Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
File: NrVfs00p-WJUUTKgJbUmRP3_v28.mft (raw, json)
Hash identifier: ZWn4wRy98b+gRvNcyAImPsrrxaVSBktLRCaaourCdGk=
Subject key identifier: B4:24:E1:AC:28:43:99:B0:17:C8:55:45:7C:65:BD:8B:67:A9:0C:F4
Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
Certificate issuer: /CN=36b55fb34d29f962545132a025b52644fdffbf6f
Certificate serial: 019A00359F92012AAA1EDCF57ED840703890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
Manifest number: 12C1
Signing time: Mon 20 Oct 2025 06:01:45 +0000
Manifest this update: Mon 20 Oct 2025 06:01:45 +0000
Manifest next update: Tue 21 Oct 2025 06:01:45 +0000
Files and hashes: 1: 7dJIur2rO8jTQ_NHZt4L26PKtBw.roa (hash: fR/fcQi32Cz8cbo8M3f8TE+0bMDxdxf78ySV2CU/bwY=)
2: EzVC6hFH0RtKA1lARrwdwMJ07Q0.roa (hash: 2S3sYcvaMN06mor0RfdxJiX/gftEZ6TMLtUoAQi1mDE=)
3: NrVfs00p-WJUUTKgJbUmRP3_v28.crl (hash: bV0jUkQVUh3teeAqGSk8XXRkZRR7iOA5q7cv+7Xl+FM=)
4: Wqg9hZ9wuWYWaqC8TF_Eeg_AEfc.roa (hash: 0aRSdpBzh4xSW9RCKPtMxwA4FTF50Xso2kHVHvgf+yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:9f:92:01:2a:aa:1e:dc:f5:7e:d8:40:70:38:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f
Validity
Not Before: Oct 20 06:01:45 2025 GMT
Not After : Oct 21 06:01:45 2025 GMT
Subject: CN=b424e1ac284399b017c855457c65bd8b67a90cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:03:58:10:17:77:bd:ad:43:02:48:ff:a7:58:
59:9a:69:3b:2b:83:42:d5:b9:63:90:6d:38:b5:dc:
7f:46:4c:6e:8d:7c:10:40:48:27:6e:94:a6:5c:ad:
7e:1e:8f:db:55:34:fa:aa:90:92:9a:a9:65:51:03:
61:7c:b8:68:72:44:3a:5a:1e:a7:c0:60:59:49:5c:
96:31:87:58:fb:d1:c2:bd:90:ac:00:04:bb:3a:8b:
01:56:6a:65:84:69:9b:5e:50:68:39:36:1d:c6:e5:
85:a2:ca:41:94:fe:90:62:58:0a:18:15:4a:79:81:
da:e8:38:7f:ce:c5:b5:e0:3f:0d:ac:b0:df:e9:be:
e4:0e:24:0e:39:b1:cd:e2:a6:f6:89:39:f7:0f:31:
89:d3:d7:05:ea:5f:1e:2c:83:4a:24:45:57:5f:6c:
6b:65:e2:a6:97:fc:7b:67:be:c0:c4:e3:b3:7c:77:
af:3d:6b:b8:20:f2:87:48:95:53:42:22:d0:ff:54:
79:7c:6c:72:b3:8e:5f:5b:86:a7:29:7f:a8:89:14:
02:d8:3c:2c:84:71:d6:93:6f:38:ec:0c:78:4c:16:
3c:fa:30:6b:b5:58:08:79:ff:52:cb:9a:ca:86:76:
fd:6d:16:56:35:d1:b9:c4:e2:c5:5e:6d:47:56:2e:
b9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:24:E1:AC:28:43:99:B0:17:C8:55:45:7C:65:BD:8B:67:A9:0C:F4
X509v3 Authority Key Identifier:
keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:4a:27:ad:95:15:18:10:a9:c9:18:d4:4c:d8:79:de:97:0a:
d3:ab:5f:e3:86:d4:5b:45:d5:30:ce:6d:35:82:aa:f6:82:56:
1b:17:1c:cf:23:4b:db:c5:51:ee:b5:61:9c:83:7c:bb:74:7d:
15:71:28:b1:96:5f:1b:6b:71:f3:4f:2b:d9:af:6f:b2:c7:f0:
2b:c6:1a:58:23:1a:83:b4:7e:14:58:21:d7:63:a5:8a:39:e4:
b7:b6:f1:82:5c:da:fa:eb:66:39:00:b9:db:73:d8:01:83:6d:
a2:e2:d6:cc:13:fe:fe:5c:84:57:49:50:56:43:8c:ac:cd:d0:
6a:1c:09:70:3a:8a:a0:0b:d0:49:b4:e3:85:41:74:30:a1:aa:
c9:d9:e8:5e:2c:6c:c6:58:fc:d8:58:60:0e:11:3a:1c:ed:73:
f3:3b:d6:40:03:df:7c:f1:7d:10:60:81:a1:97:bd:1a:f2:6f:
62:13:6d:8e:b5:35:fe:f5:51:bb:7b:97:6a:7c:bf:10:3a:19:
ff:3b:f1:26:2e:bf:63:95:31:22:a3:dd:13:a9:17:a9:10:a9:
84:54:49:b3:22:7d:bf:fd:d2:d3:3e:22:67:7a:ec:fd:c7:50:
c8:33:8b:8c:61:43:c0:25:4c:dc:29:48:bd:3a:7e:90:31:ef:
00:0d:68:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:49:29 2025 by rpki-client