Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
File: NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft (raw, json)
Hash identifier: HbkaHcUPGimTkWKNWF/r8aBC2VSzbU0l5BngSLCsW8o=
Subject key identifier: F3:17:C1:0D:F5:8A:DF:8D:BD:3C:5F:75:3F:D6:D0:37:B6:E0:B5:50
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial: 019A13BAF520DC31E400169CB2AEAC5CF49B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
Manifest number: 16F2
Signing time: Fri 24 Oct 2025 01:00:10 +0000
Manifest this update: Fri 24 Oct 2025 01:00:10 +0000
Manifest next update: Sat 25 Oct 2025 01:00:10 +0000
Files and hashes: 1: 92pgx6QNH23m1sb49k-ykMttkN0.roa (hash: 6x2mradcGTZ+q9pm81EMeP+6J3k4A+BvCK17T29Njxw=)
2: NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl (hash: Zpp1vp3ag7i/HxJIHcYcSLsthhJcLREQr7YHaY5OkGo=)
3: lZsMnzEe-znnn1V93iNCRM_YAak.roa (hash: z+dECtyUmhjS80QJzbvWDw1cRN0vxIcWCWIADf50+Fg=)
4: oYs8paRk9JPLOaUCIoa9pxPnmCs.roa (hash: kBYq1h4wg3W+NuRYMWAaTbphy585KIiOSln9Rszwvtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:ba:f5:20:dc:31:e4:00:16:9c:b2:ae:ac:5c:f4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Validity
Not Before: Oct 24 01:00:10 2025 GMT
Not After : Oct 25 01:00:10 2025 GMT
Subject: CN=f317c10df58adf8dbd3c5f753fd6d037b6e0b550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5c:43:3b:0b:8d:04:7c:21:d7:dc:bf:53:75:
e4:50:c8:2f:50:e2:f1:00:f4:91:f6:01:5d:45:5c:
47:7e:d9:a9:04:6c:72:41:c7:05:b2:82:fe:5a:ab:
6e:da:5d:e8:8b:94:21:e5:4f:a2:b6:f6:f1:b4:97:
83:3a:52:3f:cc:65:aa:97:92:6a:5f:d9:4c:64:41:
1c:9e:5f:11:d1:d3:8d:6c:d1:ef:d5:24:d1:82:08:
3e:eb:43:7e:00:a1:1e:1d:e1:c3:a9:c7:8f:a3:ff:
65:4e:1d:31:22:8a:dc:dd:60:d4:dc:06:36:48:78:
7a:fe:30:4f:5a:10:1f:a7:e5:6a:2e:a6:31:1e:ba:
67:a4:80:69:20:5f:67:65:74:e0:09:11:e7:73:a6:
93:fd:53:ef:bd:66:8c:f3:31:61:52:ca:99:f9:e5:
8c:1a:0f:ee:83:da:93:69:c7:a4:6e:c6:a5:71:b2:
9d:72:5e:97:fe:bc:87:f9:44:2e:7e:6e:b8:54:be:
75:f0:09:af:3b:97:d6:1d:40:3c:2a:5b:48:2a:12:
25:95:8c:6c:0e:53:5b:5a:d4:df:78:9d:c9:dd:c0:
5e:c0:ff:bf:e8:b3:27:ef:3a:19:51:3a:54:91:5f:
bf:ef:4c:30:ec:24:4b:50:63:5e:52:1c:aa:34:03:
09:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:17:C1:0D:F5:8A:DF:8D:BD:3C:5F:75:3F:D6:D0:37:B6:E0:B5:50
X509v3 Authority Key Identifier:
keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:02:eb:c2:2f:05:4c:55:3f:65:16:30:91:d2:ad:1b:58:21:
30:ec:0b:da:ab:74:aa:c6:e7:2f:60:eb:e1:61:53:38:47:7a:
85:25:0a:c1:3a:a5:b3:64:12:6c:9c:b0:e4:51:82:51:a4:92:
eb:d2:0d:17:e8:81:9f:f0:92:17:ae:6b:5a:37:91:d0:0f:6a:
21:04:73:e0:4c:3b:0c:a2:95:b2:ef:ba:63:29:07:8d:6f:f8:
55:54:9c:e4:9a:15:a0:2a:70:14:08:ce:20:83:20:ce:79:f4:
62:60:af:f3:e8:bd:eb:02:5e:91:4e:0a:c8:ee:ee:3f:b4:30:
b1:06:3f:5a:09:2c:c7:46:c3:a6:37:32:dc:46:ac:2e:fc:6a:
31:1e:54:3e:07:83:8f:d7:df:05:16:41:85:54:ff:8c:ce:04:
db:9b:e8:02:8e:21:d2:e7:6a:3e:6e:1d:c4:b8:cb:c3:22:8f:
be:f0:94:c0:a1:09:77:43:b4:a8:ef:e7:7e:63:1a:94:16:be:
38:ff:95:a0:f5:00:cb:02:b3:80:26:24:f6:09:e5:6a:c5:19:
85:5f:87:66:fa:16:9a:4b:9f:1d:15:23:7e:1f:82:a7:82:2f:
e3:d7:40:45:c9:77:78:67:ac:b6:af:7d:1e:96:ce:05:73:24:
41:a5:db:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 05:59:39 2025 by rpki-client