Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
File: NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft (raw, json)
Hash identifier: XyaZYC9V/HgAeBpNZ/aA4LUgMMm5h6xVk+z2s6o3yM0=
Subject key identifier: E5:8F:40:E0:C2:0F:BE:09:F5:7A:21:79:1E:A0:03:13:59:27:49:2C
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial: 019A4DE1EBF84A79457E3D1B505567FF4F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
Manifest number: 0D74
Signing time: Tue 04 Nov 2025 08:00:42 +0000
Manifest this update: Tue 04 Nov 2025 08:00:42 +0000
Manifest next update: Wed 05 Nov 2025 08:00:42 +0000
Files and hashes: 1: 4jPyPZw3fj3g3jxwKw2HWrojQOs.roa (hash: KPFbCHVHeUU2XRC/hJ8YuwMme8By/aerz2iNVWzWJ/Y=)
2: 98C9emKFHKSWoxnRXQ4ADLcbKPE.roa (hash: CvGthRHI4SGJQkS5NvABpgXZA0TVYZ7H8kYAxXAYLqo=)
3: NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl (hash: 9I6wOkn0pBhhyRfTRq3uoQ19zKsO7GsIJFpa5RCyWbE=)
4: sYrkqtslIewoX_6wadaN2UhvCQg.roa (hash: Oj08Cr1VcQgzFndi/8RHmivr+b/zmwMkws7/hKkzL0k=)
5: ufwXrYHICWHfHKo6i-11Xy8XxDE.roa (hash: wzviVt1JzgPyofJmjOmZiOic44Kr4jKlAuGseoOoCMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:eb:f8:4a:79:45:7e:3d:1b:50:55:67:ff:4f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Validity
Not Before: Nov 4 08:00:42 2025 GMT
Not After : Nov 5 08:00:42 2025 GMT
Subject: CN=e58f40e0c20fbe09f57a21791ea003135927492c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:c4:53:15:4c:70:63:1c:e9:1e:ed:0a:1f:
3e:4c:9a:27:88:18:85:fa:f2:16:28:bb:05:8e:e4:
57:a8:89:ef:ac:c7:92:6d:5b:00:67:10:26:f4:bb:
4f:02:c7:2a:14:37:4d:c0:d4:6d:c4:e8:67:c3:28:
bb:11:a3:71:8f:14:b2:ad:2e:ca:d7:e3:50:98:40:
2a:30:f1:76:54:43:81:1e:c5:77:ae:e3:f7:a8:fa:
04:66:01:84:53:29:40:44:65:a6:8c:fc:c3:28:4e:
3f:3f:45:1f:f7:43:c1:33:e4:8e:d8:89:bb:78:ef:
49:15:38:5c:56:34:bf:2c:3a:cf:d2:8b:70:44:6c:
35:5c:01:94:0a:82:be:02:19:7f:84:45:7c:24:8c:
c1:ab:3c:8b:bd:a2:4d:8e:3d:24:e8:d0:0a:6d:85:
04:ab:6e:2a:93:75:fa:5f:44:a8:a7:97:c6:b4:18:
99:90:2f:2b:dd:3d:34:f9:9b:d4:ff:21:f2:60:3e:
3e:23:91:c9:84:87:a6:b9:5a:32:44:01:d2:dc:a2:
c8:ed:41:97:63:cc:51:94:c9:b6:28:40:c1:5c:dc:
76:b6:36:dd:2a:95:78:1e:70:8e:d4:40:61:4e:be:
d3:ce:b3:68:7f:2f:37:41:f2:c4:14:f5:2d:33:7f:
f5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8F:40:E0:C2:0F:BE:09:F5:7A:21:79:1E:A0:03:13:59:27:49:2C
X509v3 Authority Key Identifier:
keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:65:22:f6:f7:4a:da:9c:79:5a:4a:06:5d:16:a4:53:5a:d2:
fd:b1:73:d9:4a:dc:0c:30:75:bf:37:25:65:04:32:5e:c1:59:
e9:42:ae:a1:60:e8:7f:de:c7:a7:2d:ad:de:ec:32:7f:6e:06:
35:00:0b:0d:7f:4b:19:12:b9:36:1f:df:1f:29:c8:c3:60:1c:
b7:30:1a:c0:4e:20:19:ab:5f:fc:e0:cf:e7:28:22:11:90:c6:
f0:1e:b5:84:75:99:24:6a:0e:34:e4:81:a3:0b:d0:a6:51:0a:
46:13:7d:e9:41:d2:4e:d3:07:19:53:95:e3:7a:a8:57:7b:02:
b0:9a:17:10:d0:47:b5:9f:23:e7:90:68:bf:9e:43:70:94:98:
48:c3:37:0b:5c:20:9c:d6:db:6a:9f:f3:ab:c5:78:7c:34:2f:
2f:27:f2:e4:62:9a:73:74:e9:4a:67:62:75:7e:77:f1:01:66:
f8:f3:9a:7d:ec:72:09:42:98:3c:6d:ed:a1:90:50:8f:ad:6a:
7f:e7:1a:85:52:69:4a:8d:06:cd:52:48:a1:5c:9f:fa:ef:81:
1d:34:8d:93:ab:fe:48:b3:59:5e:18:7a:e6:76:6f:c2:ba:b8:
09:57:9e:d2:a0:12:d4:29:af:1c:27:b9:52:84:01:b5:a6:28:
8b:a5:c7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:23 2025 by rpki-client