Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
File: NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json)
Hash identifier: b7VtNwYcva/EKycDqHypHvxkjDMEUi1dqgrHvS5XHx8=
Subject key identifier: E1:68:1A:9C:B3:4D:87:4C:90:99:91:D2:4E:86:7B:D4:62:D9:89:B3
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Certificate issuer: /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial: 019A5150FC5AF11C2C4B9407D0D59B51DDAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
Manifest number: 0439
Signing time: Wed 05 Nov 2025 00:00:53 +0000
Manifest this update: Wed 05 Nov 2025 00:00:53 +0000
Manifest next update: Thu 06 Nov 2025 00:00:53 +0000
Files and hashes: 1: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: 8FTTM6h46z9W+Dl9aDNdCL+tyeaPxprTU68Y+vDFKUM=)
2: cEQi14kKuKL4ZWozyPewcuSD5kQ.roa (hash: AQa4zimuZDO+7ACyM4KJjx7KQcRwuoNCJUovJ5T5Vck=)
3: xGHkCj7QXTK91-IzTTuEVkNvzos.roa (hash: jRuba4ysEPA//Moy/YkHQHxGDPSKQ/jX38S+l3o0ZrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:fc:5a:f1:1c:2c:4b:94:07:d0:d5:9b:51:dd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Validity
Not Before: Nov 5 00:00:53 2025 GMT
Not After : Nov 6 00:00:53 2025 GMT
Subject: CN=e1681a9cb34d874c909991d24e867bd462d989b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:59:16:d7:8f:09:12:94:6c:39:e1:4e:62:
17:e5:39:50:69:f0:27:3b:d1:d9:2a:b0:aa:33:1c:
ee:1f:88:da:88:7d:5e:90:6e:09:0f:52:f5:54:56:
8f:7b:16:a7:9c:42:85:e7:3e:4e:8e:c9:e9:c6:83:
16:fe:22:be:b1:d2:a5:61:b2:27:30:2c:a4:c2:45:
e7:85:1b:31:52:88:70:07:ca:3d:20:ff:66:5f:25:
d5:cb:4b:bb:a8:f4:98:4d:02:fd:32:54:0d:40:70:
b1:39:22:22:62:4a:1d:4e:09:b6:57:be:17:ca:fc:
9a:67:fa:31:2b:56:99:97:d9:ce:9a:cc:09:f4:7d:
e5:ee:48:20:c7:38:72:73:84:f6:38:de:dc:f0:40:
95:da:99:60:ab:aa:34:25:5b:93:fc:89:c0:2d:2f:
d0:e8:49:70:40:6b:2a:a8:43:3f:9a:35:4d:19:c3:
05:5a:05:9e:9c:35:fa:7e:73:66:d0:3d:00:fe:15:
a4:1c:8e:18:4b:99:13:5f:ab:25:0e:23:b5:7b:84:
ba:01:16:2d:f3:27:13:7b:c1:57:11:eb:61:2b:ff:
7a:05:2f:fb:cc:cf:af:1f:06:75:88:67:dd:6e:3a:
d2:ba:29:4b:9f:d6:50:62:51:45:9b:44:c3:47:e2:
25:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:68:1A:9C:B3:4D:87:4C:90:99:91:D2:4E:86:7B:D4:62:D9:89:B3
X509v3 Authority Key Identifier:
keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:71:08:f8:a5:91:6c:c6:ce:3a:24:4b:4a:b9:c7:6f:bb:87:
6a:19:4f:35:a5:50:27:7e:18:63:d3:a8:6c:ad:52:a3:c7:29:
66:1c:02:9f:01:8d:ec:72:55:ee:cc:82:59:fb:e2:58:53:d7:
7c:61:fd:e9:ce:17:98:53:a7:2e:3a:8e:18:8b:d7:f6:b0:42:
bb:e6:e1:1a:0d:73:b8:6a:68:4d:24:bc:74:6b:5e:72:37:7a:
22:13:cb:58:09:f9:92:0e:ab:74:be:09:0c:b6:d7:e7:16:b2:
62:9a:3d:0d:6a:e0:50:0b:09:4d:67:7f:c2:71:eb:20:3c:d7:
16:ff:cc:2f:ef:66:6d:02:a6:ba:a8:a6:e8:04:a2:10:ca:76:
66:d0:95:0e:82:05:bd:79:28:02:b3:c3:7a:70:a3:04:47:60:
70:18:48:f0:e1:4a:5b:91:70:c2:e5:1c:72:7b:f6:29:a7:f1:
54:85:86:76:0b:e1:dd:a8:1c:27:61:db:11:da:82:fa:ba:86:
08:1f:72:b6:7d:e6:8b:9a:89:e9:3c:12:13:0e:1c:1f:27:35:
74:45:b6:66:32:69:b7:18:d9:b3:02:63:51:23:78:8b:bb:15:
11:1c:3a:c3:8d:6a:53:a3:7c:29:81:86:ec:c3:fd:64:8a:c2:
f2:c4:07:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:41:01 2025 by rpki-client