WcMHa
EzaMDU7IbfqocdeczwHGEPQzPZ0IUbx2IT4PPYn/KrIhOJ0UI34ix6hvay5O0nlJ
yLG6m6vmw4qJUP9BW4elTbqbOGXZNCQvXbuuSr5dk/2mCsRGXuq/FfY9nU1/6T1M
zIv5Xu4s835nk5E5rcpfC/ghd3oIpUUC5hcVrhpxTkGzGPVjyXekANgqVF0sJpcU
3h3zhraDvzGSG3MeEJVbT8QUWY2lMpHhZcyTkOJ4cAJE63kIZjYmkjfS+OWqBrV4
+zFJXgEmhx9Z5JWAypbzyfX7V7LEiSiG3kPPqiZWLsTvctrwcVQRF05TIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVVoXFm5pWILqGZX5FQmjm4RKL+MB8GA1UdIwQY
MBaAFDQL6j/MPLztyCkZz1fHQQi66jaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lY2RhM2QtYTJkYi00OTA4LTg2MmYt
MTExMDU2MzY5YTIzLzEvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9lY2RhM2QtYTJkYi00OTA4LTg2MmYtMTExMDU2MzY5YTIz
LzEvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnksCT08
lXugZeYaPMYsVprP5K2xsVkR/PMwUurA3WEX4u31lMOE45wPhLBhwEIzShRkiuTP
oY6qtZhOViY8fs3WbWriJJTawx1lonlLDmoYTynCKymZDOFTgLNENZk8ot7FR9HN
/K1qTQx72vpuZtGOC1Q6rXLi0INLuZwsplGutjPfASs7kowOfLO8JAC8nh3Cfh/Q
TiaTHLN/IcGno6qe7ItaArxaSvpG+5EYeL8Mhr/W6ueGFGdVT5JFSbhoS0T7RU0H
/HcaXoC0I9r0gGT0U8G66oaxB1JwATuwGb1Ran2evtKOF46dLYKxhHwA5pPnwoth
E5RTyT0fKb5R4Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:53 2025 by rpki-client