Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
File: NrVfs00p-WJUUTKgJbUmRP3_v28.mft (raw, json)
Hash identifier: arl4MafxL/uLusHzMFOe9I1ykihMoWvDZVoJK57wPEo=
Subject key identifier: 38:1D:9A:48:6A:F3:3F:E8:0B:15:18:9C:59:00:0D:93:78:AA:CD:89
Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
Certificate issuer: /CN=36b55fb34d29f962545132a025b52644fdffbf6f
Certificate serial: 019A533F963A1C36DC9C4A1FD24DFBE6450F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
Manifest number: 12EC
Signing time: Wed 05 Nov 2025 09:01:07 +0000
Manifest this update: Wed 05 Nov 2025 09:01:07 +0000
Manifest next update: Thu 06 Nov 2025 09:01:07 +0000
Files and hashes: 1: 7dJIur2rO8jTQ_NHZt4L26PKtBw.roa (hash: fR/fcQi32Cz8cbo8M3f8TE+0bMDxdxf78ySV2CU/bwY=)
2: EzVC6hFH0RtKA1lARrwdwMJ07Q0.roa (hash: 2S3sYcvaMN06mor0RfdxJiX/gftEZ6TMLtUoAQi1mDE=)
3: NrVfs00p-WJUUTKgJbUmRP3_v28.crl (hash: NFyoi+k0/HgIdZKbrLOctKTvcvM44VfCfFIpqJPuSEM=)
4: Wqg9hZ9wuWYWaqC8TF_Eeg_AEfc.roa (hash: 0aRSdpBzh4xSW9RCKPtMxwA4FTF50Xso2kHVHvgf+yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:96:3a:1c:36:dc:9c:4a:1f:d2:4d:fb:e6:45:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f
Validity
Not Before: Nov 5 09:01:07 2025 GMT
Not After : Nov 6 09:01:07 2025 GMT
Subject: CN=381d9a486af33fe80b15189c59000d9378aacd89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e9:a3:57:37:7f:f8:52:ea:ca:3c:af:76:ed:
7d:01:42:fa:a0:39:b9:f0:16:12:a9:fd:0b:4f:2d:
e0:85:f7:cc:66:a9:2b:f9:ee:c6:4c:af:96:2e:fc:
f7:88:fc:de:38:4d:72:66:33:ea:ab:2b:22:09:3f:
47:ea:cf:37:e0:f7:15:0c:fd:09:6a:0b:8b:c9:ec:
35:52:60:54:b4:88:be:5b:8d:54:5e:70:30:df:a5:
23:90:cc:4e:a6:06:7d:52:df:6b:a2:4b:38:f2:27:
e7:ab:73:5b:4e:87:0f:44:9d:a9:52:40:de:07:b9:
38:43:84:2a:15:28:6c:73:f6:be:fd:fd:55:74:95:
ad:e8:86:17:59:86:9b:61:98:e8:b0:c2:cc:a0:09:
ee:d1:3f:ba:9d:42:fb:9f:dd:78:1a:1a:c2:e3:fc:
ed:88:39:61:4b:8f:ee:9e:cd:8c:e7:7d:09:6a:cd:
a2:63:a4:c4:da:6a:49:21:96:01:0e:4a:c8:29:48:
4a:32:c3:ed:5e:7a:af:ed:0c:fc:10:d5:ca:f9:83:
00:c1:52:fe:a0:a0:0c:de:a9:34:59:fb:de:56:f7:
64:b2:bd:6f:0a:21:c5:ec:d0:54:b3:5c:48:df:c9:
81:58:d3:9a:fd:ef:86:19:32:ec:76:81:51:5a:3b:
a2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1D:9A:48:6A:F3:3F:E8:0B:15:18:9C:59:00:0D:93:78:AA:CD:89
X509v3 Authority Key Identifier:
keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f7:ae:68:1f:d1:d6:c6:fd:2c:e3:09:eb:5e:a7:80:5b:02:
19:b2:54:ab:d1:f9:a4:c3:ae:a7:ff:af:5a:47:ed:92:c5:e9:
2b:07:3c:87:38:67:0d:65:a0:b6:eb:99:a5:09:29:9b:6f:fd:
7e:6a:74:73:5a:b3:b5:77:6a:89:3f:d2:4e:ca:30:88:f3:44:
79:c0:c6:cf:91:c9:76:b8:a8:e4:1c:95:9f:9d:f0:a4:a1:2d:
82:3a:37:3e:5a:54:b4:f5:59:4b:dc:91:eb:4e:45:f1:ac:e6:
4d:01:41:6d:bf:d9:94:46:21:40:91:34:4d:44:81:11:e9:3c:
92:9e:f4:9d:08:f0:3e:16:3b:c8:65:58:ab:ae:55:5f:4e:f3:
32:83:1d:83:c1:18:01:45:e2:d7:1b:c6:71:e6:95:11:18:94:
ec:85:0a:e6:69:08:11:14:8d:8d:58:19:15:07:4c:f6:f5:4d:
5c:53:6d:21:96:c7:35:f5:0f:30:25:dd:53:22:c1:0e:b4:8d:
97:8e:2f:a0:96:37:6a:e2:1d:30:3a:34:ef:c9:1f:94:88:d6:
eb:aa:10:eb:df:ce:fa:b8:8d:fa:de:4f:67:6d:b6:39:b6:ff:
cb:26:b0:dc:e8:dc:53:16:8e:ce:20:e8:8b:83:f3:6a:97:40:
89:ca:9a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:22:10 2025 by rpki-client