Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
File: NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft (raw, json)
Hash identifier: zjnyCG+UNEdVyfK62gfJA2akipmvCb4L9BkLC0LkM4U=
Subject key identifier: AA:84:0C:F1:60:B9:16:E4:58:5C:AB:66:CE:DA:FE:3C:5E:5A:6E:68
Authority key identifier: 34:8C:2F:0D:96:77:A4:D1:58:65:60:1F:18:E6:AF:1F:F7:C7:EA:4F
Certificate issuer: /CN=348c2f0d9677a4d15865601f18e6af1ff7c7ea4f
Certificate serial: 019A4F62458F0305EB742DEF6B8D7AEC46AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIwvDZZ3pNFYZWAfGOavH_fH6k8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 15:00:31 +0000
Manifest this update: Tue 04 Nov 2025 15:00:31 +0000
Manifest next update: Wed 05 Nov 2025 15:00:31 +0000
Files and hashes: 1: G75hDgiyd2LwDpJ76o2-U8H3uNQ.roa (hash: S5OSLsFsbCnXpNSoGI0qFyRFbDiGy+ql70CMoNWtluw=)
2: NIwvDZZ3pNFYZWAfGOavH_fH6k8.crl (hash: 2Gpnmo/3e3CoqCfN47Bg177zsinI8PgY+3ZEerHDI2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIwvDZZ3pNFYZWAfGOavH_fH6k8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:45:8f:03:05:eb:74:2d:ef:6b:8d:7a:ec:46:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348c2f0d9677a4d15865601f18e6af1ff7c7ea4f
Validity
Not Before: Nov 4 15:00:31 2025 GMT
Not After : Nov 5 15:00:31 2025 GMT
Subject: CN=aa840cf160b916e4585cab66cedafe3c5e5a6e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7a:2b:4d:5b:4a:40:ed:fc:3b:8d:45:12:72:
ee:99:5a:cf:c4:e6:15:a9:55:59:f1:9f:78:3c:1a:
78:dd:f1:da:73:2f:b9:b1:25:81:03:e3:ef:69:76:
9f:2c:a5:83:57:3e:02:de:63:56:3c:93:dc:fe:84:
35:c4:68:23:20:7e:d6:66:ba:8b:38:0e:43:69:8d:
6c:4e:c1:c8:b5:44:0f:95:24:bb:f4:7e:34:07:27:
11:04:20:a2:55:7b:86:c5:d3:6d:bb:59:8b:a2:a7:
3c:a4:10:1a:36:dd:a7:70:fb:6f:dd:8f:ba:d8:dc:
f0:03:80:a7:f8:8d:89:fa:05:fb:b5:43:73:17:17:
ae:7c:57:00:bf:8a:d8:05:41:6d:73:e7:07:48:da:
f6:02:38:e2:02:ca:50:a7:4f:dc:0f:e2:e6:1c:44:
f8:c0:bd:81:af:df:b3:34:56:6c:43:cc:20:1c:f4:
c5:a4:a6:8c:21:cf:cb:60:ca:e9:6e:28:e6:9b:c0:
39:12:0f:ed:7d:f9:3e:61:14:cc:d4:72:53:80:44:
f1:d0:cb:e3:4f:df:f4:b4:30:6b:cd:07:fe:7b:a3:
d8:c4:61:68:e2:ef:68:98:5e:69:14:40:cc:8b:65:
61:37:5e:ec:0f:d5:78:55:44:2a:08:88:a2:1c:4b:
f1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:84:0C:F1:60:B9:16:E4:58:5C:AB:66:CE:DA:FE:3C:5E:5A:6E:68
X509v3 Authority Key Identifier:
keyid:34:8C:2F:0D:96:77:A4:D1:58:65:60:1F:18:E6:AF:1F:F7:C7:EA:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIwvDZZ3pNFYZWAfGOavH_fH6k8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c9:9f:1c:95:c0:9e:f9:3b:4b:42:44:19:46:15:5b:77:84:
53:b4:f4:05:f2:2e:59:4c:82:88:b5:19:3c:fc:96:c7:f1:8b:
f8:0f:12:07:87:71:36:e4:40:ab:22:ad:9b:68:10:c4:4f:77:
b9:f3:3c:42:8c:ec:6a:d8:2e:76:f7:d5:0c:47:e1:27:26:81:
77:73:9b:f2:71:49:17:18:bc:cc:6a:65:ec:12:58:f2:ab:69:
d6:c6:a5:cc:a8:e1:f6:65:4d:5d:3b:d4:89:ea:5f:d0:a9:50:
5e:68:79:15:26:78:ff:f4:e9:56:70:71:64:e9:53:65:99:44:
e9:fb:24:1c:22:d0:73:6e:fb:c6:5f:6b:fb:f5:dc:9d:78:41:
11:2b:59:06:15:94:16:a1:5a:4b:e3:02:5e:1c:1d:d6:a6:a9:
ab:da:51:d8:ee:04:6d:39:a4:dc:c8:8e:f1:62:5a:16:68:75:
47:91:97:2a:7e:a2:83:d7:09:68:14:14:05:2b:de:31:3f:d3:
f2:cc:2a:e1:44:07:e6:44:31:1c:b4:76:6b:da:0a:64:71:dd:
6e:88:a9:b7:55:d1:21:c8:8d:f2:29:3e:bc:11:73:e2:c7:15:
c4:36:b0:a5:cf:03:fb:e1:01:fb:32:4a:73:b9:fb:47:98:f5:
23:e6:6f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:25 2025 by rpki-client