Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
File: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json)
Hash identifier: aftErOuGnQ3ZCvNhyxnF/T9R+CfNnzPQT2OhgOSUILY=
Subject key identifier: 3F:21:B0:04:BE:5F:04:A3:A6:2F:24:B3:55:01:B6:16:3C:55:2F:F1
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 019A54BF74FCC829BC7A8191DF9534612DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
Manifest number: 1716
Signing time: Wed 05 Nov 2025 16:00:24 +0000
Manifest this update: Wed 05 Nov 2025 16:00:24 +0000
Manifest next update: Thu 06 Nov 2025 16:00:24 +0000
Files and hashes: 1: 8s1U0KmUYb897VvjMdVaiCCBr8Y.roa (hash: 5qEC8e4y3KYPBzPpD5dv/300fB0lSnNjSuXLoow+Q8w=)
2: LaYkRMNeto2OFZ9VBnU48w_HGgs.roa (hash: 16B1JfqcXDvmz5pVWUS+KsHYpQRrCgD9R9Tg6uXacIA=)
3: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: 8YHHnP1qqQmULo3RkEn1r/RcmsfKcAUNJNZM5AsWt/Q=)
4: W8oJrry2382XyDpwYu9d1fRM57k.roa (hash: vgOtreWyL8SSvp1wiImWd0ZzLXQJtP4n+ctgbIbJd6I=)
5: ZPnSp5toQpthOZvn7vrTi1PIJ0A.roa (hash: 2xJoiopsp/aP4IfMiv71h2CCh2maxmce9cHqGdAd1jM=)
6: hDuQO-2O-6Lo8qgrhYqNM0G4P24.roa (hash: WUDxmKQLeVQHlfqkPeKYvZqVqvTuBp11Xfwh/S2zHnQ=)
7: rJESdqv17knzJ4wNzfBk8WWWnw0.roa (hash: BdHgAA5eA1A53dV1mMcPmgdF0S7eP4oFR6WHvpTEZ/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:74:fc:c8:29:bc:7a:81:91:df:95:34:61:2d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Nov 5 16:00:24 2025 GMT
Not After : Nov 6 16:00:24 2025 GMT
Subject: CN=3f21b004be5f04a3a62f24b35501b6163c552ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:fd:ff:61:97:db:38:43:4f:d8:03:e6:52:
73:c5:65:77:12:cd:af:86:e8:67:08:01:2e:de:07:
36:fc:a6:77:06:86:3e:2d:f4:43:6b:a3:b0:d6:03:
0d:26:84:47:bb:bd:34:88:fb:57:1b:6b:31:46:90:
7d:76:64:43:9a:60:73:9c:85:1f:7c:bf:46:07:ef:
e1:e1:38:67:0c:af:e2:83:5d:70:ba:98:7e:a6:f5:
49:d5:a3:3c:54:ff:c7:b5:bf:4a:80:ad:69:70:ad:
29:40:39:86:6e:dd:cb:ba:b8:74:33:4b:55:c9:95:
a8:ea:3f:18:d8:76:93:58:7e:ab:f9:3a:0e:4c:76:
7f:1c:4c:97:5f:69:4b:93:cf:0e:31:ef:2b:5a:99:
c9:5b:27:5b:cd:a7:28:6a:9c:90:8c:7d:d8:e1:9b:
17:dc:79:25:06:04:d6:6d:5a:05:dc:94:ae:8a:fd:
96:53:25:0c:ed:b5:fb:fc:89:5f:75:63:90:e2:5c:
21:8a:79:93:27:e8:c9:35:4a:35:a1:75:b6:03:4b:
d5:8c:1b:1f:51:a4:12:d3:7d:5f:e2:d9:99:1f:57:
88:ca:fc:9a:17:bc:38:7e:9d:11:0f:7e:eb:78:04:
f0:8b:df:ed:a6:9c:e4:42:35:22:27:35:39:65:f2:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:21:B0:04:BE:5F:04:A3:A6:2F:24:B3:55:01:B6:16:3C:55:2F:F1
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:de:fd:8c:ad:c6:9a:ab:7b:9c:43:1e:a1:dd:51:6b:73:2d:
b6:69:36:1f:90:f6:78:ca:99:fa:56:83:f3:08:1e:68:11:b8:
8c:fa:1d:c4:17:38:f0:c7:e9:7c:cb:17:14:b3:45:c3:0b:d6:
c5:dd:61:c1:08:82:ee:4b:a0:05:b1:dd:17:4b:df:b3:8f:90:
bd:b1:1f:72:f5:80:db:3a:d5:60:a9:20:22:5c:dc:be:66:cf:
9e:b3:00:67:1d:70:04:24:02:e9:96:b5:03:91:bc:ef:dd:c7:
30:34:35:69:94:37:fb:6e:15:4e:96:be:e4:2e:dd:10:af:d7:
86:bc:73:b1:22:9d:60:08:4f:8c:ef:99:c7:2f:4e:19:17:78:
5f:ab:0c:d8:bb:ea:05:7e:c2:a8:15:90:17:9c:1c:99:e2:34:
dd:85:58:05:38:33:ec:36:f9:f2:4c:93:95:e5:89:cf:f9:4b:
00:2f:8d:c2:0f:5d:b4:a9:77:f7:03:cf:51:69:17:06:00:f0:
6b:a5:91:60:7a:81:cd:23:4d:60:1c:84:91:25:8b:5e:54:d3:
30:9b:8d:8c:ac:7d:bb:bc:5b:c3:14:66:81:17:63:4b:cc:27:
3d:1f:b5:7b:51:34:d8:35:ec:a0:56:8d:00:21:3e:ce:bb:d6:
d8:65:5e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:36:03 2025 by rpki-client