Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
File: NA5TAUvwOK3g13rmeP9t80ylPcA.mft (raw, json)
Hash identifier: iS/gbH8HKf1oY/B3n1aAAF8/XhMaHKO3aw3/M7x1sak=
Subject key identifier: 6C:07:F0:A4:F6:A1:C6:A6:B9:47:D6:29:BF:64:41:EC:C9:48:46:59
Authority key identifier: 34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
Certificate issuer: /CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Certificate serial: 019A4E86A7E202DF5068435314D18A3C0B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
Manifest number: 06B3
Signing time: Tue 04 Nov 2025 11:00:38 +0000
Manifest this update: Tue 04 Nov 2025 11:00:38 +0000
Manifest next update: Wed 05 Nov 2025 11:00:38 +0000
Files and hashes: 1: NA5TAUvwOK3g13rmeP9t80ylPcA.crl (hash: avEKMAIzfRX2Z5E1Pzb+i9RkcLF91QAH4sasiYm+xSo=)
2: _RGZJkC_maX9Rk5gq7HAO40xyLk.roa (hash: UMn242+aY7D7FSfVsCmwNFJLABV4j5b5GNVt9RDj5KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a7:e2:02:df:50:68:43:53:14:d1:8a:3c:0b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Validity
Not Before: Nov 4 11:00:38 2025 GMT
Not After : Nov 5 11:00:38 2025 GMT
Subject: CN=6c07f0a4f6a1c6a6b947d629bf6441ecc9484659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:bb:ca:9a:08:51:d6:6f:60:47:c0:75:d0:
23:16:b3:3b:ab:b3:41:11:d1:20:16:a8:26:12:fb:
24:54:0f:45:38:1b:37:6c:a7:e5:1b:0e:9c:89:fb:
e4:52:f7:fb:06:4f:dd:a0:e3:44:50:60:71:db:64:
38:a2:20:3b:44:38:2b:15:67:5b:d0:91:f5:9e:6a:
89:2e:e5:5d:d3:46:d3:ff:84:b1:ee:a8:b1:f7:c0:
ba:27:6a:ce:13:46:29:ea:b6:d6:a0:05:41:81:71:
da:83:49:29:87:5c:46:2b:f8:99:22:7d:9e:a9:99:
ed:21:3d:0d:0e:d2:f3:c2:f3:23:a4:10:9b:b9:a4:
ab:a7:18:a5:e6:58:7d:2b:94:b1:3b:43:bd:17:b1:
18:eb:73:37:8b:f0:6f:25:0d:3b:81:2e:92:fb:e7:
64:ba:10:da:42:64:ed:75:ac:63:23:a4:03:64:f5:
6f:ba:1c:33:15:cc:f7:44:fc:42:68:18:63:e4:e9:
36:3b:b2:e2:88:78:7b:44:56:06:f7:e9:74:6f:eb:
d3:5f:e2:d7:98:3b:08:87:cc:3a:5e:74:e5:42:14:
40:1d:a6:94:0c:29:46:65:ec:a0:5d:f2:89:f1:3b:
8c:33:d8:19:9e:e6:b9:07:65:50:e1:0d:bf:ad:93:
b4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:07:F0:A4:F6:A1:C6:A6:B9:47:D6:29:BF:64:41:EC:C9:48:46:59
X509v3 Authority Key Identifier:
keyid:34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:11:ed:aa:2f:5e:43:6a:eb:ae:e1:37:05:aa:ba:8c:bb:ea:
3e:7f:90:e5:5a:d0:d5:70:cb:36:3e:b8:7e:ca:35:9d:28:29:
1a:66:e5:cd:a3:db:7c:60:e1:23:05:36:24:52:85:32:17:12:
3d:e4:fd:58:09:ab:dc:1f:90:31:af:27:3e:88:41:fa:46:22:
dd:4d:67:00:46:93:88:8e:86:c6:9c:7f:c2:ba:52:07:88:6b:
39:3c:3f:4c:5c:08:3e:f5:e8:c7:82:b2:b0:7b:fd:55:2c:86:
84:a6:f4:25:e6:41:03:62:de:f3:f6:b7:ed:1a:6c:56:c7:42:
ac:ec:98:65:97:7a:57:2a:27:03:27:f6:a3:db:ac:65:e9:fd:
00:f0:a8:91:f2:44:ba:18:f9:b3:07:db:19:45:e8:f1:3d:d6:
e2:69:ed:6f:e5:64:34:c8:d6:c3:76:96:e8:6f:51:80:2f:78:
93:0c:16:8a:8d:7c:0d:c6:5d:41:f8:4c:ac:57:41:23:42:4d:
ec:5c:9b:5d:04:44:59:dc:36:2e:dc:00:44:0d:fe:98:c5:5c:
08:c6:12:76:44:6c:ff:e3:24:f8:fb:e7:2c:d5:89:b6:0a:db:
7b:21:a7:5e:28:25:e9:04:b0:0b:65:73:c2:0a:4f:5b:92:16:
a2:b9:95:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:26 2025 by rpki-client