Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
File: Nia55ERl8L1xPAoeBQED05EdzWc.mft (raw, json)
Hash identifier: 5FJv2SHrziq+pe55iXj1zYVEwPotdVNRpn72powRhFQ=
Subject key identifier: 12:53:63:53:00:98:68:D5:EB:23:6D:F4:D5:C0:C2:4B:1B:E5:D4:4E
Authority key identifier: 36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
Certificate issuer: /CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Certificate serial: 019A50E31AE8FF24AFDF11223F585E25F901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
Manifest number: 0CF3
Signing time: Tue 04 Nov 2025 22:00:52 +0000
Manifest this update: Tue 04 Nov 2025 22:00:52 +0000
Manifest next update: Wed 05 Nov 2025 22:00:52 +0000
Files and hashes: 1: Nia55ERl8L1xPAoeBQED05EdzWc.crl (hash: 8LRotxb5iV0xiHRsp5e303kyBvJp5MkzoTpLZ4Aht+Y=)
2: ijM-M3pW5i9OPaVJ9z7pdR0nkfo.roa (hash: BaCHQlpNW/709AUvEnmAV++DQu/RFZCpGAAySqc5kGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:1a:e8:ff:24:af:df:11:22:3f:58:5e:25:f9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Validity
Not Before: Nov 4 22:00:52 2025 GMT
Not After : Nov 5 22:00:52 2025 GMT
Subject: CN=12536353009868d5eb236df4d5c0c24b1be5d44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:29:99:fd:60:70:8c:37:e4:83:43:42:b8:86:
3d:b8:de:55:98:c4:71:0e:d7:49:f6:f4:c3:1a:aa:
32:6b:7c:78:4d:9e:04:26:6b:05:d1:d5:00:92:f4:
d5:e6:16:a4:c4:18:bf:07:75:fd:40:46:78:f9:4c:
05:f6:05:b5:46:8c:a5:02:ed:a9:83:34:3d:cb:f3:
6a:a9:27:45:d9:47:bc:f4:3c:e8:74:d7:86:64:15:
61:9b:2b:0e:6f:67:5c:68:d8:33:2f:0c:88:56:2e:
11:12:48:86:95:ae:14:95:0e:26:46:f0:eb:5a:b9:
52:d0:35:6e:11:ba:93:1a:5c:06:1a:c7:2b:99:a9:
44:c7:19:24:9f:a6:3c:a3:94:d8:c6:c8:67:ef:bc:
79:c2:4e:0b:14:ee:d5:66:11:e5:b0:89:94:6e:8f:
b0:90:a7:b7:2f:cf:92:a5:f1:c8:8c:b8:be:57:31:
e9:55:34:1b:07:2f:ce:7d:50:b4:71:98:d6:27:15:
64:de:22:de:07:76:61:4f:02:ed:44:13:1f:03:04:
cf:90:3d:d5:33:ce:34:21:5f:f7:da:10:55:ef:6e:
27:46:65:17:0d:4f:e1:53:6a:50:4b:78:4e:df:f3:
6d:7f:6d:a0:c0:8a:17:b1:1f:c1:e5:ae:a2:b6:7c:
7d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:53:63:53:00:98:68:D5:EB:23:6D:F4:D5:C0:C2:4B:1B:E5:D4:4E
X509v3 Authority Key Identifier:
keyid:36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5a:6b:5d:2d:99:3f:0c:89:4f:49:9d:f8:35:cc:68:e2:5b:
c1:e4:82:0b:91:b7:15:44:df:37:e1:dd:2b:33:bf:1d:6e:32:
91:8a:0f:97:e7:f6:e3:8b:fe:0b:8a:6d:39:a8:0d:f9:27:f2:
ad:87:f8:d0:d9:30:90:7c:b3:45:77:32:2b:ab:0f:81:6c:f5:
67:2d:f5:bd:e1:b2:3f:0a:d8:27:3b:b8:13:ee:aa:54:5b:ff:
b3:53:4e:48:f5:50:a5:13:dd:54:61:f2:a3:cb:2f:ef:f8:7e:
4e:b7:2e:04:b5:df:42:19:ea:76:80:5e:6b:7c:9b:48:bf:b9:
eb:01:76:04:3b:c8:f7:c7:e6:de:ce:73:6f:3b:de:b9:79:54:
db:62:07:74:89:29:22:f6:9c:c4:8d:25:e7:65:c5:0a:84:bb:
47:32:29:ee:ff:47:40:29:87:99:12:14:ba:42:79:d8:73:a8:
fc:35:c8:5c:fe:eb:1f:de:36:99:cf:39:45:37:38:df:3d:19:
f7:84:ad:6b:7d:9d:94:6d:1e:6b:4d:f6:33:dd:e5:65:c3:cd:
cc:04:2d:b0:7c:4d:9b:7e:42:82:09:eb:01:4b:10:23:8d:9d:
97:82:ca:ac:ce:2e:0d:70:e1:97:ad:5f:ab:50:de:e7:60:a1:
78:d3:5d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:26 2025 by rpki-client