Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
File: NssW5Ez78H6X9vXkSucYqlDQUpE.mft (raw, json)
Hash identifier: jNcu0aD9kG6BVLWuVmbxz/xSFeq5DdzfZ5lnGeJk+tQ=
Subject key identifier: EF:46:45:80:36:34:57:90:BE:A2:80:7B:66:24:2E:1B:7F:1F:5F:B7
Authority key identifier: 36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
Certificate issuer: /CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Certificate serial: 0199FD33E92BBB56382BCF0A0C1ED430E781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 16:01:01 +0000
Manifest this update: Sun 19 Oct 2025 16:01:01 +0000
Manifest next update: Mon 20 Oct 2025 16:01:01 +0000
Files and hashes: 1: L5MQK89fxZaRwM_CqURZbBomtGM.roa (hash: dfoa3Oa+GHxXVfHS0ZcfFlTwLP7no4RhSrEEs8sBD0U=)
2: NssW5Ez78H6X9vXkSucYqlDQUpE.crl (hash: +C/H5VOnLSRP+2yYmVPUUzQJiLFpbfpZIQXmNfhzsgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e9:2b:bb:56:38:2b:cf:0a:0c:1e:d4:30:e7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Validity
Not Before: Oct 19 16:01:01 2025 GMT
Not After : Oct 20 16:01:01 2025 GMT
Subject: CN=ef46458036345790bea2807b66242e1b7f1f5fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:f4:17:72:42:59:63:21:fe:cb:a7:55:13:
af:a5:ed:f0:0b:f7:e7:27:dd:65:e3:85:6e:b2:e1:
af:3f:e8:60:d9:3d:62:e7:78:df:87:2b:30:80:12:
16:a7:f2:42:e9:1c:82:50:c8:ca:24:61:b9:18:a7:
2f:59:12:57:f1:87:d3:82:f1:17:bc:13:6a:41:1f:
38:07:fa:e7:8f:6f:bc:10:b7:a6:60:f9:ae:95:a3:
8e:20:49:e9:09:40:ad:f2:65:0a:f2:ae:d2:79:e4:
64:52:62:24:8c:49:a3:28:07:39:0f:09:51:00:93:
e6:58:73:3e:cd:ec:57:ea:f0:1e:ae:a2:6f:c9:fb:
74:56:d6:34:35:b0:53:45:87:7b:a5:05:50:27:39:
cc:0b:15:3f:96:24:39:6d:d2:77:22:b8:7a:c6:1c:
53:f5:ae:c9:e2:1e:8f:91:1d:a1:cf:1b:fe:6d:47:
34:dc:ef:ce:5f:15:77:a1:68:f6:42:7a:45:ce:f1:
c7:0e:f2:8b:bc:fe:c4:03:12:bf:ad:04:3f:59:12:
48:f8:e5:b0:46:56:1d:46:93:fc:a4:1a:ce:6b:54:
a6:d0:1e:77:be:1f:e9:c8:c8:fa:5c:69:1a:87:a2:
c9:61:f7:85:0e:fa:ee:8d:d3:59:4c:01:35:cd:f8:
a5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:46:45:80:36:34:57:90:BE:A2:80:7B:66:24:2E:1B:7F:1F:5F:B7
X509v3 Authority Key Identifier:
keyid:36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:08:52:4e:45:ac:2b:51:2e:a3:ab:36:64:ae:b6:83:dc:fd:
69:53:a9:f1:0c:93:b6:ff:7a:f4:13:5f:cc:24:e6:e0:5c:82:
d5:b2:3a:05:ef:fa:22:5d:dd:3b:6c:22:99:2c:40:59:bb:ed:
a5:94:02:52:9f:1d:91:a7:aa:0f:5a:bb:5b:02:08:20:8f:d5:
f1:e2:16:d5:73:60:7d:61:d4:f0:1d:cd:a3:e3:c5:20:3a:29:
d7:c3:92:ca:55:4a:a3:b9:72:e5:9e:79:f9:7f:fb:63:bd:29:
0b:22:e6:79:a8:25:90:ee:d0:1b:de:c4:8d:51:f0:3f:f4:4a:
1e:71:78:78:b9:4f:92:e3:7a:16:31:bc:73:8d:38:aa:3c:63:
12:36:94:8c:81:b7:9b:a0:f5:8b:10:92:2c:98:7b:51:50:63:
e7:d2:07:b1:0b:5b:a6:59:94:92:cc:12:4d:db:42:c2:ab:47:
65:2e:f4:d1:19:a0:f4:bd:5c:28:22:2e:32:27:dd:38:b0:ad:
57:bf:60:d5:55:1b:e3:28:e7:c2:f4:88:95:69:f2:96:d4:81:
ec:c8:65:af:bb:95:cb:3b:2c:13:a4:90:90:ca:2d:31:d6:be:
63:4f:0c:72:8e:7a:94:6e:f1:4e:ba:13:36:64:86:40:af:2a:
1c:f2:50:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:48 2025 by rpki-client