Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
File: Nse0TnxfKbnepAKsgFFgspjPDaY.mft (raw, json)
Hash identifier: lC8/VNa/lrAXP6bq2M9neLVrWLcFFmAcVOQAgK1FBL8=
Subject key identifier: C4:DC:01:9E:DA:16:0F:2E:32:7D:1B:3C:AA:42:D7:79:4F:AA:DE:3D
Authority key identifier: 36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
Certificate issuer: /CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Certificate serial: 019A503E0277CE0E5F60FA03896A857E2D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 19:00:32 +0000
Manifest this update: Tue 04 Nov 2025 19:00:32 +0000
Manifest next update: Wed 05 Nov 2025 19:00:32 +0000
Files and hashes: 1: Nse0TnxfKbnepAKsgFFgspjPDaY.crl (hash: R6H6IRefFrXBiQ3kARnSRA+KaUZI/SJPFWn0BueW78Q=)
2: SMYfuR1vOqwT0gbQyB5G9SKEcQs.roa (hash: 790cASmrwFRWvIHgSFvW34RkdQVbe9565zpCVGOf6tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:02:77:ce:0e:5f:60:fa:03:89:6a:85:7e:2d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Validity
Not Before: Nov 4 19:00:32 2025 GMT
Not After : Nov 5 19:00:32 2025 GMT
Subject: CN=c4dc019eda160f2e327d1b3caa42d7794faade3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0c:13:44:5b:4f:ca:49:e3:0f:a7:45:57:70:
79:e1:64:6f:cb:84:2e:03:6e:c5:09:3e:21:0a:22:
60:28:f1:46:80:a3:06:bd:54:14:cd:f0:5d:ed:f9:
37:d5:db:b9:40:88:d3:97:7d:73:a3:8e:38:16:9d:
75:0b:5f:7d:b3:dd:f1:b5:ec:c3:1c:5c:44:18:8f:
33:ce:78:84:cc:0c:c9:ca:7f:7c:aa:3a:b6:1f:86:
34:a5:5e:55:53:cc:fd:16:b5:f0:2b:ae:09:a2:df:
51:01:89:2c:64:e7:75:f7:46:7d:c2:14:4a:24:b2:
e4:c6:da:b5:82:78:90:7d:88:9c:5e:09:ab:65:ea:
95:a5:c8:9a:98:3f:4f:0f:e9:20:85:76:19:b1:14:
85:dd:4b:19:ad:f2:39:a6:e0:e2:ce:04:d0:22:c2:
18:f9:50:79:b8:55:59:d5:95:d0:db:be:8b:e1:f5:
13:6e:d1:80:09:c3:e8:e9:08:31:52:ce:6b:f5:89:
72:45:4e:9a:fa:4a:50:27:c8:3a:a2:49:07:27:0c:
25:6c:d8:57:9f:90:19:30:0a:d5:5b:fb:e3:a8:60:
90:8c:73:51:9b:e3:4e:6f:c1:0d:cc:20:af:58:c9:
6d:4e:5d:02:b6:ef:4a:9b:88:78:0e:9d:9a:52:e2:
d1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DC:01:9E:DA:16:0F:2E:32:7D:1B:3C:AA:42:D7:79:4F:AA:DE:3D
X509v3 Authority Key Identifier:
keyid:36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c2:95:ce:fd:0b:65:54:1d:49:22:a0:d8:45:49:5e:fa:5d:
e8:37:6a:71:78:cc:0e:f3:59:6d:50:8e:63:b6:ba:6b:29:36:
6e:fc:cc:6f:90:ee:4a:e1:06:38:82:30:d0:2b:85:c3:b5:2c:
9a:ce:3e:7a:e2:1e:74:e6:ca:89:7a:d0:7c:35:f8:63:08:a4:
90:19:42:26:75:56:94:9c:98:b4:55:da:1b:5a:36:f4:c9:ae:
b8:5c:2c:ce:9e:c2:82:da:d2:1f:8b:1b:0c:48:94:ab:db:f9:
34:93:a5:e0:71:4b:c8:c9:f2:98:0e:ce:9e:25:3b:88:ba:dd:
e6:5f:db:68:66:a9:f7:88:53:65:51:48:6d:fd:95:c8:bf:55:
65:06:a5:88:55:af:a2:af:85:90:7b:50:9a:1e:77:e8:18:02:
9a:4d:63:b8:ba:fc:b2:8d:3d:64:7e:11:f1:90:8d:b4:14:35:
d2:9a:18:c9:55:ce:73:82:33:98:c4:9e:b4:93:3e:53:69:59:
b4:fc:05:f6:44:56:f9:52:f9:9a:db:0b:85:74:5b:07:f4:d4:
f1:e3:e3:4e:2c:45:bc:c7:e8:5b:8f:13:d8:02:73:9d:3e:ca:
5d:71:41:04:b1:e6:de:dd:b4:45:19:55:d1:b6:c2:e2:f6:da:
14:05:05:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPgJ3zg5fYPoDiWqFfi05MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzdiNDRlN2M1ZjI5YjlkZWE0MDJhYzgwNTE2MGIyOThj
ZjBkYTYwHhcNMjUxMTA0MTkwMDMyWhcNMjUxMTA1MTkwMDMyWjAzMTEwLwYDVQQD
EyhjNGRjMDE5ZWRhMTYwZjJlMzI3ZDFiM2NhYTQyZDc3OTRmYWFkZTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwwTRFtPyknjD6dFV3B54WRvy4Qu
A27FCT4hCiJgKPFGgKMGvVQUzfBd7fk31du5QIjTl31zo444Fp11C199s93xtezD
HFxEGI8zzniEzAzJyn98qjq2H4Y0pV5VU8z9FrXwK64Jot9RAYksZOd190Z9whRK
JLLkxtq1gniQfYicXgmrZeqVpciamD9PD+kghXYZsRSF3UsZrfI5puDizgTQIsIY
+VB5uFVZ1ZXQ276L4fUTbtGACcPo6QgxUs5r9YlyRU6a+kpQJ8g6okkHJwwlbNhX
n5AZMArVW/vjqGCQjHNRm+NOb8ENzCCvWMltTl0Ctu9Km4h4Dp2aUuLRGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTcAZ7aFg8uMn0bPKpC13lPqt49MB8GA1UdIwQY
MBaAFDbHtE58Xym53qQCrIBRYLKYzw2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNlMFRueGZLYm5lcEFLc2dGRmdzcGpQRGFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84ZjcxMzgtNDZkOS00OThiLWFmNmQt
NmQ2NTgyYjJiNWI2LzEvTnNlMFRueGZLYm5lcEFLc2dGRmdzcGpQRGFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84ZjcxMzgtNDZkOS00OThiLWFmNmQtNmQ2NTgyYjJiNWI2
LzEvTnNlMFRueGZLYm5lcEFLc2dGRmdzcGpQRGFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsKVzv0L
ZVQdSSKg2EVJXvpd6DdqcXjMDvNZbVCOY7a6ayk2bvzMb5DuSuEGOIIw0CuFw7Us
ms4+euIedObKiXrQfDX4YwikkBlCJnVWlJyYtFXaG1o29MmuuFwszp7CgtrSH4sb
DEiUq9v5NJOl4HFLyMnymA7OniU7iLrd5l/baGap94hTZVFIbf2VyL9VZQaliFWv
oq+FkHtQmh536BgCmk1juLr8so09ZH4R8ZCNtBQ10poYyVXOc4IzmMSetJM+U2lZ
tPwF9kRW+VL5mtsLhXRbB/TU8ePjTixFvMfoW48T2AJznT7KXXFBBLHm3t20RRlV
0bbC4vbaFAUFUw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:41 2025 by rpki-client