Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
File: NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json)
Hash identifier: 6DoH/NSwNn5Ouf+jx+NUmxGN3Do8SH/DekMEJ0MdKA4=
Subject key identifier: 5C:1B:67:DC:68:E2:21:C4:2E:55:51:C4:FA:5E:37:B0:83:09:B4:B3
Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
Certificate issuer: /CN=36261c261756fa03ac57d1bfc4db856ef808975a
Certificate serial: 019A4E190C3C348B907C7F460C54F66D4B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
Manifest number: 1519
Signing time: Tue 04 Nov 2025 09:00:55 +0000
Manifest this update: Tue 04 Nov 2025 09:00:55 +0000
Manifest next update: Wed 05 Nov 2025 09:00:55 +0000
Files and hashes: 1: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: vPKRiIrQiVo3b/zQJqZcY2q6edgYTGGQTlXoXr7rYxk=)
2: dYJMd1xHra4qPvxWQ63pWL2NPkE.roa (hash: lMxX8BkZ02l91WMGdaFajJSu4NcGeGtSFmauEg/qSlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:0c:3c:34:8b:90:7c:7f:46:0c:54:f6:6d:4b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a
Validity
Not Before: Nov 4 09:00:55 2025 GMT
Not After : Nov 5 09:00:55 2025 GMT
Subject: CN=5c1b67dc68e221c42e5551c4fa5e37b08309b4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:9e:0d:d1:bc:de:29:bd:5d:b5:0c:e6:be:
56:ea:14:9e:fc:39:bb:c2:38:ca:93:3a:81:7f:9c:
20:33:04:ee:1c:17:fa:87:68:8e:bf:77:41:99:51:
f1:e4:62:0c:55:2e:b4:bf:55:10:de:63:1e:cb:c4:
bb:a9:1e:d6:8c:e5:b4:a6:39:c0:b2:73:6a:8e:0d:
9a:9d:df:b3:9a:41:7f:0b:5b:6c:bc:3a:52:00:22:
5c:44:70:8a:e4:63:fa:45:db:b2:1a:6a:e0:cc:5f:
29:84:57:e1:28:8c:e1:94:b4:15:d5:54:97:f2:60:
94:6e:34:d3:57:d6:54:51:f6:71:fa:0d:3c:ae:4c:
7e:07:02:39:a7:4f:b1:48:86:4b:f0:80:81:ee:96:
95:5b:d0:8e:1d:a9:f6:bc:b3:99:9a:04:c5:8e:a2:
5f:a5:fb:f8:7b:58:73:b6:da:b4:0e:a1:cb:52:39:
04:59:5a:8a:48:21:ac:39:3c:26:ea:3c:ae:fc:bc:
fe:f2:2d:32:d8:f3:66:85:30:5f:02:a9:ed:a5:6f:
e4:c9:ba:76:c7:ae:f6:3f:d6:22:3d:15:17:16:a9:
8e:22:4a:d7:2f:fd:e3:ac:e7:c4:6f:45:cc:98:f6:
a6:12:ec:d3:02:d0:ab:24:11:59:53:44:f6:d7:43:
58:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1B:67:DC:68:E2:21:C4:2E:55:51:C4:FA:5E:37:B0:83:09:B4:B3
X509v3 Authority Key Identifier:
keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9e:dc:6f:43:ba:cc:c9:be:9d:94:09:f3:64:2d:e2:d1:30:
a0:71:25:8a:bb:1d:f8:07:aa:91:3e:1b:ac:c3:b1:0d:1e:d4:
39:eb:91:8c:80:16:6a:88:56:b9:c4:f6:d1:cf:44:9f:b0:6c:
40:00:a1:64:a6:a3:a9:95:b0:bc:2e:d0:c1:97:ab:06:85:5a:
75:26:59:1d:36:25:8d:62:c4:0b:46:36:ba:82:ef:85:0a:1c:
be:71:de:0f:1c:43:78:a2:c2:0c:98:cc:6c:88:3a:d5:92:fb:
cd:59:83:12:f7:95:9c:a5:9c:2f:1e:c5:78:6c:21:5a:32:6b:
5d:b5:ab:aa:96:d7:f3:fd:2e:c0:2c:1d:80:ff:8f:3a:58:4d:
d8:29:79:1c:53:12:55:59:56:3b:cd:13:fd:ff:86:18:c3:0e:
b3:18:14:ec:57:41:75:e3:f4:79:4c:71:bd:43:ef:9c:05:99:
01:7e:cd:e7:80:e8:af:38:07:1c:b4:0c:72:9a:88:6e:17:ec:
d5:80:91:c2:57:0f:65:24:b8:6f:a2:03:0f:3f:bb:30:ef:58:
b2:7c:ca:fa:4f:f6:be:b2:7c:50:b3:81:65:f0:fc:17:d1:a6:
a0:34:a9:17:8c:76:19:5f:16:21:f7:0a:e6:48:85:ec:25:1c:
a2:c3:99:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:54 2025 by rpki-client