
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
File: NW5HRHMdpE8I-l6SxesqR01JqJI.mft (raw, json)
Hash identifier: GKz/LMopCp8niWkgtfYvUo2n1P3TCKz0yfRe736mx2E=
Subject key identifier: 93:58:C8:C4:5C:B0:D0:63:21:B2:81:06:93:BA:73:AB:21:6E:52:DA
Authority key identifier: 35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
Certificate issuer: /CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Certificate serial: 0199FC216035FB2388727EE3E049D76E8855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 11:01:09 +0000
Manifest this update: Sun 19 Oct 2025 11:01:09 +0000
Manifest next update: Mon 20 Oct 2025 11:01:09 +0000
Files and hashes: 1: NW5HRHMdpE8I-l6SxesqR01JqJI.crl (hash: VS+Nh8g1+HJlv1hwvOFeRfY4pvlDoFWHJsvzqvW1WQs=)
2: sWXWz9KHFQhAxmDZ0n63KNEzRYA.roa (hash: VInHBflevKh8uKrJkW73psQEtmEHrPxva/qTjQRvp1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:60:35:fb:23:88:72:7e:e3:e0:49:d7:6e:88:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Validity
Not Before: Oct 19 11:01:09 2025 GMT
Not After : Oct 20 11:01:09 2025 GMT
Subject: CN=9358c8c45cb0d06321b2810693ba73ab216e52da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a4:6d:0b:d9:14:ff:a2:7f:a7:d8:66:89:1a:
09:08:e0:b9:a4:2d:ac:f4:68:ef:63:48:56:67:6c:
ca:3a:66:5d:79:bd:20:60:8e:d6:e8:0c:9a:81:33:
7e:b3:b7:0b:eb:b8:25:b4:a7:18:c9:e6:b8:f7:be:
ee:a7:77:b7:31:d1:bc:33:b2:80:83:8b:54:a5:22:
55:d5:e0:34:4c:d1:6e:14:82:31:43:d2:87:55:28:
4d:f1:26:fa:7c:2a:68:2c:19:55:bd:bf:6d:47:d9:
3c:3c:b0:df:31:50:48:0a:6c:3f:e7:83:ab:b5:19:
f9:2d:df:27:56:ad:98:2a:05:11:3a:3f:08:64:19:
2e:5f:4c:8c:93:7e:c7:aa:47:62:bc:8b:51:3f:1e:
5d:a4:df:99:4a:6d:d8:d0:49:07:07:cd:9c:a1:26:
de:57:15:f8:e0:01:3b:7b:9d:c6:18:e8:9a:a5:5b:
6f:c1:d2:8f:d7:3e:14:1b:cb:3a:93:a3:1b:26:44:
ff:ec:ec:93:bc:e7:dd:61:fa:61:da:8e:2a:bc:a2:
b3:5b:24:c3:f3:4e:45:97:41:5e:e5:0a:d1:a8:ec:
b4:7f:10:b9:2c:7b:78:e8:a0:76:51:a5:27:e9:3e:
d6:04:35:b6:b3:a1:d9:5c:ae:1c:3d:17:42:05:41:
c1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:58:C8:C4:5C:B0:D0:63:21:B2:81:06:93:BA:73:AB:21:6E:52:DA
X509v3 Authority Key Identifier:
keyid:35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5a:d2:34:03:de:ec:e3:7a:b1:fd:34:18:54:8a:23:47:bf:
fd:00:9f:fb:4b:40:b4:dd:34:8b:bf:a1:9e:de:de:2c:57:d3:
b7:fd:56:99:87:1c:97:42:16:f4:e3:59:1c:2f:8d:bb:b2:3b:
43:8d:fa:f5:97:bb:ae:62:c7:ab:df:fa:5b:b5:76:8c:e4:ff:
ac:27:0d:53:d8:00:ed:ad:00:24:e6:4d:f1:c8:21:85:70:3e:
de:99:55:0f:df:0a:64:70:3c:5f:c1:85:71:b6:c4:0b:d0:29:
73:3a:fa:1f:8c:6b:e1:a5:12:40:7f:91:3c:11:c4:4f:ee:38:
f7:20:d0:79:af:ed:13:c1:1f:e8:07:53:7b:4c:45:50:f3:5c:
f4:d5:7b:44:29:6a:ec:13:d6:57:a1:e8:05:c3:e9:0e:bf:c4:
07:78:f3:58:8a:d0:7d:91:b8:dc:1d:db:08:31:c5:cb:a6:15:
ee:0d:a7:d2:45:66:02:af:d7:d9:dd:7f:c5:2b:e0:24:11:6d:
0e:78:44:6d:d8:70:2e:a3:f0:06:f6:6e:99:d9:81:43:57:8d:
90:a8:13:7f:10:b0:c6:17:4c:d5:81:7d:e9:f9:e1:98:ad:52:
29:77:9c:5c:c3:35:d1:c9:99:4a:11:7f:c2:b1:bf:39:d6:46:
50:fa:6e:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IWA1+yOIcn7j4EnXbohVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NmU0NzQ0NzMxZGE0NGYwOGZhNWU5MmM1ZWIyYTQ3NGQ0
OWE4OTIwHhcNMjUxMDE5MTEwMTA5WhcNMjUxMDIwMTEwMTA5WjAzMTEwLwYDVQQD
Eyg5MzU4YzhjNDVjYjBkMDYzMjFiMjgxMDY5M2JhNzNhYjIxNmU1MmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaRtC9kU/6J/p9hmiRoJCOC5pC2s
9GjvY0hWZ2zKOmZdeb0gYI7W6AyagTN+s7cL67gltKcYyea4977up3e3MdG8M7KA
g4tUpSJV1eA0TNFuFIIxQ9KHVShN8Sb6fCpoLBlVvb9tR9k8PLDfMVBICmw/54Or
tRn5Ld8nVq2YKgUROj8IZBkuX0yMk37HqkdivItRPx5dpN+ZSm3Y0EkHB82coSbe
VxX44AE7e53GGOiapVtvwdKP1z4UG8s6k6MbJkT/7OyTvOfdYfph2o4qvKKzWyTD
805Fl0Fe5QrRqOy0fxC5LHt46KB2UaUn6T7WBDW2s6HZXK4cPRdCBUHBiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNYyMRcsNBjIbKBBpO6c6shblLaMB8GA1UdIwQY
MBaAFDVuR0RzHaRPCPpeksXrKkdNSaiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlc1SFJITWRwRThJLWw2U3hlc3FSMDFKcUpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84ZjQ3ODktOTYzYS00YzY5LWIxNjUt
MGM1MDFkNjg5NzVhLzEvTlc1SFJITWRwRThJLWw2U3hlc3FSMDFKcUpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84ZjQ3ODktOTYzYS00YzY5LWIxNjUtMGM1MDFkNjg5NzVh
LzEvTlc1SFJITWRwRThJLWw2U3hlc3FSMDFKcUpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1rSNAPe
7ON6sf00GFSKI0e//QCf+0tAtN00i7+hnt7eLFfTt/1WmYccl0IW9ONZHC+Nu7I7
Q4369Ze7rmLHq9/6W7V2jOT/rCcNU9gA7a0AJOZN8cghhXA+3plVD98KZHA8X8GF
cbbEC9Apczr6H4xr4aUSQH+RPBHET+449yDQea/tE8Ef6AdTe0xFUPNc9NV7RClq
7BPWV6HoBcPpDr/EB3jzWIrQfZG43B3bCDHFy6YV7g2n0kVmAq/X2d1/xSvgJBFt
DnhEbdhwLqPwBvZumdmBQ1eNkKgTfxCwxhdM1YF96fnhmK1SKXecXMM10cmZShF/
wrG/OdZGUPpuYQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:49 2025 by rpki-client