Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: 26XTblynbuuOfjJivgGOj76TcRnUVIZjyUcqE9lXwTo=
Subject key identifier: 75:54:7B:71:3A:4A:05:92:0B:5C:72:09:28:9D:22:8F:37:12:6A:D5
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 019A4F6208E8496CE8602C7C45A793FDDCE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 165B
Signing time: Tue 04 Nov 2025 15:00:16 +0000
Manifest this update: Tue 04 Nov 2025 15:00:16 +0000
Manifest next update: Wed 05 Nov 2025 15:00:16 +0000
Files and hashes: 1: 501ahkD4gjr9itS0rHitDULQOJI.roa (hash: 7QvKhQGjRnbky85nLC/mxy/1QVWGc8n8REeP6RBHa2w=)
2: mnnYxns7ruXxPgM_VNIHL5kcJa8.roa (hash: Wb/XaO0LWIZbn326Mfd8GlVkRuIOjXOck5hC67Z7SYg=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: 8yiXBuFJiB9vE33B9goBp6AJmRWJXlbcYAQPwSG7fGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:08:e8:49:6c:e8:60:2c:7c:45:a7:93:fd:dc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Nov 4 15:00:16 2025 GMT
Not After : Nov 5 15:00:16 2025 GMT
Subject: CN=75547b713a4a05920b5c7209289d228f37126ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:eb:d8:76:98:43:cc:ed:d9:7e:d9:0b:3f:7f:
8b:7e:69:ba:12:38:8a:43:03:12:ae:02:3d:c6:70:
a2:fc:9e:c0:3b:c8:38:dd:2b:d8:3b:88:a3:e5:d8:
d1:ed:2e:0a:e4:92:ef:3c:e0:fb:3e:17:98:6c:1b:
8e:9f:7e:49:cd:5b:87:c3:51:6d:2b:55:e0:37:8a:
90:ce:bb:e8:ad:e3:fd:a6:6c:0c:6c:73:7a:5d:18:
6d:4f:32:f1:fd:4a:f3:b2:a4:70:51:6c:0a:7a:4f:
b0:81:0b:5b:e1:5a:cb:bb:0c:b5:e9:08:db:dd:48:
a8:7f:98:1b:26:25:85:da:fe:f5:2d:05:b9:c1:9b:
6d:5b:1e:9d:93:2a:5c:26:60:39:5a:2e:f4:8c:f2:
0e:75:98:81:66:ad:86:53:e8:ff:d8:fb:d8:f1:bb:
40:02:d5:f2:5b:ea:9a:89:aa:be:d7:9a:b7:92:80:
0d:fb:46:a6:02:92:ca:68:45:0f:10:50:ac:43:99:
b6:b3:4e:ab:c7:d8:c4:4d:f9:42:f0:37:e1:65:8f:
ea:ed:ea:3e:e4:cf:28:c8:08:e4:94:06:cb:80:6b:
d0:e8:49:fa:6f:e0:13:4d:fc:ca:7b:25:15:32:79:
62:e0:4b:4b:c6:0c:16:72:6d:21:d3:12:4a:cc:4b:
80:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:54:7B:71:3A:4A:05:92:0B:5C:72:09:28:9D:22:8F:37:12:6A:D5
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:64:6d:d2:74:cd:67:01:da:cd:73:74:95:31:5b:17:ec:06:
cf:1f:0e:58:5f:60:90:db:09:b7:a0:67:49:af:1a:9b:b9:80:
95:d0:2e:90:9b:a1:ba:db:94:2f:84:28:e3:5b:a3:11:18:6c:
80:6f:b1:1a:d9:71:6f:da:a7:83:a3:9e:6c:bb:2f:2e:99:34:
df:57:54:7b:ee:ac:9f:f5:2c:fd:49:4c:25:aa:f8:3a:a7:d4:
67:46:eb:d9:92:ad:d9:57:67:f3:76:aa:f3:45:67:11:b4:7d:
e9:ed:27:ee:c7:b1:1d:c6:ed:3a:d2:37:2a:1c:ab:67:58:60:
6f:9e:23:15:f2:63:78:2a:fc:26:b9:f4:22:b5:bd:0f:ad:9f:
12:2a:e0:84:9a:94:98:6e:56:a1:81:54:ac:95:c5:af:e5:42:
d6:89:1d:11:c1:cf:ba:7e:5c:f7:9a:79:23:41:f9:55:28:08:
3a:68:5c:04:ca:85:6c:0c:8b:94:ea:11:55:b6:47:77:9e:d6:
40:86:45:86:f5:a1:a7:6d:32:df:2b:e4:37:b3:6d:77:40:e9:
1f:26:35:9c:a3:b7:11:88:16:ca:17:89:a2:b7:90:2e:78:f5:
5c:99:1c:cf:48:03:6b:af:1e:f1:0e:ca:27:1f:cd:0a:23:dd:
f2:1e:f1:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYgjoSWzoYCx8RaeT/dziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZDA3NTg4MjVkZDg5Y2ZlZTVmZGVjYzdkY2I2NTFmMGE1
ZDEwMTgwHhcNMjUxMTA0MTUwMDE2WhcNMjUxMTA1MTUwMDE2WjAzMTEwLwYDVQQD
Eyg3NTU0N2I3MTNhNGEwNTkyMGI1YzcyMDkyODlkMjI4ZjM3MTI2YWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuvYdphDzO3ZftkLP3+Lfmm6EjiK
QwMSrgI9xnCi/J7AO8g43SvYO4ij5djR7S4K5JLvPOD7PheYbBuOn35JzVuHw1Ft
K1XgN4qQzrvoreP9pmwMbHN6XRhtTzLx/UrzsqRwUWwKek+wgQtb4VrLuwy16Qjb
3Uiof5gbJiWF2v71LQW5wZttWx6dkypcJmA5Wi70jPIOdZiBZq2GU+j/2PvY8btA
AtXyW+qaiaq+15q3koAN+0amApLKaEUPEFCsQ5m2s06rx9jETflC8DfhZY/q7eo+
5M8oyAjklAbLgGvQ6En6b+ATTfzKeyUVMnli4EtLxgwWcm0h0xJKzEuArQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVUe3E6SgWSC1xyCSidIo83EmrVMB8GA1UdIwQY
MBaAFJzQdYgl3YnP7l/ezH3LZR8KXRAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk5CMWlDWGRpY191WDk3TWZjdGxId3BkRUJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wZTY1MWUtOTBjNy00YWNkLTk3Yjkt
YTU0ZjhlNDgxM2U3LzEvbk5CMWlDWGRpY191WDk3TWZjdGxId3BkRUJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wZTY1MWUtOTBjNy00YWNkLTk3YjktYTU0ZjhlNDgxM2U3
LzEvbk5CMWlDWGRpY191WDk3TWZjdGxId3BkRUJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWRt0nTN
ZwHazXN0lTFbF+wGzx8OWF9gkNsJt6BnSa8am7mAldAukJuhutuUL4Qo41ujERhs
gG+xGtlxb9qng6OebLsvLpk031dUe+6sn/Us/UlMJar4OqfUZ0br2ZKt2Vdn83aq
80VnEbR96e0n7sexHcbtOtI3KhyrZ1hgb54jFfJjeCr8Jrn0IrW9D62fEirghJqU
mG5WoYFUrJXFr+VC1okdEcHPun5c95p5I0H5VSgIOmhcBMqFbAyLlOoRVbZHd57W
QIZFhvWhp20y3yvkN7Ntd0DpHyY1nKO3EYgWyheJoreQLnj1XJkcz0gDa68e8Q7K
Jx/NCiPd8h7x+Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:04:58 2025 by rpki-client