Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
File: NnBwsWnRGpYpEATjAA-bBNThEtM.mft (raw, json)
Hash identifier: m35gFZA76IzvopUQKfW1kp9DnO+5bXOUMxPNBvdkkug=
Subject key identifier: 55:CE:63:A6:83:E8:23:20:85:19:E9:BC:19:D1:E3:B0:B1:7A:5F:48
Authority key identifier: 36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
Certificate issuer: /CN=367070b169d11a96291004e3000f9b04d4e112d3
Certificate serial: 019A52D1A431B57CA023A84BC3575C14E667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
Manifest number: 07F4
Signing time: Wed 05 Nov 2025 07:01:01 +0000
Manifest this update: Wed 05 Nov 2025 07:01:01 +0000
Manifest next update: Thu 06 Nov 2025 07:01:01 +0000
Files and hashes: 1: NnBwsWnRGpYpEATjAA-bBNThEtM.crl (hash: Gp94qmE8/U147IvE6ysTdC8YNRwXjXdnIZ007B66QYs=)
2: dVmeU4wC0TgcJ1mLjCj6WUgRoKU.roa (hash: Tr7wmryEwMRa1UVn0iohUCcmRld2nTxoTKpz/4davog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:a4:31:b5:7c:a0:23:a8:4b:c3:57:5c:14:e6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367070b169d11a96291004e3000f9b04d4e112d3
Validity
Not Before: Nov 5 07:01:01 2025 GMT
Not After : Nov 6 07:01:01 2025 GMT
Subject: CN=55ce63a683e823208519e9bc19d1e3b0b17a5f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:35:12:6b:d9:94:9d:da:28:fe:40:44:4c:
9c:d4:84:12:5f:e2:f0:4d:54:88:71:93:a5:ad:7e:
d6:a7:c5:85:f1:a4:43:8b:fe:47:a3:ec:1b:ed:bf:
4d:93:3f:c2:75:c7:0a:6c:5c:80:ab:dc:2d:f1:88:
db:82:93:4b:08:b7:cf:d2:c6:02:65:ba:61:cf:af:
a2:f4:0b:28:81:f0:f4:5f:2a:71:39:17:0b:8d:6c:
d8:e4:8c:ae:31:e1:ba:77:40:cd:37:a7:3e:2c:31:
72:03:f5:ac:db:63:55:0b:db:56:db:69:c0:76:0c:
61:3a:91:dd:35:91:db:52:e0:95:29:6c:03:66:1d:
2f:c9:24:18:79:76:7f:5a:38:7e:66:74:60:a5:db:
eb:4f:35:a9:03:26:2b:55:1e:6e:2b:89:3b:71:98:
5f:53:01:b3:02:46:57:f4:10:c9:51:a8:50:a5:98:
c2:c5:ec:64:ce:99:97:70:8a:8c:09:6c:d6:62:3d:
13:78:43:1b:70:f7:bd:30:60:3f:1b:8b:a9:f2:8e:
ed:dd:15:62:c6:83:4f:b9:54:5c:2c:e8:03:7f:e3:
da:4f:7e:57:86:a4:24:cc:08:4c:05:6a:6c:5d:6c:
47:96:93:57:df:02:e5:f6:57:89:70:a6:fc:2e:31:
f3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CE:63:A6:83:E8:23:20:85:19:E9:BC:19:D1:E3:B0:B1:7A:5F:48
X509v3 Authority Key Identifier:
keyid:36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d6:16:05:8d:b4:b6:9f:59:ee:64:a0:7e:ab:5d:8b:6e:bc:
94:95:3c:97:99:c0:fa:91:22:1d:1f:5e:0a:f8:74:88:4d:75:
84:92:e7:8a:22:6e:f7:04:7f:04:ac:a6:4d:f3:f9:c1:5b:fd:
0b:c9:b1:f1:47:cd:c8:56:5f:54:23:e7:eb:7b:d4:7c:fb:56:
49:9e:a8:a6:8f:5a:d9:af:57:88:be:f5:8f:17:b2:70:19:61:
09:10:a4:a5:bc:be:64:ea:c3:ab:05:04:e1:33:4c:0d:aa:ff:
8b:7c:7d:c4:aa:de:91:ff:d6:4b:b6:e0:3e:3e:49:4d:76:43:
7a:ca:9c:d3:1f:b7:25:07:75:60:93:e0:84:d0:07:a6:73:87:
96:1c:af:2d:38:c5:79:d3:1f:42:4a:c2:da:38:77:1d:e0:84:
fe:94:d5:a4:2e:45:ed:c8:66:12:5f:e0:3d:67:55:ab:2a:24:
37:9f:2d:c7:e0:25:44:fc:72:69:05:15:20:84:9f:e5:c9:6a:
a0:b8:f7:4b:96:61:ef:80:58:31:cd:8d:63:13:8b:3b:21:33:
f0:aa:b8:8b:5c:e5:79:17:28:02:b4:65:b1:32:3c:7f:49:10:
0e:f8:92:60:88:1b:57:84:31:45:b3:17:4d:19:9c:fd:16:17:
04:51:be:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0aQxtXygI6hLw1dcFOZnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NzA3MGIxNjlkMTFhOTYyOTEwMDRlMzAwMGY5YjA0ZDRl
MTEyZDMwHhcNMjUxMTA1MDcwMTAxWhcNMjUxMTA2MDcwMTAxWjAzMTEwLwYDVQQD
Eyg1NWNlNjNhNjgzZTgyMzIwODUxOWU5YmMxOWQxZTNiMGIxN2E1ZjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5s1EmvZlJ3aKP5AREyc1IQSX+Lw
TVSIcZOlrX7Wp8WF8aRDi/5Ho+wb7b9Nkz/CdccKbFyAq9wt8YjbgpNLCLfP0sYC
Zbphz6+i9AsogfD0XypxORcLjWzY5IyuMeG6d0DNN6c+LDFyA/Ws22NVC9tW22nA
dgxhOpHdNZHbUuCVKWwDZh0vySQYeXZ/Wjh+ZnRgpdvrTzWpAyYrVR5uK4k7cZhf
UwGzAkZX9BDJUahQpZjCxexkzpmXcIqMCWzWYj0TeEMbcPe9MGA/G4up8o7t3RVi
xoNPuVRcLOgDf+PaT35XhqQkzAhMBWpsXWxHlpNX3wLl9leJcKb8LjHz7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXOY6aD6CMghRnpvBnR47Cxel9IMB8GA1UdIwQY
MBaAFDZwcLFp0RqWKRAE4wAPmwTU4RLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm5Cd3NXblJHcFlwRUFUakFBLWJCTlRoRXRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iMTE5ODAtMWY3Yi00ZWU3LWE4OGUt
YTU4OTljZWU2NTVmLzEvTm5Cd3NXblJHcFlwRUFUakFBLWJCTlRoRXRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9iMTE5ODAtMWY3Yi00ZWU3LWE4OGUtYTU4OTljZWU2NTVm
LzEvTm5Cd3NXblJHcFlwRUFUakFBLWJCTlRoRXRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNYWBY20
tp9Z7mSgfqtdi268lJU8l5nA+pEiHR9eCvh0iE11hJLniiJu9wR/BKymTfP5wVv9
C8mx8UfNyFZfVCPn63vUfPtWSZ6opo9a2a9XiL71jxeycBlhCRCkpby+ZOrDqwUE
4TNMDar/i3x9xKrekf/WS7bgPj5JTXZDesqc0x+3JQd1YJPghNAHpnOHlhyvLTjF
edMfQkrC2jh3HeCE/pTVpC5F7chmEl/gPWdVqyokN58tx+AlRPxyaQUVIISf5clq
oLj3S5Zh74BYMc2NYxOLOyEz8Kq4i1zleRcoArRlsTI8f0kQDviSYIgbV4QxRbMX
TRmc/RYXBFG+Fg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:14:30 2025 by rpki-client