Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: eGWWSlkUOiRqz/a70saFrs0nKGrnm6o5SBT8+Ws7fcE=
Subject key identifier: 74:A2:2A:BB:D9:84:92:A1:33:AF:56:48:4B:DF:B4:28:0A:A3:39:98
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 019A4F62D3CA4CCAD1CA0CC6A5EC878222A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:01:07 +0000
Manifest this update: Tue 04 Nov 2025 15:01:07 +0000
Manifest next update: Wed 05 Nov 2025 15:01:07 +0000
Files and hashes: 1: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: Z39nZM4dzLm5wuABG5KusA1UdmIBOg/HW5uLJACJ0TA=)
2: t18fV6YPwA2MAEndpMc8X0ToRWw.roa (hash: H0VTW6jFucioUCNK4Zk3Ys3jO7tUvJYmK3uUV0BFJlM=)
3: udb2liD_hmmSjMQHfxOs3ILFeak.roa (hash: I8Ss2wHMn10fRDENu7eQisoAjY4IBsPU1iECaxEl9xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:d3:ca:4c:ca:d1:ca:0c:c6:a5:ec:87:82:22:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Nov 4 15:01:07 2025 GMT
Not After : Nov 5 15:01:07 2025 GMT
Subject: CN=74a22abbd98492a133af56484bdfb4280aa33998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:06:48:26:89:da:b8:e6:9b:61:3c:fc:0b:67:
df:67:94:73:14:59:4c:6e:d1:3a:07:8a:a0:d6:9c:
79:d5:e3:8e:bc:41:c4:07:56:c4:80:dc:14:3f:f5:
c0:a1:05:15:58:cd:68:e6:73:84:95:26:1d:a5:ab:
f6:91:9e:cd:63:1e:33:62:0e:c6:1a:0d:fc:ac:2e:
95:90:7a:b7:df:27:be:03:19:0d:b1:a6:54:59:f4:
b7:8f:99:78:22:28:e1:d9:0b:3e:eb:ff:f1:9c:ad:
61:a6:e1:e2:30:ff:04:c9:b0:ea:86:dc:f2:93:e6:
a4:3c:fe:12:c9:39:24:91:f1:f8:ed:ff:f0:d6:e1:
93:ff:7a:28:10:e0:96:06:29:bd:a4:0a:16:92:f0:
e7:91:b8:fb:84:89:fe:ea:cb:f0:9c:3e:f7:f8:35:
67:6f:42:72:7a:f5:6c:cd:7d:cf:fe:9d:c4:42:3f:
1e:06:05:55:df:03:f2:3b:86:24:a4:7c:90:6e:ea:
f6:a4:c9:b7:72:14:e1:8b:9a:ef:2c:6e:d8:56:19:
d5:a7:6e:f4:e3:1f:89:f7:fb:82:a8:46:62:a6:62:
65:58:b3:dd:85:e2:be:c3:cb:c7:62:09:5d:65:b0:
c4:0d:1b:cc:ce:2a:cd:6f:be:f2:83:5d:73:63:9d:
e2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A2:2A:BB:D9:84:92:A1:33:AF:56:48:4B:DF:B4:28:0A:A3:39:98
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2f:5b:01:46:ce:49:22:5d:79:fd:72:1e:1e:9a:8e:c9:1e:
6c:f2:b8:ef:67:0f:9f:db:2a:2c:a7:c1:39:c9:4a:c8:e7:f7:
00:2b:3e:2e:df:c4:b3:86:61:ed:26:a6:77:43:bc:35:83:42:
1e:fb:7e:7d:ba:4f:48:fc:ab:53:59:da:81:57:20:09:77:f9:
f6:72:84:e4:43:c4:0b:29:3f:c2:57:99:7d:3b:04:26:84:d8:
62:b4:03:cb:6b:04:54:57:16:88:a1:55:47:48:16:ad:82:22:
d4:a1:fd:24:e2:3f:d7:f1:5d:20:d1:86:e5:b1:da:e7:2f:81:
d7:d8:cb:6e:73:01:bb:2c:94:ed:20:17:dd:08:8a:30:3a:04:
f2:6c:1a:b1:d7:58:e0:ed:b1:f4:51:76:df:28:50:70:54:cd:
89:b7:68:58:0b:e1:c5:61:48:71:86:18:76:b5:21:ed:5f:7c:
9a:d0:d9:26:95:f3:03:9d:3c:fa:ff:cc:59:70:20:a0:e8:36:
75:f1:d9:60:ef:58:24:d8:d3:23:d8:4a:8a:56:6a:50:0b:cc:
a5:0d:17:79:e3:71:a6:fd:68:52:b4:1f:9f:99:5b:33:b5:e6:
cc:ce:fa:cd:49:8c:6b:ca:9b:d6:db:07:3c:74:3f:16:8b:4b:
b0:3b:5d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:43 2025 by rpki-client