Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
File: noBwLuah3L864lehmUFfWbgzjqQ.mft (raw, json)
Hash identifier: HNF9MojDmUmAwzStE375dONbJPx5p2w4bTWj6l8oIuE=
Subject key identifier: 60:9F:B5:3D:41:3E:6C:05:EE:23:5D:8B:17:90:46:64:52:AB:54:5A
Authority key identifier: 9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4
Certificate issuer: /CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4
Certificate serial: 019A4E18C890F351851CCF55206CE8F4E4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 09:00:38 +0000
Manifest this update: Tue 04 Nov 2025 09:00:38 +0000
Manifest next update: Wed 05 Nov 2025 09:00:38 +0000
Files and hashes: 1: 4r39zvWrkYP2asO0kOUkjIaBE5M.roa (hash: v58EqYlL6LzlpEJ1F9DVvqr5mbMv8/9nhYAa/WADapg=)
2: noBwLuah3L864lehmUFfWbgzjqQ.crl (hash: /mF/r8QRCe120jC1k2FYERu3BSB0zCg5fGB04tthbEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c8:90:f3:51:85:1c:cf:55:20:6c:e8:f4:e4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4
Validity
Not Before: Nov 4 09:00:38 2025 GMT
Not After : Nov 5 09:00:38 2025 GMT
Subject: CN=609fb53d413e6c05ee235d8b1790466452ab545a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3c:fc:eb:9e:1a:32:da:ee:fc:2b:35:c3:56:
f4:25:17:ea:e9:ba:0c:46:54:04:57:bd:ba:50:47:
5c:15:a2:bf:c9:c3:02:18:9f:d4:81:ee:dc:0c:c5:
ea:65:ff:30:74:16:82:b4:26:4f:83:dc:51:6f:c3:
4c:30:ae:f6:4c:7f:18:9e:f1:52:c8:2c:a4:17:9a:
f2:4a:f3:6e:7a:e0:55:3b:25:24:83:f2:cf:6b:d7:
d7:b4:5c:da:dc:89:74:fe:77:25:19:7c:98:7d:f4:
1d:7d:b0:15:49:9d:81:81:c8:d5:a1:d9:49:e0:31:
1f:fb:c9:58:fb:c0:69:49:03:e1:48:1f:39:2a:93:
9b:7d:04:f4:e1:28:2c:0d:59:a6:41:ab:d2:dc:23:
ce:0a:18:56:c7:b8:28:14:c6:82:e2:ae:8c:a7:7e:
ff:c4:15:75:49:77:94:89:1a:b1:fd:61:67:41:e6:
39:e5:03:d2:02:38:53:d4:df:9f:58:2a:d2:d1:40:
8b:7e:ac:df:7e:e8:1f:07:af:c7:5d:7a:ff:e4:32:
66:7c:3b:9f:64:4b:32:80:c3:8a:70:58:7b:f3:87:
3a:54:4a:21:8f:e7:50:c6:e8:90:c6:02:32:0f:40:
64:b8:53:ee:6b:2b:26:5f:7e:3c:b3:06:d5:c6:12:
c2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9F:B5:3D:41:3E:6C:05:EE:23:5D:8B:17:90:46:64:52:AB:54:5A
X509v3 Authority Key Identifier:
keyid:9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:31:b0:06:59:02:88:34:bb:19:21:4f:fa:b0:13:fa:c9:c2:
3b:a2:71:6e:5e:52:f8:ad:13:e3:d6:37:81:d8:0d:d8:4d:fb:
80:65:71:03:19:c7:d5:b6:12:fc:c9:99:09:11:c0:83:b4:60:
66:74:19:a4:16:5e:e4:fd:ee:45:42:a5:35:d8:fc:b6:da:1b:
9b:9b:14:b8:e3:6f:f8:15:51:0e:ea:65:c4:18:44:1b:3f:b9:
ab:ca:f8:06:4a:ad:c3:60:1b:55:9e:19:3c:87:1a:ee:f2:d5:
45:d0:00:1b:fd:2f:42:8f:a7:7b:8e:fa:e6:2f:ab:8c:a9:53:
77:ad:64:d9:ad:09:c6:fb:56:65:8c:6d:6a:0a:84:87:a7:8d:
58:18:b2:18:df:c3:23:92:ca:dc:e1:c7:7a:ed:e8:96:2c:66:
1f:c3:33:12:81:54:6f:5d:b8:22:da:40:8a:5e:99:a2:d7:30:
75:61:7a:f0:12:7b:1b:3c:a2:48:69:98:b0:42:56:c0:6c:fc:
fa:62:79:83:ab:6d:e1:6e:ef:81:17:18:2d:f3:9c:e8:a2:65:
7a:78:15:d4:00:84:37:0e:98:51:61:5b:9a:6c:66:3b:70:65:
cb:1b:17:30:52:36:53:9c:43:cc:db:3b:dd:fe:bb:5d:74:f7:
c1:37:03:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:25 2025 by rpki-client