Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: zoe46hGTDfc8tJKPfI33EI1lw8Wb0eC/5SOytg7burI=
Subject key identifier: 23:60:66:22:98:5C:D6:49:01:61:2D:2B:32:92:D2:5D:BE:C0:83:C6
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 019A51F5AA6A5F5EC8C23B98209DA19795AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 0A3A
Signing time: Wed 05 Nov 2025 03:00:45 +0000
Manifest this update: Wed 05 Nov 2025 03:00:45 +0000
Manifest next update: Thu 06 Nov 2025 03:00:45 +0000
Files and hashes: 1: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: nlByud3tw3ogy6KzDzEUgJw0IpwTdD1l7RBf9YuRYCg=)
2: tONpcnjfR_-MsVEafiNaGJ4uDm4.roa (hash: SGzJp4OEszdVKR+f54x18hkn789cto3mWJ/E8xABEU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:aa:6a:5f:5e:c8:c2:3b:98:20:9d:a1:97:95:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Nov 5 03:00:45 2025 GMT
Not After : Nov 6 03:00:45 2025 GMT
Subject: CN=23606622985cd64901612d2b3292d25dbec083c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:51:d2:1a:e1:a9:16:ea:a0:60:0a:05:25:33:
0d:03:3e:c2:cc:a0:8b:ac:06:4a:bb:a5:85:f2:82:
e3:75:d7:c8:85:9b:e6:ec:6c:53:ef:63:ae:22:e2:
6f:74:fc:cc:6b:a2:45:89:c3:78:22:6b:46:02:c6:
21:59:44:df:74:6e:df:0c:03:57:e4:f6:50:28:8f:
4e:c1:6d:87:f7:33:fc:48:26:6a:ac:59:08:97:a2:
3f:a7:40:ad:ab:ac:c5:80:a1:fc:41:e8:24:04:d8:
cd:f4:9e:33:33:8d:3d:6e:f4:aa:8e:f4:62:ed:22:
7c:05:04:36:b4:50:47:42:a7:d0:10:a2:55:6b:bc:
73:50:ca:3b:0c:2e:d8:36:46:df:11:31:44:a3:85:
4e:e0:b0:75:8a:67:cd:92:3d:67:57:a7:11:ed:65:
f5:44:37:b5:eb:7b:70:72:a4:de:f4:29:31:64:ff:
16:1e:9e:28:99:2c:f7:9e:37:ab:cb:bc:36:86:19:
d0:49:9d:79:b3:12:c0:c6:4d:7b:5d:97:36:ac:d6:
6e:45:eb:a3:af:03:1c:c7:05:03:bb:65:dc:e7:d8:
d0:16:05:13:48:10:de:6a:31:68:35:2f:72:85:d7:
cf:c8:bc:be:29:8f:62:00:b7:be:f8:6c:aa:2c:2f:
65:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:60:66:22:98:5C:D6:49:01:61:2D:2B:32:92:D2:5D:BE:C0:83:C6
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1a:e7:f6:f6:f9:0c:fd:e0:76:fe:64:56:9d:5e:8a:16:3e:
a8:00:1f:f3:9b:98:57:55:f2:63:10:0d:e2:a2:55:cc:f7:62:
0d:cd:b0:6f:6a:08:39:23:dc:19:f1:1b:a7:45:59:84:25:66:
2c:3e:3c:e4:00:6b:8c:ac:5c:78:2e:19:89:5a:34:88:7c:2f:
b9:d6:e8:7d:79:fc:4c:8c:e6:84:dc:eb:01:b3:42:3d:39:a8:
f1:28:b3:c1:96:e9:11:19:f4:2f:14:3e:bf:10:04:a6:7b:8d:
7d:c3:06:06:8a:43:12:ac:12:c3:5f:23:35:89:75:c6:81:00:
79:93:44:89:cb:5b:1c:fc:bc:91:8c:b4:bc:8b:d6:b2:13:cb:
dc:28:bd:90:ae:c8:ed:a8:5b:f3:67:c7:57:d3:c1:01:5a:61:
11:03:4b:cc:b8:08:d0:f7:3b:a4:d7:64:35:55:6d:2b:f6:f8:
0a:22:4e:d1:f3:2e:87:20:80:9a:18:5f:2b:0d:c5:65:eb:eb:
5d:f2:b8:59:b0:14:2b:bd:8f:94:5e:38:85:11:a0:4f:09:07:
5f:48:c2:64:87:d6:85:35:76:f0:1a:03:28:21:f9:4b:ea:14:
6a:7e:d9:ad:1e:ef:e7:83:b0:bd:e9:0f:79:85:17:15:89:1a:
0d:c9:4d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:05:22 2025 by rpki-client