Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
File: nQp0muJcHLtlhx1BanmrSohKxGg.mft (raw, json)
Hash identifier: DEOkhCiHuWoR8EIzfZe1apx7VdSDQPRac9kbhwz00Rk=
Subject key identifier: A3:8A:DF:E7:9E:2E:D2:F0:E1:B8:7E:0C:00:E7:2F:C6:59:AA:36:25
Authority key identifier: 9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
Certificate issuer: /CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Certificate serial: 019A515082AE5C4AEB037A73973EE31E2D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 00:00:22 +0000
Manifest this update: Wed 05 Nov 2025 00:00:22 +0000
Manifest next update: Thu 06 Nov 2025 00:00:22 +0000
Files and hashes: 1: mtkhlYdRRxy7HTt4lejr_BK0O0E.roa (hash: XUZOJXssCKIIh5ucQaDh2vYICFb1VOST7rkiATGvktw=)
2: nQp0muJcHLtlhx1BanmrSohKxGg.crl (hash: smJNqHLlHfzwWySNf89btzZpwPlWXJ/iCzqzrPUvOIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:82:ae:5c:4a:eb:03:7a:73:97:3e:e3:1e:2d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Validity
Not Before: Nov 5 00:00:22 2025 GMT
Not After : Nov 6 00:00:22 2025 GMT
Subject: CN=a38adfe79e2ed2f0e1b87e0c00e72fc659aa3625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:76:ad:59:09:c6:d0:30:1e:fb:19:09:a6:d9:
19:50:46:8a:df:02:92:d3:da:27:f3:55:ef:fd:6f:
81:e7:b4:45:24:8e:41:c8:3e:29:25:68:df:b6:43:
e4:f3:98:aa:03:9d:29:52:32:63:06:22:94:1d:0e:
0a:82:f6:7c:01:24:aa:77:29:2c:fd:b4:94:99:32:
82:86:c6:5f:76:0f:5c:f1:d8:c8:94:3c:b3:a5:ad:
46:78:21:6b:45:5d:eb:e5:4f:1c:13:93:7d:77:09:
d1:9c:8d:1a:f1:01:31:c8:de:8a:ae:62:ab:5e:f3:
09:21:fa:6a:0e:55:c3:c2:53:f7:67:3a:10:57:82:
42:18:35:c2:2a:e4:d5:4d:f9:60:d4:c7:39:ef:18:
2f:63:0f:99:10:09:47:e9:6d:3c:a5:8a:d1:dd:b9:
99:f2:45:ee:2d:9a:23:68:6f:10:1a:d5:f1:f6:cf:
6d:51:5c:67:6b:7c:8b:5f:32:81:0c:60:cc:2b:43:
46:52:85:24:11:21:ea:ab:ae:4e:cf:b9:7b:a9:3f:
ac:23:a9:53:05:7b:55:96:21:d3:2f:ac:a3:12:56:
b5:7c:b9:20:b8:5a:7f:69:e1:63:f1:e1:3c:1b:db:
47:73:5f:8f:8a:72:b7:6f:fd:09:c8:23:31:5e:b7:
85:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8A:DF:E7:9E:2E:D2:F0:E1:B8:7E:0C:00:E7:2F:C6:59:AA:36:25
X509v3 Authority Key Identifier:
keyid:9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c6:f9:eb:a7:f5:b2:41:2e:ea:5e:d1:fa:fe:71:d5:73:60:
3a:f3:1c:95:46:01:ef:ad:fc:3c:f6:d7:47:50:58:15:e1:5d:
7e:4f:29:6b:26:4e:44:c9:37:7b:92:ce:ab:3c:d8:f9:b3:08:
76:ba:6d:03:e1:89:16:36:8d:ad:fc:a0:df:b9:e0:27:be:0c:
75:54:28:a8:97:64:0e:47:e4:2f:08:9e:77:26:88:aa:da:3e:
e1:5c:d4:07:3f:ee:44:80:3f:41:81:61:1a:98:96:9d:bf:32:
2a:4e:dd:0c:9e:fd:e0:24:bb:58:e6:a9:db:1d:7f:46:0b:ee:
43:04:05:2e:79:47:45:cc:33:47:41:64:0e:7d:ec:e0:fb:29:
72:f2:d8:a1:2c:18:cd:ae:cd:73:04:07:3f:00:86:24:22:fa:
4a:2c:52:ca:8a:ec:0c:40:f2:04:0d:4e:b4:38:4e:f3:5e:e0:
4f:1b:c1:c3:dd:20:d9:2d:70:38:1d:c1:86:90:cf:6c:20:90:
2a:2e:93:88:aa:fc:21:b0:8e:62:fa:bd:91:d3:31:fd:3e:80:
6a:42:59:12:07:8a:b0:8b:44:9a:5f:a5:65:8f:da:d9:14:d1:
e5:e6:ac:8b:05:b8:db:ad:37:2b:ed:92:82:04:30:3d:75:25:
f5:1e:8d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:21:08 2025 by rpki-client