Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
File: nOlHV6w_cLQPNpMH02XryWV7q2k.mft (raw, json)
Hash identifier: cMDLQQuq5a4C4NnmaFKorp5RQVPtanzG4NsoPTiZ8p8=
Subject key identifier: D5:83:A0:38:37:F1:4A:20:CD:38:CA:76:99:97:A5:C7:89:9B:4B:15
Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
Certificate issuer: /CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Certificate serial: 019A52D0F7442FC619A182AB6A9E4B4EDBFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 07:00:17 +0000
Manifest this update: Wed 05 Nov 2025 07:00:17 +0000
Manifest next update: Thu 06 Nov 2025 07:00:17 +0000
Files and hashes: 1: 4oft3Loz6Mj-iGBZld8Zml9nZKk.roa (hash: wH8MDJNmWcLwEAp7rv/L6Y94FGx4klTMMdgO3DL2B5U=)
2: 7Rx3mayEBwk8ldskeFY-2K2rZ-s.roa (hash: wklqA5tkn0CZJbDeoo6PYXZybB1iV079BOW7c/8yfmg=)
3: nOlHV6w_cLQPNpMH02XryWV7q2k.crl (hash: gREOrwW6HEXwA0BchkekG6GlxT+FZG7xLSD3FNtVqvE=)
4: ufDo1kTLEOZD1_qKQ7HiFNKPunM.roa (hash: ez87p1Up7V/1mOstPVoSc34fcjVVGs1wyCiou6O9r2k=)
5: x0sLhzFdsabJsjGmaTnhB2s9wws.roa (hash: ZbmagYZOZjVgRuVWz3KGPUrXIWBjrnqcYZ6kZuTx6+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d0:f7:44:2f:c6:19:a1:82:ab:6a:9e:4b:4e:db:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Validity
Not Before: Nov 5 07:00:17 2025 GMT
Not After : Nov 6 07:00:17 2025 GMT
Subject: CN=d583a03837f14a20cd38ca769997a5c7899b4b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:11:90:c6:0b:04:53:3a:c1:bc:60:3f:db:f7:
e7:d4:89:f3:3b:e6:b9:70:3f:8c:f0:77:55:b9:82:
02:cb:f4:10:70:df:67:ec:6f:91:22:83:63:89:a6:
e2:26:55:0f:ba:d7:6b:d6:3e:2c:7e:4f:c5:3d:79:
d4:db:5a:d4:4b:d4:39:8f:b5:91:d5:a5:60:29:86:
49:19:f7:aa:f8:fa:cc:73:9d:10:67:2d:d8:56:fa:
7d:19:c8:59:0a:20:f8:4b:c1:0d:9c:0b:03:d0:70:
83:2d:99:a7:c1:25:ee:26:c1:52:4b:39:d0:d5:96:
7e:93:66:b4:33:82:2e:8c:9d:e4:3b:9b:79:e4:06:
48:53:c8:b7:49:b6:ad:4b:aa:13:b8:a2:94:f4:c9:
e2:46:7e:23:40:d8:3f:62:34:08:89:41:16:9b:8b:
d0:dc:8f:d4:09:aa:33:e3:92:a4:31:c4:6f:86:a6:
d7:c0:e3:e4:0d:d9:90:b6:02:4c:54:4f:b4:7b:bb:
06:fa:af:88:ae:dd:26:74:c3:9b:70:64:00:61:49:
8c:00:ab:0f:20:c8:f3:3b:8d:cc:9e:14:8a:0f:83:
82:71:a4:fd:e1:e4:ae:29:71:4b:88:16:08:34:4a:
38:12:fc:52:13:11:13:47:89:0b:70:57:29:40:5c:
f5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:83:A0:38:37:F1:4A:20:CD:38:CA:76:99:97:A5:C7:89:9B:4B:15
X509v3 Authority Key Identifier:
keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e2:7f:45:61:17:4b:45:99:b4:b1:ee:79:a0:44:3a:f9:e3:
9b:a9:32:95:b2:97:f0:3c:85:53:1c:f4:a9:66:83:73:c0:1e:
18:15:38:5a:fe:11:29:bb:0f:b3:5c:ce:f0:ef:4e:2d:d6:da:
b1:43:22:e0:c8:71:b9:73:00:28:51:2e:35:a6:13:4b:30:e4:
2c:5a:0b:f4:d9:57:86:e1:e8:a4:ac:7a:20:d5:59:8f:69:7f:
56:3c:95:8e:20:9c:b0:63:77:83:f1:0c:e8:11:30:38:9c:f7:
d7:0f:84:d8:38:2b:03:10:94:10:80:b8:d0:70:72:04:bf:d0:
5d:7c:e3:a7:b8:82:f6:79:26:fd:04:7f:30:5b:1e:11:5c:de:
c4:15:13:25:92:76:63:ed:82:e1:bc:21:1d:bb:1c:aa:2a:25:
0c:85:76:a8:6c:55:7f:5b:59:3e:46:63:fe:fe:0d:79:ce:73:
1c:2f:31:ae:e2:14:62:0f:89:ba:18:c1:ba:3d:ad:db:f5:21:
7a:d7:1d:29:61:ed:c8:c2:9e:09:06:e0:94:23:32:23:e6:a0:
c6:43:ca:81:27:05:73:37:33:cb:36:26:9e:69:1a:f6:28:4b:
08:5a:20:bf:02:e5:96:0d:b7:19:e0:dd:1c:61:28:d5:06:e1:
25:15:d5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:55:50 2025 by rpki-client