Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.mft
File: NB--B1HiEYiTdNFdYxLCJPaV-qI.mft (raw, json)
Hash identifier: Y6LswgqXU5hu+87EUGkvFQbI9M3m5fq8EgCQ5Kimnp8=
Subject key identifier: A7:C9:03:0F:9A:AD:D9:CE:CA:BE:B1:B7:72:7F:83:4F:E8:55:12:55
Authority key identifier: 34:1F:BE:07:51:E2:11:88:93:74:D1:5D:63:12:C2:24:F6:95:FA:A2
Certificate issuer: /CN=341fbe0751e211889374d15d6312c224f695faa2
Certificate serial: 019A70A5411967595B7E71A65F96D9387D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NB--B1HiEYiTdNFdYxLCJPaV-qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.mft
Manifest number: 1045
Signing time: Tue 11 Nov 2025 02:01:09 +0000
Manifest this update: Tue 11 Nov 2025 02:01:09 +0000
Manifest next update: Wed 12 Nov 2025 02:01:09 +0000
Files and hashes: 1: Giw6c3ykUw3nYPNE5UpuuM_ybFY.roa (hash: 4QE8zLtdTCj1Z8B1PqQUFcIb6Is1jjshW97EzIqWBB0=)
2: NB--B1HiEYiTdNFdYxLCJPaV-qI.crl (hash: WByohqXMX/mxbGncRdUcul9Z++BJIQRZqvKrQ5Aq5vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NB--B1HiEYiTdNFdYxLCJPaV-qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:41:19:67:59:5b:7e:71:a6:5f:96:d9:38:7d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=341fbe0751e211889374d15d6312c224f695faa2
Validity
Not Before: Nov 11 02:01:09 2025 GMT
Not After : Nov 12 02:01:09 2025 GMT
Subject: CN=a7c9030f9aadd9cecabeb1b7727f834fe8551255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:29:ac:ce:83:df:e1:dc:53:f0:67:80:7c:
e9:6e:5a:d0:f3:fb:da:05:0a:d4:d5:e7:b4:a0:5b:
fe:3a:c2:82:8d:a4:c5:b8:14:2a:1b:9e:99:d9:a9:
18:49:cb:d2:a2:e6:db:5c:0a:fb:06:9d:9c:d1:4d:
c1:ad:41:47:e4:2b:1e:39:a5:b2:44:0d:58:71:1c:
c5:88:19:25:51:2e:54:ec:2e:74:ee:b9:c9:3e:52:
fa:00:5b:6d:22:56:88:64:86:7f:af:d2:44:40:99:
18:f5:0f:5a:23:20:40:87:51:36:70:0f:5d:5c:ed:
8d:0f:71:c4:25:6f:0e:1e:a3:89:3f:05:37:f3:15:
57:43:a7:98:28:88:82:4d:2d:79:fe:0c:6c:55:de:
96:ab:5d:93:93:40:23:f3:2f:d4:03:55:c8:8a:2e:
52:7d:8e:54:2a:e2:77:ad:55:b3:7d:2b:02:ad:da:
73:93:60:86:29:30:03:e8:4f:9d:56:11:75:c3:aa:
ba:47:56:e4:bb:3f:18:5b:26:ae:dc:de:aa:83:79:
0c:a2:12:e6:fa:ec:5a:7e:54:0d:df:2b:96:c3:a2:
b5:32:b1:0f:4a:80:2e:7c:b3:a9:67:4f:85:72:3b:
59:52:5a:be:6a:cf:e3:da:7a:81:24:c4:06:3f:5b:
36:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C9:03:0F:9A:AD:D9:CE:CA:BE:B1:B7:72:7F:83:4F:E8:55:12:55
X509v3 Authority Key Identifier:
keyid:34:1F:BE:07:51:E2:11:88:93:74:D1:5D:63:12:C2:24:F6:95:FA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NB--B1HiEYiTdNFdYxLCJPaV-qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ad:c7:d3:1e:bb:10:98:45:27:9f:f6:4d:d6:a9:5b:91:ca:
0a:64:67:c9:4a:23:49:32:03:10:f7:54:72:8f:94:fc:b8:17:
8f:e8:31:92:74:73:28:e9:52:59:af:4b:7f:c8:2d:ba:45:1a:
24:6a:64:1c:77:ca:12:5e:f7:0c:12:80:d5:84:87:01:f8:e9:
a8:b8:cb:99:ed:75:51:d8:c3:58:5f:c9:d5:3d:63:03:98:7d:
ad:1c:85:fa:40:28:78:8e:b3:f4:d5:d5:a5:07:bf:eb:a1:e1:
18:d4:10:f1:f2:be:e8:0e:e7:1a:ad:d4:dc:50:25:77:0e:d6:
3a:ba:44:e8:63:2b:49:30:2b:18:7e:64:9c:d4:3c:60:40:9c:
e2:f9:e9:e4:2f:3c:a2:a7:8c:b1:6c:7c:26:73:4d:5b:9d:56:
8a:bf:1b:5e:85:8e:22:a8:91:7e:c5:4a:ce:91:c5:da:0f:b7:
ed:a4:00:c8:2a:13:58:ed:a4:fe:fe:9f:9e:80:07:29:47:5c:
23:3b:0e:5c:ba:78:bc:3c:82:2d:51:91:ce:5e:fa:48:03:31:
32:a9:d1:df:8c:6a:a2:e4:d3:e1:a4:af:0e:13:a1:f4:ef:78:
dc:e8:4a:13:62:56:ae:65:24:4b:d3:5b:81:5d:1f:79:09:26:
a5:c7:e4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:50 2025 by rpki-client