Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
File: nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft (raw, json)
Hash identifier: 6DPAmNt1T5Aa7PIpJPnbFFL9PVEPm19D4mxX59lWQSI=
Subject key identifier: 30:47:EA:9B:0A:35:C0:AE:7C:21:73:ED:8D:44:E3:F3:29:61:B9:92
Authority key identifier: 9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
Certificate issuer: /CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Certificate serial: 019A4F997104C852F4AFBD76F1CD30CFA6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 16:00:47 +0000
Manifest this update: Tue 04 Nov 2025 16:00:47 +0000
Manifest next update: Wed 05 Nov 2025 16:00:47 +0000
Files and hashes: 1: MPwSmw7TKMOSUXcFrOOlFixZc2g.roa (hash: QP+dxlkmxIyI9F9hcSk4trG33k+WqitL0NMMPJjf69Q=)
2: O_fqEW14QhPRGqjQoVa9vmGmVmM.roa (hash: V1ztdeLVNvewuDYhom6BXL6CS05sk8OmHCsK+DDqUrE=)
3: nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl (hash: yU8Tzxr++JbEffen8/9q18+CezP+o2z/CVHJFhC2K8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:71:04:c8:52:f4:af:bd:76:f1:cd:30:cf:a6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Validity
Not Before: Nov 4 16:00:47 2025 GMT
Not After : Nov 5 16:00:47 2025 GMT
Subject: CN=3047ea9b0a35c0ae7c2173ed8d44e3f32961b992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:8c:47:42:16:d5:1e:83:54:e2:57:d1:43:
56:0a:ff:84:7b:c0:47:a0:d4:19:85:65:1b:38:eb:
98:a7:fb:0e:64:62:3b:03:99:85:3d:95:fd:9c:62:
27:8e:0c:70:a0:82:1a:26:bd:92:56:93:f5:9c:6d:
a5:24:68:7a:25:90:29:9d:ab:09:d7:05:3b:b8:6d:
c6:6f:c6:94:98:4b:cc:22:d2:08:58:d9:70:73:7e:
a9:88:56:9f:47:f2:00:79:1f:b0:df:f5:6c:e5:6d:
e7:cf:3b:56:60:bd:61:71:aa:f8:f6:e8:3e:6e:10:
02:bc:06:4c:69:24:24:47:fa:a1:69:7d:fc:00:56:
47:e5:09:26:b8:9f:50:e4:54:45:7a:8e:8f:0a:1a:
e8:c7:48:88:f5:1d:6a:37:a6:9c:81:69:cb:ff:7c:
79:14:e6:d1:9e:0d:33:93:91:e9:80:66:db:9e:46:
c4:0f:8d:bf:0c:28:f9:ba:e7:0b:22:aa:99:3d:b1:
f4:67:a4:17:ab:26:15:eb:ba:9a:01:b3:ec:db:25:
62:a1:66:b8:b7:16:aa:52:72:47:07:5c:82:1e:c5:
8a:1e:ef:53:68:ec:eb:4f:83:0f:b5:fd:f4:42:93:
b5:11:5f:7d:46:59:fc:3e:d4:41:4a:2a:7c:25:bd:
ef:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:47:EA:9B:0A:35:C0:AE:7C:21:73:ED:8D:44:E3:F3:29:61:B9:92
X509v3 Authority Key Identifier:
keyid:9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4c:82:e0:c8:a1:28:4c:53:7c:0b:bb:30:ad:e7:29:05:d8:
98:cf:21:8a:54:e3:d3:b4:07:6b:9d:ad:49:4c:36:fd:1c:78:
e0:58:82:e8:f1:fb:94:43:27:6e:0d:c7:d5:08:e8:39:e2:ba:
4a:34:17:81:35:a9:25:bb:9d:9d:91:40:f9:6b:97:4f:a6:03:
90:03:7c:31:05:48:a6:9b:53:43:fb:c8:86:00:62:f0:3e:1d:
83:30:f0:07:86:c4:ab:fe:bb:18:4f:8a:9b:0f:a8:2e:3a:4d:
04:ec:d8:d9:83:17:66:b9:51:d7:80:9e:fb:8a:54:45:79:95:
0c:07:b0:a1:6a:59:84:7f:7b:37:af:d4:3c:e9:28:76:ec:3f:
01:75:0e:69:1e:fe:69:08:ad:c3:f6:46:b3:aa:a4:50:47:a6:
f1:78:85:22:34:81:4d:5c:58:c9:16:10:2c:84:bc:6e:cb:a6:
24:c1:ea:13:d1:d7:77:2b:c7:6c:f4:8f:19:d2:c4:80:7a:bf:
34:c1:5d:9d:c0:9d:5b:b2:97:de:16:c6:2a:68:8d:0e:a1:eb:
37:8e:66:61:c7:da:40:31:4e:e4:63:c6:3b:12:da:9f:b9:22:
bd:10:cb:3b:7d:a9:4b:18:ab:1c:4e:2c:e6:79:fa:11:42:f0:
0b:ff:25:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:15 2025 by rpki-client