Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier: n++OZEpbBaz2bJFwjiKFaF/b8KAtCN4kkvPOirLcibk=
Subject key identifier: 34:3E:35:A4:4C:BA:92:10:FA:39:DA:54:A6:46:3E:48:A2:4C:1B:2B
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 019A4EF56BC0CF8994A855B9A75F66CAB8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:01:38 +0000
Manifest this update: Tue 04 Nov 2025 13:01:38 +0000
Manifest next update: Wed 05 Nov 2025 13:01:38 +0000
Files and hashes: 1: Jhw9faAWoEdqP1e__8w7b6zkmPk.roa (hash: TQENvT9b218+4xF+VAk4clIU0JMsKTFbzJxIDRXuwJ4=)
2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: 5JU4B8HoGJ73NwaJ3uz1A2odvB79b/v8dHZwZt06G94=)
3: fubcea_39IkkaWowT_0PbtN75oM.roa (hash: b26RPXGBBJCeMiSKu69amdDTbZc6gUFdxgY2Yx3wVnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:6b:c0:cf:89:94:a8:55:b9:a7:5f:66:ca:b8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Nov 4 13:01:38 2025 GMT
Not After : Nov 5 13:01:38 2025 GMT
Subject: CN=343e35a44cba9210fa39da54a6463e48a24c1b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a2:77:72:9a:c8:c9:da:a0:39:9f:44:a6:e0:
9e:a4:a1:ec:53:1f:47:3e:d1:ea:e7:1a:35:02:a2:
23:45:b7:71:3a:f7:56:f3:4f:80:ad:c2:e5:de:ca:
22:7a:9e:b8:51:8a:04:0f:0f:84:06:63:4f:4c:05:
78:9e:49:06:e1:89:19:80:ab:0c:b7:6e:29:b6:40:
e6:d2:db:d4:5f:01:73:f2:c4:c7:4f:70:e2:ec:2f:
f6:29:4a:e1:ca:19:77:bf:8d:9f:a6:d6:a1:80:ea:
6a:7b:49:7d:93:9b:7a:26:97:b8:c5:f8:62:f6:46:
24:52:c5:4d:83:7e:d0:d7:c2:78:a7:4f:c0:a2:62:
1b:37:fb:db:5f:79:16:b1:d8:f0:5a:78:e4:05:64:
24:18:38:01:8a:8e:a7:75:fb:6e:cf:fa:44:a0:1c:
6f:71:4a:fc:72:38:ff:aa:43:50:a0:de:dd:b5:00:
8a:2e:94:7d:8b:46:aa:6f:f1:26:8b:75:ad:af:51:
e3:04:ff:ec:35:4b:fb:c6:68:39:27:f9:48:19:d1:
fc:29:ca:e7:1b:10:6a:48:1d:93:f5:79:a5:b2:e0:
73:4a:57:d0:62:0c:72:12:c4:85:0d:21:ad:50:50:
f1:50:6f:c8:20:ce:a5:ae:a4:23:47:5e:04:ab:71:
ed:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3E:35:A4:4C:BA:92:10:FA:39:DA:54:A6:46:3E:48:A2:4C:1B:2B
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a5:ca:29:0c:56:0c:d7:49:89:0d:07:e7:8b:54:27:c8:71:
34:14:6a:62:cf:91:fa:d9:f4:2d:c5:39:b6:17:77:83:1d:0a:
ec:88:b7:43:2e:15:a9:d3:0a:f8:b9:f8:32:41:26:8b:03:9f:
06:50:5b:32:60:9a:b2:5f:70:9d:d1:9a:5a:22:38:22:a4:74:
39:39:9e:f2:6d:fb:c4:fe:f0:b8:99:45:e0:67:c7:a3:f6:ed:
d1:d0:28:b9:ac:fb:90:f6:84:f2:80:0c:0b:ed:8e:e9:59:27:
bc:a8:9a:18:8e:2b:87:26:2e:3a:e9:f3:bf:30:cd:88:71:97:
7c:2b:fe:d5:97:b8:7f:28:0f:4b:94:58:63:d0:cf:70:4a:b2:
1e:68:65:80:0d:aa:33:79:3f:ae:25:d0:08:a0:71:52:a9:65:
cd:45:50:c3:0c:1d:7d:66:f1:e1:1d:a4:cc:92:0c:d1:94:ff:
c3:89:7a:b6:29:86:c0:a6:6b:75:22:87:24:6c:5a:64:0c:f0:
30:60:75:78:59:77:31:c5:7a:f5:3e:8f:ac:dc:24:68:33:0b:
1b:b8:d1:20:89:04:22:a4:e6:26:02:d1:ed:1d:ed:22:4e:37:
bf:95:06:b6:09:87:05:dc:62:68:28:c0:d2:3c:48:ed:1e:59:
94:76:f6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:35 2025 by rpki-client