Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
File: NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json)
Hash identifier: +9q+w3WegYAryYUdf85UJXQkSyAgpsfn9B4JmrFwPik=
Subject key identifier: A1:D3:75:27:6E:91:44:17:72:90:37:8B:EA:30:70:55:A0:8F:D6:9E
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 019A1D2CA627C8D908B725DAE86354BA03DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
Manifest number: 16F9
Signing time: Sat 25 Oct 2025 21:00:56 +0000
Manifest this update: Sat 25 Oct 2025 21:00:56 +0000
Manifest next update: Sun 26 Oct 2025 21:00:56 +0000
Files and hashes: 1: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: Gwyxbx7Z7XKkJYdqHHp1MB8aWmOzrqmaHO9Fs2Of8Cs=)
2: O3Kl40jGDsPRJGH1EFnf65-hUj4.roa (hash: aMzq4HH1WAeogtvzS32mERsBxOMZNMYLSy3wIuq38+8=)
3: fCTecUt77UHhtXHXll1piF7Zd6c.roa (hash: q3pUeUA6qW+DpXb5gimft6PsFNA4pETS9zhmS0g+5v0=)
4: hZ2yySpjQiTMjZvchaaZ9n1kGlE.roa (hash: pY371ydI1VeBW+n9ngZnpHGBKKkDLyF2vNs37egLERQ=)
5: pFZVBmgqiU0csf9W43g6FIWRCTM.roa (hash: eUwZvrYwb50UrEhmGEwgTxwUKEPb4F3y0cFhI/MdzLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:a6:27:c8:d9:08:b7:25:da:e8:63:54:ba:03:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: Oct 25 21:00:56 2025 GMT
Not After : Oct 26 21:00:56 2025 GMT
Subject: CN=a1d375276e9144177290378bea307055a08fd69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:1d:ce:de:f0:18:ce:58:9f:98:bd:23:9c:
b0:29:ab:94:95:5c:7e:d7:25:f8:96:ae:a6:fa:a4:
45:99:f3:ed:d9:4d:4f:0b:8c:57:35:67:bb:0d:14:
c6:8e:6f:6a:d6:9f:81:17:56:79:ff:93:23:34:8a:
3f:ea:d2:34:40:46:88:f2:99:65:0e:76:7a:7a:e1:
f8:6f:fd:8e:83:e4:6d:b0:67:89:bd:6d:07:59:13:
8f:cb:f5:55:c8:ec:4f:4b:1d:c6:a8:04:a0:78:d2:
90:23:9f:f6:e4:d1:f5:7f:90:75:f7:8f:c1:bc:51:
bb:64:96:f2:d5:98:8d:ab:ad:e1:49:76:fa:25:76:
dd:61:66:f9:66:63:02:5f:5b:ca:08:e9:2e:1c:67:
fd:a7:e5:2b:28:a0:6c:29:d8:4c:f5:b9:16:b4:80:
c9:4c:fc:89:41:50:90:1a:34:28:68:5c:2f:2b:ad:
38:a5:db:3e:67:35:43:4f:92:84:eb:37:f8:af:be:
20:c4:db:81:f9:ec:23:5d:c2:91:23:be:59:0d:5a:
4f:45:f9:17:41:ca:f2:db:09:0d:61:55:37:cb:88:
ef:20:dd:67:ac:79:d2:cf:33:47:da:b7:39:e0:6d:
a4:27:21:ad:be:14:d4:33:b8:3e:58:a5:2c:05:27:
7f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D3:75:27:6E:91:44:17:72:90:37:8B:EA:30:70:55:A0:8F:D6:9E
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f8:3d:77:0f:e9:de:2e:21:c3:87:10:9b:d2:4a:53:a9:d4:
32:71:c4:51:94:5b:fa:2f:2c:6d:da:64:58:de:e4:d8:ab:98:
79:d9:01:60:55:87:42:09:df:3c:11:5e:fa:5f:0b:8e:61:5c:
45:53:07:7f:57:c6:df:b5:08:8d:b5:bc:df:25:8f:05:b1:a4:
c5:e8:17:3b:af:c8:eb:bd:53:91:e4:d3:1e:27:d4:82:8d:97:
30:42:64:c3:a2:49:c0:35:69:69:ab:94:92:a0:bc:03:13:8d:
a0:2f:25:97:a0:a9:5e:74:78:98:48:5d:ed:ab:c3:d8:9f:d7:
66:6b:cf:78:f1:83:1f:16:9a:fe:5c:0b:5e:79:c1:76:39:1e:
d7:10:ab:cb:d9:93:60:41:3d:59:45:24:ef:ea:e0:2b:48:b9:
65:f2:9b:4a:a4:0d:e4:54:d6:31:53:d9:8d:56:37:9f:6b:12:
66:7a:84:44:cf:00:88:ce:16:b0:3e:05:ee:31:67:ca:82:c3:
78:9f:87:39:6c:78:d6:79:3f:6a:54:51:ff:3c:86:2e:4d:69:
d8:17:3a:27:30:61:94:87:ae:5b:31:2c:29:3f:90:e4:9d:ed:
45:81:97:e8:ea:7a:76:a5:f0:20:e0:76:75:ba:f2:38:0e:31:
1d:67:02:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 23:08:21 2025 by rpki-client