Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
File: n-lNLu3NgkrB3nSt42wfnWnUlso.mft (raw, json)
Hash identifier: mVM/Bpgh19bI5fOozw5GFqyxzfS9K3XBG79b/Boucuk=
Subject key identifier: 84:D2:D6:E0:C8:C8:A0:F4:5F:AF:0A:94:88:DC:B7:EB:52:9A:03:96
Authority key identifier: 9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
Certificate issuer: /CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Certificate serial: 019A52635D2EA0C11347C52BA42E0CF1E209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
Manifest number: 05FA
Signing time: Wed 05 Nov 2025 05:00:34 +0000
Manifest this update: Wed 05 Nov 2025 05:00:34 +0000
Manifest next update: Thu 06 Nov 2025 05:00:34 +0000
Files and hashes: 1: 6Zp9qhuJ7dxdBCAgd5__iELlPCk.roa (hash: cToJ6urjtRkBvRK35UPrzOd0uWCJVgb7/Yiw0ySoKxo=)
2: GwcrTxprlO5D_UngU1k7ofqb2vQ.roa (hash: /dEUoEaQYiKNd7FRn0741i8r3OopdTq+ENqKdnvasIg=)
3: n-lNLu3NgkrB3nSt42wfnWnUlso.crl (hash: oP6JJzq11dZ5pfZhi1lx5StW2sW/waVTrtqY/mq2FVk=)
4: yV6fiEspLXOEx7U1Asa7uW-HDiw.roa (hash: RlXdlJwRE38rpzhsxwT5lygoPGRsWFRdfhjDcsqFbQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:5d:2e:a0:c1:13:47:c5:2b:a4:2e:0c:f1:e2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Validity
Not Before: Nov 5 05:00:34 2025 GMT
Not After : Nov 6 05:00:34 2025 GMT
Subject: CN=84d2d6e0c8c8a0f45faf0a9488dcb7eb529a0396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:27:dc:bd:2a:35:43:9f:77:28:da:b2:44:68:
fc:fc:29:82:f1:4a:9d:34:72:89:da:71:64:b6:47:
bb:3e:57:d2:e7:8e:ae:c8:e1:3a:48:18:50:2b:79:
8d:53:95:3c:23:8c:c1:53:71:10:09:16:4d:15:3c:
39:91:8e:e2:0a:b9:34:e5:cf:81:c8:2b:72:7f:e3:
03:6b:70:a4:82:a7:7a:60:1c:f8:91:6b:39:de:77:
15:dc:ec:8f:56:60:18:04:f4:c2:57:4f:3a:4a:c3:
3b:e5:35:68:cf:3b:02:da:9a:ea:58:9b:e9:83:1b:
da:de:e9:c5:95:30:c7:cf:77:fb:8d:e7:11:d7:7f:
52:76:df:98:cc:86:0f:3f:84:3e:39:5e:b5:8c:ee:
b6:b9:22:9e:51:06:d1:6a:1b:4f:af:8f:ec:1d:60:
44:0d:b9:96:46:e9:b6:80:a5:c0:81:dc:3e:a1:95:
83:70:79:08:8a:31:2d:da:d5:72:7b:f3:ee:dd:f1:
69:83:48:af:96:30:fd:e2:b3:2b:ea:4f:f6:b6:7b:
03:c4:ea:ef:f4:b5:11:9d:87:ac:79:2d:04:4e:66:
c2:e8:af:25:b2:14:6d:e3:72:c1:78:13:89:09:f3:
85:fe:42:ed:eb:37:ed:d9:ba:d3:59:32:af:3b:d7:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D2:D6:E0:C8:C8:A0:F4:5F:AF:0A:94:88:DC:B7:EB:52:9A:03:96
X509v3 Authority Key Identifier:
keyid:9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:bd:40:d7:8e:a4:55:f6:c4:3b:ff:87:c1:4b:cf:74:5d:dc:
37:3d:b6:6f:97:f4:9e:af:d9:d1:a3:89:05:88:c0:9e:ab:59:
e3:46:10:1f:86:20:78:7b:b5:d3:5a:de:78:33:ef:da:84:b2:
0b:8f:02:36:59:cf:25:f7:1b:ef:88:b9:3e:52:6e:20:dd:7a:
0f:53:f1:ad:d9:d9:c6:ee:3a:e3:f6:5d:7d:3c:b1:ff:03:db:
8a:91:10:4a:3d:e0:5b:37:62:be:22:26:a3:e9:ff:9d:85:12:
86:bc:5b:c3:97:fa:43:c2:ed:8e:b5:93:ad:da:58:44:c0:37:
e5:cf:9d:61:41:d2:07:66:b4:a9:6f:f4:b1:c1:c9:8f:ec:2d:
86:0e:bc:76:b5:5e:e1:a9:f4:5e:fb:5c:26:9c:3e:1d:bc:a8:
b4:80:13:39:99:f2:22:06:4b:13:22:5c:bc:8a:bd:a0:df:90:
7f:45:d8:b6:f7:a9:f0:4c:d7:db:ce:9c:89:e5:d5:d3:f5:10:
a3:c9:75:f4:bf:f8:2a:1b:6d:ce:a9:c7:8b:ea:56:ad:23:f2:
a3:20:24:e9:d1:72:ee:8c:5f:4d:a8:84:1f:82:2b:27:68:c0:
fc:d4:40:b4:9e:b8:00:6c:0c:7a:b2:8b:64:33:21:5c:1a:fc:
77:cd:04:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:07:02 2025 by rpki-client