Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
File: NsxJTEqTS7s89Gulgk1mZsiUei8.mft (raw, json)
Hash identifier: N8a59ivOJZlITrL9BelaEQ1stHLHWiSg5va1uX49M5s=
Subject key identifier: 24:15:A5:6A:EE:B4:BC:BE:33:A8:97:33:66:46:6A:66:8F:6E:E1:FB
Authority key identifier: 36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F
Certificate issuer: /CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f
Certificate serial: 019A51BE6C1170D311AC9783F24A565EF9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
Manifest number: 06CC
Signing time: Wed 05 Nov 2025 02:00:25 +0000
Manifest this update: Wed 05 Nov 2025 02:00:25 +0000
Manifest next update: Thu 06 Nov 2025 02:00:25 +0000
Files and hashes: 1: NsxJTEqTS7s89Gulgk1mZsiUei8.crl (hash: 2rX5I3ujR7Qj8uu24tm+7nzCfHx4Wdgukg5aoDRUj1c=)
2: StdZuEMdBW7X4NXLCF7XI4ppVlw.roa (hash: iq6H8WyI/GcnhvxxJGW8O2+6IQ6zatbRbbXOnldRxIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:6c:11:70:d3:11:ac:97:83:f2:4a:56:5e:f9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f
Validity
Not Before: Nov 5 02:00:25 2025 GMT
Not After : Nov 6 02:00:25 2025 GMT
Subject: CN=2415a56aeeb4bcbe33a8973366466a668f6ee1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d0:92:3e:b5:74:31:5c:b8:16:b6:39:00:f5:
3d:e7:c0:7b:c2:2c:4c:4d:e1:14:7a:32:d7:b1:77:
aa:e0:f0:61:07:ab:0a:92:f6:45:70:d9:0d:cc:d3:
b1:69:48:ee:d1:63:56:c7:e8:70:e6:11:a0:14:49:
cf:af:5c:a1:16:00:93:82:fb:12:31:2a:f0:30:f5:
d0:22:65:53:f1:15:0f:28:88:b2:9f:48:2f:8a:ee:
1b:7d:52:a7:2f:5f:88:3f:27:c7:2e:a1:c3:fe:db:
d7:9e:1e:ee:22:2c:23:0e:99:b0:25:ef:e4:65:4b:
75:a8:c2:8c:e6:fd:05:74:fa:cc:e2:5c:80:e4:91:
de:60:ed:78:06:6d:1a:44:b6:82:51:dd:ad:0d:46:
07:4a:a7:e2:a2:dd:90:e8:c8:58:5c:78:e7:25:50:
a9:ba:e8:f3:50:ae:28:2b:d1:3f:4e:a7:8d:90:9a:
90:66:8c:9e:2a:79:ff:8a:fc:3a:ef:b7:c0:98:8c:
94:ce:90:c6:68:a8:7d:23:79:28:1f:cb:a7:80:0d:
e7:5b:98:20:a2:de:27:50:4e:ec:5e:cc:62:d0:b2:
50:30:76:4e:41:6a:31:fc:a7:8e:6e:68:d8:50:d1:
fd:a7:de:54:4e:4d:d3:21:c6:fb:de:20:f2:33:a9:
96:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:15:A5:6A:EE:B4:BC:BE:33:A8:97:33:66:46:6A:66:8F:6E:E1:FB
X509v3 Authority Key Identifier:
keyid:36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:23:12:75:e0:16:d3:4a:83:80:66:8d:89:c1:e9:17:59:8d:
59:e5:32:bf:5d:38:4f:15:1f:e3:86:f4:14:43:dd:a1:1d:8e:
07:42:3d:0d:c4:61:ab:68:a0:88:b5:07:57:fb:11:11:3e:82:
2c:d5:82:8e:fa:09:21:49:41:c9:d1:d7:b8:5d:93:43:a6:cd:
13:b4:c9:87:60:99:fc:74:05:52:02:fd:4f:63:b6:b3:bb:58:
a5:bb:68:64:07:b6:ce:e9:1e:1e:08:f9:e1:c8:d6:1c:84:07:
2f:4e:e8:e8:68:37:09:9b:69:d4:8d:7a:b9:d2:84:7a:b6:0c:
3a:4e:0b:0f:d6:e4:ec:f8:42:4d:13:08:fb:0b:da:27:29:70:
80:44:ce:89:91:74:b2:15:57:ef:93:cd:69:52:04:25:4d:7b:
7c:76:7f:34:68:8b:2f:bc:b2:32:48:8e:38:7f:4e:c8:a3:3c:
0d:83:42:ed:d8:22:fa:c2:7e:6f:e1:bf:ff:ad:9b:b2:b5:38:
dc:82:ff:92:eb:27:11:9c:d0:94:d2:2f:49:4f:cd:57:b5:c4:
de:7a:a0:20:41:f6:28:8e:2a:3a:83:95:8c:46:d5:5f:0b:b4:
81:0d:da:71:35:af:c5:8f:62:65:23:38:f7:f9:60:a4:2b:d0:
d6:61:24:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvmwRcNMRrJeD8kpWXvn/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Y2M0OTRjNGE5MzRiYmIzY2Y0NmJhNTgyNGQ2NjY2Yzg5
NDdhMmYwHhcNMjUxMTA1MDIwMDI1WhcNMjUxMTA2MDIwMDI1WjAzMTEwLwYDVQQD
EygyNDE1YTU2YWVlYjRiY2JlMzNhODk3MzM2NjQ2NmE2NjhmNmVlMWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtCSPrV0MVy4FrY5APU958B7wixM
TeEUejLXsXeq4PBhB6sKkvZFcNkNzNOxaUju0WNWx+hw5hGgFEnPr1yhFgCTgvsS
MSrwMPXQImVT8RUPKIiyn0gviu4bfVKnL1+IPyfHLqHD/tvXnh7uIiwjDpmwJe/k
ZUt1qMKM5v0FdPrM4lyA5JHeYO14Bm0aRLaCUd2tDUYHSqfiot2Q6MhYXHjnJVCp
uujzUK4oK9E/TqeNkJqQZoyeKnn/ivw677fAmIyUzpDGaKh9I3koH8ungA3nW5gg
ot4nUE7sXsxi0LJQMHZOQWox/KeObmjYUNH9p95UTk3TIcb73iDyM6mWmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQVpWrutLy+M6iXM2ZGamaPbuH7MB8GA1UdIwQY
MBaAFDbMSUxKk0u7PPRrpYJNZmbIlHovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnN4SlRFcVRTN3M4OUd1bGdrMW1ac2lVZWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83YTkwMDQtZTRkOS00ZjU0LTk5Mjgt
YjljODE2OTY1YTA0LzEvTnN4SlRFcVRTN3M4OUd1bGdrMW1ac2lVZWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS83YTkwMDQtZTRkOS00ZjU0LTk5MjgtYjljODE2OTY1YTA0
LzEvTnN4SlRFcVRTN3M4OUd1bGdrMW1ac2lVZWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiMSdeAW
00qDgGaNicHpF1mNWeUyv104TxUf44b0FEPdoR2OB0I9DcRhq2igiLUHV/sRET6C
LNWCjvoJIUlBydHXuF2TQ6bNE7TJh2CZ/HQFUgL9T2O2s7tYpbtoZAe2zukeHgj5
4cjWHIQHL07o6Gg3CZtp1I16udKEerYMOk4LD9bk7PhCTRMI+wvaJylwgETOiZF0
shVX75PNaVIEJU17fHZ/NGiLL7yyMkiOOH9OyKM8DYNC7dgi+sJ+b+G//62bsrU4
3IL/kusnEZzQlNIvSU/NV7XE3nqgIEH2KI4qOoOVjEbVXwu0gQ3acTWvxY9iZSM4
9/lgpCvQ1mEkQw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:29:56 2025 by rpki-client