Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
File: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft (raw, json)
Hash identifier: L7yZVViyTxekZXJS+89cYSbFoJ4gICPKCmjd6RSLuKI=
Subject key identifier: 9E:91:91:26:B7:60:F3:18:58:D9:72:D7:E6:16:AD:D1:A2:73:4F:F8
Authority key identifier: 34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
Certificate issuer: /CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Certificate serial: 019A71B906638E6C918DEA44278E80F9E19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:02:22 +0000
Manifest this update: Tue 11 Nov 2025 07:02:22 +0000
Manifest next update: Wed 12 Nov 2025 07:02:22 +0000
Files and hashes: 1: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl (hash: +0lKKrFrOPhZwSj8pe7wgCTQB7HWXjuOwZq05/3N55c=)
2: ZxlhkpSeT22co3ElobaCavDtI1I.roa (hash: RsOVTQimQxoF2zeQAP5zv2htNZo2elUQhLdSPHG+MC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:06:63:8e:6c:91:8d:ea:44:27:8e:80:f9:e1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Validity
Not Before: Nov 11 07:02:22 2025 GMT
Not After : Nov 12 07:02:22 2025 GMT
Subject: CN=9e919126b760f31858d972d7e616add1a2734ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:21:20:eb:46:7b:39:4b:0f:12:18:c4:70:1a:
5c:28:70:27:fe:ed:a9:0a:7a:ce:4a:94:82:f3:77:
18:aa:71:d1:83:fb:16:89:36:54:1e:24:fc:36:ef:
7e:c1:c7:a8:2c:90:43:8c:39:ca:c3:86:80:bb:8c:
ec:e4:79:2f:dd:4e:f3:9e:d8:40:b1:f3:bd:9d:3c:
1b:9d:e7:33:9b:c8:1e:b9:6b:87:b6:40:f1:8f:cf:
c0:43:76:b4:c0:d4:d6:9c:f3:77:22:31:c7:ab:9b:
13:95:29:ac:48:8e:93:9c:f8:ea:94:20:f7:1c:e7:
9f:ca:2f:3e:b7:07:36:78:57:0f:66:c9:1e:a1:ae:
8f:33:5a:62:81:cc:21:89:ec:a4:56:12:17:55:e4:
26:5a:57:4f:7f:11:04:e8:c5:f9:0d:b1:df:ef:97:
7f:e8:82:b2:5e:cb:30:31:f9:99:65:07:5b:32:4a:
de:ce:27:43:7d:06:37:25:10:f2:4c:d2:de:5c:37:
d1:8b:38:80:f4:83:b0:c8:d0:98:eb:b1:30:75:ec:
a3:1f:c1:1b:26:85:2b:e6:11:d3:ed:a5:a8:91:14:
17:c4:53:fb:14:03:51:6f:04:5a:e6:88:64:96:cc:
86:d6:bd:8f:c3:e8:28:f1:ae:7c:9e:4b:6d:66:35:
49:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:91:91:26:B7:60:F3:18:58:D9:72:D7:E6:16:AD:D1:A2:73:4F:F8
X509v3 Authority Key Identifier:
keyid:34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f8:6b:55:4e:9b:f4:b4:6c:66:00:a5:96:ca:95:43:37:f7:
9b:3c:94:01:d0:07:cb:8f:6c:2e:72:4f:65:7c:f0:1d:b1:03:
29:31:63:56:20:3e:ec:56:8b:31:32:84:9c:c9:5f:52:e2:27:
9b:e7:05:42:92:05:0a:4f:c6:f7:94:a0:45:6d:82:db:03:95:
c5:81:94:51:39:a2:6b:40:66:c1:96:86:5b:e1:dd:61:15:5b:
68:79:0e:3a:36:d6:4b:f1:c2:f3:d0:bd:9e:4c:62:3b:4a:d5:
d2:a0:de:9c:3e:8a:10:20:fb:fe:2e:3d:83:4c:f3:3d:0e:8b:
81:69:10:91:19:e6:72:2e:01:c4:77:74:cc:98:dc:c8:ae:76:
7f:22:31:29:e5:e8:29:9d:26:8e:e2:c4:ce:db:f3:b4:e1:70:
5e:f0:61:3e:fb:e7:bc:45:d9:75:ac:fc:f8:92:ca:3b:d0:cf:
1b:22:0b:16:f6:e7:c4:7f:c1:e6:3d:83:62:0c:3c:b1:6d:dc:
f6:0a:e9:54:ac:b3:4e:cb:02:58:56:a0:0d:60:dd:c7:1f:64:
77:9f:ec:2f:0d:e9:eb:05:ce:97:3e:9c:ca:6b:0e:b4:7c:86:
9b:de:77:4d:84:22:9d:b8:e6:31:78:6c:a9:1d:9a:b2:f9:5b:
dd:7e:4c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:54 2025 by rpki-client