Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
File: nAN1ranF4BAN22M7Kht0fhnC7Fs.mft (raw, json)
Hash identifier: 8I0Ds6imaJODZyKLEApf2y5y6dWNfGZfznnwWX/Ch+4=
Subject key identifier: A3:AD:48:0C:03:9D:37:27:51:86:6D:5E:A6:05:72:6F:08:5D:26:23
Authority key identifier: 9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
Certificate issuer: /CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Certificate serial: 019A515050ED74F2EA56DA98322754FD7C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
Manifest number: 05D3
Signing time: Wed 05 Nov 2025 00:00:09 +0000
Manifest this update: Wed 05 Nov 2025 00:00:09 +0000
Manifest next update: Thu 06 Nov 2025 00:00:09 +0000
Files and hashes: 1: MRDtmP98O0WNgH87Ax8nCcdZuLw.roa (hash: HrqGeHE20jy2rWDbz9uI3JnGeaBNl8AfA/5tH0i9z5o=)
2: nAN1ranF4BAN22M7Kht0fhnC7Fs.crl (hash: XXenygamL6eF3kjQ74ppQ/x8jVH4u4X576K48fW3hIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:50:ed:74:f2:ea:56:da:98:32:27:54:fd:7c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Validity
Not Before: Nov 5 00:00:09 2025 GMT
Not After : Nov 6 00:00:09 2025 GMT
Subject: CN=a3ad480c039d372751866d5ea605726f085d2623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f7:80:75:14:c9:27:93:56:fc:c3:dd:6c:ac:
3b:39:0d:c6:9a:35:36:16:10:35:ea:0e:50:8b:f5:
dd:3c:0f:b4:c6:59:37:1b:53:57:3a:66:95:94:01:
be:c9:eb:ea:e5:5e:8a:27:21:aa:37:f2:a8:03:76:
cc:1e:94:db:4e:f6:ae:fa:14:ba:4e:5b:ea:78:7e:
19:8f:da:d6:3e:f8:61:b4:54:5d:b6:5d:c2:8c:97:
28:0c:72:08:ad:da:f6:1f:66:26:46:8c:76:32:32:
b9:c4:92:4d:2f:67:aa:61:d0:50:3f:5f:f2:5e:89:
3f:0b:ce:c4:39:5f:70:e8:ee:fd:fb:34:a0:1c:e9:
f6:d1:06:a6:59:71:7c:93:e9:e9:48:8c:a0:e2:d4:
56:66:ff:d2:f4:6f:8a:c2:fd:a4:fc:dd:91:80:1c:
0c:9a:6d:5a:26:42:35:ac:f8:81:ce:6e:62:6d:7c:
95:88:01:7c:70:98:4f:be:05:ac:2b:cc:06:33:4e:
33:07:d7:64:46:ce:e0:00:b5:a1:17:28:5c:73:6e:
b7:3c:e2:13:3d:28:b1:47:ae:5b:37:9c:71:6e:f9:
b8:61:ec:b3:84:f2:9f:54:38:5b:b3:97:f4:61:a0:
c6:41:e9:53:e9:7d:58:01:81:dd:61:7a:20:8b:c0:
76:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AD:48:0C:03:9D:37:27:51:86:6D:5E:A6:05:72:6F:08:5D:26:23
X509v3 Authority Key Identifier:
keyid:9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ae:f3:57:ad:5a:0c:47:09:a4:73:59:29:a3:71:e8:f9:16:
41:16:cd:55:cd:8b:63:74:ed:dc:2e:ff:c8:d7:82:8c:58:3b:
1e:e6:21:8c:d3:be:6a:9f:f0:49:1f:1e:1c:da:4e:3e:9b:f8:
f0:6c:b6:34:8d:cb:c0:71:c7:e0:35:f6:78:98:e1:c0:40:f5:
1b:9b:b3:b6:bb:5d:72:27:f0:30:14:f9:2c:53:a5:a5:c6:8b:
cc:92:fb:b2:08:92:2a:6c:9e:e7:69:3e:f4:90:f7:f5:00:4c:
d1:d1:75:79:a9:6c:c1:0f:14:81:be:d3:12:1c:4c:25:54:63:
15:e8:f8:b8:a8:9a:e5:f4:1d:4c:41:4e:78:dc:71:21:b2:83:
0e:b8:42:a6:55:ba:05:22:a0:cf:1a:c6:3c:78:db:0d:d3:30:
c2:a8:33:df:04:3b:76:ff:eb:66:b7:3f:41:1f:25:70:a6:c7:
d1:1e:fb:ff:e6:a5:d3:cf:57:32:83:6e:4d:be:68:44:89:8e:
4c:92:65:d7:52:a4:4f:9a:fa:c3:cf:e4:3c:be:cc:99:24:2c:
e5:6b:ea:44:83:0e:d9:45:b5:c7:db:bb:f5:59:bc:e7:5e:bb:
99:e3:1d:31:51:04:61:62:80:22:4f:b6:c1:5a:14:3b:bc:c4:
a6:82:0b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:25:20 2025 by rpki-client