Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier: 0Dj0KPW8W6XEN1BFuyvfJxoY2NlknJyBbkTnW+CtMiE=
Subject key identifier: FA:62:B8:C3:45:D1:B4:E3:1B:AA:1B:FA:4A:92:44:29:A4:1C:30:B3
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 019A4E1888FC1329AF678B699B07A311A2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 09:00:21 +0000
Manifest this update: Tue 04 Nov 2025 09:00:21 +0000
Manifest next update: Wed 05 Nov 2025 09:00:21 +0000
Files and hashes: 1: LAf6z2y7d_FvHWa2exDFEGsDUYk.roa (hash: yLu10ItcbqMAqor4DiKoo4ryX77evtxiM9mUG5P0yVc=)
2: kgdBEe32jL4o_RNVND7NTLfwJwI.roa (hash: PZIGs+YorN99DtOYFOROjFtihI/jC535mZ5OqGnLcRA=)
3: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: NSwL7FMP8GYpOFq2QN3kbrBblCOHIcxKjRlDqPeBDOE=)
4: qO2F63snosgQCd-tQ25OAd4civA.roa (hash: KELhV9b4nDo2k2LkjCvA0ufUmi/5QZ+HPUiWXl9d83Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:88:fc:13:29:af:67:8b:69:9b:07:a3:11:a2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: Nov 4 09:00:21 2025 GMT
Not After : Nov 5 09:00:21 2025 GMT
Subject: CN=fa62b8c345d1b4e31baa1bfa4a924429a41c30b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d2:0b:5e:1b:09:ca:3a:fd:05:e6:92:bf:89:
91:40:62:20:1b:9a:62:74:77:44:fc:85:39:ee:83:
62:41:57:1b:d2:cf:18:62:22:b3:6a:18:56:4d:b6:
a3:89:a0:b0:4a:99:48:53:8a:d1:63:e8:33:99:f3:
6d:ce:3a:92:d9:18:d2:b8:e6:fb:23:c3:4d:23:74:
d5:19:06:2e:65:f6:81:3b:2c:66:39:e0:a0:d2:5a:
81:db:67:8b:d4:89:17:24:28:e8:2e:21:98:82:1e:
40:36:8c:b5:c2:a5:e4:07:e4:d7:99:4c:00:6f:f7:
8d:9d:b0:ca:e3:55:bc:07:8a:e7:fe:f6:67:f8:61:
65:cf:76:92:f5:ba:5d:2f:63:f9:3f:aa:0a:2a:b3:
72:28:e9:73:42:42:a7:1b:96:9d:89:2a:31:e5:77:
b9:79:a1:99:fb:ad:27:2c:8c:62:4a:9b:62:41:01:
c0:65:6d:2a:32:8a:82:8b:7d:e4:ec:20:36:5f:ed:
50:75:f3:c4:56:56:b7:52:b6:36:9c:f3:bd:cb:f2:
2c:9b:12:a8:06:22:4d:ed:be:9f:a1:94:73:8b:fe:
ad:57:58:30:c3:ff:45:54:78:b8:d6:f3:53:50:da:
e4:ff:31:38:af:8d:8b:98:1b:9f:48:ba:2a:0b:0c:
6e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:62:B8:C3:45:D1:B4:E3:1B:AA:1B:FA:4A:92:44:29:A4:1C:30:B3
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b3:0c:2d:73:45:04:0d:bc:0b:2a:64:c8:b3:1f:61:1f:da:
38:2c:f7:ea:65:2f:b4:1a:41:a2:af:52:f6:64:52:d5:5c:c3:
ad:62:d0:4a:63:44:18:bf:6a:6e:6b:38:26:17:9b:97:3a:7c:
bc:0e:36:09:67:e8:1f:e3:14:ac:f3:f1:c0:b9:7b:51:6e:8d:
41:43:31:5d:e2:4c:45:0c:50:0c:bd:63:35:45:f7:40:ab:e3:
78:85:92:83:52:cb:a9:c4:f5:ed:30:37:d5:1d:b3:e9:c6:92:
52:4a:a2:63:4a:3c:5f:a4:fc:bc:01:8b:3c:f5:8b:e2:f0:bc:
47:8a:84:15:bf:69:21:74:87:0a:e7:c8:0f:fc:54:86:66:ef:
3d:de:7a:18:8d:81:41:50:45:ad:f7:20:8f:fc:d1:46:d7:db:
54:e5:b7:aa:49:c1:02:0c:b4:0b:df:2e:2e:e0:df:68:94:01:
b2:a3:62:d7:c9:f4:c9:e9:c0:99:b7:5c:26:7d:97:30:a5:85:
74:7b:cf:5c:0f:00:c6:4f:7d:71:d4:d4:e7:99:b8:e2:f5:7f:
6b:75:06:1c:6a:3e:15:15:49:be:2d:d1:99:4f:36:60:e8:cf:
4d:4c:c4:d3:98:6f:6c:97:bb:65:c5:3d:bd:30:c2:92:fe:11:
66:42:37:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:25:18 2025 by rpki-client