Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File: noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier: FfHvZ33+zD+11WZKNW4OjxSOqihI53kj/oF9/3fJ9KI=
Subject key identifier: E8:76:F4:ED:69:71:4C:05:A6:FA:59:05:A8:A9:E1:EC:B2:3B:0F:82
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer: /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial: 019A4E86875641F7E3D6552D6C5ACF36CB3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number: 0DB8
Signing time: Tue 04 Nov 2025 11:00:30 +0000
Manifest this update: Tue 04 Nov 2025 11:00:30 +0000
Manifest next update: Wed 05 Nov 2025 11:00:30 +0000
Files and hashes: 1: nOieJBaD-sIvzNFw8ys8kgtNYus.roa (hash: mIQiCbdb3uG6eqbgHss6OvqglKI0yQcTc3QtF2YXAwA=)
2: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: 05XxfOMx+efnWRiI2rmdfsK+RtWYYehslKklAfnmyEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:87:56:41:f7:e3:d6:55:2d:6c:5a:cf:36:cb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Validity
Not Before: Nov 4 11:00:30 2025 GMT
Not After : Nov 5 11:00:30 2025 GMT
Subject: CN=e876f4ed69714c05a6fa5905a8a9e1ecb23b0f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:70:b1:e1:0d:31:d3:3f:e3:4e:96:da:ac:
cc:86:2f:f0:94:f6:be:b9:28:d1:c5:9e:7c:a6:fa:
fe:e3:f5:b4:84:b1:bf:8a:9b:d5:3e:16:f5:1d:38:
da:2f:6b:9f:81:f3:eb:4d:16:ad:07:ae:07:da:45:
ba:e7:85:87:db:18:c3:a3:02:01:fb:48:1a:97:1a:
c0:a8:3c:76:53:6a:a1:6f:7d:a6:fa:84:7a:ad:f3:
70:c2:67:70:03:cb:0d:f8:8e:92:f9:71:44:43:43:
cb:45:c8:4c:34:79:f4:c7:72:9f:95:33:bc:25:ab:
48:a2:55:90:8e:93:d4:a4:92:1c:e8:15:fd:63:c0:
cc:a9:74:ed:8c:f2:4f:74:09:2f:33:59:d9:1b:22:
ae:a2:62:49:11:33:41:47:3e:ec:3f:e5:c3:38:2e:
16:33:1c:8b:22:e8:d4:94:75:a6:1f:d9:1e:ee:37:
f9:84:36:f3:60:df:28:30:01:6b:6b:25:31:c9:05:
30:2d:7d:e3:ea:7e:05:ac:ad:4a:90:8f:28:1f:b6:
a2:fc:11:84:03:43:7b:99:2a:8b:9d:79:a3:d6:75:
aa:42:e0:da:39:e8:73:89:f2:0a:1f:4c:e0:4d:41:
3f:b9:2f:07:51:4d:4b:2d:50:c6:fc:33:c9:a9:0f:
a8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:76:F4:ED:69:71:4C:05:A6:FA:59:05:A8:A9:E1:EC:B2:3B:0F:82
X509v3 Authority Key Identifier:
keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d7:9f:f4:3d:eb:4d:7d:6e:98:43:1d:a7:76:eb:a5:98:3a:
13:50:da:5b:8e:12:70:bb:ea:86:eb:71:24:89:b1:fd:8f:35:
89:b1:09:19:05:c8:80:be:45:2e:58:2b:5b:9c:c9:1b:b7:70:
43:93:b8:fb:6e:28:a2:d0:66:ef:ab:ad:a0:86:4d:39:44:75:
6e:64:d6:be:a2:09:4c:79:8f:33:f0:4a:df:27:b8:8e:86:b9:
8a:81:f9:5c:3b:ce:15:9c:ac:64:35:3d:b2:38:3b:40:78:4c:
24:06:18:b9:4c:6b:d9:ad:82:09:47:94:19:e6:ec:7e:1e:12:
c5:ab:c8:36:ce:e9:0d:db:80:d0:1f:1a:67:ef:50:05:23:3e:
e8:3c:1c:15:95:c9:50:44:0d:7e:d3:67:dc:08:33:03:02:cc:
97:b3:6f:db:05:a3:4f:9f:94:ce:da:fc:fd:e3:a3:11:8d:7b:
ac:36:34:d8:58:a5:ad:5b:38:95:52:95:2e:d2:65:7b:64:7d:
2e:77:22:60:d6:b4:6b:e4:49:16:f2:ad:c4:45:79:f4:16:b7:
f6:99:ec:c7:5a:2e:de:09:6d:e3:18:bd:7a:da:a8:2d:1d:1e:
f9:bf:24:ac:6f:ce:3c:b0:d4:53:60:fa:e5:a2:b4:37:65:d9:
f5:bd:33:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:31:29 2025 by rpki-client