Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
File: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft (raw, json)
Hash identifier: k6BhikiWfZQcuA2nZii6FPmwM1HWB3ko4JHs4uuwH8w=
Subject key identifier: 14:83:BD:D5:2A:29:E1:54:84:C5:A0:CF:C1:E6:66:20:56:60:7D:94
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Certificate issuer: /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial: 019A53760D0A24A074BAE67E43E36302E998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
Manifest number: 041E
Signing time: Wed 05 Nov 2025 10:00:36 +0000
Manifest this update: Wed 05 Nov 2025 10:00:36 +0000
Manifest next update: Thu 06 Nov 2025 10:00:36 +0000
Files and hashes: 1: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl (hash: oiIPtzFylIEpTC5ZXyezHdDQIAib5Cuta39VXUeoM5Y=)
2: ieCaBaxpA2GUFQ0ZgL1Mhifb7Aw.roa (hash: kRgpfoyDp30dlrYqiAurvsWbw4QikrmUNVZImGj5L5A=)
3: kxxg8INoPPm5ZymFi9ud7T01lQI.roa (hash: QM9vTjTl+v9NavUuaOjQ+5V7HHBDGkMPW3agrJBuI74=)
4: tO7VMSGjBmDk8hJ1xmBwdBXl31A.roa (hash: gnhrOjPPgjYmJ8TeWItEuTYvPoPPGZwGa4Zc7bqd4V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:0d:0a:24:a0:74:ba:e6:7e:43:e3:63:02:e9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
Validity
Not Before: Nov 5 10:00:36 2025 GMT
Not After : Nov 6 10:00:36 2025 GMT
Subject: CN=1483bdd52a29e15484c5a0cfc1e6662056607d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:9c:f7:16:49:51:c8:62:d2:75:7c:8d:c9:
2e:ef:ff:7c:ae:d4:b8:1a:53:98:93:8f:93:e9:44:
fc:fa:e4:09:a9:50:97:28:12:17:50:bc:4a:e7:89:
93:38:c9:ac:d0:ef:ca:73:25:5c:dd:e5:d2:7a:b1:
90:18:04:85:30:c8:71:a8:26:2d:4d:da:f8:f9:63:
f0:70:f0:b3:62:e0:c8:f3:0f:20:f4:52:7d:9b:9f:
d7:ac:0c:24:b1:d4:89:21:2c:5f:a2:18:91:8e:bf:
73:6f:c0:5a:af:30:4d:a0:c2:0a:8e:27:f3:83:4b:
28:f2:ca:09:e2:9a:89:2f:c9:3d:5a:25:30:cc:e2:
cf:d2:b5:fa:f8:dd:3c:2f:32:c0:a3:30:a9:d6:5c:
b1:0a:07:22:98:c4:9e:81:fc:05:8d:b8:c8:d4:77:
9b:ed:45:62:13:da:16:2a:92:4c:17:f1:27:88:15:
26:dd:56:a2:d0:af:9c:9b:0b:44:53:c9:08:df:90:
1e:28:7e:cf:2f:14:98:a1:21:c6:31:5a:6a:7b:56:
c3:5c:7a:0c:da:0a:21:d2:6f:82:b2:0c:4c:54:94:
57:cd:9e:00:39:8a:0f:7b:25:a4:07:3a:63:15:ee:
9c:9a:16:7b:03:b1:06:23:35:d6:6c:88:42:59:13:
9a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:83:BD:D5:2A:29:E1:54:84:C5:A0:CF:C1:E6:66:20:56:60:7D:94
X509v3 Authority Key Identifier:
keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8e:d7:0a:58:37:ae:39:6e:e6:c8:14:9a:1d:de:6b:36:4c:
23:64:06:75:fa:77:92:50:20:fb:be:7a:2d:45:dd:26:00:a7:
ad:2b:ec:19:e6:a5:f3:42:fb:57:79:23:81:c3:c8:22:19:f2:
88:bc:50:0b:6a:78:8f:c7:2f:ea:c3:70:3e:34:2e:42:2f:b2:
c7:6a:86:a1:bf:61:ae:ee:4a:68:1e:8f:8e:79:fb:e5:9e:02:
a2:78:ea:32:3b:cb:7a:c8:f4:fc:3f:4b:12:24:9a:37:04:ff:
a1:6b:26:1c:15:60:bf:b8:dd:e3:6f:11:8f:ce:5c:5a:a7:19:
a6:ac:2e:f8:74:96:10:52:9b:47:1c:91:b8:1b:be:c6:5f:a1:
97:c3:18:20:4a:47:84:64:3b:eb:c2:9d:f1:ef:18:d1:91:f6:
67:08:1b:a0:52:0e:bb:37:9a:18:27:84:5a:80:05:9f:7e:0b:
ec:9d:e3:c5:3c:fc:76:8d:15:a6:65:50:ac:5b:93:cf:bc:a5:
36:e9:4b:17:06:b1:4f:10:38:25:c8:30:f0:1d:56:96:b1:95:
b4:01:ce:dc:59:5e:02:86:f9:bc:90:ab:17:4b:17:06:67:00:
f1:65:d7:d1:8b:27:b6:b4:5a:6b:69:4d:e6:2f:3d:36:c7:b1:
d0:55:87:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTdg0KJKB0uuZ+Q+NjAumYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2M2YwOTUwOGZkZjI1NjQ0ODIxOWIyODRiYjA5YjIzYjJi
NTEzOTYwHhcNMjUxMTA1MTAwMDM2WhcNMjUxMTA2MTAwMDM2WjAzMTEwLwYDVQQD
EygxNDgzYmRkNTJhMjllMTU0ODRjNWEwY2ZjMWU2NjYyMDU2NjA3ZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQCc9xZJUchi0nV8jcku7/98rtS4
GlOYk4+T6UT8+uQJqVCXKBIXULxK54mTOMms0O/KcyVc3eXSerGQGASFMMhxqCYt
Tdr4+WPwcPCzYuDI8w8g9FJ9m5/XrAwksdSJISxfohiRjr9zb8BarzBNoMIKjifz
g0so8soJ4pqJL8k9WiUwzOLP0rX6+N08LzLAozCp1lyxCgcimMSegfwFjbjI1Heb
7UViE9oWKpJMF/EniBUm3Vai0K+cmwtEU8kI35AeKH7PLxSYoSHGMVpqe1bDXHoM
2goh0m+CsgxMVJRXzZ4AOYoPeyWkBzpjFe6cmhZ7A7EGIzXWbIhCWROaEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSDvdUqKeFUhMWgz8HmZiBWYH2UMB8GA1UdIwQY
MBaAFDY/CVCP3yVkSCGbKEuwmyOytROWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmo4SlVJX2ZKV1JJSVpzb1M3Q2JJN0sxRTVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hZDA1ZjItYWIzOS00MTMyLTg0OTIt
ZmQ4MTQ0NTVhODY4LzEvTmo4SlVJX2ZKV1JJSVpzb1M3Q2JJN0sxRTVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9hZDA1ZjItYWIzOS00MTMyLTg0OTItZmQ4MTQ0NTVhODY4
LzEvTmo4SlVJX2ZKV1JJSVpzb1M3Q2JJN0sxRTVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPo7XClg3
rjlu5sgUmh3eazZMI2QGdfp3klAg+756LUXdJgCnrSvsGeal80L7V3kjgcPIIhny
iLxQC2p4j8cv6sNwPjQuQi+yx2qGob9hru5KaB6Pjnn75Z4ConjqMjvLesj0/D9L
EiSaNwT/oWsmHBVgv7jd428Rj85cWqcZpqwu+HSWEFKbRxyRuBu+xl+hl8MYIEpH
hGQ768Kd8e8Y0ZH2ZwgboFIOuzeaGCeEWoAFn34L7J3jxTz8do0VpmVQrFuTz7yl
NulLFwaxTxA4Jcgw8B1WlrGVtAHO3FleAob5vJCrF0sXBmcA8WXX0YsntrRaa2lN
5i89Nsex0FWHMg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:06:52 2025 by rpki-client