Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: NuCfor13gPywf8aCePXaHSvPPoH5Or0fRKbNJIKTbs8=
Subject key identifier: 03:39:BF:1D:51:71:F6:A2:45:AD:74:05:58:BE:A9:0A:22:7D:41:FC
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 019A53AD1BEF72A162DA423155B68E6F23CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 172D
Signing time: Wed 05 Nov 2025 11:00:45 +0000
Manifest this update: Wed 05 Nov 2025 11:00:45 +0000
Manifest next update: Thu 06 Nov 2025 11:00:45 +0000
Files and hashes: 1: 1eZC9enfXbKkbChbya2s-NBXR10.roa (hash: K8gL7gYOdUPnWfON7y82NF9djuzcQAO7yPjvMnV4HWA=)
2: 4C1hs3Awu1pUWnx11isTd7urO8g.roa (hash: NHlupIJQHDTwRScv0dlfz2lFTerJ3fgzUZ9KeBTbFHo=)
3: 4aaliOpCta1xxwdPdgm9XgmQVe4.roa (hash: 50PVROIOCSd7qW0XXvFqQMxjDosAhVmRwG7IVPmy7ik=)
4: LNJOsnr56BpDhx0zCSJoGF_8kg4.roa (hash: ipKdM/rgGFJqpM5XZ1watukNv4jI5z2rHAUKNiP8l9M=)
5: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: 1onWmS8fmjZZUaUBJJA6a6Vs1+1E/p+R32mqNXhzxJo=)
6: P4RQICIsv2ynDFNy1pTdbhvIXok.roa (hash: 3BspGo/InWWElD0+8Z5QOqYWItS4j6gIXyuD2KZuZ58=)
7: ibQsYiMOU1D97Z6dBw2Z2nuJoA0.roa (hash: paBGRr0SKtx93/jOWaEGPMAan4qkVxtM/IYXrSHwl6Y=)
8: jBgv17Pl-Vh_L1PF3KmB8kI2bak.roa (hash: yIwLWwTP6qcl+lhvdLDbXrkIo53nDQZcaNGlgxGXrqE=)
9: xlTjepejuGlW3CGUnuf8jiI_Sb8.roa (hash: xnJVidZPq3qTfXPcYiZGHTVkjYmciZFHEO03/ve53hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:1b:ef:72:a1:62:da:42:31:55:b6:8e:6f:23:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Nov 5 11:00:45 2025 GMT
Not After : Nov 6 11:00:45 2025 GMT
Subject: CN=0339bf1d5171f6a245ad740558bea90a227d41fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:ad:af:90:73:e4:e2:97:bf:75:91:ec:83:
bf:1a:e8:e6:2f:fb:d8:69:00:fb:d8:0e:e6:b7:0b:
5a:b0:b8:21:3c:07:dd:a5:c6:48:39:3a:4c:8e:19:
f6:97:f7:6f:ee:da:d7:20:eb:77:3f:38:ad:08:61:
79:6d:06:d5:d8:10:90:70:e6:fa:e6:12:6f:d1:f5:
58:71:f4:38:6a:ac:94:39:a3:07:a6:9c:77:59:e2:
0f:8a:af:fc:f7:e0:b1:55:ce:7b:03:d2:9f:52:63:
89:cd:27:c4:18:5c:ec:2d:b5:84:9f:9a:1b:18:d7:
90:0d:2e:ff:c2:6c:78:91:7f:35:e4:83:d3:a6:6f:
c7:ba:df:20:47:2e:2f:e5:1c:0d:3f:84:df:4b:c0:
26:1b:17:3d:2b:25:29:31:df:5a:17:b5:a3:a9:06:
c0:e4:3a:5b:73:b7:b5:28:f3:dc:0e:1f:7b:33:19:
5d:48:e0:af:f4:00:99:a9:20:7e:6d:d5:f4:4a:7d:
81:28:d8:24:3a:33:bb:b1:89:8a:77:df:b0:03:0a:
01:51:9b:48:20:85:cd:56:62:8d:b8:e0:3c:70:28:
2e:73:ce:cb:9f:aa:e8:3b:5e:bf:be:b1:ec:4e:e1:
d1:68:f5:df:1d:30:6b:22:93:f6:bb:c3:91:6e:65:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:39:BF:1D:51:71:F6:A2:45:AD:74:05:58:BE:A9:0A:22:7D:41:FC
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:9c:0c:90:33:eb:5b:0e:f4:51:40:23:6a:89:c5:cc:e9:3b:
22:9c:ae:4e:8d:bc:fd:2e:16:14:4c:a8:63:73:aa:5b:f4:25:
ad:ff:96:1e:45:4d:69:a9:9c:72:03:cc:66:a3:b5:e3:ab:75:
df:b7:50:76:d3:f3:60:47:6b:da:a6:e8:a9:73:59:dc:68:de:
09:6c:74:10:c3:85:de:3d:96:1a:bc:ff:57:56:4d:d6:3f:81:
cf:1a:0d:df:57:a8:d8:df:00:47:3e:ed:54:4a:c3:4d:c1:8c:
e2:2f:58:0a:05:91:54:0c:2e:b8:58:bb:fd:05:a1:3b:ba:89:
bf:0c:46:df:51:f3:7d:28:a8:e2:f2:89:3d:92:d2:e5:b2:af:
8a:b1:cf:2d:e4:4d:45:27:c4:63:ec:3a:ca:db:eb:a6:60:29:
69:2d:6a:4e:da:9a:1b:29:a2:16:e8:84:96:26:8b:f8:c4:87:
c6:05:d8:16:94:71:cd:d2:a9:5a:5c:25:0e:ae:d8:1c:3c:6c:
be:bd:c3:a1:da:16:50:b0:3e:97:99:e7:90:94:6e:ff:cf:57:
77:b8:eb:34:04:64:0b:15:2b:f3:6b:80:76:36:cd:8d:db:a3:
24:78:73:be:76:02:34:7c:4f:fc:86:f7:ee:37:6a:47:d9:64:
13:c8:06:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:10:40 2025 by rpki-client