Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
File: NztHo87nmYKtsXA0HQICYCczICM.mft (raw, json)
Hash identifier: UQktyZtAzc1KLrrqM27T+eEtZZOj8Pg2VOIDkwU+j+Q=
Subject key identifier: 12:42:86:70:F6:1E:4C:54:E3:42:3B:50:D9:5C:B1:AA:1F:D1:20:80
Authority key identifier: 37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
Certificate issuer: /CN=373b47a3cee79982adb170341d02026027332023
Certificate serial: 019A4FCFD36EC6D3DE4F01604E3B64B848DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 17:00:11 +0000
Manifest this update: Tue 04 Nov 2025 17:00:11 +0000
Manifest next update: Wed 05 Nov 2025 17:00:11 +0000
Files and hashes: 1: 44PWl9t-VK2hhZNHr5AmomvoGFc.roa (hash: OxQ7QHN27yQWahrAlORJzxbYRAyj5Alk9/N2TAEqxrY=)
2: NztHo87nmYKtsXA0HQICYCczICM.crl (hash: RUklHCb/SrlnFZbhb/dKFGzq8o5gZHM+FqCdFNnPEYc=)
3: fHM2AB9lWMdrr6W98wCcBfFFZto.roa (hash: O5xk5dJ9bNLjoHECEnZnVJ7Que2qp5xFQYolbd9r+sI=)
4: yGyQiv41kYE21uqhtuih0OLSi9I.roa (hash: tdu5vnXKQDyjaj/70REfOS/T9RJiHmxdfg/dwymFlGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:d3:6e:c6:d3:de:4f:01:60:4e:3b:64:b8:48:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373b47a3cee79982adb170341d02026027332023
Validity
Not Before: Nov 4 17:00:11 2025 GMT
Not After : Nov 5 17:00:11 2025 GMT
Subject: CN=12428670f61e4c54e3423b50d95cb1aa1fd12080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:b0:94:88:78:b7:2e:f8:40:9e:86:7f:32:
01:01:c7:fa:9d:e1:a1:31:34:03:0c:10:fd:3e:17:
5c:53:6f:6b:ca:37:97:8f:4b:5c:9c:5a:8b:bf:f0:
39:e4:ad:2e:2c:08:7b:28:b0:b9:54:36:8f:6c:5b:
82:60:6d:9a:0e:10:50:94:21:b9:9e:ca:97:72:17:
96:13:d7:b6:6c:8f:9c:5b:a7:f1:c2:5e:d9:9c:75:
ae:83:88:e0:9e:68:81:73:39:26:d5:40:39:f4:fa:
7a:5c:d2:9e:79:63:a0:0d:b0:7c:d7:71:51:18:ff:
d2:74:d3:9b:d7:f7:c3:90:c3:3c:03:96:99:e1:86:
cc:54:fc:c4:7f:21:f5:d2:6b:78:3e:75:31:f9:3d:
39:3e:89:af:b5:cd:07:d8:5e:64:97:10:e8:70:db:
4c:20:fc:93:a8:30:09:89:a7:74:a4:cd:a4:ab:76:
32:2b:08:22:4b:c0:26:ec:af:14:0f:af:07:42:66:
58:da:cc:d0:5d:a2:74:49:3d:86:81:ea:bd:7d:4a:
67:44:30:43:e3:c2:dd:0c:3b:09:ca:4f:8b:34:fb:
4c:4c:94:22:ee:1f:e2:40:fe:5a:3e:af:18:f5:f4:
a4:22:d2:39:a8:ad:a2:31:da:91:22:14:49:50:9b:
3b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:42:86:70:F6:1E:4C:54:E3:42:3B:50:D9:5C:B1:AA:1F:D1:20:80
X509v3 Authority Key Identifier:
keyid:37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:71:c1:62:d1:21:d2:f7:2c:8a:a3:e1:f5:63:7f:d9:9e:98:
e2:c9:ad:5c:b3:ff:96:79:1d:42:7d:ce:a5:d8:d0:f6:56:e3:
04:c3:de:ae:9b:7c:da:9c:87:ce:e6:a4:00:fc:c6:cb:bb:02:
a4:5b:d4:c1:5c:e9:93:a5:7b:41:bb:12:f0:8e:a3:f8:c7:3f:
34:44:8b:19:ae:a7:37:fb:31:1a:42:90:7c:7e:fd:3d:40:d1:
97:40:47:0e:3b:6a:2d:fb:2f:71:2e:08:99:86:53:c2:fe:df:
25:29:df:dc:87:f9:65:f2:d0:40:5f:19:ce:0f:ee:40:09:70:
34:ad:fc:de:95:ea:c2:95:0d:e5:cc:fc:52:43:d5:ff:44:a1:
02:bb:34:f0:cf:2d:55:4a:42:d6:83:6f:03:32:a1:96:c2:3e:
2b:38:78:3b:5e:19:31:b9:10:39:10:21:a9:96:37:a9:7e:4d:
fa:66:0c:7a:8e:56:0a:b1:eb:e5:ad:a6:cc:49:e3:e8:be:88:
15:f0:5d:d5:d8:72:56:31:e7:75:42:53:10:0c:53:82:7b:a9:
db:43:09:36:2e:b0:41:ba:e7:6f:c0:34:7d:e7:62:25:2a:df:
6d:67:95:a8:43:54:a0:06:0d:f1:01:fb:28:05:95:a2:7b:f0:
ce:c9:c7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:20 2025 by rpki-client