Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
File: nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft (raw, json)
Hash identifier: 8np3upJdLDGQp2tUMO0Ilzng7zz6Q200rdxC8BmIvRk=
Subject key identifier: EE:EF:51:18:55:C2:13:04:87:3A:CB:A6:99:28:21:D3:55:18:B0:DA
Authority key identifier: 9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
Certificate issuer: /CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Certificate serial: 019A52D1A573BCEC9B5C309C9E7E18053F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 07:01:02 +0000
Manifest this update: Wed 05 Nov 2025 07:01:02 +0000
Manifest next update: Thu 06 Nov 2025 07:01:02 +0000
Files and hashes: 1: fkzPxe4oSfJ7rsZHCJi7Ez_ga90.roa (hash: mg3GC3ABaXwmgAsHAk2LKt5EpoWqSB6jRcpbqBUg5ds=)
2: nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl (hash: CrQWYljQf98a3UUVFGaOyrV3NuScPfatL1vXfW21jXo=)
3: xd_ulFUkeSmauZZHfygS0GuYPDk.roa (hash: 0UrnjaSCTnjc1IdqCWJgrHL+McaCLRgIVm4A1cu8hrY=)
4: zLSBa_Lpc4W3Wtwqr4jY0shqN84.roa (hash: U60yO0QiVT0TF3gZ30RzvO8zoPaRPZA/6UejA6WGNuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:a5:73:bc:ec:9b:5c:30:9c:9e:7e:18:05:3f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Validity
Not Before: Nov 5 07:01:02 2025 GMT
Not After : Nov 6 07:01:02 2025 GMT
Subject: CN=eeef511855c21304873acba6992821d35518b0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bf:70:1a:a6:7e:88:fe:fa:d2:ac:91:87:c7:
09:3a:e7:21:54:33:be:99:46:68:a2:14:40:f8:3b:
93:c5:51:31:66:1a:71:f4:f2:8b:44:ef:06:56:64:
68:2f:2b:a6:b2:fe:d2:a7:9b:1c:e2:52:67:e8:29:
ba:c4:a2:e5:cd:5e:15:1c:50:b5:1b:01:ea:da:86:
05:f6:74:4b:3f:8d:e6:7e:aa:f2:07:b0:03:3d:9d:
02:2b:32:39:d2:2d:47:e0:c0:b5:72:5d:30:80:b9:
50:91:df:ef:98:89:be:28:f8:5a:2f:cd:d9:63:a3:
62:f2:29:a7:2b:77:19:06:d7:80:56:ba:a6:e4:45:
bd:a8:74:49:2c:a7:f5:84:8a:70:6f:dd:d0:4c:20:
b9:fc:5f:22:5a:cc:a5:6f:95:d1:35:ba:19:19:3d:
ab:cb:f6:b4:b1:be:6a:36:f4:8f:3f:92:49:61:cb:
01:e4:07:16:72:fc:0c:f1:e1:81:26:53:45:07:a9:
6f:8d:3b:40:f3:c0:0f:22:d1:90:6f:4c:9c:2c:e4:
02:3f:88:c8:bb:82:46:a2:a5:ad:7d:f4:38:6b:2b:
0c:2c:95:c9:e2:f3:02:1b:c0:5e:34:e0:4d:b8:53:
c5:75:df:69:5b:4a:7e:1f:9e:07:2c:2c:26:3e:26:
4e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EF:51:18:55:C2:13:04:87:3A:CB:A6:99:28:21:D3:55:18:B0:DA
X509v3 Authority Key Identifier:
keyid:9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f4:3c:55:6c:1c:a0:e2:4b:2c:9a:73:8d:a4:c9:19:90:d3:
71:d7:d6:43:72:37:2f:89:cd:54:8f:01:ae:f4:41:13:4e:79:
1c:04:7a:fe:61:77:6f:21:bd:d4:75:73:27:7b:9e:2e:b7:91:
55:89:9a:6b:74:ea:8e:65:a9:d5:44:4e:d4:0b:24:01:f5:09:
88:77:5c:c6:f3:75:0d:15:f5:cc:05:8d:dc:1b:ad:16:73:34:
ad:a8:18:d5:98:ef:60:49:a9:82:66:2b:df:0c:8d:59:2f:a1:
be:4a:d1:13:e7:0d:32:7c:ce:b9:06:f3:f5:b1:4d:2b:e6:bb:
17:28:81:6b:8c:1b:e1:43:d6:c0:77:c1:b6:32:2e:72:0e:52:
d4:f2:ce:06:70:22:39:c0:0a:4f:72:8e:95:76:c4:5b:09:4f:
68:4f:a2:33:dc:12:bb:fb:6d:7f:3a:3e:de:97:d7:46:f5:cf:
97:3c:49:db:6a:52:c2:39:ec:00:45:80:42:47:4b:82:13:6f:
13:a7:80:17:f8:b8:99:cb:fb:aa:dc:23:57:5b:c3:75:d7:97:
f1:d3:36:61:a5:b1:3b:3e:6b:60:d2:a1:bc:82:d7:b1:25:78:
c2:b8:09:b4:a1:6a:cc:45:4d:73:b4:f0:ab:7a:4c:88:cb:53:
11:6e:4b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:40:04 2025 by rpki-client