Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
File: NfH9aecZau9eKbp5VoDaw-NIaMg.mft (raw, json)
Hash identifier: 5ZOqKn6NAKdkco34gydgiT07ygRAh8YaVmzWcwlbCr8=
Subject key identifier: AB:88:32:7A:0F:B3:77:CB:D6:5A:77:B6:D9:87:5D:E7:4E:D7:36:32
Authority key identifier: 35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
Certificate issuer: /CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Certificate serial: 019A4D7459D5D59BA7AF4CE447A904FF0C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
Manifest number: 1690
Signing time: Tue 04 Nov 2025 06:01:01 +0000
Manifest this update: Tue 04 Nov 2025 06:01:01 +0000
Manifest next update: Wed 05 Nov 2025 06:01:01 +0000
Files and hashes: 1: 0h3Xfcral2IubnxmY9_tstWMwfs.roa (hash: 1nhiOKUXN9GzK8aVndHDOX8caRYt3h/1uQ8akkf2jNw=)
2: NfH9aecZau9eKbp5VoDaw-NIaMg.crl (hash: 0LXtjSNkZ/gULT2mguewrhdjPPK6wa7wLpk8HXqHzBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:59:d5:d5:9b:a7:af:4c:e4:47:a9:04:ff:0c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Validity
Not Before: Nov 4 06:01:01 2025 GMT
Not After : Nov 5 06:01:01 2025 GMT
Subject: CN=ab88327a0fb377cbd65a77b6d9875de74ed73632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:0e:09:25:48:42:df:a0:64:23:d0:26:73:
a0:e5:0e:91:fe:67:99:6e:16:b1:76:b2:a2:f6:1e:
44:a9:6d:f0:df:7a:35:e0:34:56:19:91:25:88:bc:
09:bc:3c:e8:98:69:84:99:54:5e:9f:ba:1d:79:49:
65:6e:f7:16:b8:77:3a:05:9b:47:00:5c:33:c3:d7:
45:1a:86:97:82:e4:cf:e6:c9:64:9c:e6:fd:cd:a4:
0c:22:0f:bb:64:c6:5d:ea:75:11:d8:c5:39:3f:26:
80:c5:8a:52:2b:b2:5e:47:bd:14:85:f3:6c:d4:3a:
90:6c:80:68:60:1e:d4:9c:4d:8e:cf:69:2c:c1:51:
0c:89:f6:eb:2e:c4:83:00:1a:cd:a1:2a:60:52:2b:
fa:a7:cc:7b:2d:a3:d7:aa:17:d9:7b:00:70:89:28:
80:e9:3b:56:cc:13:a4:1b:13:fe:30:47:29:6c:17:
d5:4a:2a:cc:6e:c4:b5:a0:56:18:3b:54:3a:c5:71:
ac:79:64:d3:06:5a:1e:a3:82:41:a4:ab:64:9f:a6:
90:88:41:47:f7:ac:0a:d0:fd:29:28:b8:b6:8d:82:
3d:ae:ab:93:42:71:c3:39:16:0d:33:bb:cf:16:db:
28:bd:79:a4:73:61:49:e4:ce:5d:90:0f:87:fe:ba:
1b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:88:32:7A:0F:B3:77:CB:D6:5A:77:B6:D9:87:5D:E7:4E:D7:36:32
X509v3 Authority Key Identifier:
keyid:35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:27:f6:83:95:4a:86:96:14:05:68:22:49:2d:c7:e2:6e:9c:
20:e2:39:9e:df:00:89:43:89:94:7a:a7:75:12:2c:d3:2a:fc:
3c:3c:62:8d:d7:b8:1a:a5:ff:89:cd:c1:a2:89:8e:16:d5:49:
6a:65:88:8e:dd:20:5b:79:85:ec:bf:b7:96:f3:56:28:68:70:
78:9f:f1:85:cc:ee:8f:f1:03:42:50:2d:1e:62:ce:69:95:31:
d6:10:a0:63:40:3b:35:6f:11:13:74:e1:63:79:dc:7c:f5:05:
ca:a3:d7:ec:14:66:5f:36:e5:13:54:35:c6:f8:84:c1:fb:9d:
50:6a:9d:91:50:dc:16:87:51:4c:05:b2:8d:a9:d7:e3:65:c8:
c3:14:6b:15:c3:28:fb:79:fe:f7:7d:46:87:d3:8f:a0:14:12:
d7:ef:c8:85:dd:18:9f:51:de:7f:72:11:6e:80:83:0a:3c:05:
fa:66:06:11:de:34:b5:13:5c:09:14:17:ff:53:0f:65:88:d1:
4a:22:50:b5:86:af:d8:af:7b:db:79:29:31:5a:d7:cb:a0:4d:
c5:c0:09:ea:23:96:a6:5d:8b:6f:18:01:55:4b:98:81:53:91:
b3:89:e3:de:27:08:7e:98:ba:52:f1:71:e8:c2:40:2f:3f:4d:
70:3c:19:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:17 2025 by rpki-client