Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
File: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft (raw, json)
Hash identifier: 7/2kWkvI4og/LI+EJH4yJdDReG+FCL8H6fFDGtJuvAo=
Subject key identifier: 46:54:90:6F:03:EC:0A:B8:6B:FD:B9:59:0A:02:0D:E5:65:7A:11:43
Authority key identifier: 34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
Certificate issuer: /CN=345eecab9570cf0affa81be748e9128f55e416c2
Certificate serial: 019A4F61F8571480AD390A9560D43811DD7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
Manifest number: 0669
Signing time: Tue 04 Nov 2025 15:00:11 +0000
Manifest this update: Tue 04 Nov 2025 15:00:11 +0000
Manifest next update: Wed 05 Nov 2025 15:00:11 +0000
Files and hashes: 1: 1-lCQIu3wKSeUq2VrUD5tWenu5SY.roa (hash: uGVhG0epQ2wGofSbe1ShOYtQrordv9iVyPvHij3V4P4=)
2: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl (hash: WHecWlTJ74JwajELTvnASJKPZ8ppQAIHAHc81wfshwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:f8:57:14:80:ad:39:0a:95:60:d4:38:11:dd:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345eecab9570cf0affa81be748e9128f55e416c2
Validity
Not Before: Nov 4 15:00:11 2025 GMT
Not After : Nov 5 15:00:11 2025 GMT
Subject: CN=4654906f03ec0ab86bfdb9590a020de5657a1143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:b7:6c:c7:d4:54:57:ef:87:c9:e8:42:50:
64:6d:81:81:c4:b8:0f:de:d4:00:9a:ac:ae:d0:22:
c7:de:60:83:98:c0:07:fa:20:76:2e:28:20:1f:d7:
9a:ba:59:af:34:73:b2:3f:07:6f:9b:0f:50:26:a1:
87:3d:10:7d:a7:e6:ac:b7:37:d1:bd:ca:da:f7:78:
fa:2b:e9:9e:fc:7c:68:67:d9:1e:a0:74:ec:16:4b:
bf:97:53:7d:b1:f0:87:88:ae:03:57:aa:72:2a:69:
18:f7:06:de:1e:5b:5d:80:5f:38:31:74:d2:46:90:
2a:fd:a6:be:d7:79:d2:26:51:6c:e4:41:8f:6d:bb:
4c:81:3b:ae:9e:2a:07:1c:95:69:d4:6c:b3:cc:bc:
66:8b:f1:7a:86:fe:42:10:da:3c:cb:f9:cc:fd:ea:
8a:96:61:39:f4:24:0e:4d:56:d1:88:4a:da:33:7e:
b6:36:a0:16:d3:38:77:96:78:dc:cc:70:4e:d3:ef:
d2:a8:99:04:e7:60:30:d1:83:56:93:69:94:c3:1c:
45:8b:b0:3d:11:e6:07:db:55:3b:6b:18:52:76:06:
81:74:5c:93:7a:91:a1:97:90:0c:11:94:a5:bb:90:
37:15:ce:4a:bc:d3:5e:b8:4d:fe:d3:88:17:9b:7a:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:54:90:6F:03:EC:0A:B8:6B:FD:B9:59:0A:02:0D:E5:65:7A:11:43
X509v3 Authority Key Identifier:
keyid:34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c0:92:5d:e8:95:8d:dd:48:ab:a8:dc:23:74:37:f4:e5:3f:
06:31:0a:5b:66:1e:bc:d7:2e:2a:18:b9:2d:c7:9b:d1:97:2b:
9f:7b:c0:7b:ef:b5:59:45:09:89:2e:0a:a4:b9:ec:80:c1:a3:
d2:a9:9c:03:17:5d:29:a7:c6:fa:da:e1:d2:0e:fa:6a:bf:b2:
af:c8:67:36:f1:26:51:cc:90:05:6e:81:6d:f1:8e:51:71:b0:
56:27:ba:15:75:c2:96:a2:ca:6d:95:41:94:9d:b8:59:71:0e:
fc:80:75:57:fe:3e:94:18:5b:22:a6:69:ce:e1:48:3b:1b:f2:
06:2a:b8:c5:5e:f0:15:40:ba:68:9c:f5:54:05:c8:b5:c5:d6:
89:f7:ec:ad:0b:41:c5:12:74:76:1a:da:90:b7:c1:da:7c:b6:
a0:d6:62:c9:bf:d1:70:ff:cc:e2:c4:8b:cf:51:17:59:7a:26:
9a:f2:ef:36:0e:59:89:64:a7:47:15:09:8f:a5:65:d5:68:13:
10:b6:99:99:0b:83:e3:fa:4f:0b:0a:17:96:01:77:3a:f4:0b:
28:5b:00:d3:57:d5:40:95:b0:12:7f:77:2f:51:d3:64:92:92:
88:a0:88:11:44:b8:ae:af:ae:20:be:ce:8a:b0:c6:d6:d2:db:
a2:f5:ff:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:28 2025 by rpki-client