Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
File: NAd7QemIc-fwb7HfP105xyGxND8.mft (raw, json)
Hash identifier: Hi2GiCQOsP9aFGOgYyfVGzAwyIwPNZk4UsNdciUplEk=
Subject key identifier: 32:DA:61:AD:9E:5B:E3:71:C5:D5:CE:2C:09:C1:FF:1A:DE:77:20:C8
Authority key identifier: 34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
Certificate issuer: /CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Certificate serial: 019A722653E6804D6D922DD0DF02DEF69199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
Manifest number: 1728
Signing time: Tue 11 Nov 2025 09:01:45 +0000
Manifest this update: Tue 11 Nov 2025 09:01:45 +0000
Manifest next update: Wed 12 Nov 2025 09:01:45 +0000
Files and hashes: 1: L3eXX40R-J2MZIIUJdb8enfoeE8.roa (hash: lwjbJYBJSc/rhMWtZdkfBAupkIFWhtQl6cOuFgh+q0M=)
2: NAd7QemIc-fwb7HfP105xyGxND8.crl (hash: aKIeMp6f3jOQqKWQmpe1qRRt75JAbfhZ8lxiA+txH0o=)
3: rzrW1TWZL4bnPJ-nB128HmDlFaY.roa (hash: jgoKQgRuGI4ln2b618FpeT2y9vZl1AD1XL8CqPtrGN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:53:e6:80:4d:6d:92:2d:d0:df:02:de:f6:91:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Validity
Not Before: Nov 11 09:01:45 2025 GMT
Not After : Nov 12 09:01:45 2025 GMT
Subject: CN=32da61ad9e5be371c5d5ce2c09c1ff1ade7720c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0d:e3:4b:7b:c1:73:36:08:57:97:82:a1:fa:
2e:f3:14:ea:70:5e:8d:73:67:8e:27:58:3f:a4:ef:
b5:68:0c:2f:25:c1:37:1f:c4:c2:73:fb:26:86:cd:
97:c0:7a:27:06:10:41:37:0c:e2:19:b1:c2:19:fb:
5b:32:ce:db:e1:60:f9:ea:3e:3b:78:bd:56:2d:c1:
8c:7f:ce:c2:23:d9:c4:f3:e7:bd:5c:b1:8e:24:f9:
83:d2:4a:1a:7a:b3:43:28:d9:16:d1:e6:12:c0:30:
20:58:a3:90:17:df:79:c9:89:56:0c:ea:39:79:ba:
4e:6a:6c:69:2f:bb:c0:94:22:03:02:7d:38:9d:e0:
e0:2e:fd:de:e2:48:06:7f:3f:eb:ce:d9:15:92:ee:
bd:7c:ef:de:d9:56:b2:89:51:11:f2:f6:f0:83:54:
de:d3:92:78:f5:d2:d5:03:34:76:3e:6b:40:0f:19:
be:df:49:a2:5b:82:e9:23:a9:7f:72:a4:3e:1a:cf:
02:e2:ca:e1:3b:a2:3f:df:6c:75:93:4f:7d:c0:d9:
10:fd:c7:60:d4:31:99:03:e4:c6:d0:d2:71:90:2b:
27:40:8f:98:6f:8d:55:b2:8c:f2:da:2b:b3:38:13:
df:ba:11:67:d8:a6:30:f7:b1:30:28:09:1e:85:3f:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DA:61:AD:9E:5B:E3:71:C5:D5:CE:2C:09:C1:FF:1A:DE:77:20:C8
X509v3 Authority Key Identifier:
keyid:34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:cc:8f:f4:d8:d2:98:25:84:cd:53:8b:a5:ba:23:99:a8:b7:
41:9a:0b:d7:02:de:ee:ba:e2:2e:ac:bc:f7:71:2e:e6:86:98:
36:9f:f1:1f:d8:51:d4:e2:e7:db:82:03:ff:fb:19:3e:c4:a2:
4d:2f:73:f8:d2:d0:3a:f5:20:32:9a:92:86:97:a7:ce:38:d0:
7b:2e:a0:9a:38:dc:a1:09:f9:85:cf:9b:36:b7:41:b1:60:59:
c1:ac:9a:54:5c:7f:fa:8d:ca:7d:e7:ed:8f:b2:73:50:db:bd:
c4:25:2b:9b:e8:9d:cd:81:90:e8:92:91:32:51:53:91:b8:f1:
8f:81:74:e4:9d:3c:e7:b6:2c:39:5c:29:93:a8:e4:31:07:a8:
7e:77:a5:c0:e2:11:a9:e7:cc:cf:db:a2:71:7a:98:83:45:fb:
64:33:40:c4:9a:74:c0:fc:9e:bc:5b:50:b8:b6:0c:99:b3:4d:
3f:27:04:bf:a9:f2:26:52:5f:16:28:1a:db:28:4e:3b:4c:f8:
db:3a:c5:d7:2d:98:0d:2b:73:71:1f:50:07:61:34:92:82:f3:
be:45:41:f4:f0:17:72:4e:27:5d:a4:56:fb:a8:76:d4:5f:a8:
68:1d:c5:73:ac:07:60:9d:d8:a0:71:06:ab:ff:4c:a4:d3:3e:
96:ae:f9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:29 2025 by rpki-client