Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
File: NrVfs00p-WJUUTKgJbUmRP3_v28.mft (raw, json)
Hash identifier: zQpcKyxD5gJK2EEMu+OFgPKbwD75pZUSDVOjIq35Znw=
Subject key identifier: 54:78:BE:F2:8B:E3:D1:A5:5B:EE:EE:E5:4C:00:3B:DC:E1:35:9F:30
Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
Certificate issuer: /CN=36b55fb34d29f962545132a025b52644fdffbf6f
Certificate serial: 019A51512A80C8C3E2DE86F6B34196E4B27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
Manifest number: 12EB
Signing time: Wed 05 Nov 2025 00:01:05 +0000
Manifest this update: Wed 05 Nov 2025 00:01:05 +0000
Manifest next update: Thu 06 Nov 2025 00:01:05 +0000
Files and hashes: 1: 7dJIur2rO8jTQ_NHZt4L26PKtBw.roa (hash: fR/fcQi32Cz8cbo8M3f8TE+0bMDxdxf78ySV2CU/bwY=)
2: EzVC6hFH0RtKA1lARrwdwMJ07Q0.roa (hash: 2S3sYcvaMN06mor0RfdxJiX/gftEZ6TMLtUoAQi1mDE=)
3: NrVfs00p-WJUUTKgJbUmRP3_v28.crl (hash: YVdYGU83KhxpGK7JlvSlJN6JtAbzne18ljPyVxtNF7M=)
4: Wqg9hZ9wuWYWaqC8TF_Eeg_AEfc.roa (hash: 0aRSdpBzh4xSW9RCKPtMxwA4FTF50Xso2kHVHvgf+yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:2a:80:c8:c3:e2:de:86:f6:b3:41:96:e4:b2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f
Validity
Not Before: Nov 5 00:01:05 2025 GMT
Not After : Nov 6 00:01:05 2025 GMT
Subject: CN=5478bef28be3d1a55beeeee54c003bdce1359f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:c2:28:ea:1c:1e:0c:30:8c:0d:91:c4:87:
c8:e1:03:03:2b:b8:17:ad:bf:9c:45:60:10:67:09:
ea:00:1b:4c:d1:fc:27:72:81:90:49:3a:f0:41:e2:
04:f2:fb:55:85:a3:95:bc:e4:b4:e6:55:a3:ff:f6:
7f:80:cc:b7:3f:65:b7:3b:32:5e:d3:29:b7:d7:03:
de:6d:5c:8b:46:80:2d:e9:c1:c9:94:fd:be:2f:b8:
b9:f7:30:61:a9:7d:ac:75:d7:94:15:c6:a6:38:86:
85:bd:66:88:69:ad:b3:68:59:ab:a1:69:a2:fd:ee:
06:e1:63:c3:3d:fb:1e:3f:37:34:a4:2b:a2:63:cb:
56:b3:5a:0e:80:7a:4a:3d:a9:00:17:5f:0f:43:ec:
66:de:8f:bf:1d:5c:98:b1:76:b3:e6:82:f8:a0:ef:
b3:c2:f6:3b:be:4f:12:90:14:bb:b5:b0:f5:01:6e:
a7:28:08:df:11:ff:35:df:95:74:f6:3d:c5:c9:1d:
f3:d0:e2:ca:e4:5e:d9:0a:1e:3f:46:7b:7c:01:e2:
58:ca:53:61:7b:7c:00:96:50:5a:e1:97:78:46:85:
a7:97:a9:30:f6:4f:fd:78:cc:46:7d:cd:0f:43:33:
99:20:b1:7b:3b:13:79:29:4b:ca:f3:55:e2:fd:97:
51:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:78:BE:F2:8B:E3:D1:A5:5B:EE:EE:E5:4C:00:3B:DC:E1:35:9F:30
X509v3 Authority Key Identifier:
keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:00:06:46:cc:86:65:b8:a8:3d:d7:d5:9e:84:98:92:f8:26:
1c:d1:e4:52:d6:93:3c:67:35:3d:31:44:b3:89:1c:a5:35:f5:
e7:99:ef:12:e2:9a:2b:9c:2a:49:47:01:71:b6:85:6d:47:77:
5f:93:88:80:d0:11:22:31:fa:2f:91:9d:ca:b1:59:7e:c0:36:
88:f3:3a:8c:fa:01:75:68:21:d4:93:68:98:0b:49:53:d8:df:
d2:67:9e:68:8e:b2:ae:3f:75:86:a9:a2:a0:3a:5c:fa:ac:f1:
a3:cd:3e:72:11:a3:02:f1:a6:95:ac:84:d9:48:f0:be:6b:57:
88:42:cf:4a:a8:10:87:13:da:60:a9:09:2b:ab:9f:48:68:6a:
58:76:cc:63:8b:38:38:ae:28:ed:47:79:37:50:ae:c2:ca:0b:
70:da:8c:14:d9:1d:1e:29:ad:70:f9:ac:d4:55:62:a9:58:29:
ef:1a:b2:ec:79:e4:92:3f:9b:0d:7f:85:d4:1a:50:80:92:56:
5c:f0:53:5f:b3:26:d9:2a:3f:c9:48:12:f7:e9:5d:73:6e:9f:
94:57:bb:91:0c:75:ab:bb:be:b9:23:be:9d:40:62:d0:5a:f3:
66:8a:55:84:fe:1e:c0:35:0e:e3:8e:58:08:1e:82:ad:33:b6:
45:c9:54:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUSqAyMPi3ob2s0GW5LJ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YjU1ZmIzNGQyOWY5NjI1NDUxMzJhMDI1YjUyNjQ0ZmRm
ZmJmNmYwHhcNMjUxMTA1MDAwMTA1WhcNMjUxMTA2MDAwMTA1WjAzMTEwLwYDVQQD
Eyg1NDc4YmVmMjhiZTNkMWE1NWJlZWVlZTU0YzAwM2JkY2UxMzU5ZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuHCKOocHgwwjA2RxIfI4QMDK7gX
rb+cRWAQZwnqABtM0fwncoGQSTrwQeIE8vtVhaOVvOS05lWj//Z/gMy3P2W3OzJe
0ym31wPebVyLRoAt6cHJlP2+L7i59zBhqX2sddeUFcamOIaFvWaIaa2zaFmroWmi
/e4G4WPDPfsePzc0pCuiY8tWs1oOgHpKPakAF18PQ+xm3o+/HVyYsXaz5oL4oO+z
wvY7vk8SkBS7tbD1AW6nKAjfEf8135V09j3FyR3z0OLK5F7ZCh4/Rnt8AeJYylNh
e3wAllBa4Zd4RoWnl6kw9k/9eMxGfc0PQzOZILF7OxN5KUvK81Xi/ZdRJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFR4vvKL49GlW+7u5UwAO9zhNZ8wMB8GA1UdIwQY
MBaAFDa1X7NNKfliVFEyoCW1JkT9/79vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2Ut
ZjEwZjczYTllY2IzLzEvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2UtZjEwZjczYTllY2Iz
LzEvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIAAGRsyG
ZbioPdfVnoSYkvgmHNHkUtaTPGc1PTFEs4kcpTX155nvEuKaK5wqSUcBcbaFbUd3
X5OIgNARIjH6L5GdyrFZfsA2iPM6jPoBdWgh1JNomAtJU9jf0meeaI6yrj91hqmi
oDpc+qzxo80+chGjAvGmlayE2UjwvmtXiELPSqgQhxPaYKkJK6ufSGhqWHbMY4s4
OK4o7Ud5N1CuwsoLcNqMFNkdHimtcPms1FViqVgp7xqy7Hnkkj+bDX+F1BpQgJJW
XPBTX7Mm2So/yUgS9+ldc26flFe7kQx1q7u+uSO+nUBi0FrzZopVhP4ewDUO445Y
CB6CrTO2RclUeA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:25:47 2025 by rpki-client