Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
File: NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft (raw, json)
Hash identifier: ADzkgLHjMf1Rc6w+SXJsaY+m1hR6DikC+0cF/o+olqU=
Subject key identifier: AC:A1:C0:26:8C:F2:4D:CC:EB:6E:FE:F3:EA:C2:35:F2:E7:C0:14:8B
Authority key identifier: 36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3
Certificate issuer: /CN=363548ed4628966248204c2fe69065f0d7b527a3
Certificate serial: 019A4D73DD3AA909E1347A238CBA8BD07399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:00:30 +0000
Manifest this update: Tue 04 Nov 2025 06:00:30 +0000
Manifest next update: Wed 05 Nov 2025 06:00:30 +0000
Files and hashes: 1: NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl (hash: 6KogbEUYvfTXfEb7jJzxWXLa2IuLrCQ7ebBCX7YcHkg=)
2: ZTPqCUD63V4eQMXnLn6AnTQCitU.roa (hash: ywlhEvz+62iFTUdrK6be6oxB9Yvs+N63Zrh3s7mdFzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:dd:3a:a9:09:e1:34:7a:23:8c:ba:8b:d0:73:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363548ed4628966248204c2fe69065f0d7b527a3
Validity
Not Before: Nov 4 06:00:30 2025 GMT
Not After : Nov 5 06:00:30 2025 GMT
Subject: CN=aca1c0268cf24dcceb6efef3eac235f2e7c0148b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d6:89:ab:31:ea:8c:c2:8b:73:6f:a9:d2:89:
e0:46:19:df:c5:4a:d9:b3:9f:6e:aa:bb:d1:c7:4c:
9e:21:ff:aa:f8:aa:61:2a:a9:ef:ce:c9:b3:1a:ee:
2b:de:ba:16:4e:54:dd:72:3a:75:4f:a4:65:5c:d7:
90:9e:a9:35:2a:f9:90:56:2a:81:b8:c9:fe:82:1a:
4f:29:66:a3:04:96:3b:c8:85:c4:68:a1:dc:54:5f:
9d:ec:91:7d:d9:b6:0a:b5:c7:6d:95:ac:00:62:f8:
a4:15:e7:1d:c5:ad:7d:5c:76:d3:d7:d1:84:70:84:
b0:72:d8:e8:13:23:7f:c6:2f:a4:df:bb:9c:f6:00:
b5:70:3d:e6:97:b4:8d:55:59:b5:c6:e5:77:9b:07:
12:b1:61:bb:2b:ec:77:d0:5a:94:77:0f:70:5f:4f:
cb:b3:0f:c0:a7:8e:c9:ac:c3:e0:f5:a6:2c:c8:69:
b6:30:f8:e2:f5:d4:16:2b:09:70:37:df:8c:ac:b8:
4c:5c:9a:1b:82:7f:d4:fb:8d:27:18:d0:a7:b9:ff:
2d:df:b0:4d:66:63:ef:5b:36:04:fe:9c:e5:76:e8:
e6:f1:e8:61:46:58:4b:76:72:6c:05:d0:0a:77:f5:
8c:35:a7:1d:aa:95:30:26:96:d6:a8:ab:a1:43:07:
27:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A1:C0:26:8C:F2:4D:CC:EB:6E:FE:F3:EA:C2:35:F2:E7:C0:14:8B
X509v3 Authority Key Identifier:
keyid:36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:41:41:19:a3:78:2d:44:ab:cb:8f:7e:db:29:0e:6f:f7:b3:
b1:c2:ac:ec:b1:7d:08:cc:03:ce:5b:6e:e6:8a:7d:0e:09:d4:
49:22:4f:9d:1d:65:24:a9:4f:95:9f:b3:49:bd:f0:4e:03:61:
9b:c2:ee:98:41:8d:04:94:1f:df:22:84:63:bd:51:d7:84:15:
d9:13:cb:39:0c:9a:27:40:02:d6:5f:bc:03:62:c1:2f:29:b5:
2b:ce:3b:ab:54:23:ba:7d:4e:7c:a1:aa:cb:99:54:7f:a9:99:
90:aa:f0:b3:59:5a:14:68:8b:a1:c9:d9:16:47:ff:c7:9a:b3:
ff:57:71:e7:3f:43:d1:ce:03:0c:09:56:55:0e:60:01:a8:89:
b0:7c:8b:e0:2a:9d:a5:df:30:24:04:e0:97:d3:87:cb:ed:2e:
6d:77:d3:30:11:a2:65:0e:42:cc:c8:be:41:d0:c2:e1:05:84:
cf:e1:dd:90:6b:f7:0f:01:b4:b5:28:9a:b1:1c:f3:c4:9d:b5:
09:42:69:0c:e7:b1:b7:2b:f1:26:2e:1f:8b:37:1b:0f:cb:ec:
90:c7:72:34:f6:0e:a1:51:ad:9c:a7:bd:93:d3:79:26:d5:cd:
35:0d:ab:7b:68:f1:19:ee:8f:47:7b:b6:98:93:bf:37:1e:d5:
2b:f4:75:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc906qQnhNHojjLqL0HOZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MzU0OGVkNDYyODk2NjI0ODIwNGMyZmU2OTA2NWYwZDdi
NTI3YTMwHhcNMjUxMTA0MDYwMDMwWhcNMjUxMTA1MDYwMDMwWjAzMTEwLwYDVQQD
EyhhY2ExYzAyNjhjZjI0ZGNjZWI2ZWZlZjNlYWMyMzVmMmU3YzAxNDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNaJqzHqjMKLc2+p0ongRhnfxUrZ
s59uqrvRx0yeIf+q+KphKqnvzsmzGu4r3roWTlTdcjp1T6RlXNeQnqk1KvmQViqB
uMn+ghpPKWajBJY7yIXEaKHcVF+d7JF92bYKtcdtlawAYvikFecdxa19XHbT19GE
cISwctjoEyN/xi+k37uc9gC1cD3ml7SNVVm1xuV3mwcSsWG7K+x30FqUdw9wX0/L
sw/Ap47JrMPg9aYsyGm2MPji9dQWKwlwN9+MrLhMXJobgn/U+40nGNCnuf8t37BN
ZmPvWzYE/pzldujm8ehhRlhLdnJsBdAKd/WMNacdqpUwJpbWqKuhQwcnxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyhwCaM8k3M627+8+rCNfLnwBSLMB8GA1UdIwQY
MBaAFDY1SO1GKJZiSCBML+aQZfDXtSejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmpWSTdVWW9sbUpJSUV3djVwQmw4TmUxSjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NWRjODMtMjcwNy00OTE3LWI2M2Yt
OTVjNGU5NGFkMGE5LzEvTmpWSTdVWW9sbUpJSUV3djVwQmw4TmUxSjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi81NWRjODMtMjcwNy00OTE3LWI2M2YtOTVjNGU5NGFkMGE5
LzEvTmpWSTdVWW9sbUpJSUV3djVwQmw4TmUxSjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv0FBGaN4
LUSry49+2ykOb/ezscKs7LF9CMwDzltu5op9DgnUSSJPnR1lJKlPlZ+zSb3wTgNh
m8LumEGNBJQf3yKEY71R14QV2RPLOQyaJ0AC1l+8A2LBLym1K847q1Qjun1OfKGq
y5lUf6mZkKrws1laFGiLocnZFkf/x5qz/1dx5z9D0c4DDAlWVQ5gAaiJsHyL4Cqd
pd8wJATgl9OHy+0ubXfTMBGiZQ5CzMi+QdDC4QWEz+HdkGv3DwG0tSiasRzzxJ21
CUJpDOextyvxJi4fizcbD8vskMdyNPYOoVGtnKe9k9N5JtXNNQ2re2jxGe6PR3u2
mJO/Nx7VK/R1Iw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:55 2025 by rpki-client