Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
File: NDez9zdtPvHNqLyWbxOXCFnPeW4.mft (raw, json)
Hash identifier: OjTbd1Hbjn9x3eONt7wW22tZkMR0PJstb4P27ZQmAcM=
Subject key identifier: D5:F0:F0:26:12:FA:4A:B5:25:1D:34:26:04:CA:0A:8C:2D:41:92:75
Authority key identifier: 34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E
Certificate issuer: /CN=3437b3f7376d3ef1cda8bc966f13970859cf796e
Certificate serial: 019A01B642C53A68B335254B5766D9D0508E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
Manifest number: 07E1
Signing time: Mon 20 Oct 2025 13:01:53 +0000
Manifest this update: Mon 20 Oct 2025 13:01:53 +0000
Manifest next update: Tue 21 Oct 2025 13:01:53 +0000
Files and hashes: 1: NDez9zdtPvHNqLyWbxOXCFnPeW4.crl (hash: YGprm87lJV33RsDf4B86ES79VoeBsDnxxL/9HdTtLnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:42:c5:3a:68:b3:35:25:4b:57:66:d9:d0:50:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3437b3f7376d3ef1cda8bc966f13970859cf796e
Validity
Not Before: Oct 20 13:01:53 2025 GMT
Not After : Oct 21 13:01:53 2025 GMT
Subject: CN=d5f0f02612fa4ab5251d342604ca0a8c2d419275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:47:96:f2:35:67:d1:ed:5e:dc:82:16:fc:20:
cd:0e:1d:7e:c6:0d:65:ab:69:02:bd:e7:c3:a4:2d:
32:11:5f:78:61:87:87:6b:0b:ae:ec:6d:4e:fd:b3:
14:77:57:26:ca:93:48:66:0b:be:d8:a5:d2:ce:b5:
69:22:0c:8b:87:05:d3:dc:65:6d:65:a2:44:15:62:
45:63:5e:0f:5b:24:33:db:d5:eb:b0:26:9e:b0:e5:
b2:05:9a:0f:25:58:67:a9:e7:b4:57:75:a5:fb:11:
44:30:3c:60:75:c1:ad:a6:be:a1:d8:59:fe:05:51:
59:26:54:a7:b5:c9:2e:89:db:6f:36:0a:a9:cc:32:
c0:6b:30:6d:01:02:c6:6a:d2:53:8b:3a:f8:4d:81:
93:72:a5:0b:eb:04:53:1b:d5:af:8a:c0:ed:c3:19:
3f:18:d5:49:de:13:eb:72:17:c9:5d:cd:ad:f5:ee:
5f:c9:e9:12:ac:cd:16:f3:59:2f:5a:a6:b3:0a:0f:
5c:a9:34:a5:66:2f:3c:3a:4b:69:c0:91:e1:ae:11:
b9:1c:05:bf:70:28:58:19:c8:52:32:42:26:25:d8:
5b:ec:23:02:b4:f1:7b:3c:eb:b0:3a:a0:a6:c5:a5:
2f:85:1e:f3:3b:7c:53:4b:c0:60:fc:e1:0b:a5:9f:
a9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F0:F0:26:12:FA:4A:B5:25:1D:34:26:04:CA:0A:8C:2D:41:92:75
X509v3 Authority Key Identifier:
keyid:34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:62:12:2a:1d:60:f9:ca:dc:24:c7:55:c0:35:0b:1f:57:af:
58:5f:53:32:9b:f1:51:f2:b6:7c:b9:7e:06:a5:59:69:c1:ea:
b5:8f:22:00:d9:45:03:41:e3:38:26:c4:83:db:31:42:bf:d0:
7e:93:1b:b8:3e:ba:a7:ef:b4:0c:cb:e4:88:a9:c4:ee:df:cd:
57:a5:90:3d:96:36:6d:ab:b5:64:fb:ee:8b:52:3a:81:69:a1:
8a:5d:95:f3:30:d3:e7:85:3e:74:54:14:c4:c7:78:de:94:46:
22:e9:aa:a4:1d:4d:83:11:3a:2b:27:02:b9:dd:42:9b:d8:d5:
3f:42:a2:d9:a2:56:79:e8:f9:bc:e5:d7:4b:64:e4:e5:33:0c:
00:68:58:67:f1:75:a3:2f:d6:1e:55:d2:53:c2:e2:78:ef:b5:
0c:68:01:8d:58:59:f1:90:00:ca:77:24:fb:05:47:48:a3:7b:
30:bc:ca:46:be:64:67:c1:d2:ed:67:21:ac:c2:dc:6c:06:be:
6d:7c:fd:b5:50:5c:89:f0:66:4b:31:34:c3:40:0d:39:1e:f9:
8c:12:fc:09:c5:ad:47:8e:22:b9:e9:a1:86:06:dc:34:5e:a8:
39:fa:f7:10:8b:90:52:20:92:06:20:78:f0:e9:c2:5e:5c:20:
dd:21:d6:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBtkLFOmizNSVLV2bZ0FCOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MzdiM2Y3Mzc2ZDNlZjFjZGE4YmM5NjZmMTM5NzA4NTlj
Zjc5NmUwHhcNMjUxMDIwMTMwMTUzWhcNMjUxMDIxMTMwMTUzWjAzMTEwLwYDVQQD
EyhkNWYwZjAyNjEyZmE0YWI1MjUxZDM0MjYwNGNhMGE4YzJkNDE5Mjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3keW8jVn0e1e3IIW/CDNDh1+xg1l
q2kCvefDpC0yEV94YYeHawuu7G1O/bMUd1cmypNIZgu+2KXSzrVpIgyLhwXT3GVt
ZaJEFWJFY14PWyQz29XrsCaesOWyBZoPJVhnqee0V3Wl+xFEMDxgdcGtpr6h2Fn+
BVFZJlSntckuidtvNgqpzDLAazBtAQLGatJTizr4TYGTcqUL6wRTG9WvisDtwxk/
GNVJ3hPrchfJXc2t9e5fyekSrM0W81kvWqazCg9cqTSlZi88OktpwJHhrhG5HAW/
cChYGchSMkImJdhb7CMCtPF7POuwOqCmxaUvhR7zO3xTS8Bg/OELpZ+pswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXw8CYS+kq1JR00JgTKCowtQZJ1MB8GA1UdIwQY
MBaAFDQ3s/c3bT7xzai8lm8TlwhZz3luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkRlejl6ZHRQdkhOcUx5V2J4T1hDRm5QZVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS83MmNiMWYtYmQyYi00YzIyLWFhZWMt
YTYyMzg4ZWY1YjQ4LzEvTkRlejl6ZHRQdkhOcUx5V2J4T1hDRm5QZVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS83MmNiMWYtYmQyYi00YzIyLWFhZWMtYTYyMzg4ZWY1YjQ4
LzEvTkRlejl6ZHRQdkhOcUx5V2J4T1hDRm5QZVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALGISKh1g
+crcJMdVwDULH1evWF9TMpvxUfK2fLl+BqVZacHqtY8iANlFA0HjOCbEg9sxQr/Q
fpMbuD66p++0DMvkiKnE7t/NV6WQPZY2bau1ZPvui1I6gWmhil2V8zDT54U+dFQU
xMd43pRGIumqpB1NgxE6KycCud1Cm9jVP0Ki2aJWeej5vOXXS2Tk5TMMAGhYZ/F1
oy/WHlXSU8LieO+1DGgBjVhZ8ZAAynck+wVHSKN7MLzKRr5kZ8HS7WchrMLcbAa+
bXz9tVBcifBmSzE0w0ANOR75jBL8CcWtR44iuemhhgbcNF6oOfr3EIuQUiCSBiB4
8OnCXlwg3SHWFg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:53:32 2025 by rpki-client