Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
File: NXMLuLJiPn9lphY2BNHIX5EGKI8.mft (raw, json)
Hash identifier: bgOjqzJqzCAOeRC++LCj0sdfjgSMnEX8UMFRef42YhA=
Subject key identifier: 57:EF:68:70:1B:51:4F:89:6A:9C:BF:45:EE:B8:12:60:43:9D:33:B7
Authority key identifier: 35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
Certificate issuer: /CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Certificate serial: 019A00DA39499818A9797AA7D3F534C2BA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 09:01:32 +0000
Manifest this update: Mon 20 Oct 2025 09:01:32 +0000
Manifest next update: Tue 21 Oct 2025 09:01:32 +0000
Files and hashes: 1: 3u_UTWM5MnsnNlqUobIqKDYLwKo.roa (hash: veRRLy9ZMKOvJkYp1WIUbOdpjqnYEIFrYe5fkHyfQnc=)
2: NXMLuLJiPn9lphY2BNHIX5EGKI8.crl (hash: wpAzN5C1C+XJMEPKND+JkhF+vh+Ag35+fz3bDqmOblI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:39:49:98:18:a9:79:7a:a7:d3:f5:34:c2:ba:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Validity
Not Before: Oct 20 09:01:32 2025 GMT
Not After : Oct 21 09:01:32 2025 GMT
Subject: CN=57ef68701b514f896a9cbf45eeb81260439d33b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5a:d3:3a:12:f7:fc:89:6d:1d:1e:06:e1:3e:
27:ac:d6:f6:7c:c2:6c:8f:0e:1e:a5:69:a1:1e:cd:
13:34:03:8d:05:8c:fb:c1:70:71:1b:c1:5b:0d:be:
ef:47:8a:35:ba:97:25:ad:1e:89:d3:29:26:70:c2:
b0:61:bb:dc:bc:12:92:bc:a3:c3:ce:41:4a:12:6a:
46:5b:65:19:24:40:d5:b6:5e:3f:7c:d9:da:26:69:
3b:46:49:27:81:55:88:d9:10:d2:94:50:5b:07:93:
69:6d:2f:b0:02:43:f0:72:8f:e2:2b:ef:3d:2a:cb:
51:11:e3:75:59:23:70:25:a0:12:74:e8:a0:3b:5d:
d1:14:7e:6a:39:e9:d6:80:d5:42:65:29:c4:17:21:
f5:90:54:c1:04:77:91:de:16:01:ec:5a:e2:28:cf:
ad:2c:9b:f9:53:75:c9:1f:1c:60:7c:16:b0:94:a5:
b5:81:c3:03:b6:c2:27:d4:81:b6:ac:6f:88:e3:fa:
4c:d4:2b:fd:55:e2:53:b9:d0:fb:75:da:89:b5:7b:
87:48:01:ff:8a:34:03:24:78:2b:c5:51:a8:f7:1c:
fe:36:75:f9:21:13:a3:1a:42:52:f9:7c:b7:a6:d7:
a2:13:a5:5c:27:07:51:b0:e6:71:c1:e2:8a:e5:55:
69:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EF:68:70:1B:51:4F:89:6A:9C:BF:45:EE:B8:12:60:43:9D:33:B7
X509v3 Authority Key Identifier:
keyid:35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:29:b2:87:ce:ce:49:48:f5:d2:e4:44:fb:83:f8:66:8f:48:
3f:c7:23:6e:00:4c:b9:8c:8f:cb:da:13:da:2b:c7:28:63:0f:
cf:e8:35:4a:2d:ed:0d:f7:89:f0:e4:eb:bc:ea:86:33:56:2b:
57:07:27:9e:de:ca:35:92:28:c0:ed:aa:fa:cc:ec:d2:a7:42:
53:ed:1c:72:48:88:5c:56:36:99:04:e4:2a:43:4d:e0:bf:ef:
6a:90:75:d1:52:49:d9:9b:45:75:21:dc:40:a3:89:e4:99:31:
9e:8c:4b:de:9d:57:c8:7a:b8:af:b6:b3:f3:62:9d:8d:50:e7:
d5:ea:f2:98:a5:7f:4a:f5:e4:54:7d:06:29:a3:7a:42:74:dd:
ba:b2:44:e4:85:cb:5e:3d:d6:34:75:e4:49:62:a9:80:ee:ad:
47:54:ff:a6:7c:b4:e8:9d:53:fb:b3:62:47:85:05:38:28:c5:
7a:23:2e:c9:40:ce:7b:3c:96:f9:83:1b:d7:d9:62:4c:ad:82:
72:1b:bd:a1:f6:36:d5:5b:50:f1:44:6b:46:cd:7c:8f:b9:e4:
1f:3f:b5:9f:41:a1:a5:b5:c1:c5:0c:0e:df:7b:31:74:ea:da:
e6:27:96:04:cd:da:ba:c1:9a:51:63:89:33:10:a8:1d:f6:34:
ad:2b:6c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:09:36 2025 by rpki-client