Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
File: NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft (raw, json)
Hash identifier: dxS/oyKzAsrt1645jJqiTTtZPmzuYyCZolff1KMc0wk=
Subject key identifier: 01:80:5E:74:7D:6A:63:22:E0:67:67:29:F2:DA:2E:A2:0F:6A:D8:2C
Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
Certificate issuer: /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Certificate serial: 019A4C615478180E44BC62791F0AE1FF215D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
Manifest number: 0AE1
Signing time: Tue 04 Nov 2025 01:00:38 +0000
Manifest this update: Tue 04 Nov 2025 01:00:38 +0000
Manifest next update: Wed 05 Nov 2025 01:00:38 +0000
Files and hashes: 1: DTF9ONSmCnj34QSV3oz7U0spqDo.roa (hash: Kw2YkPP6grSzeM7Vvpfj0GyDu4r4ER5vZalMBblwx+c=)
2: E6k1jw4wXKpNwPeTnRfj4VbFPUQ.roa (hash: hTQ5VP+ecunyC7viVfskT54aK8ITC6qcoUrC0ZEyNns=)
3: NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl (hash: 7KcBa9Huf/ZUwO/JJmD2+5t45Wxba7HDIMrHx0fK6IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:54:78:18:0e:44:bc:62:79:1f:0a:e1:ff:21:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Validity
Not Before: Nov 4 01:00:38 2025 GMT
Not After : Nov 5 01:00:38 2025 GMT
Subject: CN=01805e747d6a6322e0676729f2da2ea20f6ad82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:e4:c2:74:b1:1c:6c:1c:24:52:09:c1:b1:
b7:90:7c:36:21:22:b0:ee:0c:3a:f1:ba:24:be:11:
75:56:31:6f:34:12:92:ff:ce:c5:f4:ce:e9:05:75:
a0:bd:b0:e5:17:e0:d0:7f:eb:ca:c1:99:3b:d8:5e:
b3:30:49:d4:58:e0:f8:94:89:81:3d:e3:34:ca:eb:
06:0b:31:56:4c:78:28:6f:e3:b4:85:63:3c:b2:ba:
f1:a2:ec:22:37:fc:ba:c7:0b:0f:13:d6:1d:24:1c:
d6:d1:13:16:cc:b2:21:e8:80:98:ce:68:bf:f2:84:
21:66:a1:dc:c1:9c:18:e5:e6:27:9c:76:f6:16:ef:
dc:1a:b2:44:08:bd:30:e7:9a:39:e2:e9:26:f5:a0:
08:46:05:5e:f0:41:3a:79:f2:6c:a9:9b:b6:64:40:
33:0b:52:bc:c4:cf:f7:83:04:04:6a:5e:61:37:04:
10:65:10:43:70:5d:b4:2e:a8:ea:a0:4f:18:bd:0b:
70:0f:d0:6b:63:10:13:59:a6:9b:9c:b4:d6:ae:88:
6c:55:d3:a7:f2:fb:b0:6e:95:90:8e:cd:f0:ab:f6:
62:5f:80:c1:a8:c1:72:e1:a7:97:fa:ed:7a:8c:3b:
15:dd:0b:ed:9a:d4:94:a9:d0:4f:68:91:6b:45:1d:
b6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:80:5E:74:7D:6A:63:22:E0:67:67:29:F2:DA:2E:A2:0F:6A:D8:2C
X509v3 Authority Key Identifier:
keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:be:9d:05:d3:52:37:75:a8:9d:f5:65:8d:7e:37:fd:6f:5f:
c5:5d:79:7b:f2:a3:20:75:40:87:1c:12:78:c3:07:2d:dd:b3:
80:81:66:5c:69:87:b7:b6:47:8b:be:ea:dc:de:54:5d:1d:23:
3d:a3:f9:78:17:ae:23:71:20:77:c8:50:df:80:87:e3:1a:f1:
1b:a7:9e:c5:2f:c4:4f:56:6b:88:29:f6:ec:5c:d4:ce:77:ea:
02:d6:e5:14:9c:39:db:b5:5e:79:17:f8:3e:88:6c:7e:94:2e:
25:c1:f7:6d:eb:ca:dd:2f:45:b6:e8:8c:d3:57:18:fe:94:10:
62:8d:e8:49:3d:57:7a:14:1b:66:6b:43:25:76:c0:3e:48:df:
a2:fd:27:d3:14:03:2d:22:11:37:84:f3:df:85:68:d4:61:67:
be:13:60:5a:ba:af:ad:28:d9:fe:d5:8d:08:44:d3:fa:bd:57:
c5:9d:3b:ce:7b:63:ee:10:5d:cd:b7:23:9e:dc:c2:cf:a5:cb:
db:f8:f3:3a:b0:43:dd:93:85:7c:77:44:59:ae:7b:24:af:0e:
96:72:08:32:0d:3a:f3:b6:b2:3b:3b:fc:50:fa:3b:30:43:ff:
f0:04:38:6e:ca:da:70:4e:62:17:19:32:7c:55:2d:7d:54:14:
46:6e:f1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:41 2025 by rpki-client