Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
File: NssW5Ez78H6X9vXkSucYqlDQUpE.mft (raw, json)
Hash identifier: VSd3oRM9bGJXR2Y7wHWha/5PBblyjcJgNYf3XBICVfo=
Subject key identifier: 64:6E:93:38:D8:C4:B4:2F:C7:4A:3E:7D:D6:6B:38:19:95:09:A8:48
Authority key identifier: 36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
Certificate issuer: /CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Certificate serial: 019A4E4FBE15DA6B5FC70634EB84AF47E3A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 10:00:40 +0000
Manifest this update: Tue 04 Nov 2025 10:00:40 +0000
Manifest next update: Wed 05 Nov 2025 10:00:40 +0000
Files and hashes: 1: L5MQK89fxZaRwM_CqURZbBomtGM.roa (hash: dfoa3Oa+GHxXVfHS0ZcfFlTwLP7no4RhSrEEs8sBD0U=)
2: NssW5Ez78H6X9vXkSucYqlDQUpE.crl (hash: qyyXOvefRcgNYDFRkUGNl7U4Kjt7jvgNKZknAyvW/Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:be:15:da:6b:5f:c7:06:34:eb:84:af:47:e3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Validity
Not Before: Nov 4 10:00:40 2025 GMT
Not After : Nov 5 10:00:40 2025 GMT
Subject: CN=646e9338d8c4b42fc74a3e7dd66b38199509a848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:16:65:1e:6b:24:51:34:51:3a:df:04:c2:04:
2d:e9:87:c1:f9:29:0a:d1:36:90:26:84:49:5e:86:
a1:4b:9e:96:66:58:3f:a1:6e:61:11:1f:c3:e9:71:
1e:b1:17:a1:99:17:9b:f3:df:ca:39:0b:5f:30:b7:
a8:d6:9f:fa:26:e2:99:6f:77:8e:23:fc:0c:4c:35:
04:dc:a0:a6:bd:d6:c0:9c:b4:07:c2:46:55:79:65:
49:08:95:be:d4:05:09:8f:58:03:9d:3a:09:bf:b2:
2b:90:ce:bd:b3:8d:45:62:81:f5:5b:41:c0:0c:35:
a7:dc:3d:87:87:f6:cc:4d:c1:ce:ce:d5:f1:d6:27:
65:96:9d:83:6e:e1:b4:10:77:8e:80:5c:7f:d0:1f:
cf:4c:df:eb:8b:27:6a:6d:a5:94:86:3c:5a:9e:d1:
67:9a:bb:80:3f:46:1e:2b:4c:74:b0:fa:53:32:e6:
5b:a6:d4:4d:e4:d4:21:43:50:cd:2f:5d:c3:a8:57:
52:2f:18:09:44:6b:14:33:f7:e3:d3:3f:69:3d:e6:
db:41:85:91:4d:f4:8a:14:37:07:21:5e:35:c5:22:
ee:4a:92:db:b9:2b:52:be:f7:fe:0e:72:de:50:b1:
ea:93:3e:70:66:fc:ee:63:89:02:00:44:25:6f:b1:
f2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6E:93:38:D8:C4:B4:2F:C7:4A:3E:7D:D6:6B:38:19:95:09:A8:48
X509v3 Authority Key Identifier:
keyid:36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6a:43:32:d9:65:9c:c0:18:31:8a:86:f9:c0:15:ff:19:ad:
d8:30:b4:13:b8:bb:df:85:47:19:0b:1d:dc:b6:af:cb:07:5b:
3a:b8:01:39:85:52:ef:81:b6:af:c4:9c:20:dd:65:7c:af:0d:
c1:85:11:5d:5b:b7:75:eb:e6:13:05:41:b8:75:6d:24:b6:3b:
85:2c:bb:be:7e:ff:b9:df:88:69:ce:6f:18:6b:44:13:1c:5c:
9d:db:2a:9a:66:78:90:bd:e7:fe:5a:34:94:08:4f:ef:be:95:
d9:a0:f2:96:12:2f:f0:f4:e6:ce:3f:81:da:05:99:d9:46:b1:
bd:d5:94:8e:f5:fe:5c:3f:01:2d:bf:3d:49:db:a3:16:37:9d:
3a:56:dc:cd:a7:72:dd:f3:1f:0c:0d:44:c0:65:b0:02:31:50:
5a:c2:4d:01:74:2c:85:54:9b:99:40:53:4b:0f:81:28:95:ea:
3c:8c:0c:f7:67:b6:44:a6:fb:06:54:02:4b:39:14:24:30:d5:
33:4b:dc:cc:ad:05:c9:38:54:ef:ee:5a:15:76:1d:9c:35:a6:
87:de:f9:0d:f3:9b:cb:43:3c:59:01:8d:dc:fd:7a:62:8c:30:
99:87:eb:14:5a:b2:bb:9e:55:80:ba:45:a4:8f:4a:69:3b:42:
49:57:04:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:41 2025 by rpki-client