Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
File: t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft (raw, json)
Hash identifier: Sa9nfFhFOnBagz24VwS+FQYTgVL0hZ3vLppJ0b+vY8g=
Subject key identifier: 62:16:B3:13:81:C5:94:F9:A5:91:F8:2E:CE:AE:B8:7F:75:3E:9E:93
Authority key identifier: B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
Certificate issuer: /CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Certificate serial: 019A51503E4B50D4E00FC85903C3545D505E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
Manifest number: 0B72
Signing time: Wed 05 Nov 2025 00:00:04 +0000
Manifest this update: Wed 05 Nov 2025 00:00:04 +0000
Manifest next update: Thu 06 Nov 2025 00:00:04 +0000
Files and hashes: 1: 7HgZFirs9to5YNlgGjCrLE4fFdw.roa (hash: gvtNC6tdiAxQLr0n4eBnmWFLLNsQSfj98rKVj8SvSuA=)
2: GFzeRaBmyIOkrDv5Yl4eeRJ9yBo.roa (hash: rZYvabv/j2AaljGdwS148ssayLuXys6DbuYJ6bJxVGw=)
3: t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl (hash: wHHinI8e1mmcYA6smQv84xV02MWOv5AxtDcomGiT+dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:3e:4b:50:d4:e0:0f:c8:59:03:c3:54:5d:50:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Validity
Not Before: Nov 5 00:00:04 2025 GMT
Not After : Nov 6 00:00:04 2025 GMT
Subject: CN=6216b31381c594f9a591f82eceaeb87f753e9e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:d5:cd:3e:8b:1e:a9:62:ca:4b:1c:af:9b:
aa:91:37:85:8f:f6:d8:49:fa:d6:0a:e4:ac:48:5e:
0c:fd:5e:2f:d2:50:f9:ac:3d:90:bd:eb:8e:6c:9a:
4c:c4:18:5f:59:98:71:2d:e1:d0:3d:4f:29:51:b3:
85:f0:23:0d:60:c9:28:cb:69:bd:b0:d2:46:ee:a9:
3c:83:08:a5:90:00:04:92:4f:41:85:6a:13:70:ec:
ab:93:83:c1:2d:e5:db:e6:0c:33:d6:fa:78:44:96:
21:0f:b4:67:bb:b2:ce:2f:6f:3a:4a:68:9a:7d:d6:
a5:ea:40:7f:40:63:51:06:4b:32:75:80:5a:c9:1e:
1c:31:3f:a8:e5:f4:3b:f9:57:d1:de:22:46:8b:d9:
03:e1:1e:b5:e2:21:ae:87:22:31:48:a4:bc:1f:82:
18:b8:5b:3f:ff:32:25:db:73:56:d7:26:d1:fb:54:
89:56:9f:73:72:6b:3d:a9:fc:9c:bf:e4:f8:bb:1f:
a7:91:d1:27:8a:e6:10:86:de:32:cb:31:72:7a:ab:
a4:6f:aa:f9:5d:96:bc:a6:50:20:7d:15:13:10:cb:
20:8b:04:70:5a:0d:ed:ef:9d:1b:26:86:c3:5c:47:
9c:12:55:c4:75:cf:7e:cc:ae:df:b3:87:95:cf:ac:
da:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:16:B3:13:81:C5:94:F9:A5:91:F8:2E:CE:AE:B8:7F:75:3E:9E:93
X509v3 Authority Key Identifier:
keyid:B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:68:ac:e5:c8:79:ca:65:42:43:86:74:58:b2:ca:75:6f:99:
4e:41:d1:c8:38:cc:ad:16:02:24:12:ea:af:40:21:75:bc:1d:
b9:b2:0a:99:23:97:05:82:a6:a5:8e:21:9f:6a:bf:5b:26:d9:
39:86:95:12:53:96:d3:9c:f2:43:ec:61:92:53:aa:56:69:bd:
46:6f:3a:7e:0e:b8:72:79:6c:5e:ca:f8:59:b8:92:37:d9:e7:
b4:ac:fd:35:86:46:cf:7c:6d:ce:bb:57:7a:35:7d:1e:71:3a:
9f:6c:22:17:2f:d2:83:b0:a9:55:a3:89:ac:fd:a1:2d:56:f3:
46:ed:86:76:1a:fb:6c:be:f6:97:17:b5:b9:4f:50:4f:a8:f4:
88:ae:1e:38:6a:76:38:27:46:e3:29:b4:25:d9:4e:20:76:97:
47:9b:2c:08:d8:6f:2b:9b:65:53:ce:8e:b5:d3:a3:e4:57:8b:
e8:af:16:13:25:de:03:18:a9:98:33:8d:9f:f7:97:97:18:e8:
c1:86:05:67:c7:40:79:29:1c:4c:70:b5:70:c1:7b:3a:02:90:
76:f5:6e:6f:5f:92:e0:45:d0:6c:5f:64:bc:b1:9b:1c:a4:3c:
44:f9:44:55:1e:f4:63:54:c8:5c:5a:f9:e4:05:21:6a:ae:1f:
86:d8:4e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:07:12 2025 by rpki-client