Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
File: NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft (raw, json)
Hash identifier: IriS9ZDUIwXkAab0mk/xYAgFgbxbWj5PVYOstpI9cw8=
Subject key identifier: 93:33:8A:51:EC:76:48:31:FE:2A:AB:0B:08:15:4E:8B:20:06:59:EA
Authority key identifier: 35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
Certificate issuer: /CN=355608d078d6f31cf79be78736bf884606a17da4
Certificate serial: 019A4EF44AF2F162C155317E30E4433F70A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:24 +0000
Manifest this update: Tue 04 Nov 2025 13:00:24 +0000
Manifest next update: Wed 05 Nov 2025 13:00:24 +0000
Files and hashes: 1: Ld3jzrrXXzWXVkMUgI6UD9IWYJw.roa (hash: +iXd1M4+bcqd1pD4b5qHzxAyt89KMtB2DGWb5orKRYY=)
2: NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl (hash: mrjvyqdtpxXtXHpsKnW057HhuHrBsEan4axv3Lohrhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:4a:f2:f1:62:c1:55:31:7e:30:e4:43:3f:70:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=355608d078d6f31cf79be78736bf884606a17da4
Validity
Not Before: Nov 4 13:00:24 2025 GMT
Not After : Nov 5 13:00:24 2025 GMT
Subject: CN=93338a51ec764831fe2aab0b08154e8b200659ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:a0:56:36:01:99:67:33:5b:f4:bc:34:3e:
15:db:bf:4f:1f:ed:34:07:1c:b3:a2:a7:4b:34:13:
dc:5b:62:b8:d1:4d:43:bc:8b:6d:d5:25:b5:0f:f5:
01:48:93:d2:3e:5b:9f:b4:cf:b4:13:c2:d3:b3:3d:
69:3f:b0:45:5d:93:eb:99:4e:13:26:3c:a1:88:48:
03:1a:99:5e:5f:58:97:b4:0c:c1:65:7d:47:c0:f6:
b4:51:22:af:70:63:43:93:a8:41:2f:6e:d4:bb:f2:
5b:11:e7:0c:93:54:d3:c7:56:2a:ba:f0:ed:30:05:
5a:32:0c:ba:88:19:30:7a:04:83:56:b0:56:fc:f8:
8d:f7:82:25:e9:a5:4f:c1:9a:7e:f1:3d:f4:eb:a3:
c6:ca:6b:09:ff:38:64:81:3c:82:0c:00:d5:61:31:
3d:f5:ef:1f:08:bb:9a:e7:7d:a6:4f:00:02:61:79:
b0:57:d4:5f:26:c9:2b:d2:19:d4:e5:34:bc:9c:77:
f2:bc:3f:59:c4:10:0b:84:1f:16:df:cd:2d:93:6e:
e2:42:fc:4d:4f:bc:3a:0c:60:05:8b:5b:07:10:ef:
f3:ea:06:b7:1c:1c:b8:cb:f8:f8:1d:78:b1:66:99:
04:32:a0:09:91:9c:cb:9c:1a:06:fa:39:a4:fd:9d:
f4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:33:8A:51:EC:76:48:31:FE:2A:AB:0B:08:15:4E:8B:20:06:59:EA
X509v3 Authority Key Identifier:
keyid:35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4f:de:34:ea:66:63:24:68:30:52:a7:29:f3:88:d0:0c:79:
d4:cb:94:71:12:a8:9c:86:cb:00:81:04:ec:a5:ca:92:f8:e8:
09:78:ce:4f:97:c9:a4:be:ee:a1:65:52:42:98:d0:ec:3a:20:
be:d3:5c:af:98:14:aa:c6:fa:96:84:0b:a4:e7:3e:84:57:2f:
cf:ac:03:d4:4c:41:0c:70:be:57:a9:6a:e0:0d:94:1e:7a:c5:
59:02:42:43:c7:00:ed:63:60:27:b0:4d:d0:8a:95:94:b5:77:
77:0a:97:de:44:c1:1b:c5:44:8e:72:ac:14:4f:f4:2b:ef:62:
8a:b5:31:98:75:20:3d:d2:8b:8d:8f:fa:cd:25:61:c9:0f:51:
41:34:96:06:66:71:b2:c5:8c:c3:a2:b0:b4:d6:6e:c4:f2:c2:
bb:12:aa:fb:19:ce:4e:45:7c:d4:6f:f1:69:66:ca:47:1b:8a:
be:c4:e7:e8:db:13:2a:2d:07:62:43:b2:81:b4:6b:86:9f:43:
02:c5:9e:c8:80:66:c1:9e:fb:fd:45:5b:c9:72:8a:7f:c7:89:
f8:59:d3:fc:e9:90:0f:c1:2c:7b:6a:13:d4:73:fc:29:28:8e:
47:60:c3:18:28:0d:f1:e1:d0:36:f6:23:a8:8e:0f:c0:dd:07:
21:eb:d4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:35 2025 by rpki-client