Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
File: rh__nrDPTAungU4yLsjgPU8fBxg.mft (raw, json)
Hash identifier: w0YGwy56hlODneUAGj+b2xg6Cxgtnj2daY7lcJ5QnxQ=
Subject key identifier: 34:53:A9:19:EA:A0:84:F9:10:08:EA:CE:00:67:69:EE:61:6B:25:3E
Authority key identifier: AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
Certificate issuer: /CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Certificate serial: 019A4FD0604A802764F51DA38BC3EDC0A2BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
Manifest number: 0D9C
Signing time: Tue 04 Nov 2025 17:00:47 +0000
Manifest this update: Tue 04 Nov 2025 17:00:47 +0000
Manifest next update: Wed 05 Nov 2025 17:00:47 +0000
Files and hashes: 1: FE0N8Kmo4OQXkTM86cmuHztqlpc.roa (hash: SAO+tGk+RLFdSMx2iDPle0Zv+2Ko3C4/o12jLuDIkhw=)
2: rh__nrDPTAungU4yLsjgPU8fBxg.crl (hash: QLabLROUrLI56X8UKHYRshHaWd/NIkzKP/zPYaXnFjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:60:4a:80:27:64:f5:1d:a3:8b:c3:ed:c0:a2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Validity
Not Before: Nov 4 17:00:47 2025 GMT
Not After : Nov 5 17:00:47 2025 GMT
Subject: CN=3453a919eaa084f91008eace006769ee616b253e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:70:9d:6a:f0:77:2d:aa:dd:29:f0:11:db:d5:
82:78:4e:3d:22:d8:1d:54:1a:e5:66:91:9e:d6:35:
eb:6d:73:67:5b:c6:2f:74:ca:37:8c:e1:43:2f:b6:
03:1b:1b:f6:83:3a:2a:84:bb:6d:3d:02:6f:99:5b:
fe:d0:51:40:98:86:39:04:d4:75:98:03:7b:bd:a5:
d3:c8:f4:8a:9a:0a:0d:10:0d:7f:ba:25:59:53:6c:
f3:9c:d4:de:a7:ac:d7:8e:06:c4:77:21:d9:5b:58:
71:a7:01:d4:f7:12:94:40:37:b0:b8:13:ad:93:48:
71:ba:ba:43:1e:e2:c7:db:ac:16:e0:e2:52:b3:53:
28:f4:f7:b3:14:75:a8:cd:1e:e5:07:62:58:b1:c6:
da:a5:96:86:db:d4:b8:76:43:92:1b:e6:fe:24:de:
de:b7:3a:e0:37:f7:93:c5:dd:5e:a4:63:57:aa:6d:
c9:61:85:1e:b9:6f:a8:41:1a:42:c6:20:b6:33:a3:
20:12:17:0c:04:c6:25:00:17:50:48:74:4a:11:f2:
33:f5:f8:15:c6:93:be:36:c7:69:91:ca:bb:f7:74:
2a:7d:b8:7d:a0:03:54:2c:a7:dc:95:45:2e:3e:07:
51:53:ce:99:8a:cb:f2:5d:06:83:68:72:7a:4b:d3:
34:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:53:A9:19:EA:A0:84:F9:10:08:EA:CE:00:67:69:EE:61:6B:25:3E
X509v3 Authority Key Identifier:
keyid:AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ea:ba:4a:09:fd:3a:c8:0a:c8:42:36:6e:3a:e2:41:a9:a4:
c4:06:d8:83:51:f8:1d:03:7f:76:55:6c:ed:2e:81:49:7e:65:
b5:f1:9d:59:00:10:cd:f7:b0:9e:3a:37:25:b3:09:bb:7a:e2:
65:70:1f:97:9d:45:ce:81:98:e4:cd:f5:74:b1:bb:b4:0f:8c:
7e:db:d4:38:e1:f1:5f:b1:27:65:9a:32:0c:c3:48:64:3e:f8:
e2:9c:8a:7f:b0:f8:17:f3:e6:12:d2:0f:e5:de:d4:8b:3c:5f:
db:89:59:ca:76:67:42:b2:ed:25:6c:59:93:64:8c:15:ad:32:
a5:68:d3:d2:7d:db:3b:c9:ad:ce:23:78:aa:17:d4:e8:69:9b:
34:1d:b7:e3:93:df:5f:0e:4f:a2:4c:4d:fa:62:fd:40:03:5c:
55:d8:28:53:07:f9:5e:58:5b:38:cd:82:e1:b7:1c:de:3c:db:
95:15:61:5c:08:ea:14:7e:bb:bf:4f:90:08:3d:03:bf:ac:59:
57:3d:66:74:f2:3e:19:2d:bf:fb:ef:0a:a0:b5:0b:e8:29:54:
0a:60:22:27:99:dd:3c:8d:db:2b:b6:fb:3c:97:62:be:09:7a:
b1:e4:01:fe:a4:10:a0:24:5e:05:b3:a2:d0:be:2d:d3:80:92:
bd:3d:74:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:51:25 2025 by rpki-client