Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
File: nAqubUXQbffEJ4708hjkLbgHCUw.mft (raw, json)
Hash identifier: PG33ZOmvPHctcPc7gBhTBpqe7Vr1x9/Wxa1vt461P28=
Subject key identifier: EF:ED:2E:6D:AB:C4:A3:20:C4:16:2A:02:65:1D:3D:E5:C2:DE:0A:A8
Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Certificate serial: 019A4D3CD652DF623AD486366FA07B8D5040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 05:00:23 +0000
Manifest this update: Tue 04 Nov 2025 05:00:23 +0000
Manifest next update: Wed 05 Nov 2025 05:00:23 +0000
Files and hashes: 1: MJMdhZnjDE7HHdif7jOifgXeBWw.roa (hash: OAM+4dNU25EOni1NCJmygQc3McNUoy2zZaTz7W6MCZg=)
2: nAqubUXQbffEJ4708hjkLbgHCUw.crl (hash: ClZpW7SIMj966ZAFn7CpL7uZEr6OstJyGcAhngI8T7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:d6:52:df:62:3a:d4:86:36:6f:a0:7b:8d:50:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Validity
Not Before: Nov 4 05:00:23 2025 GMT
Not After : Nov 5 05:00:23 2025 GMT
Subject: CN=efed2e6dabc4a320c4162a02651d3de5c2de0aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:78:37:42:78:6a:88:65:38:ba:02:18:6f:0f:
c6:aa:14:86:74:4d:bb:a6:0f:b0:7d:83:38:9c:ee:
b5:43:ff:74:c3:ce:e9:c9:0a:33:75:fe:38:fd:9c:
d9:d4:0d:a0:64:bb:f2:2d:9c:52:82:ec:6a:f7:d8:
c7:94:72:4b:ad:e4:45:8d:f4:55:9c:18:b6:70:24:
3a:46:7f:d9:19:d0:01:c7:28:4a:16:1f:3c:0e:f2:
4d:36:e2:08:87:10:e6:a7:52:d1:c0:20:ef:26:44:
a8:ee:25:db:9f:8b:ca:99:0f:1c:69:d0:b1:10:ab:
94:a8:04:87:82:b3:d8:cb:dc:f1:d6:2b:5a:5e:6f:
a7:bd:3b:8e:e7:23:c3:00:95:2e:30:ce:c8:1f:73:
10:f7:56:89:f8:cc:a3:a8:86:f3:9a:ea:b5:d4:d8:
c6:d6:06:82:23:79:9a:97:fc:ee:c5:e0:79:6c:55:
f5:ef:6b:73:41:3c:3a:25:a1:49:d0:9f:a7:e7:ff:
80:d9:0d:57:4d:05:1f:83:85:13:ac:2c:f5:0b:32:
e7:83:5f:22:42:a2:7d:f7:c7:8e:e9:aa:57:43:d9:
85:8e:1c:cc:c1:3a:5b:da:72:25:90:c9:61:cd:e6:
ee:a8:ee:73:2c:98:d5:78:f7:a4:d2:c1:6c:97:8c:
c8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:ED:2E:6D:AB:C4:A3:20:C4:16:2A:02:65:1D:3D:E5:C2:DE:0A:A8
X509v3 Authority Key Identifier:
keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:32:8f:21:24:88:fb:a2:9f:ea:d7:1e:37:7b:af:49:51:58:
de:05:93:a7:43:8e:af:10:29:c7:1f:04:2f:0f:6e:1d:54:f8:
02:0e:42:f4:d9:6e:22:43:b2:f6:4c:33:cd:ca:71:aa:28:ff:
86:ac:e6:32:55:a4:ae:ba:34:77:cd:fb:72:0f:1a:41:09:07:
ff:36:38:55:b5:a1:d0:81:6f:f8:8a:32:70:0c:10:28:59:52:
4e:8b:4c:d3:aa:c8:0e:de:7a:5b:6d:5c:cf:f2:c6:04:45:29:
08:48:f5:5a:09:e1:8f:db:ce:89:b0:5d:84:14:a5:78:1d:b3:
11:d0:e6:35:be:61:4d:76:99:4b:39:d3:47:53:21:a4:37:de:
43:3b:35:1c:46:5e:20:fd:6b:c1:91:cd:40:1d:0f:50:57:69:
b9:16:c8:cf:4b:83:f9:ec:62:c3:29:fa:70:87:f4:a2:8f:85:
b9:d9:3b:5e:fb:ce:a5:83:a4:1f:82:f1:de:e4:37:2d:c1:92:
d7:25:17:04:0d:f1:fd:f8:07:aa:f9:18:9d:f7:79:a0:c4:8f:
02:b8:09:91:64:45:e6:47:2b:dc:f0:e7:c9:ce:47:de:f9:a1:
3c:a0:cd:97:f1:3c:51:e6:5b:71:3d:9c:3e:2a:95:23:49:f6:
73:fb:fc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:40 2025 by rpki-client