Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
File: 1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json)
Hash identifier: 6SLq3fsad6BW860l2XweIcM7cyDxZNwaCRbOO1Uuy30=
Subject key identifier: 5F:96:4A:C3:46:ED:F1:5B:D6:AA:AA:79:A5:41:89:F1:2A:B9:63:3A
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 019A7226060BF1AECE34601BEBA9B8886376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:01:25 +0000
Manifest this update: Tue 11 Nov 2025 09:01:25 +0000
Manifest next update: Wed 12 Nov 2025 09:01:25 +0000
Files and hashes: 1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: KY+1P1MChvlL2KqTWS9M8BGNMW62SwWQA45chNNLcfg=)
2: ApRmxFrIHgDq0uE514jDIHsfIeg.roa (hash: wwR59HFeyAkBUrzznAPWkLGe9T2sf1JpKPVH96BNgPU=)
3: LDvMOjEUxjVrAxBBKwXZ2WWq0ic.roa (hash: lSJbEniX1S5iq6pQApVmxDosGfWL1zz6nfIQW1JNw3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:06:0b:f1:ae:ce:34:60:1b:eb:a9:b8:88:63:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Nov 11 09:01:25 2025 GMT
Not After : Nov 12 09:01:25 2025 GMT
Subject: CN=5f964ac346edf15bd6aaaa79a54189f12ab9633a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:bc:bc:ee:ce:47:f5:dd:08:04:ab:f6:45:
d6:d4:a1:ba:37:e0:50:67:dc:f4:53:ba:85:7c:85:
6b:57:4c:ae:8c:cd:79:c1:8d:b3:10:d9:ac:24:c9:
12:c0:30:66:fa:f2:76:d4:2c:3c:b1:5c:3f:c3:49:
eb:47:2b:9d:a8:52:5c:c8:9f:88:a2:cc:1c:bc:15:
0a:92:2d:2e:e6:1d:7a:0c:ad:1a:95:94:6e:4e:e9:
77:8a:95:58:d6:2b:9c:28:f8:d2:19:c7:5a:9f:0a:
23:ef:02:48:d5:a3:2e:18:62:e1:cf:c9:4d:8a:1b:
17:0d:9f:f6:42:cf:ba:02:40:57:fe:6c:11:13:71:
bf:a0:12:ef:2a:45:95:64:cb:5e:ef:b7:b6:f1:ff:
75:6d:3e:4b:3b:3f:49:e4:ca:39:a7:98:7b:5c:30:
31:98:66:a0:dd:5a:a4:d2:d0:2f:5e:1e:bb:c5:1b:
92:df:52:1a:e5:f6:e7:9a:dd:c6:62:1d:34:50:a0:
d2:cd:70:23:b8:04:f0:e0:40:b8:31:f3:42:7b:6d:
be:70:e8:14:2f:ee:16:19:09:96:e7:c9:d8:fa:46:
ae:00:b8:59:7f:99:f3:62:ac:bf:56:0b:42:d4:2d:
af:d5:86:d6:ff:b7:ac:51:d8:21:47:dd:81:4e:99:
f4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:96:4A:C3:46:ED:F1:5B:D6:AA:AA:79:A5:41:89:F1:2A:B9:63:3A
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e2:06:35:f2:84:e0:f0:90:ee:92:4a:30:b4:d7:e5:f2:2b:
10:ed:4b:00:54:a0:a5:c7:6b:28:ec:19:0b:b3:fe:76:59:93:
fa:ee:d8:0d:85:1f:09:77:4c:59:7f:ef:80:87:7e:2f:10:97:
67:87:89:a9:79:1b:b5:2a:da:5f:4d:42:10:d6:95:9d:5a:ce:
94:0d:fe:98:d0:a4:94:65:b7:c9:a2:86:ae:b4:33:b2:80:e2:
e9:18:2a:b5:31:9e:55:fc:1f:eb:fb:6f:f0:8d:83:ba:e1:4e:
bd:4c:5f:4c:03:14:bf:73:d6:26:34:14:fe:99:dc:ef:f1:79:
fe:66:51:48:b5:51:cd:72:91:96:61:98:70:a8:09:b5:b3:47:
09:54:6d:ca:cd:b8:d7:ed:fd:80:99:a6:e8:5d:f1:65:ac:24:
37:48:1a:07:4c:92:93:30:8c:a3:b0:08:15:6e:0d:c3:45:10:
1d:46:33:89:b3:fa:ec:2d:3e:37:83:1b:ef:37:26:22:2d:79:
59:c4:c7:b4:b6:fe:29:e6:97:10:7f:03:77:08:3d:a5:47:4b:
ac:b3:bf:fd:4d:3f:78:3d:94:a0:55:8b:43:82:26:7c:0e:b7:
1f:b0:69:bf:83:1c:ea:5d:99:24:5d:c8:66:12:fc:ca:83:ae:
50:a3:b2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:08 2025 by rpki-client