Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
File: Nz2PVXyuGOI12Ti608-uF8kbneY.mft (raw, json)
Hash identifier: Ds+Su1jL6w2YrZvtTnEQ1Fb+aSxqEALXUi3ZFB4BlFg=
Subject key identifier: 40:C3:74:83:74:9A:17:53:93:AB:5F:59:FE:E1:B3:DE:AA:5B:F7:98
Authority key identifier: 37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
Certificate issuer: /CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Certificate serial: 019A4D3CEB1AD4663A3D286C70B6742995B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
Manifest number: 0DCD
Signing time: Tue 04 Nov 2025 05:00:29 +0000
Manifest this update: Tue 04 Nov 2025 05:00:29 +0000
Manifest next update: Wed 05 Nov 2025 05:00:29 +0000
Files and hashes: 1: Nz2PVXyuGOI12Ti608-uF8kbneY.crl (hash: /l/Xi4utNlq2+PX84PS3E/RlBkqYg+BTzD2fPxsc5zo=)
2: ozI4hI8kFkEQxCSmEwvkBXoCapM.roa (hash: nsuE7KYFnBTkOwSYDCdNStBanVXhSb5SsJb22tB9rcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:eb:1a:d4:66:3a:3d:28:6c:70:b6:74:29:95:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Validity
Not Before: Nov 4 05:00:29 2025 GMT
Not After : Nov 5 05:00:29 2025 GMT
Subject: CN=40c37483749a175393ab5f59fee1b3deaa5bf798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:69:d1:2b:eb:53:cc:6f:e6:78:c9:77:71:66:
a2:fc:ef:6c:b3:50:85:fe:36:bf:72:86:fb:db:33:
4f:69:58:1f:81:b4:84:c4:de:f8:3f:ee:fb:91:6a:
3d:0e:3a:a1:a4:bc:ae:d6:a7:ba:90:d4:81:0f:51:
f8:e1:62:25:1e:c7:dc:77:e8:4c:36:88:4f:43:92:
40:f0:fc:92:88:f4:bc:d0:25:6a:a6:10:b5:70:e3:
50:46:b3:d2:46:ff:cb:ff:72:f6:4a:89:f0:f9:81:
3f:11:58:1b:57:ae:fa:02:83:42:08:15:d7:ee:0d:
b9:55:62:b8:83:84:07:7d:fa:1f:eb:f9:9b:49:36:
59:6a:8b:e9:fc:35:9a:36:e4:1f:db:e0:15:6f:96:
e0:44:11:84:66:cc:4b:15:42:bc:88:35:ce:f6:e6:
94:cd:8b:5d:ef:3e:71:80:3a:8d:5b:49:b7:a3:35:
7b:d1:16:5f:5a:77:ac:b7:20:05:2d:e0:7f:7d:cc:
c3:e0:34:3b:1b:4a:41:d4:69:5f:0d:71:0c:b6:fb:
27:15:fe:c8:b8:a2:5c:03:fa:f4:47:77:42:e1:d8:
58:b3:90:c9:c0:10:c2:9b:3c:fd:4b:63:4b:15:4e:
2b:69:3a:ba:9a:44:4d:5a:9e:20:bc:ff:b5:77:e9:
d7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C3:74:83:74:9A:17:53:93:AB:5F:59:FE:E1:B3:DE:AA:5B:F7:98
X509v3 Authority Key Identifier:
keyid:37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fc:88:bc:a9:c0:c4:eb:63:83:6d:9e:cf:c7:20:af:f2:a6:
0b:ec:bb:14:8f:f3:98:87:8d:17:4c:ba:2b:bf:54:29:97:75:
d8:69:0d:6a:0b:b0:ba:06:3d:c7:e1:42:1a:40:dd:a9:15:0a:
ac:37:09:e3:46:33:12:21:64:75:be:da:07:dc:54:d2:ad:e8:
fa:7d:91:a1:56:0d:66:1e:56:77:c9:8d:50:8b:46:db:ee:df:
59:ea:95:4f:e4:c6:56:30:c9:54:be:09:15:b7:2c:ca:d5:f7:
97:d7:e2:da:e5:24:d7:ad:a5:0d:a8:4c:b4:c8:4c:de:7e:a2:
56:09:8e:14:35:2c:29:37:60:3a:b2:3c:c8:f9:47:32:9c:70:
a4:68:f0:29:85:38:41:04:6f:05:c6:17:75:06:db:1e:7e:e7:
ac:3b:ea:6a:1a:05:73:6c:b8:1c:84:30:7b:eb:12:07:ba:82:
74:19:f9:dd:32:91:91:0f:b7:7e:4e:60:f0:cb:d9:22:23:e2:
f8:c2:36:7f:25:e5:2d:c2:aa:76:47:c0:ad:11:19:bd:3c:bb:
78:99:93:08:1c:bf:7f:07:53:cc:2c:9d:3b:55:1e:0b:f1:9d:
ed:70:18:0a:88:6f:04:c2:a8:4c:90:6f:dc:12:d4:0d:ba:aa:
c4:ed:cb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:26 2025 by rpki-client