Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
File: NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft (raw, json)
Hash identifier: ilyhpwWdcxDDhOCN5/WTG6SHQ/sv/DFbF/0TZLW3WV8=
Subject key identifier: 8B:00:55:26:6E:48:8E:7D:FC:76:28:10:21:74:FA:9C:FA:34:9D:41
Authority key identifier: 35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
Certificate issuer: /CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Certificate serial: 019A500702DA3C9F394DDF5D2A194C303041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
Manifest number: 0F8C
Signing time: Tue 04 Nov 2025 18:00:27 +0000
Manifest this update: Tue 04 Nov 2025 18:00:27 +0000
Manifest next update: Wed 05 Nov 2025 18:00:27 +0000
Files and hashes: 1: NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl (hash: YGUEJxJZN2pQ6O4gHierz4MRXe9HK/PFcMV7BhtBxME=)
2: ZIEntIvRdoyNG_9f7umqM8GaOP0.roa (hash: fyIclvXxfmafIM00Oljz1bkGgUIAKrrEkFW8CDlF9q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:02:da:3c:9f:39:4d:df:5d:2a:19:4c:30:30:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Validity
Not Before: Nov 4 18:00:27 2025 GMT
Not After : Nov 5 18:00:27 2025 GMT
Subject: CN=8b0055266e488e7dfc7628102174fa9cfa349d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:ba:be:0b:5e:10:92:66:74:76:9b:74:bb:
92:50:6d:9f:40:a2:93:5f:a1:a6:ba:7b:ba:05:1e:
17:04:77:65:4e:84:e0:92:73:70:88:d5:16:9d:36:
4f:bb:f4:61:64:9d:d5:76:3b:66:42:d5:f3:cc:c6:
33:10:b0:b3:79:3f:cb:ac:9c:a7:d0:a2:d2:0a:3f:
74:8f:00:70:60:c6:a4:05:f9:36:c9:8c:1c:79:ce:
6d:80:4f:16:15:59:0c:1d:2d:af:ce:64:1f:d1:03:
b3:f4:9e:2e:fb:41:5c:e0:98:7c:1c:10:34:63:58:
f9:d5:ce:93:67:24:65:9e:14:7a:b1:14:c2:76:bc:
35:9d:d3:81:f0:a5:17:fd:db:0b:00:80:14:2d:0a:
70:83:cf:c6:08:40:6b:09:6d:b8:8c:ee:d5:3a:e1:
80:a2:cd:f5:eb:7b:a8:c8:46:93:58:1f:aa:97:48:
5e:d9:9f:68:db:9b:42:77:92:9b:a6:c8:65:87:96:
10:84:fc:d4:32:c7:be:9c:d8:51:e8:6a:5e:4e:7e:
98:06:83:5d:44:0f:68:69:50:d6:0f:03:cb:b7:c1:
b2:04:00:53:d8:f1:37:b8:5e:f6:20:a3:48:e5:b6:
08:06:1b:55:fb:df:d5:46:9e:95:0a:a1:71:a0:fc:
ab:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:00:55:26:6E:48:8E:7D:FC:76:28:10:21:74:FA:9C:FA:34:9D:41
X509v3 Authority Key Identifier:
keyid:35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f5:63:18:b7:13:39:84:ae:95:62:a9:eb:3e:0a:61:02:92:
d5:79:6f:47:17:bb:c8:ce:f2:d9:dc:2b:e2:59:6d:b3:26:c3:
b4:bf:af:e4:1c:b3:51:a5:32:2d:f8:37:42:4a:0a:8e:b5:8f:
58:b1:37:79:d2:d6:87:a7:b8:e5:49:76:29:e1:9b:c7:79:db:
f0:07:72:d6:8c:6b:04:aa:df:4c:89:6c:0e:a1:66:aa:de:90:
bb:b2:fd:f2:9d:bf:dd:2d:8f:3f:38:85:44:4b:05:bb:b3:47:
55:93:ce:7d:0d:22:df:36:4e:61:e0:a4:c6:65:a1:da:95:69:
9c:02:dc:ae:45:58:44:2c:70:bc:d9:bc:45:ae:9c:2e:06:11:
ff:5b:f6:d4:e9:e0:6d:8a:07:84:c3:e3:c2:a3:32:4b:09:da:
60:bb:76:03:9d:c3:fd:84:36:3a:38:dd:aa:c0:09:2f:49:2b:
7c:a8:23:74:6b:a6:4d:7d:a0:6b:67:a3:46:fe:ad:2d:3a:51:
b3:b1:6d:62:1d:52:8b:32:5e:51:47:a4:89:ff:de:82:ad:28:
5f:8c:78:81:24:99:7c:96:29:c3:14:ab:08:51:a9:d9:0d:67:
e3:2e:84:0f:bb:68:6e:db:29:7a:30:09:a7:07:e1:18:d3:bb:
ad:14:46:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:37:05 2025 by rpki-client