Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
File: 1-nRo3MrkPCOfhTDoI146LU_NPnM.mft (raw, json)
Hash identifier: 0AkA9onWqhHmSJNVxGv23mhzhbTTzniTeteW7vION7o=
Subject key identifier: D6:85:09:C7:1D:11:33:BF:4E:AB:7F:7E:93:96:25:9E:A8:04:DD:5F
Authority key identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
Certificate issuer: /CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Certificate serial: 019A4F625FA923DAF0118EB00CC4FAA611A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
Manifest number: 08A8
Signing time: Tue 04 Nov 2025 15:00:38 +0000
Manifest this update: Tue 04 Nov 2025 15:00:38 +0000
Manifest next update: Wed 05 Nov 2025 15:00:38 +0000
Files and hashes: 1: 1-nRo3MrkPCOfhTDoI146LU_NPnM.crl (hash: iESpMOkv8wnvmTkD9VkGd6zoNIdabBR5ntBwm6tRWQU=)
2: uCvD8eRBUAPr7t4AKxbWS0eik-M.roa (hash: S3XQTQGpmea5gdNAFZSLFW2D1IWdCXJx15hLcxcR7CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:5f:a9:23:da:f0:11:8e:b0:0c:c4:fa:a6:11:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Validity
Not Before: Nov 4 15:00:38 2025 GMT
Not After : Nov 5 15:00:38 2025 GMT
Subject: CN=d68509c71d1133bf4eab7f7e9396259ea804dd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4c:5a:88:a5:ec:93:a8:71:48:82:3e:0f:fe:
0f:6d:df:d5:78:a9:6c:93:8f:9f:28:e9:25:d6:0a:
bd:2f:d1:cd:0e:8d:c2:2d:02:c7:df:e6:93:22:82:
29:2b:24:61:10:43:3f:04:00:65:8c:85:9c:43:6f:
e9:ae:1a:e1:c4:25:cf:d2:5b:9d:d8:2f:31:1c:37:
6d:10:6f:56:eb:28:06:50:c2:af:56:c5:e7:0c:ce:
f5:a8:6f:74:db:b2:54:4b:93:f9:1e:7e:2b:bf:41:
dd:05:fc:aa:8c:74:25:71:e1:2c:41:0f:5a:b4:4d:
b8:4e:7d:67:a9:ca:60:bd:03:3d:3e:1d:8a:c5:b4:
a0:56:cf:45:58:42:11:73:ce:d3:27:f6:46:3a:19:
f3:ba:4b:00:83:b5:6b:d1:0c:0f:dc:22:dd:b0:39:
bc:13:ff:92:c2:5b:8a:3d:a9:9e:ad:38:1e:34:4a:
db:f6:7b:8f:cc:86:a4:ae:fe:15:8c:95:97:0e:0d:
a0:bd:f3:4a:42:3d:5e:d4:8f:2b:b9:64:f2:44:68:
47:f1:99:70:87:ad:b3:2f:d0:c5:a3:82:63:97:8e:
e7:e6:a7:33:df:4e:2b:86:95:51:33:89:82:1b:d2:
eb:65:2f:e8:3c:18:cf:34:d4:42:b6:56:39:00:e5:
3d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:85:09:C7:1D:11:33:BF:4E:AB:7F:7E:93:96:25:9E:A8:04:DD:5F
X509v3 Authority Key Identifier:
keyid:FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:84:1b:36:cc:e6:9e:b4:9d:5b:f8:79:5e:56:a8:b9:55:db:
5a:6e:d1:0b:29:cf:79:d9:3a:68:bb:9b:78:6a:8d:7f:36:5a:
14:a5:32:db:05:13:9a:98:15:ce:d0:40:33:23:c0:32:03:d8:
af:58:a2:a7:e0:06:bc:c9:55:5b:8f:ee:0d:82:da:73:6c:73:
19:cd:94:55:27:ac:92:05:64:98:33:28:f1:81:58:72:01:14:
d4:54:a3:6c:1f:50:7c:10:b6:56:d9:4e:6d:c4:e4:63:c0:c7:
23:c6:25:9f:0c:b5:06:c0:30:74:ad:97:28:5b:8c:a8:fc:8c:
18:1c:b0:96:4f:39:7e:cc:7f:cb:2a:0a:b0:76:fa:fb:48:a1:
82:54:1c:2b:87:8f:49:bc:2e:aa:ef:49:48:fb:29:76:d4:f5:
f3:4b:03:9c:97:5f:d4:b0:d4:92:eb:73:ec:a1:90:92:75:71:
fd:ca:d8:39:46:42:66:bd:9d:2e:4a:78:2f:b6:1f:66:90:e7:
93:88:04:9c:39:d0:55:51:35:3a:d6:5f:63:a1:cd:d8:7c:eb:
89:0e:e6:a2:b1:39:7b:de:b7:fe:42:b9:12:4f:a8:cf:f3:6f:
d3:2f:7a:f2:00:eb:fe:64:eb:6f:05:80:b3:29:0e:69:64:f3:
26:3d:b1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:58 2025 by rpki-client