Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
File: Nv7S1etbPFJmq6phfJYHA8VdB4U.mft (raw, json)
Hash identifier: taem5mwsiYRpZEG1Jy+mzgbUnZgK6s5dsmfItUHFarc=
Subject key identifier: A0:EC:BA:D5:DC:A0:78:32:EA:2F:19:B5:72:3C:A8:C8:CA:F7:9F:03
Authority key identifier: 36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85
Certificate issuer: /CN=36fed2d5eb5b3c5266abaa617c960703c55d0785
Certificate serial: 019A4FD09CBA07815F922090586D352B99C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 17:01:02 +0000
Manifest this update: Tue 04 Nov 2025 17:01:02 +0000
Manifest next update: Wed 05 Nov 2025 17:01:02 +0000
Files and hashes: 1: 8_VDYxYfQ3xVlWP15Ma3Tw9vIZY.roa (hash: p9ujQLih3FUP7R7lN/a7zNvyvlVnBJRzQXMR2O0trWo=)
2: Nv7S1etbPFJmq6phfJYHA8VdB4U.crl (hash: MGHBmQCJYKhAxT9mBbHfpH+9RzZJd9TvrcxBuBD6Mns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:9c:ba:07:81:5f:92:20:90:58:6d:35:2b:99:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fed2d5eb5b3c5266abaa617c960703c55d0785
Validity
Not Before: Nov 4 17:01:02 2025 GMT
Not After : Nov 5 17:01:02 2025 GMT
Subject: CN=a0ecbad5dca07832ea2f19b5723ca8c8caf79f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4b:ba:a6:4a:f2:02:83:6d:83:f6:c9:6a:dc:
2c:a3:94:6a:d1:db:a0:7c:40:3b:a1:50:57:7a:fd:
ad:43:51:e7:3e:ad:49:11:e5:32:20:de:86:57:a7:
ce:3a:06:69:26:fe:41:1e:e5:fa:bd:e9:48:14:f1:
8c:51:af:30:34:24:4b:25:57:40:03:aa:dc:c7:45:
43:46:ad:99:fa:d3:df:6d:59:ae:e2:4d:f0:01:3d:
df:17:76:f3:6d:62:9e:08:62:de:f5:f7:77:14:2a:
a8:ab:b8:95:0e:1e:34:70:49:e8:cc:ee:0e:c0:5d:
62:99:49:6f:6a:9c:67:96:69:71:36:c8:51:19:07:
cc:d6:bd:cc:eb:29:a5:86:65:91:5a:d7:4d:27:b6:
ca:b7:1d:09:c6:97:ef:21:45:e4:ae:4d:2e:08:87:
b7:90:bb:c1:d6:6b:1c:71:9a:3d:08:b2:11:d9:ec:
24:ba:e8:c5:48:bc:a7:79:a7:c0:fa:fd:f4:5a:ef:
ec:f4:db:f3:bd:f7:50:35:8e:d3:3d:a7:68:c5:d4:
8c:ea:db:13:89:4d:99:4c:ec:fe:be:0d:32:d0:41:
41:f5:1c:86:d9:1e:36:8c:2f:71:17:24:1b:66:13:
e7:5e:79:d7:55:c1:28:8b:63:c8:77:88:b7:72:27:
99:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EC:BA:D5:DC:A0:78:32:EA:2F:19:B5:72:3C:A8:C8:CA:F7:9F:03
X509v3 Authority Key Identifier:
keyid:36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:41:1a:3f:62:c7:92:e2:f2:6a:df:8a:94:b4:1a:18:95:60:
34:e8:b9:b0:de:a3:74:3b:a8:1b:86:7f:45:9d:5c:d3:75:8d:
60:1d:49:da:8e:82:6b:e1:35:ba:9f:47:87:f2:77:68:f9:08:
c0:dd:0c:65:57:81:1c:95:81:5a:bf:0d:70:5c:b6:0e:5c:50:
61:6d:00:a8:8b:76:f2:39:3a:7b:68:e9:0a:77:34:6c:6a:2d:
86:da:95:f3:ea:be:d7:2b:c0:a8:5a:75:b4:f5:66:0b:0e:a3:
1d:4c:9e:7d:49:9f:15:e4:b6:fd:13:a8:4a:68:69:6d:05:fe:
b4:c6:b4:77:02:32:3d:92:01:81:15:66:5d:83:52:d6:0c:12:
ed:a8:a5:f2:de:c7:9e:80:8a:16:c4:24:96:ea:56:4c:4a:e8:
25:7b:66:5f:d2:51:aa:83:2f:04:9c:fd:af:7a:ae:66:42:25:
59:3b:d5:7c:f6:7e:09:bd:f6:86:3c:c5:4f:e2:d8:48:47:3b:
2f:33:5d:9d:cb:75:f1:48:09:83:cc:9a:a8:19:48:9c:97:e1:
9c:0b:95:89:d0:3f:54:77:09:cf:8e:b2:7f:27:96:27:41:ae:
76:2b:25:a9:4b:fe:65:11:a6:f5:ab:22:ff:01:7a:8f:b4:2e:
f1:d6:b4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:37 2025 by rpki-client