Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
File: NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft (raw, json)
Hash identifier: O5kaFoPJ+rF4DXWaB/OJ9P4fkjizp2J1YM3xS/q80Js=
Subject key identifier: 32:67:58:B0:16:B2:52:2E:AD:4A:C8:56:BB:69:D1:7A:3F:FC:35:72
Authority key identifier: 34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
Certificate issuer: /CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
Certificate serial: 019A70A51F157EB2356972F4815D5729F3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
Manifest number: 0CE0
Signing time: Tue 11 Nov 2025 02:01:00 +0000
Manifest this update: Tue 11 Nov 2025 02:01:00 +0000
Manifest next update: Wed 12 Nov 2025 02:01:00 +0000
Files and hashes: 1: NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl (hash: qMre119KZX7NxftZRJ8o9uzB0ebFHCBf1GdPc+A4H5o=)
2: i5CYIYxAtwPyni-Dl_N7cKRXfcY.roa (hash: SZTtaQcBy5UozsIuO5IHd1U+7pFMt22yevLjl5l8lZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:1f:15:7e:b2:35:69:72:f4:81:5d:57:29:f3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
Validity
Not Before: Nov 11 02:01:00 2025 GMT
Not After : Nov 12 02:01:00 2025 GMT
Subject: CN=326758b016b2522ead4ac856bb69d17a3ffc3572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:9f:e0:76:0d:6e:17:bc:c3:f0:58:b5:d3:
b7:2d:be:87:d3:1c:b2:51:a0:85:18:9b:fb:b0:30:
aa:72:1b:75:33:3a:0f:32:ef:c1:a6:cd:76:1b:e6:
06:30:26:70:4a:b0:b0:2b:19:2d:1e:7d:e1:ea:6e:
fb:e6:82:1c:6d:9f:71:91:08:64:87:04:b9:40:93:
25:01:d6:85:af:a3:44:c8:9e:48:95:b8:93:e5:0d:
37:c3:dd:7a:7e:0d:cc:23:85:5c:12:00:ae:c1:2f:
b4:72:0d:3b:9b:54:19:bd:86:ec:12:dd:59:14:0c:
57:1d:2e:c7:ec:1c:8a:73:5f:26:93:ee:13:92:68:
b8:e0:04:f8:7a:b2:49:d4:59:b5:de:47:da:7d:a4:
dc:fd:ba:ad:15:0e:cf:8c:9e:84:b1:80:63:23:1a:
3f:5f:a0:fb:0b:8a:21:cc:b8:a9:3f:c8:05:3d:a9:
5e:16:4a:81:dd:dd:ac:9b:ff:b2:7b:2d:1a:a0:f7:
f6:0f:1b:7c:57:7c:06:5a:bc:b4:0a:31:e1:87:87:
28:68:46:c8:db:5a:93:db:21:6c:29:b8:56:6e:03:
9a:d7:08:da:0a:dd:f2:b6:4a:4b:a0:47:30:a0:85:
2c:a0:c5:fe:c0:9e:3e:31:83:5c:09:10:09:9a:ed:
0a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:67:58:B0:16:B2:52:2E:AD:4A:C8:56:BB:69:D1:7A:3F:FC:35:72
X509v3 Authority Key Identifier:
keyid:34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8a:33:4a:b0:82:25:c6:c5:56:7c:60:2c:7e:f9:36:b2:67:
12:ae:78:8e:66:1c:33:67:ce:02:8f:ad:76:05:3d:af:59:ea:
a4:1f:47:b8:90:79:3b:1a:d9:19:62:58:99:4e:ca:7b:b5:15:
4b:5e:4d:64:a6:71:fd:8e:cc:da:57:c8:35:21:af:54:59:f3:
cd:5e:c5:28:a6:07:95:b3:c1:b4:1a:3a:14:1f:8c:19:48:5a:
2f:35:02:fb:62:e7:ae:e2:19:52:1c:46:60:46:00:15:f8:3d:
7c:35:ae:8d:59:f9:d5:70:79:ca:c8:8d:4c:61:2f:48:79:e3:
b7:0f:29:c5:69:94:61:22:ae:66:c1:d2:28:3d:6f:0e:99:81:
e1:13:fb:3f:c4:a3:47:94:1d:8c:bd:db:48:8d:3b:64:0e:5d:
7d:c4:41:d1:ee:ff:9c:21:09:fd:48:3c:4d:6a:cb:8e:6e:a2:
fd:4a:78:5b:de:34:16:92:41:0c:ca:b1:ac:ac:66:a5:3c:bb:
8f:41:1c:14:e6:d8:4f:4b:82:b0:d5:3a:2d:22:85:5b:1f:ea:
a5:0b:9c:61:18:64:10:78:26:a6:ae:d7:f3:45:34:f4:b8:30:
73:97:49:4f:f7:d8:b3:d7:8c:d0:1c:b1:39:22:73:7b:4e:f3:
ea:aa:9d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:47 2025 by rpki-client