Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
File: rh__nrDPTAungU4yLsjgPU8fBxg.mft (raw, json)
Hash identifier: 4qaFO3TydfWFu9YsWaKfegMTkT3wanwk5gEK7DVWT+g=
Subject key identifier: F1:D6:B9:1D:44:54:09:76:4F:2A:F3:FB:77:11:DC:96:00:1B:BD:E8
Authority key identifier: AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
Certificate issuer: /CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Certificate serial: 019A70A4D1932B35D96160FCC5891B5D9FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
Manifest number: 0DAD
Signing time: Tue 11 Nov 2025 02:00:40 +0000
Manifest this update: Tue 11 Nov 2025 02:00:40 +0000
Manifest next update: Wed 12 Nov 2025 02:00:40 +0000
Files and hashes: 1: FE0N8Kmo4OQXkTM86cmuHztqlpc.roa (hash: SAO+tGk+RLFdSMx2iDPle0Zv+2Ko3C4/o12jLuDIkhw=)
2: rh__nrDPTAungU4yLsjgPU8fBxg.crl (hash: XLmlFGr6L8zVHHXG9cI0QsDDa3NLhCYWVCy6BvEqFi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:d1:93:2b:35:d9:61:60:fc:c5:89:1b:5d:9f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Validity
Not Before: Nov 11 02:00:40 2025 GMT
Not After : Nov 12 02:00:40 2025 GMT
Subject: CN=f1d6b91d445409764f2af3fb7711dc96001bbde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c4:fc:04:1d:7a:db:b8:16:fd:a6:44:ae:aa:
61:7b:41:ca:8a:b4:a4:da:4f:39:be:98:82:69:db:
06:b1:4a:a2:d0:b2:17:f8:d4:92:d2:8e:d1:d3:63:
2c:4d:87:6d:45:32:da:3b:cb:cc:7b:09:2c:9b:ed:
b7:3c:82:4b:d7:64:06:3e:33:e3:17:8f:39:d7:78:
fc:8f:bb:f9:ee:a1:26:76:dd:f5:c4:0f:9b:3d:18:
24:2e:29:22:1f:8e:e6:51:54:82:91:10:81:20:c8:
89:30:3e:45:10:c0:62:7d:e7:bf:c9:55:06:52:4a:
18:ea:df:c5:1a:68:aa:8b:fc:f8:94:33:ca:ce:15:
40:dd:0e:cf:ed:48:0d:68:b6:5a:02:0e:17:67:dd:
53:62:bf:75:ee:fc:3f:81:4f:8d:1a:9d:4d:38:6b:
59:54:2e:36:f0:26:e2:50:e0:c0:32:27:b5:b1:73:
86:fb:6c:d1:e2:00:29:2b:0d:ee:62:79:49:a1:fc:
2c:14:2f:78:a6:26:da:6e:b9:7b:88:fd:5a:44:4f:
98:06:e9:15:a9:01:71:e0:b8:a1:92:6f:20:5a:9d:
32:ed:66:96:6f:27:bb:56:db:23:b6:e3:4f:2f:7d:
b3:ef:18:03:07:57:ad:70:06:fc:62:5c:84:12:98:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D6:B9:1D:44:54:09:76:4F:2A:F3:FB:77:11:DC:96:00:1B:BD:E8
X509v3 Authority Key Identifier:
keyid:AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bc:34:42:7c:e6:57:3e:1d:0b:1c:2a:09:94:48:69:07:34:
b9:4b:69:4e:cf:f6:42:b1:36:b5:dd:80:9b:96:31:70:ad:b6:
bf:5c:17:cf:27:19:bd:dc:d9:7f:89:f6:3a:86:51:d0:fb:57:
48:ed:4d:69:bd:26:3e:6a:fd:17:de:f5:d7:63:e3:a8:e4:d8:
2c:ac:8c:b5:a5:f4:cc:49:83:60:b9:c9:b4:77:07:d9:9c:bb:
39:b2:bd:3e:96:fa:27:d4:0d:d9:d0:42:e6:8f:0c:4c:9a:03:
4f:bf:3b:84:f8:b9:7f:a6:8e:1d:32:a6:25:d9:a3:68:22:7d:
a2:90:60:7e:3b:31:6d:2f:30:44:51:29:a8:81:d6:86:1b:da:
72:c8:78:0c:e5:6f:ce:ba:f4:32:72:62:a6:63:c4:58:d7:3a:
33:71:52:6b:53:20:ab:49:47:2e:8f:c4:50:f7:e8:67:31:dd:
32:03:7a:e2:47:5f:fb:3f:b2:74:25:b6:19:b6:b0:d8:7f:0a:
1f:d6:5f:4f:92:ba:a7:0d:7b:3a:61:88:bc:ac:77:6f:8f:c4:
bc:e4:0c:69:da:a7:0b:d6:fa:b0:27:42:41:ae:c8:bd:69:b2:
ae:c5:4f:6d:af:3f:8e:d4:b1:e2:2c:88:88:dd:ea:74:8b:df:
5d:e5:bd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:48 2025 by rpki-client