Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: JlirN57o0Dx0z6Duya42EQOXrqUC309MVBh5UMkU40g=
Subject key identifier: FE:4A:EE:2B:4E:D8:47:6F:4E:F7:42:31:22:78:E7:5E:03:2E:29:63
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 019A53E41B9F1576D80038A854881B4AA9AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 0A3B
Signing time: Wed 05 Nov 2025 12:00:49 +0000
Manifest this update: Wed 05 Nov 2025 12:00:49 +0000
Manifest next update: Thu 06 Nov 2025 12:00:49 +0000
Files and hashes: 1: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: ukH1dgUxa8RyNIpvIfdPtDhPTCvqqHWjSoMlw/BgW9g=)
2: tONpcnjfR_-MsVEafiNaGJ4uDm4.roa (hash: SGzJp4OEszdVKR+f54x18hkn789cto3mWJ/E8xABEU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:1b:9f:15:76:d8:00:38:a8:54:88:1b:4a:a9:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Nov 5 12:00:49 2025 GMT
Not After : Nov 6 12:00:49 2025 GMT
Subject: CN=fe4aee2b4ed8476f4ef742312278e75e032e2963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:97:cd:91:ea:86:4d:d0:ab:1a:12:14:95:77:
2c:06:cf:d6:af:17:25:a5:56:34:eb:25:7e:34:81:
c4:6e:74:9e:86:2b:5f:e6:f0:e4:64:ee:08:33:3e:
9a:9e:23:af:25:f6:31:48:89:5e:50:b4:22:ba:ce:
0d:55:f4:97:e3:91:39:f4:7b:ba:55:0a:d3:a3:3c:
0b:c6:75:54:2e:e9:58:5a:c8:6a:61:2f:c6:71:7c:
3c:2e:54:c7:cf:6c:5e:37:12:21:29:ff:f1:10:0d:
fe:e0:7c:b6:4a:00:75:90:d9:75:bb:38:0b:c7:5d:
fc:33:aa:0c:c8:6d:c6:d3:2c:49:78:00:f1:31:20:
1f:da:d4:43:75:df:46:29:b0:56:30:29:e1:86:6b:
7d:56:83:d5:8a:52:83:fb:8e:d9:c0:e9:71:30:14:
b1:ae:31:c6:88:a4:c0:22:59:41:2f:fd:e5:91:13:
fb:85:6a:c6:17:38:42:c3:7d:f2:cf:60:0a:ec:dc:
aa:e1:6c:a6:2d:63:d3:7e:54:26:ee:45:c8:9d:53:
02:03:5a:44:49:15:d2:a1:b7:72:1c:9e:57:2c:ec:
41:8f:88:f2:37:2d:3d:aa:5c:80:11:0f:54:70:f5:
98:3f:f8:d0:20:be:24:0d:1a:f9:44:3d:c4:8a:50:
fa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4A:EE:2B:4E:D8:47:6F:4E:F7:42:31:22:78:E7:5E:03:2E:29:63
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8f:d9:a5:2d:be:9d:24:23:e4:cf:bb:19:b3:1d:e8:cd:4d:
98:33:7c:ad:3e:9a:eb:38:d3:7a:a6:97:b2:d7:e5:52:fd:f0:
65:10:d9:e7:4a:01:17:03:e2:58:ea:4e:f0:73:f1:58:df:9c:
64:cd:ae:3d:00:a4:c9:c7:03:39:81:42:e8:80:c5:ba:a4:10:
2e:fc:a5:45:59:1a:86:87:48:2b:f6:2e:b5:99:fa:39:1c:0d:
44:47:c8:6a:41:43:40:50:4c:3f:f9:55:8c:f4:2b:a9:14:e5:
ad:7b:c1:30:3e:e6:f8:27:44:75:59:99:6e:44:be:bc:fa:7e:
af:26:40:fc:1f:a6:fb:9a:7a:d1:f6:f6:6a:6f:8d:85:c8:c0:
49:68:9a:01:c2:f4:10:9a:a7:c1:6f:d2:4d:3b:c4:2e:d7:7a:
af:fe:80:7a:38:0f:80:6e:a1:71:57:73:7e:78:24:4a:2d:4e:
70:f2:df:19:98:3e:6f:bf:c9:8c:7c:9b:2f:82:19:da:6d:f0:
9c:6a:67:44:f3:c0:a8:6d:28:fc:d0:a5:4c:d8:56:4a:9a:a1:
8f:70:15:d0:42:ac:d0:4f:4c:08:a2:db:3f:85:29:f7:14:2d:
80:ea:09:6f:d1:83:c1:0a:30:0e:65:fe:8a:2f:e3:4e:b8:19:
95:9f:32:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:23:04 2025 by rpki-client