Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: kjojpfc+bRaMQsAyweKz8QCxzGgoT5BW4r0oAGW/qbo=
Subject key identifier: 21:BD:7E:FE:C2:74:F7:10:2D:B9:16:29:1D:C7:85:88:E7:05:18:73
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 0199FFC74B1FA5CB55721DAEFE16F3C7A1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 1707
Signing time: Mon 20 Oct 2025 04:01:14 +0000
Manifest this update: Mon 20 Oct 2025 04:01:14 +0000
Manifest next update: Tue 21 Oct 2025 04:01:14 +0000
Files and hashes: 1: 1-ULf-aQJ3fC-9_w7BYQULZHTnNw.roa (hash: A5jmxQDIS4oGLvhKUV0INjhfzuBh6+1jpId+3WjZlWc=)
2: 5tPAApTwknAaRXxKmBtwLwGK11k.roa (hash: 8ijfuuyCQYG0KzVjWtjN0KlVGd8B1/5JOo3YUUGUm/k=)
3: 6Jm2eoj9ZSHN-oOUb9pQlIZSyeM.roa (hash: g919cnEgUex9Vq6Cq0vNxzfmvBW8lAFZJ89+7u0kuuo=)
4: LfROe2I71eG6M7Z-gNeANYWPFpE.roa (hash: jYCJfZL3yCQ4hYWioDRR7adhtNmlY65zHqG2PPbV/Qo=)
5: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: kQSmm9wSCnturP8Lmkx3sd4wLOE37DbUmiGDKzyhBxA=)
6: WB5IR-rncEh5erhRHuCyer1roLg.roa (hash: xTtXPbZY0LbMC6jqC5khGuSb0ZaN44bjPSvJlY54fv0=)
7: dkDLfL12Mvt9oOTN814F8r3xyp4.roa (hash: Bf4qm+dtST2tX+x1TcvddLF9nRprjThyue/B71J9XDM=)
8: zEolHRB2AMzAHPn0pcNPX5SKSz8.roa (hash: hfJMojoDujNrnnYpdExfaP44xHymzJk56kqZMc0LOZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:4b:1f:a5:cb:55:72:1d:ae:fe:16:f3:c7:a1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Oct 20 04:01:14 2025 GMT
Not After : Oct 21 04:01:14 2025 GMT
Subject: CN=21bd7efec274f7102db916291dc78588e7051873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:e3:cd:15:a4:46:02:6e:71:6e:b5:66:72:
cc:40:ce:fd:e2:d4:0e:f1:36:62:21:bc:27:67:55:
71:b5:1c:d4:4a:28:9e:c1:03:c1:af:d4:c2:42:4d:
db:c4:56:1b:ad:d5:86:1f:93:cd:b3:46:01:98:c6:
81:b8:76:cd:2d:72:ce:3b:5d:8c:c7:af:c5:36:b8:
9d:96:92:6f:86:d1:6c:57:fd:0d:6c:ae:d6:49:45:
c5:94:41:b0:52:57:31:89:25:7c:78:47:a6:a7:49:
ad:32:db:69:5d:72:e6:41:7a:51:60:ec:98:a2:56:
43:ff:69:de:af:4d:db:e2:d2:c8:ee:e3:84:b6:f0:
38:3c:a5:76:7f:cc:f2:c3:85:42:41:3f:cb:4a:39:
a7:6f:1e:e4:35:ef:0f:22:c1:4a:fb:c1:e1:91:44:
ba:10:dd:ea:4c:07:67:8c:f8:31:61:e8:f5:b5:6e:
6d:48:b9:af:f0:50:3e:be:4e:d8:b0:af:50:f2:8b:
49:90:ed:2c:57:c8:76:cf:c6:4e:ac:1f:4d:01:34:
8d:c9:ab:cd:7a:e8:82:96:51:51:60:18:70:d9:8b:
d8:3f:b6:bb:a2:06:39:07:aa:d2:80:f0:6f:02:69:
ae:f0:31:cd:32:cd:e2:25:09:51:68:c9:4f:64:66:
b7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BD:7E:FE:C2:74:F7:10:2D:B9:16:29:1D:C7:85:88:E7:05:18:73
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9c:e4:b5:53:f7:c2:0e:fd:4d:2d:6a:07:ce:5d:17:94:a0:
0d:b8:6a:df:22:9d:71:42:df:30:1e:77:ea:4a:83:93:5f:27:
d2:27:2c:af:29:b7:7f:e7:9d:f9:31:2e:c0:42:d9:bf:03:24:
c8:f7:91:c8:6a:e1:3a:92:22:be:fe:f4:7b:6e:1c:56:db:9f:
5e:32:1c:56:7a:e0:f0:d2:03:38:fb:92:69:90:e8:c7:49:cb:
05:ed:69:27:8b:b3:40:af:c0:0b:79:66:0e:24:a6:d3:6c:26:
98:27:33:dc:f5:d2:8b:25:5c:31:ee:70:be:8d:ca:87:04:69:
d6:b9:95:fe:9f:9e:e6:45:31:28:83:bb:cb:1c:08:cc:1a:b8:
f5:57:18:a7:0b:e0:aa:52:e0:e0:96:5a:25:ec:cb:2f:e9:b8:
b6:77:b1:af:63:1d:22:e5:24:75:47:79:5d:23:47:a1:ec:53:
cd:95:fe:16:cb:c1:a2:a7:13:58:43:d2:e4:d1:71:82:a7:38:
82:be:4d:4a:fa:00:29:c4:67:f9:d4:95:59:66:32:f6:63:b7:
aa:fb:12:ec:ad:61:14:77:5a:79:7c:c0:4b:cd:ad:42:09:57:
16:91:be:04:b6:d5:62:cd:0a:a8:cf:a4:8f:8e:0c:4e:db:2e:
d3:11:50:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x0sfpctVch2u/hbzx6GkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MmY4OTE5ZTZiYzFlZjU2NjM0ODkwMThmYzg3NWJlMzRj
MGYyNGMwHhcNMjUxMDIwMDQwMTE0WhcNMjUxMDIxMDQwMTE0WjAzMTEwLwYDVQQD
EygyMWJkN2VmZWMyNzRmNzEwMmRiOTE2MjkxZGM3ODU4OGU3MDUxODczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqzjzRWkRgJucW61ZnLMQM794tQO
8TZiIbwnZ1VxtRzUSiiewQPBr9TCQk3bxFYbrdWGH5PNs0YBmMaBuHbNLXLOO12M
x6/FNridlpJvhtFsV/0NbK7WSUXFlEGwUlcxiSV8eEemp0mtMttpXXLmQXpRYOyY
olZD/2ner03b4tLI7uOEtvA4PKV2f8zyw4VCQT/LSjmnbx7kNe8PIsFK+8HhkUS6
EN3qTAdnjPgxYej1tW5tSLmv8FA+vk7YsK9Q8otJkO0sV8h2z8ZOrB9NATSNyavN
euiCllFRYBhw2YvYP7a7ogY5B6rSgPBvAmmu8DHNMs3iJQlRaMlPZGa3dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCG9fv7CdPcQLbkWKR3HhYjnBRhzMB8GA1UdIwQY
MBaAFDUviRnmvB71ZjSJAY/Idb40wPJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAt
ZTNmY2IyM2UzNDM4LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAtZTNmY2IyM2UzNDM4
LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpzktVP3
wg79TS1qB85dF5SgDbhq3yKdcULfMB536kqDk18n0icsrym3f+ed+TEuwELZvwMk
yPeRyGrhOpIivv70e24cVtufXjIcVnrg8NIDOPuSaZDox0nLBe1pJ4uzQK/AC3lm
DiSm02wmmCcz3PXSiyVcMe5wvo3KhwRp1rmV/p+e5kUxKIO7yxwIzBq49VcYpwvg
qlLg4JZaJezLL+m4tnexr2MdIuUkdUd5XSNHoexTzZX+FsvBoqcTWEPS5NFxgqc4
gr5NSvoAKcRn+dSVWWYy9mO3qvsS7K1hFHdaeXzAS82tQglXFpG+BLbVYs0KqM+k
j44MTtsu0xFQDw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:09:11 2025 by rpki-client