Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
File: NawwjJT1exHO4bqE7xJ4RHxnhes.mft (raw, json)
Hash identifier: GivmKoBLjz/8nYzmTmNNXX2Q5PyomCKwEEtIZUHujFc=
Subject key identifier: B3:5A:1C:FC:19:60:F2:85:D5:6B:11:CB:09:99:2A:67:19:2F:CA:78
Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
Certificate issuer: /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Certificate serial: 019A4F98E816631FD169B4D5BC931B4762AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 16:00:12 +0000
Manifest this update: Tue 04 Nov 2025 16:00:12 +0000
Manifest next update: Wed 05 Nov 2025 16:00:12 +0000
Files and hashes: 1: NawwjJT1exHO4bqE7xJ4RHxnhes.crl (hash: qrt6Iwh1i/nskkudaMpk1OhILAQCstbkt8FznUNTaaM=)
2: ge72rIVKenfFe0v5asZR_PaxIp4.roa (hash: o9engqettqOIJ9n8PYQ/SXW11G8NZE3fZOewqKwRqSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e8:16:63:1f:d1:69:b4:d5:bc:93:1b:47:62:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Validity
Not Before: Nov 4 16:00:12 2025 GMT
Not After : Nov 5 16:00:12 2025 GMT
Subject: CN=b35a1cfc1960f285d56b11cb09992a67192fca78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e5:ff:56:d4:d2:04:ed:19:de:8b:0f:24:ce:
d1:71:1e:25:89:7a:b3:95:6e:75:c5:83:3d:30:23:
81:58:71:3d:21:28:45:02:6f:3f:0c:53:40:5a:5d:
db:71:4a:e9:1e:79:28:58:3f:3c:63:86:79:96:f0:
25:e6:f3:92:f1:15:c6:ed:1f:a2:46:7e:63:cd:11:
60:11:a6:18:ef:19:36:c9:43:89:81:2f:41:7e:de:
69:2a:ca:fe:32:c1:a0:5c:81:b5:e7:b0:c2:7d:ad:
e0:69:22:f0:f6:79:f6:03:76:38:f3:ad:25:a4:7e:
9a:6e:f4:57:02:b6:c4:87:c9:ad:a7:88:61:c7:24:
c3:54:1c:84:9d:f0:21:78:26:77:7e:5e:63:77:26:
fd:9a:c5:2e:ad:5a:ff:8c:5f:fa:65:c3:27:4a:e4:
e1:78:c0:b9:3f:81:fb:59:b2:3a:aa:76:1e:6c:37:
33:ab:7c:85:3d:13:af:ce:ac:c7:2a:07:6b:9b:54:
f9:71:7b:7c:72:72:1b:96:72:95:07:e7:cc:45:f1:
ae:db:00:c6:6c:98:a3:b6:5f:3a:da:7f:70:88:d0:
80:41:36:f0:49:8f:21:51:28:32:52:3e:4c:52:60:
82:d8:93:b2:f6:8e:63:0f:8b:15:d8:a9:c8:3d:97:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5A:1C:FC:19:60:F2:85:D5:6B:11:CB:09:99:2A:67:19:2F:CA:78
X509v3 Authority Key Identifier:
keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:07:fa:b4:c9:98:cd:46:12:c1:06:47:c7:29:3b:95:f5:1f:
ce:24:5d:2e:5a:99:93:3e:b4:97:fd:1b:11:bf:e7:7a:36:c1:
b8:5d:db:36:00:31:e6:f6:98:3b:df:9c:ef:20:3f:29:e9:b5:
d8:43:2f:27:37:d4:57:e5:6e:17:5a:07:1d:04:40:5b:04:84:
d9:bd:22:40:16:ca:2b:10:d6:fc:8c:2f:c8:cd:b4:e7:9d:e8:
c7:b2:9f:ce:bb:e1:b8:95:a8:11:38:eb:e5:fd:ff:ab:05:ab:
a8:16:cd:2d:52:a9:b1:68:b3:80:fd:9d:d8:aa:bb:38:0a:ee:
c3:c9:58:e1:31:51:8a:02:6d:4f:06:7c:e2:95:d2:b3:69:32:
d4:f9:e5:e4:65:a6:3a:9b:ca:e4:ca:4f:1b:94:96:15:e4:aa:
b0:48:0c:e2:8b:fc:f5:bb:df:d4:cc:c2:7b:da:d0:47:c3:74:
a4:ad:4a:08:35:c7:5d:3a:5d:06:e2:2a:a0:ab:e2:23:83:5a:
4f:8a:e5:a1:ba:0d:0c:49:0e:85:90:e3:6c:70:1a:f3:2c:87:
63:d8:00:6f:c4:c1:93:d5:d5:4f:00:7b:4d:34:eb:34:15:25:
a7:71:80:6f:cf:39:3b:10:e9:93:3c:4e:a8:52:9a:96:2d:24:
a5:ae:54:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:53 2025 by rpki-client