Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
File: t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft (raw, json)
Hash identifier: r8aWBDCn4we8IhXBGflIoLLAXF+bvc7EyHqDMDFI9bY=
Subject key identifier: AC:23:2C:C8:37:CA:C0:07:FF:3E:59:50:FC:1A:5D:B8:B4:50:7B:48
Authority key identifier: B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
Certificate issuer: /CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Certificate serial: 019A4F61E8F77C030C060EDB480B2DF28693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
Manifest number: 0B71
Signing time: Tue 04 Nov 2025 15:00:07 +0000
Manifest this update: Tue 04 Nov 2025 15:00:07 +0000
Manifest next update: Wed 05 Nov 2025 15:00:07 +0000
Files and hashes: 1: 7HgZFirs9to5YNlgGjCrLE4fFdw.roa (hash: gvtNC6tdiAxQLr0n4eBnmWFLLNsQSfj98rKVj8SvSuA=)
2: GFzeRaBmyIOkrDv5Yl4eeRJ9yBo.roa (hash: rZYvabv/j2AaljGdwS148ssayLuXys6DbuYJ6bJxVGw=)
3: t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl (hash: 9oQ1y8P0RCrkGoLcfO+ydXo9OK2JmLqySCqjFmbcEJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:e8:f7:7c:03:0c:06:0e:db:48:0b:2d:f2:86:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Validity
Not Before: Nov 4 15:00:07 2025 GMT
Not After : Nov 5 15:00:07 2025 GMT
Subject: CN=ac232cc837cac007ff3e5950fc1a5db8b4507b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:41:c8:99:e3:92:69:48:3f:8f:68:eb:ad:
9f:54:31:98:66:8f:18:e5:dc:53:84:4f:3c:b5:89:
52:0c:5b:e8:08:61:eb:aa:7b:4d:ca:0d:c3:71:ba:
21:b0:be:b3:5b:3a:57:a6:4e:e1:dd:c8:72:f0:7a:
98:49:f2:4e:3c:35:db:68:a6:1d:96:9b:e8:32:07:
97:14:3c:0b:b7:57:01:c9:fa:ac:a7:90:1f:7f:a8:
f3:57:7a:53:57:dd:f1:9d:33:28:74:9e:0a:61:2c:
b4:86:0b:ec:50:fe:6a:87:a6:b1:5c:51:47:04:4b:
4c:f9:fa:ea:a4:40:86:25:6f:75:27:ea:c8:83:e0:
46:c6:4f:29:a8:bf:53:cf:77:b1:6d:9b:70:ab:1d:
c5:14:a9:25:af:cd:4b:af:2c:21:15:82:d8:95:ce:
c4:9e:5f:e4:41:57:bc:09:66:28:ee:97:26:20:96:
31:5f:72:18:ac:ab:5d:27:90:4e:8c:62:99:28:cc:
2e:17:fe:ba:16:c6:5d:42:22:3a:6b:c4:62:c8:a8:
b7:4b:42:b5:3a:12:d2:06:ab:4d:da:fc:2a:a9:bf:
75:bf:95:1f:8e:48:42:7c:27:b4:ab:39:98:ee:e6:
e8:ef:47:b5:b7:da:5d:ff:68:c6:47:10:81:e3:bc:
31:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:23:2C:C8:37:CA:C0:07:FF:3E:59:50:FC:1A:5D:B8:B4:50:7B:48
X509v3 Authority Key Identifier:
keyid:B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:99:cb:4a:90:04:1a:41:a5:74:a0:01:6b:21:fd:68:09:89:
77:e8:f6:65:a0:38:6d:f0:db:33:85:80:86:15:07:b8:33:20:
74:82:f0:d8:04:19:7f:be:d9:99:e5:1a:63:7a:6f:5d:fe:52:
59:94:83:75:ff:19:b9:12:8e:40:23:0c:bd:c3:94:e2:ea:1e:
9b:fa:c6:53:8c:b8:bf:5b:f4:0c:a7:53:8e:f5:2c:3b:6d:a9:
e4:a7:fa:34:2a:98:55:3e:49:5b:b3:5e:b0:8e:e3:04:0a:12:
72:a4:c9:c1:c0:48:fe:56:9b:e1:0d:0e:ba:ce:8d:a3:9b:4c:
f4:bb:9a:4c:fc:2d:dc:ca:c5:99:8e:60:d2:78:7c:07:75:43:
ae:27:33:25:21:9b:0e:9a:1c:d8:f7:b8:6d:a9:66:e9:a7:5c:
66:cb:d8:b3:91:7f:bc:61:51:eb:0c:98:e1:e7:97:c5:1c:b8:
9b:e6:13:ff:6f:36:e7:70:0c:d0:ce:d5:4e:d5:fc:b6:f7:47:
74:de:b5:c3:e9:5b:59:83:4d:db:e6:d8:fd:5e:7b:1c:1f:b6:
58:81:a2:d5:01:36:36:cb:6e:f6:df:e8:e0:92:87:f0:8e:e5:
86:fb:e1:f4:5b:75:f7:3b:99:ad:0d:69:1f:f5:84:7a:a9:89:
81:f9:de:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:09:39 2025 by rpki-client