Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
File: NrEA4fbz_-bjXph-DQGVt5k6jTM.mft (raw, json)
Hash identifier: pvp/ljP9DmYOueoQN2YK8QHjhOxDIOIEan402Y5Bqsg=
Subject key identifier: 89:4B:D7:4A:AF:82:7F:64:94:D4:9D:CA:EC:F9:64:89:C4:EC:B1:5D
Authority key identifier: 36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
Certificate issuer: /CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Certificate serial: 019A28F9316850E8BDA54D17338FB653CDAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 04:00:10 +0000
Manifest this update: Tue 28 Oct 2025 04:00:10 +0000
Manifest next update: Wed 29 Oct 2025 04:00:10 +0000
Files and hashes: 1: KwzLAJFh9AChcSwdy64vpYAmPMw.roa (hash: gKP8z3trUWmnbUH4Fi3xjFDbQv59f3+z5G16CBeShsM=)
2: NrEA4fbz_-bjXph-DQGVt5k6jTM.crl (hash: pC95TANVf69q705dPUYl6GtXaRlca85OaurDnxfhKq8=)
3: xgRFqxuYECy3s3qxM6WfghCOWpk.roa (hash: C6vhgdbkPh06biK8G7xaWybwcmLZK2bGK2ryBwYlob0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:31:68:50:e8:bd:a5:4d:17:33:8f:b6:53:cd:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Validity
Not Before: Oct 28 04:00:10 2025 GMT
Not After : Oct 29 04:00:10 2025 GMT
Subject: CN=894bd74aaf827f6494d49dcaecf96489c4ecb15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:8e:23:08:d0:dd:41:4a:62:48:6a:e9:ff:
56:c3:a4:18:3b:c5:8c:d5:72:eb:25:02:e4:7b:24:
e0:60:1f:12:70:ed:72:34:51:6e:f3:56:bd:be:1e:
c7:fb:26:2a:e4:2e:c7:fe:5c:2f:ad:e0:c6:77:bb:
66:03:09:1e:b6:f7:25:b7:cf:9e:75:04:77:9d:74:
02:6f:fa:ed:c7:07:f3:e5:69:43:15:5a:0a:d5:02:
85:b8:db:40:09:37:25:7d:1d:44:78:c8:bf:98:38:
a7:53:f7:06:1f:fc:bc:4c:42:46:3e:71:3d:fe:df:
75:f9:e6:02:a3:f4:61:8b:9e:f2:74:11:12:e3:68:
75:d0:12:d0:54:cb:a3:a3:89:a4:d9:20:a9:44:ed:
93:ae:57:6c:88:fe:d9:bf:98:e9:3e:2b:4f:f9:c6:
b6:d0:c8:46:18:8f:6b:16:d3:1d:10:80:31:3c:39:
d1:53:5c:7f:15:77:a1:4a:ef:a7:b6:3b:fe:cd:68:
0d:6f:be:69:16:df:48:49:f6:10:1e:72:76:47:84:
87:e4:ca:1e:0c:24:1b:c5:cd:26:a3:5f:b3:f3:87:
91:09:20:d4:e6:0f:a6:8d:1e:3e:a3:67:60:8f:6e:
66:67:98:5b:93:bc:85:03:31:c9:53:1d:0d:d8:69:
6f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4B:D7:4A:AF:82:7F:64:94:D4:9D:CA:EC:F9:64:89:C4:EC:B1:5D
X509v3 Authority Key Identifier:
keyid:36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:85:40:7f:e3:fc:01:fa:b2:05:f3:9a:74:af:2e:44:c0:0a:
09:a8:d7:23:21:25:db:b8:e4:be:7a:bd:b5:bb:6e:dc:70:af:
c3:18:46:39:ef:a2:e4:24:2b:b6:72:e8:16:90:e8:7c:59:a6:
b5:41:48:dc:f5:25:b2:a6:97:09:8b:ca:1b:ac:22:ad:d8:d1:
14:6f:91:ce:4e:5c:e5:d5:e4:40:1c:54:f8:34:66:b9:1d:5b:
1f:99:8a:3d:95:18:61:d0:91:7e:f3:ea:38:25:0b:d8:0b:f6:
10:80:5f:af:67:17:00:d2:5a:5d:dd:dd:d5:b9:9a:2d:85:df:
f9:e7:5c:c7:d5:a9:ca:18:78:9c:db:13:53:10:cb:d7:f3:71:
6b:ba:31:9a:5f:e7:d2:dc:bf:c5:03:bd:e5:0d:49:96:44:e2:
77:be:de:be:72:07:9a:c5:2a:aa:7b:70:d5:44:72:11:b1:d4:
c6:6c:9d:97:0a:bc:c9:80:0e:8c:97:22:e8:38:69:26:c3:f5:
5a:54:08:98:64:8f:85:03:9e:49:76:d2:1e:37:b0:18:c7:3e:
e7:d4:64:09:c2:50:b1:96:31:4e:b5:b5:1f:20:3f:91:ba:7d:
fd:6d:46:34:f7:20:d6:5b:cf:ed:83:8e:9d:5a:3f:24:2c:c2:
41:6e:53:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:01:00 2025 by rpki-client