Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
File: NW5HRHMdpE8I-l6SxesqR01JqJI.mft (raw, json)
Hash identifier: ErvSSHkliw3qtMQhe3zJaRXOhDUuFsJpUeOfl3B8ewc=
Subject key identifier: 68:32:42:72:DE:9D:DE:A2:CC:36:1E:03:7C:93:9D:AD:26:A2:EC:6E
Authority key identifier: 35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
Certificate issuer: /CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Certificate serial: 019A4D3CD657DECB79565C225BF65ABA16D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 05:00:23 +0000
Manifest this update: Tue 04 Nov 2025 05:00:23 +0000
Manifest next update: Wed 05 Nov 2025 05:00:23 +0000
Files and hashes: 1: NW5HRHMdpE8I-l6SxesqR01JqJI.crl (hash: WVNZiyz1HHXX/72oYfkUJZQPXo5FhZhK9YHuJhj/IXU=)
2: sWXWz9KHFQhAxmDZ0n63KNEzRYA.roa (hash: VInHBflevKh8uKrJkW73psQEtmEHrPxva/qTjQRvp1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:d6:57:de:cb:79:56:5c:22:5b:f6:5a:ba:16:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Validity
Not Before: Nov 4 05:00:23 2025 GMT
Not After : Nov 5 05:00:23 2025 GMT
Subject: CN=68324272de9ddea2cc361e037c939dad26a2ec6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d3:88:d4:26:50:1d:a4:a8:a6:10:69:86:d3:
4b:4c:7f:48:ed:14:69:5e:9c:71:c6:e7:3a:9f:71:
bf:36:0c:b8:3b:fc:6a:46:d7:d0:ab:b4:f8:6e:af:
9c:53:80:43:a5:73:de:97:f8:82:11:a3:9c:b5:6c:
77:db:1e:f5:e3:db:78:9b:a5:fa:54:dc:ed:95:4a:
c3:69:04:2b:9f:26:54:ed:75:1a:d8:45:9f:43:c0:
55:66:75:3b:61:d0:90:97:de:54:c9:56:ab:13:32:
76:71:e6:6a:80:e4:a4:f4:94:b6:33:44:ef:2a:08:
df:8a:c2:fc:20:a2:e0:9f:03:7d:af:97:62:a3:3e:
cc:e5:6b:3e:c0:1f:a8:1c:ac:df:e1:86:ef:57:da:
30:be:48:40:df:15:0d:88:a4:b8:78:43:2d:30:fa:
ba:6e:2f:de:2b:65:ef:d6:33:b9:f0:78:06:e8:3d:
00:90:37:64:93:d5:f3:39:71:84:d6:44:3f:d0:0f:
20:06:55:a8:af:c3:22:bf:ab:88:b2:db:c1:56:7a:
f0:f7:9e:c0:1d:c4:92:a8:11:01:81:29:1a:f9:2b:
aa:c6:fc:d7:1a:7a:69:1d:23:74:fa:15:a4:a4:9c:
12:70:6d:68:1e:09:0f:97:26:8e:b7:44:bb:6f:d9:
27:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:32:42:72:DE:9D:DE:A2:CC:36:1E:03:7C:93:9D:AD:26:A2:EC:6E
X509v3 Authority Key Identifier:
keyid:35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0e:eb:a6:5e:8b:57:db:84:63:2d:f7:bf:f1:b9:ff:90:d1:
38:37:2e:48:e1:e8:b7:cf:71:36:08:61:85:a0:5c:d9:fb:e5:
2d:df:24:e1:d4:c6:2a:87:27:57:1d:24:1f:33:b2:91:22:f1:
f9:e4:50:88:bd:4a:94:f4:39:6c:22:f9:f4:a6:0c:2f:33:3e:
2e:8e:64:bc:09:74:2d:bc:70:c8:72:d3:93:8b:7e:1c:fe:f3:
3d:5a:9e:a2:dc:53:d2:54:61:25:d7:6e:21:81:db:c9:2e:27:
d2:f2:14:c3:94:10:c4:dc:11:4d:8d:4e:c2:88:2a:b5:b7:50:
a9:44:19:78:c5:1d:e6:2a:d8:22:e3:3d:70:99:6e:4f:8f:3e:
d4:28:07:13:c6:7e:0e:7e:96:58:1e:aa:ec:bd:e9:55:ca:dc:
50:3d:31:c3:62:7a:f7:50:72:60:f5:a1:0e:18:00:92:73:b7:
7b:f5:bb:78:09:fa:88:70:05:3c:53:4a:66:ce:91:68:f5:88:
2f:83:26:d3:87:09:70:fc:1d:fe:ba:41:7f:95:db:41:16:60:
c0:27:46:9a:11:76:8d:46:4a:0f:69:84:c9:1a:62:99:1c:70:
9c:a8:13:c2:08:f4:27:92:61:06:dc:19:c6:83:1f:23:53:02:
41:0b:9b:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPNZX3st5VlwiW/ZauhbWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NmU0NzQ0NzMxZGE0NGYwOGZhNWU5MmM1ZWIyYTQ3NGQ0
OWE4OTIwHhcNMjUxMTA0MDUwMDIzWhcNMjUxMTA1MDUwMDIzWjAzMTEwLwYDVQQD
Eyg2ODMyNDI3MmRlOWRkZWEyY2MzNjFlMDM3YzkzOWRhZDI2YTJlYzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NOI1CZQHaSophBphtNLTH9I7RRp
Xpxxxuc6n3G/Ngy4O/xqRtfQq7T4bq+cU4BDpXPel/iCEaOctWx32x7149t4m6X6
VNztlUrDaQQrnyZU7XUa2EWfQ8BVZnU7YdCQl95UyVarEzJ2ceZqgOSk9JS2M0Tv
KgjfisL8IKLgnwN9r5dioz7M5Ws+wB+oHKzf4YbvV9owvkhA3xUNiKS4eEMtMPq6
bi/eK2Xv1jO58HgG6D0AkDdkk9XzOXGE1kQ/0A8gBlWor8Miv6uIstvBVnrw957A
HcSSqBEBgSka+SuqxvzXGnppHSN0+hWkpJwScG1oHgkPlyaOt0S7b9knVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgyQnLend6izDYeA3yTna0mouxuMB8GA1UdIwQY
MBaAFDVuR0RzHaRPCPpeksXrKkdNSaiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlc1SFJITWRwRThJLWw2U3hlc3FSMDFKcUpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84ZjQ3ODktOTYzYS00YzY5LWIxNjUt
MGM1MDFkNjg5NzVhLzEvTlc1SFJITWRwRThJLWw2U3hlc3FSMDFKcUpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84ZjQ3ODktOTYzYS00YzY5LWIxNjUtMGM1MDFkNjg5NzVh
LzEvTlc1SFJITWRwRThJLWw2U3hlc3FSMDFKcUpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQ7rpl6L
V9uEYy33v/G5/5DRODcuSOHot89xNghhhaBc2fvlLd8k4dTGKocnVx0kHzOykSLx
+eRQiL1KlPQ5bCL59KYMLzM+Lo5kvAl0LbxwyHLTk4t+HP7zPVqeotxT0lRhJddu
IYHbyS4n0vIUw5QQxNwRTY1OwogqtbdQqUQZeMUd5irYIuM9cJluT48+1CgHE8Z+
Dn6WWB6q7L3pVcrcUD0xw2J691ByYPWhDhgAknO3e/W7eAn6iHAFPFNKZs6RaPWI
L4Mm04cJcPwd/rpBf5XbQRZgwCdGmhF2jUZKD2mEyRpimRxwnKgTwgj0J5JhBtwZ
xoMfI1MCQQubfQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:18 2025 by rpki-client