Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
File: NutRbqkC2WStsqptytmh3A9bfv4.mft (raw, json)
Hash identifier: aIWO5ttjgpb5NdALHQbvowJy+OLLmABAQZ7HrhzOTA8=
Subject key identifier: 5C:31:A3:EE:CD:52:94:11:B9:67:83:6E:F5:67:AB:02:3C:D0:11:E9
Authority key identifier: 36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
Certificate issuer: /CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Certificate serial: 019A522CCD5CD41E8FFC5822486713C09AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
Manifest number: 16A0
Signing time: Wed 05 Nov 2025 04:00:59 +0000
Manifest this update: Wed 05 Nov 2025 04:00:59 +0000
Manifest next update: Thu 06 Nov 2025 04:00:59 +0000
Files and hashes: 1: NutRbqkC2WStsqptytmh3A9bfv4.crl (hash: T6eAOSvr+Oy8iMizztuQjQDI7oj3NA/09lW5rMcoDRY=)
2: XdAh2iIkdXAUuE10m0pcdADM_3Q.roa (hash: lEtjV/lSmPRly69ux6s/y/s94dr1ooRNJ7kAyfLCuys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:cd:5c:d4:1e:8f:fc:58:22:48:67:13:c0:9a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Validity
Not Before: Nov 5 04:00:59 2025 GMT
Not After : Nov 6 04:00:59 2025 GMT
Subject: CN=5c31a3eecd529411b967836ef567ab023cd011e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:68:32:92:a5:38:78:53:ab:19:a1:62:80:
ce:ac:bb:6d:f1:9f:0d:02:c1:22:16:25:f2:ee:ac:
fa:02:38:d0:3d:a0:f1:75:c2:75:89:0e:c8:53:1a:
8a:56:e6:cb:44:0e:a3:70:51:b6:ee:7e:16:16:81:
ac:e5:00:ae:a4:aa:ac:08:78:ce:b8:64:2e:44:50:
62:13:71:94:fc:d1:c2:b8:13:16:d5:3c:49:53:ce:
56:05:5b:44:a8:7f:e4:9d:fe:d6:73:90:a0:b3:06:
e9:17:e7:91:bf:04:33:10:e3:8e:c8:8f:f9:bf:1c:
f4:df:6c:fc:3b:00:20:c0:08:0e:af:8b:70:47:68:
77:3f:10:7b:df:87:01:95:76:85:99:9b:0e:6c:83:
0a:f4:8a:b0:a6:be:6d:65:f1:11:51:44:9f:00:1c:
08:8e:2b:51:9b:65:82:62:37:90:c7:1e:20:46:fa:
aa:3a:70:f5:b7:c0:d0:f2:e6:ba:d1:95:01:53:d3:
ab:74:78:b1:af:fc:db:9c:f2:0e:5a:a5:ed:a6:39:
92:4a:61:fa:9f:ec:c0:ab:68:51:ee:64:c7:51:f2:
b3:80:b2:d2:bf:bb:84:8b:be:53:77:31:cd:e1:9a:
f6:ca:ea:8d:13:fc:15:da:d9:43:8d:a6:d7:8d:05:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:31:A3:EE:CD:52:94:11:B9:67:83:6E:F5:67:AB:02:3C:D0:11:E9
X509v3 Authority Key Identifier:
keyid:36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f7:8e:4e:8f:1d:a0:3a:d1:c0:60:b7:c0:f7:46:35:77:0d:
0a:42:ca:db:be:5b:29:bb:87:fa:dc:2a:a0:b9:c0:28:25:e1:
0a:78:cc:45:1f:4b:5f:0d:53:84:4b:16:b0:11:5b:f4:2a:9c:
00:f5:e1:56:81:49:bf:af:62:3b:bb:19:bf:43:3b:23:68:37:
7c:1d:7e:6e:88:60:ce:46:82:b6:bc:69:ea:8b:69:d7:98:4f:
88:10:b9:51:b1:a0:54:97:a5:95:77:1f:f6:f8:d9:58:b0:0d:
6b:69:71:60:81:05:92:c0:c0:27:a2:74:9e:cb:0f:3c:59:56:
dc:b9:88:c7:f6:2c:2d:ab:5f:a6:dd:0c:fe:65:81:99:df:d3:
eb:b0:fd:d2:0e:a5:fb:2e:d0:08:32:f6:8b:62:8e:a5:6f:36:
4b:55:38:2e:10:3b:e3:5d:90:36:60:87:24:ae:d7:12:4b:bf:
9f:11:7d:15:aa:31:18:8d:1d:85:1f:0a:03:49:f7:1c:61:7c:
d0:af:76:2f:a3:43:86:af:e7:e2:23:35:b6:9c:66:d6:5d:cc:
2d:a6:be:26:51:47:6d:40:f4:ab:9e:35:55:d5:8d:22:12:f0:
92:c4:99:5f:07:85:92:3b:53:f1:cd:c6:24:7e:23:eb:c5:e2:
ab:53:23:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:24 2025 by rpki-client