Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
File: NXMLuLJiPn9lphY2BNHIX5EGKI8.mft (raw, json)
Hash identifier: PSBMn1X3NWMLSkz+Cbrhj+0gqnZ8AFX8IukzCcfC6gQ=
Subject key identifier: 57:F1:F3:F5:7F:E8:C6:52:35:07:AD:EB:B2:99:D5:6E:3D:13:A0:D5
Authority key identifier: 35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
Certificate issuer: /CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Certificate serial: 019A51F58A6829023BC6F9AB41087566E612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 03:00:37 +0000
Manifest this update: Wed 05 Nov 2025 03:00:37 +0000
Manifest next update: Thu 06 Nov 2025 03:00:37 +0000
Files and hashes: 1: 3u_UTWM5MnsnNlqUobIqKDYLwKo.roa (hash: veRRLy9ZMKOvJkYp1WIUbOdpjqnYEIFrYe5fkHyfQnc=)
2: NXMLuLJiPn9lphY2BNHIX5EGKI8.crl (hash: OYBJHMh8Jerg/Fr4veXYKusXxgr61w2E+9OJwqVJIH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:8a:68:29:02:3b:c6:f9:ab:41:08:75:66:e6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Validity
Not Before: Nov 5 03:00:37 2025 GMT
Not After : Nov 6 03:00:37 2025 GMT
Subject: CN=57f1f3f57fe8c6523507adebb299d56e3d13a0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:07:91:d2:5f:65:6c:82:f3:7f:fb:49:98:
fa:f1:22:bc:8b:9f:0c:5c:a9:0f:f4:49:a2:63:cb:
36:e1:45:16:c1:36:f9:fd:b6:e9:7a:26:2e:c2:9a:
fe:18:28:66:ef:9b:13:f2:e3:aa:a4:5c:e6:1c:23:
71:5d:c0:3b:07:8b:2a:8d:e8:6b:26:32:c6:60:e4:
ff:56:ec:e5:db:8e:72:1b:a1:8d:c5:a0:d8:3a:a5:
3e:48:6d:39:84:98:1e:5b:8e:6f:2f:8c:2f:ae:b2:
7b:4a:c6:1f:02:e7:5a:78:b8:cb:71:4f:37:12:6e:
9b:2d:d1:2d:79:e9:4f:ea:ac:75:e6:15:80:29:ab:
cc:34:2e:fb:d6:37:06:ef:d2:3a:fa:ac:fb:62:59:
5a:b9:f5:78:52:a9:f3:52:c8:d0:35:d5:6a:61:8e:
99:52:27:1e:53:53:ed:62:7b:be:cf:4c:ec:8b:9b:
30:31:cf:cc:8d:77:50:7c:f7:2a:ac:ad:5b:c1:f6:
0b:1b:67:63:97:4b:e9:84:ba:5e:ce:e2:c7:ef:fd:
99:04:6c:78:23:a1:ff:04:b1:b0:98:bf:01:0d:35:
fe:65:b7:a0:a2:7d:33:76:ed:39:5f:54:9c:84:87:
56:03:48:42:cb:83:eb:11:95:35:d0:02:39:06:d0:
72:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F1:F3:F5:7F:E8:C6:52:35:07:AD:EB:B2:99:D5:6E:3D:13:A0:D5
X509v3 Authority Key Identifier:
keyid:35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9d:1b:9a:3f:86:c6:cc:32:c4:6b:37:c7:70:04:52:ba:c8:
64:ef:28:4b:9e:e0:f1:f4:10:10:5a:0e:f3:25:ce:e2:10:bf:
2a:67:f9:3e:c5:a9:cc:f6:ac:a0:90:12:04:e9:e2:6f:57:16:
fe:92:c7:e1:90:d8:e9:c3:1c:09:c6:f0:c6:23:ef:3c:1b:13:
98:eb:bd:02:4a:e0:e2:93:dc:bf:dd:7e:4e:7a:7c:29:36:08:
18:19:e2:0c:7c:81:8d:30:67:83:ce:a3:6d:96:73:81:82:c9:
f7:e8:be:f3:be:2d:50:84:7e:0d:44:5c:b8:38:f5:c1:3d:a0:
68:c8:97:20:4b:65:78:43:5c:e5:7c:72:6c:38:8f:ef:f6:d1:
23:1a:6b:8c:68:22:7c:05:20:b2:0e:6a:e3:9a:ef:91:95:54:
75:1d:75:e8:67:1f:c2:c5:36:b8:22:58:ca:e3:9e:c0:3c:2d:
3e:20:f3:b8:57:7a:e9:1b:ff:27:68:3e:54:2b:7e:6b:72:ba:
ba:4c:92:8e:05:a9:8e:b0:c3:db:0e:3b:39:5b:6a:f6:33:a1:
80:6f:08:98:4f:7f:8f:54:08:9c:d4:8b:a2:29:fd:78:88:08:
56:ca:b0:f9:71:c9:33:38:7e:4c:1c:94:68:d6:2b:30:de:c4:
c6:3f:9b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:56:17 2025 by rpki-client