Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
File: NJWKWNF8q4_5p5FW9mvtWnh5n34.mft (raw, json)
Hash identifier: 35pxaFjR45NeL/UF3mWRxLOBoqYRJQQ1I4z/FFdPmFE=
Subject key identifier: A3:D5:AE:D8:51:26:C0:97:A4:AB:51:AF:62:6B:67:01:C3:1A:14:64
Authority key identifier: 34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
Certificate issuer: /CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Certificate serial: 0199FBEBA8743DC943106EB7E86C84B27797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:29 +0000
Manifest this update: Sun 19 Oct 2025 10:02:29 +0000
Manifest next update: Mon 20 Oct 2025 10:02:29 +0000
Files and hashes: 1: K3t9uiMT3pdcNT-y1LibRFytIdI.roa (hash: GuP3GRBxNbproaFPzzE3XIeahhhTEN2jEs7iFNPrujs=)
2: NJWKWNF8q4_5p5FW9mvtWnh5n34.crl (hash: IVo2qlYXVRTHf72sI8cCd5IKxg36cWlgTZ2SxpBFHp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a8:74:3d:c9:43:10:6e:b7:e8:6c:84:b2:77:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Validity
Not Before: Oct 19 10:02:29 2025 GMT
Not After : Oct 20 10:02:29 2025 GMT
Subject: CN=a3d5aed85126c097a4ab51af626b6701c31a1464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:9f:77:1a:0b:be:f6:12:45:a5:f2:d7:a7:
06:4a:ae:c6:20:0f:ae:ea:70:22:cc:3b:d0:a6:b6:
bf:99:e4:ce:2d:ee:f3:7e:9c:b5:d6:47:16:d3:74:
e6:a1:44:31:81:8e:fd:2e:e0:b6:26:cc:a0:7d:d3:
9f:d9:62:6e:4f:91:9e:b3:f5:8a:0b:e1:e8:ea:12:
01:bb:14:af:a1:c0:eb:67:26:db:d0:92:fc:6f:26:
09:56:a3:59:6d:17:9f:d4:5d:13:e1:07:2c:ce:62:
56:b1:17:92:00:ca:df:5c:f1:53:c7:a4:9d:12:ab:
79:22:e6:5b:19:9c:9b:f7:2f:ef:3a:57:09:01:bb:
b8:c6:64:91:b3:a1:37:4b:50:01:07:b9:24:84:20:
97:43:35:6f:4f:a5:34:88:1b:86:d1:c8:90:5a:d6:
99:3a:60:f7:a3:ba:18:83:68:8f:ef:f7:05:d4:74:
41:3f:24:eb:9a:a2:53:b1:54:97:ef:db:9f:14:25:
c0:43:63:14:3e:f8:a9:40:91:cd:04:16:47:38:78:
9f:bc:ac:2f:1f:47:74:24:53:6f:c1:ed:39:bc:02:
e6:89:1a:03:81:47:7b:21:3a:d1:09:e4:85:b4:74:
e2:40:87:74:79:24:0c:6f:a8:6b:14:9b:f0:dd:19:
66:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D5:AE:D8:51:26:C0:97:A4:AB:51:AF:62:6B:67:01:C3:1A:14:64
X509v3 Authority Key Identifier:
keyid:34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:3f:94:b2:79:13:85:77:89:cd:24:62:1b:95:a3:ae:e1:88:
ee:5d:1c:a7:bf:cb:a9:17:95:8c:5c:7b:84:06:5a:8c:dd:ce:
bb:ec:c3:8f:13:d3:1f:83:39:6e:77:95:bf:31:65:0f:c4:d5:
0d:e1:e8:ea:96:5d:17:9a:5d:f9:0c:98:87:89:6c:83:44:15:
3f:69:b9:b6:50:92:7c:3f:77:cf:41:c3:12:88:63:3a:f3:97:
f4:7a:72:f9:cd:1f:e4:cc:1f:62:44:24:68:45:0d:64:12:a6:
fd:c9:2d:91:4a:25:69:e9:29:02:2e:cc:bf:14:b3:cc:6e:3e:
6e:27:f0:93:84:5f:72:58:94:9a:32:3a:b9:0d:fb:8e:01:fd:
8d:8a:ea:2a:54:85:a0:3d:59:a1:8f:2f:f2:d0:d3:e8:68:3d:
22:0e:a9:bc:de:df:7f:70:cd:cc:a6:2e:ed:b3:77:23:eb:2e:
2b:62:9b:1e:69:c0:0f:25:08:11:ca:35:9e:98:91:6a:c4:ca:
bb:8f:e1:a6:2b:51:a7:53:ce:c7:e4:00:11:06:55:16:ea:b5:
8f:2a:43:e7:2d:c0:1b:82:70:1b:b7:6e:f6:13:4c:fb:c0:f0:
b3:04:ad:a0:bb:57:80:d5:f3:ba:03:df:3a:a4:5d:3d:30:e7:
61:75:38:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn766h0PclDEG636GyEsneXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OTU4YTU4ZDE3Y2FiOGZmOWE3OTE1NmY2NmJlZDVhNzg3
OTlmN2UwHhcNMjUxMDE5MTAwMjI5WhcNMjUxMDIwMTAwMjI5WjAzMTEwLwYDVQQD
EyhhM2Q1YWVkODUxMjZjMDk3YTRhYjUxYWY2MjZiNjcwMWMzMWExNDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSGfdxoLvvYSRaXy16cGSq7GIA+u
6nAizDvQpra/meTOLe7zfpy11kcW03TmoUQxgY79LuC2JsygfdOf2WJuT5Ges/WK
C+Ho6hIBuxSvocDrZybb0JL8byYJVqNZbRef1F0T4QcszmJWsReSAMrfXPFTx6Sd
Eqt5IuZbGZyb9y/vOlcJAbu4xmSRs6E3S1ABB7kkhCCXQzVvT6U0iBuG0ciQWtaZ
OmD3o7oYg2iP7/cF1HRBPyTrmqJTsVSX79ufFCXAQ2MUPvipQJHNBBZHOHifvKwv
H0d0JFNvwe05vALmiRoDgUd7ITrRCeSFtHTiQId0eSQMb6hrFJvw3RlmtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPVrthRJsCXpKtRr2JrZwHDGhRkMB8GA1UdIwQY
MBaAFDSViljRfKuP+aeRVvZr7Vp4eZ9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNmM1MjUtNGEzOS00ZGI4LThjNWQt
NDY4MTA2MTM1MzhhLzEvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kNmM1MjUtNGEzOS00ZGI4LThjNWQtNDY4MTA2MTM1Mzhh
LzEvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJT+UsnkT
hXeJzSRiG5WjruGI7l0cp7/LqReVjFx7hAZajN3Ou+zDjxPTH4M5bneVvzFlD8TV
DeHo6pZdF5pd+QyYh4lsg0QVP2m5tlCSfD93z0HDEohjOvOX9Hpy+c0f5MwfYkQk
aEUNZBKm/cktkUolaekpAi7MvxSzzG4+bifwk4RfcliUmjI6uQ37jgH9jYrqKlSF
oD1ZoY8v8tDT6Gg9Ig6pvN7ff3DNzKYu7bN3I+suK2KbHmnADyUIEco1npiRasTK
u4/hpitRp1POx+QAEQZVFuq1jypD5y3AG4JwG7du9hNM+8DwswStoLtXgNXzugPf
OqRdPTDnYXU48A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:05 2025 by rpki-client