
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
File: NsPEVldDrle9KuqaNjwrPD4lD3I.mft (raw, json)
Hash identifier: /NaemBSz9x3D5JRMRLEAd3tq66bC290cnx9dZB+6wvc=
Subject key identifier: DF:BB:86:43:48:50:3F:97:48:FF:41:4C:84:5D:92:01:35:0B:42:54
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 0199FB46241351F2D6A520E116124A4AFD11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
Manifest number: 12E4
Signing time: Sun 19 Oct 2025 07:01:41 +0000
Manifest this update: Sun 19 Oct 2025 07:01:41 +0000
Manifest next update: Mon 20 Oct 2025 07:01:41 +0000
Files and hashes: 1: IfdUdkM_5ScEBaPG7l3GiRIWFuU.roa (hash: R1YS3LmUUMRjG9wj9Vs3Bys5gjm8WufD0RLPEG4kcAw=)
2: NsPEVldDrle9KuqaNjwrPD4lD3I.crl (hash: cLwZ+7u6RaJ7AhhsWit/EETiW+MbgB/4DQ413CzBVQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:24:13:51:f2:d6:a5:20:e1:16:12:4a:4a:fd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Oct 19 07:01:41 2025 GMT
Not After : Oct 20 07:01:41 2025 GMT
Subject: CN=dfbb864348503f9748ff414c845d9201350b4254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:95:f7:59:a0:a0:92:4b:bc:92:3f:73:7a:2c:
b4:d2:28:15:25:62:d7:70:6b:b5:27:30:6d:20:9f:
7b:a9:4d:bd:44:4b:1a:2f:c9:40:8a:40:93:70:0a:
88:d2:e1:73:d7:7b:7d:c4:ee:56:e3:35:f6:34:c1:
3f:85:85:89:13:55:f0:3f:f7:8b:11:80:7c:17:a7:
df:67:89:8e:bb:a7:72:d8:40:71:df:2e:00:d8:e4:
86:1c:73:6d:98:c9:ed:c7:02:f4:b6:0d:7f:f1:97:
66:72:bc:57:50:50:af:42:12:77:3b:bc:a0:a2:1e:
de:0b:9c:5c:03:41:2e:ba:b6:ec:ea:84:82:df:7d:
a6:e6:35:1b:b6:3c:02:24:f3:b9:71:20:32:e2:c7:
d5:e0:54:9a:45:93:4c:3e:41:7d:f7:44:8a:a0:74:
f2:72:0e:a1:a1:07:16:04:5e:11:56:6c:5c:db:76:
53:da:b0:20:98:bc:ee:05:9c:36:ff:f2:f6:45:c2:
61:1e:07:aa:77:81:bf:cc:d4:fc:38:9b:70:50:5a:
e6:c4:16:a7:64:42:4a:26:7e:22:fe:03:4e:2f:7c:
2d:f0:76:92:72:fa:32:19:1e:00:ee:16:85:2d:9a:
3c:fe:d3:0e:89:26:f7:61:e1:59:4d:c1:dd:88:63:
82:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BB:86:43:48:50:3F:97:48:FF:41:4C:84:5D:92:01:35:0B:42:54
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a9:f1:08:72:6a:81:53:42:54:62:75:b1:a1:18:fa:89:3a:
e2:ca:26:36:40:c6:a2:47:79:d6:22:be:b2:1b:8a:1c:f3:d7:
00:c7:d1:01:38:d9:40:92:b4:cb:1e:21:9f:72:2a:fb:22:5d:
4f:b0:24:34:07:54:08:21:a2:29:07:0a:f5:87:36:c3:04:fd:
69:80:9f:0c:dd:8b:77:00:1a:16:e3:50:6f:f2:26:0d:11:56:
ad:af:a6:ee:06:7b:cd:e1:58:0b:7a:bf:a1:3b:a6:0a:0b:8f:
77:28:7e:fc:88:85:74:3e:01:81:eb:af:92:d7:97:d6:9d:71:
53:41:fe:18:85:8e:3f:85:33:c2:f7:73:cb:f0:18:c7:da:5f:
0f:b4:9d:22:c5:6e:1b:61:65:19:5c:02:05:7a:ea:6c:c8:c5:
d3:1a:89:98:7c:87:19:64:2f:87:13:f9:e4:39:56:69:3c:ce:
7e:cc:55:06:24:62:34:e7:1a:c1:b2:80:88:2e:df:4e:28:ae:
d8:9d:d8:27:dc:ac:92:8d:87:29:ae:3e:14:85:75:6d:7b:39:
db:ca:3e:79:fe:a0:09:17:94:dc:d4:94:a9:59:90:e8:a9:bd:
67:6c:50:30:8f:5d:e0:ab:24:b8:59:a9:df:d1:32:9a:26:b7:
16:ae:95:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:43 2025 by rpki-client