Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: JXVQtQ3Sa2wkst7s0INhF59Jzy7tMEKnJyqallY/6t4=
Subject key identifier: 34:B1:8C:41:39:63:F5:72:0E:79:6A:08:C4:10:01:A4:91:F4:52:59
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 019A4E86C367E47B491F34075B70D9D432E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 11:00:45 +0000
Manifest this update: Tue 04 Nov 2025 11:00:45 +0000
Manifest next update: Wed 05 Nov 2025 11:00:45 +0000
Files and hashes: 1: 7lZV2ikXSn1leCy9JVthXv0dDRw.roa (hash: KGZRr2d4Ylo5EtwkQy4v0KYV8IVaaAhpVSXxUr8x4yo=)
2: FpUONkQdaqv2Rv9yYXuuU5484b4.roa (hash: s8fjXQWhK2u6VImvQBksJDBrALRZJPf8LAm3HxwOROQ=)
3: HRxI47MJmPRRcZuvobrot8euLTA.roa (hash: A/IWoERrDN0mR2hexd+6zlTgeLvRzHoqb7ZrQlTFoGM=)
4: K0e97lq8to45G4bjAY8oagFU4QI.roa (hash: bTG+6EZ7O3xegYBqouKDHymp2EvAOOtKRJXkBxvyI8c=)
5: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: U/AKf2phVoezS5Zti0uD0duKcu6cL7BAsKS8n66ZiY4=)
6: P33SSWlpyqijB0gHEOLaoCaM5OM.roa (hash: 7b5pymjGWkYqf8q+lDaj/5SKIALqOGUwKbQhUuKpSQo=)
7: Y_jo-YJu2PbRSOLAQ7xTf_r0vtA.roa (hash: QUNrldTiuNEx4ojoaKc5e0ZjUX5UdNXjzYCNRvPqGvw=)
8: p97Avl9nV3Nx0i1w45Yl3T0oKzg.roa (hash: ZPQA4d87YOhKqcuAke+P/kmc4CIdEE6HBQuGK1D7QA0=)
9: zIC946FC0tsOsf4Kuz2japvLyHo.roa (hash: /WiTcC8LPqyGnuHmvDEdj47rRpjftzM8GAt7AZLlAmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:c3:67:e4:7b:49:1f:34:07:5b:70:d9:d4:32:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Nov 4 11:00:45 2025 GMT
Not After : Nov 5 11:00:45 2025 GMT
Subject: CN=34b18c413963f5720e796a08c41001a491f45259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:86:9c:2e:29:b9:ff:99:87:6f:bc:f0:b6:79:
b8:0b:2f:b9:24:f3:ac:e6:07:01:ec:08:4d:e1:1d:
a7:9a:8b:2b:ee:21:ba:89:e9:0c:b2:56:6f:1d:c2:
42:71:1b:23:33:79:81:05:13:92:72:7d:ca:a3:89:
9e:52:d4:07:f2:ba:01:4a:7f:e8:93:2e:e8:d3:bd:
30:4f:3e:1c:2b:f0:b4:7e:3e:27:2a:41:17:b4:ed:
a5:04:36:27:68:50:20:80:80:c5:45:5d:96:51:aa:
39:6b:a6:25:dd:74:95:cd:c5:37:36:5a:78:f9:e3:
19:0d:a8:1f:df:38:1f:25:bd:50:a4:c9:b8:56:4e:
a2:c5:97:f0:da:e8:66:1a:80:3c:20:09:c2:a0:c8:
66:bf:09:a8:3d:8a:a7:3e:0b:d8:9f:f1:f1:a7:84:
ba:1a:fb:12:85:f7:0a:16:af:60:13:e4:43:8f:b9:
9c:13:13:06:7e:4c:ff:4d:7a:6d:89:9c:11:5c:75:
69:c7:99:2a:ed:1d:62:ef:f9:9b:32:0a:55:90:4c:
68:3b:15:ee:55:e0:0d:b0:ad:72:78:22:40:e1:01:
20:5f:fe:a2:ec:c5:7f:47:1f:c0:e5:03:3e:88:a6:
17:31:8c:1d:cc:09:f1:41:e8:d6:86:a4:62:48:a6:
a9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B1:8C:41:39:63:F5:72:0E:79:6A:08:C4:10:01:A4:91:F4:52:59
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:aa:c3:5d:98:89:24:d5:a9:8d:ce:92:bc:53:6e:b1:c0:be:
38:96:d4:d9:2a:4f:f0:42:0d:ca:35:9e:14:d7:ec:4f:fb:c7:
7d:d5:d2:df:ba:f3:ea:ab:ad:3c:f0:ff:e0:fc:8c:7e:d8:a6:
1f:ba:75:47:68:78:c0:72:3a:b1:6a:40:1d:a1:c7:dd:1d:74:
c9:ad:db:f8:52:8d:59:9f:03:4b:7a:c6:6f:b2:76:29:01:1a:
be:8a:68:ec:c5:14:88:93:f5:0d:4f:f7:2c:f3:13:53:d5:b4:
be:da:fe:ba:08:c2:d6:a3:6e:55:d7:ad:b8:1f:d4:b8:c6:5e:
63:b9:02:f4:c3:a2:2b:4d:a8:45:18:c5:ce:a9:50:a7:1f:42:
f2:cd:08:ce:da:ca:e6:50:16:50:65:6f:50:e4:cf:1e:32:2f:
51:80:b8:50:c9:5d:b7:bb:8a:9c:e6:82:93:1d:b3:b6:53:e9:
a1:c4:5c:3e:4a:47:97:02:8b:0c:6b:29:c7:06:67:76:2a:0e:
42:6b:07:91:f7:99:13:57:10:8e:73:f5:06:5f:9d:f3:d3:66:
ca:f4:d2:29:3b:d9:6d:a7:dc:02:05:10:ef:90:0a:bf:f6:86:
dc:25:09:29:44:a9:77:a3:d9:28:be:ae:5b:a4:72:1b:47:65:
1e:b2:18:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:29 2025 by rpki-client