Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json)
Hash identifier: sZVSCrTl43ry34tZEGpKrUeo2osfj7EgspumfUCHdVA=
Subject key identifier: 77:3E:20:76:EF:84:C7:C4:7C:F0:10:B2:02:84:E9:04:1B:C9:1F:30
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial: 019A559AE9F8D18E853AB9A6FACC900FAE51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
Manifest number: 027B
Signing time: Wed 05 Nov 2025 20:00:06 +0000
Manifest this update: Wed 05 Nov 2025 20:00:06 +0000
Manifest next update: Thu 06 Nov 2025 20:00:06 +0000
Files and hashes: 1: Cn6aTJ6E1_-gCpRxnelqtaB0lKU.roa (hash: VqTM+HURS8DC+WZMdKoSVyf3dPPj9el6+N1nRAL14WU=)
2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: PX7Xpjj3w2rKEz9LGV51tnL/xwDAO96ZRzxA/xg4J3Q=)
3: rT2NKGhh-IbqjO8Z7nYfbW1wOX8.roa (hash: iTv3B38u9yzbs8hr8RvbnohLnyRQDgptr0b4/9herOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9a:e9:f8:d1:8e:85:3a:b9:a6:fa:cc:90:0f:ae:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
Validity
Not Before: Nov 5 20:00:06 2025 GMT
Not After : Nov 6 20:00:06 2025 GMT
Subject: CN=773e2076ef84c7c47cf010b20284e9041bc91f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:22:8c:a2:7c:bc:08:9f:2e:da:0e:ef:d9:
d7:d6:a6:d3:6d:ab:4c:bd:33:f6:84:70:f1:5d:ee:
a9:e6:2c:92:41:a2:11:ce:1d:e6:5c:48:0a:16:56:
b0:27:81:78:32:97:17:38:7c:bc:04:06:c7:f7:e4:
e0:c0:b9:2f:ad:00:81:52:e4:3b:b3:75:e7:df:c6:
54:67:1c:0e:5d:5a:9c:81:2f:bc:6f:05:84:f5:36:
2b:9c:27:98:ea:53:59:c4:83:43:95:6d:57:7b:9a:
31:dc:e8:65:91:2f:fb:7b:b1:06:b3:fb:5f:c4:ad:
10:5e:64:3c:96:fa:d3:b5:2f:dc:91:ff:31:f0:2d:
92:7b:70:60:fd:83:68:10:c1:43:ab:9c:bc:a8:15:
3d:bf:21:4c:12:a5:c8:fb:07:cf:c3:cc:af:bb:c7:
54:47:d1:fc:03:0b:dc:7d:4c:05:57:14:7d:fc:41:
6d:21:a9:86:69:d6:6c:cd:ea:0e:43:7a:db:76:f7:
e9:70:22:40:20:5f:4a:f0:7a:e2:3d:ba:08:00:9e:
a1:f0:9a:2b:bc:8b:df:43:79:cb:be:74:0b:b5:51:
3a:da:51:86:75:e9:af:f7:fc:e1:b4:65:94:f5:29:
99:ea:c4:69:f8:3f:3b:06:90:27:74:b0:17:70:07:
02:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3E:20:76:EF:84:C7:C4:7C:F0:10:B2:02:84:E9:04:1B:C9:1F:30
X509v3 Authority Key Identifier:
keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:18:48:ed:2d:53:fe:3a:17:18:65:be:1d:f1:b3:f0:b9:4a:
d6:a0:e6:dd:4b:85:05:b2:ac:91:2a:bc:9c:35:ca:0e:ef:c8:
7b:f9:97:51:f1:29:d2:03:98:18:4e:f5:bc:96:45:a8:d0:58:
0a:57:ba:25:e8:42:8b:4b:5e:0c:71:3b:73:31:7e:fc:40:10:
f1:e4:eb:16:65:9d:99:d8:f3:5e:6e:1f:52:c2:54:41:56:bc:
09:7d:86:2a:91:f8:9f:86:5e:bf:3b:5c:c5:6a:e3:07:3a:61:
b7:14:a3:70:36:ef:e1:40:7d:78:d2:4f:1a:b1:a0:ab:5b:8f:
68:ac:ce:10:88:db:d2:34:b9:df:54:bb:6a:08:6f:87:c8:c4:
7b:02:4d:3b:50:a4:c3:f8:7e:0e:f2:8d:19:51:b7:67:f5:45:
e6:fd:69:69:a1:56:95:e3:d3:08:88:40:47:2e:36:54:79:8a:
8a:7f:64:5b:98:ac:fb:92:12:47:4c:aa:a3:66:ff:9e:b9:74:
3a:fa:4c:09:fb:eb:38:f3:03:ae:50:a4:98:48:a6:bf:a9:26:
85:7f:90:82:78:bc:3b:e5:60:8e:f4:bf:4f:5a:cf:c6:19:7e:
71:29:75:30:a7:87:21:b7:7e:5f:4a:65:54:4e:c5:c9:bd:70:
b4:2a:fd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:06:28 2025 by rpki-client