Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
File: 1NhufQc6nk1p7HFcNiMXaAWJTVo.mft (raw, json)
Hash identifier: aaMbRU9HmDJmaelj/NFLXgjDzCmE1bHTVYoIqIpbdxE=
Subject key identifier: 59:1C:FF:F3:3C:06:75:82:42:F4:28:3B:F0:E2:7E:A9:27:55:17:D4
Authority key identifier: D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
Certificate issuer: /CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Certificate serial: 019A503E1A20B103F7BC341AAC5301E14642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
Manifest number: 0E00
Signing time: Tue 04 Nov 2025 19:00:38 +0000
Manifest this update: Tue 04 Nov 2025 19:00:38 +0000
Manifest next update: Wed 05 Nov 2025 19:00:38 +0000
Files and hashes: 1: 1NhufQc6nk1p7HFcNiMXaAWJTVo.crl (hash: yTujW3bksT/4Pa5tsNv5uCPw1Tpyrh0mKpkQve7EoRc=)
2: yVOuH9GnWiOJ4T0Bjcul16G_CUI.roa (hash: cYY3QuLeMs+0RKKYLhzyVIgFcgFYuNr0hEZcjUsKwaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:1a:20:b1:03:f7:bc:34:1a:ac:53:01:e1:46:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Validity
Not Before: Nov 4 19:00:38 2025 GMT
Not After : Nov 5 19:00:38 2025 GMT
Subject: CN=591cfff33c06758242f4283bf0e27ea9275517d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:b2:60:5e:8f:0c:b8:c8:b0:f7:79:02:5f:
50:e7:6c:fe:95:cf:58:4e:41:9c:8f:bf:2f:af:0e:
84:22:07:29:1d:0e:25:3d:8d:fe:d1:3b:11:e2:f0:
49:d0:44:10:16:53:fc:89:80:8b:cb:6e:6c:18:48:
03:40:b8:c2:55:74:1c:e4:bd:02:f1:47:ad:b1:b0:
41:5d:2d:0a:fb:fc:c6:d1:a6:0b:72:4b:6c:c1:ee:
71:1e:fc:07:6f:98:b5:b9:a3:0f:08:30:2c:25:93:
e2:b9:d2:d8:ba:97:05:d0:cd:bb:77:98:a0:fc:6d:
74:a4:2d:dd:99:86:e3:57:19:2f:d3:df:d5:86:7f:
8b:95:7e:35:2a:4d:fe:0b:ec:78:b0:eb:a7:35:85:
95:09:02:25:44:de:47:e2:35:18:15:d4:13:9a:57:
b3:9f:00:4d:29:a7:12:89:66:1c:4b:d3:c1:8f:4c:
82:7d:30:dc:e9:1d:02:4c:83:7a:c8:cd:5e:7f:2d:
28:c3:0a:84:9c:cf:64:eb:7c:26:41:3f:c7:ab:17:
35:af:70:64:2f:f2:c6:f7:07:38:2a:d7:4a:b4:dc:
93:65:65:f8:a3:64:88:12:0c:67:1b:ed:3b:3d:27:
d2:8f:e7:1b:ce:c9:24:22:77:97:5f:6c:ab:92:bb:
a5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1C:FF:F3:3C:06:75:82:42:F4:28:3B:F0:E2:7E:A9:27:55:17:D4
X509v3 Authority Key Identifier:
keyid:D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cf:2c:63:8f:79:8e:dc:b1:0d:d6:da:fe:e3:e4:99:af:96:
9e:92:54:b8:74:b2:76:c2:95:2a:3e:80:ab:80:de:94:f0:0c:
26:5e:d2:d7:31:d8:db:43:b4:1d:8d:62:9b:fc:ac:d5:5a:aa:
e5:68:9d:41:eb:a2:3c:67:26:8f:bd:b2:8a:74:ea:24:b8:49:
61:b6:4c:84:ad:3f:3c:28:5b:37:a7:79:63:9a:72:9c:f5:91:
67:a8:ad:71:54:75:3d:44:c3:8d:e7:2b:ef:8e:4d:9a:94:6f:
65:4d:36:31:11:49:d6:21:79:b7:c7:bb:0d:29:e3:63:1b:ee:
4b:ec:19:f4:38:cc:31:ce:cd:4c:3a:57:a9:e2:b1:3a:78:78:
0d:2b:0d:25:8a:c2:8e:93:fe:80:48:3e:0e:19:8a:62:02:c7:
4f:ec:9e:6e:92:52:3b:28:7d:60:90:cc:f8:e2:03:52:5a:fd:
29:cc:50:3b:c7:cc:4a:fe:48:d4:18:a3:51:74:07:47:73:8b:
17:27:65:c3:d7:c7:b8:2b:c6:f8:e4:6b:37:69:a6:d2:93:76:
fe:3c:d3:bf:b6:f0:a9:49:f2:de:b7:27:e5:b2:34:ca:71:ca:
0a:ed:c2:30:ed:1e:d7:c2:78:9c:13:43:f3:82:02:51:37:e1:
e3:00:20:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:55:59 2025 by rpki-client