Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: H7EFKfP57d3a7u+QPsk6GbsvKbKL8sE10oMC2ptSq+w=
Subject key identifier: DB:51:85:02:A5:1F:21:8D:32:6F:1A:D9:79:56:4A:91:C6:13:6E:C3
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 019A27E6CE299F7B2E38C719CF510F748242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 1605
Signing time: Mon 27 Oct 2025 23:00:28 +0000
Manifest this update: Mon 27 Oct 2025 23:00:28 +0000
Manifest next update: Tue 28 Oct 2025 23:00:28 +0000
Files and hashes: 1: WYyFBT5nmwxFR4gPo5unCY2UhVc.roa (hash: Z4ZpbpPZKoHHj3yG0X2Ro2qP/JaWFIzV9WlYUI0Hg8s=)
2: j9lH8J7G3WobH4lsD15m-VsHfXA.roa (hash: qeHJX0Tapm1zxSb8XB+NF4p89KIeCYI5mpUGKGseBY0=)
3: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: RW9LAGH0HER9QuoNC/V8qBPqfXyRKeclboQfmyfCOMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:e6:ce:29:9f:7b:2e:38:c7:19:cf:51:0f:74:82:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Oct 27 23:00:28 2025 GMT
Not After : Oct 28 23:00:28 2025 GMT
Subject: CN=db518502a51f218d326f1ad979564a91c6136ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:94:e5:2b:55:86:20:b2:e7:11:2d:f4:fb:3b:
44:b0:0b:2e:f8:45:ab:ff:ea:0d:7e:0a:f6:a2:a7:
cd:78:43:4f:02:d5:87:04:a6:e4:63:8a:d4:b9:ed:
d2:c6:fb:ce:43:64:f3:e4:fc:45:a1:ea:f4:21:eb:
30:28:30:d1:12:a4:d5:ba:92:1e:b0:c7:90:af:34:
18:ad:81:13:40:e7:76:98:dc:56:9c:ca:22:9f:3d:
a3:25:2b:6d:e7:59:a1:d0:fb:66:24:26:26:c0:4c:
b1:eb:63:9e:86:04:af:07:6a:0d:98:6f:e6:c0:57:
23:a4:94:b1:38:3a:ff:e4:63:a4:cc:ce:2a:d6:2e:
f8:74:c7:4b:79:e2:f0:9a:35:8f:02:9e:c9:94:44:
a4:3a:00:f9:8a:29:ba:65:a1:38:6c:56:9e:57:15:
01:f5:a7:f4:e8:aa:31:41:dc:43:4a:6f:7f:00:17:
2d:a6:9d:47:44:2a:1e:69:07:ff:0f:ca:6e:a2:fe:
43:f4:2a:b3:98:62:be:2f:18:f9:35:a5:a5:95:48:
6b:d0:2b:11:27:31:96:9c:3f:4f:67:d5:0d:7f:b5:
62:72:45:50:d2:da:d3:4b:f0:36:e0:93:5e:ab:67:
20:99:7f:7d:55:4f:f0:8f:d9:ca:e7:0d:45:39:2b:
7b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:51:85:02:A5:1F:21:8D:32:6F:1A:D9:79:56:4A:91:C6:13:6E:C3
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4f:95:67:c5:0d:e2:11:3d:b7:69:1c:30:d9:07:76:30:40:
fb:2a:e0:96:04:c5:29:40:3e:50:18:e6:6c:9d:e1:d8:92:37:
6b:a2:21:18:a3:3c:8a:97:c6:35:4a:c1:0a:c6:f3:57:4a:d2:
33:82:fb:ca:5e:7b:6f:19:c5:70:08:f8:01:65:40:56:3e:c8:
b2:d6:d4:09:70:db:45:04:34:f2:eb:d7:64:70:ce:76:a9:17:
ba:b0:df:6d:be:12:c5:38:df:29:a6:63:e1:c6:c5:e1:e6:e3:
86:e8:7b:c6:dc:c7:2c:7c:c8:40:35:d2:03:13:4f:b1:ec:a7:
89:07:8e:df:67:59:24:26:ab:c5:a5:a9:7e:2f:af:55:41:1d:
ba:f3:58:bf:ee:e7:f0:a5:98:0c:da:a7:63:94:ad:80:36:38:
55:41:dc:bc:4c:85:62:7f:82:bd:89:75:0b:9b:d1:5e:ff:6e:
5a:36:42:db:a5:00:26:0e:be:1c:c0:a0:c1:48:3c:ba:a3:4d:
a0:31:7f:6f:43:11:fe:3d:c6:fb:3d:a4:b2:c3:68:c7:1a:ba:
d0:9e:ab:d9:75:d8:12:12:82:1b:40:7f:a8:e0:a6:29:5a:fa:
1a:88:04:dc:8c:56:5b:4c:6a:85:86:b0:01:5e:2c:4a:52:c8:
2c:75:02:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:45:21 2025 by rpki-client