Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
File: NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft (raw, json)
Hash identifier: Hb+ApwKGtICkOjae9x6vLZuqIykNaKd0jc9LjYpAZQc=
Subject key identifier: B1:BC:B5:87:07:FA:4A:91:79:C8:00:8C:C5:E3:12:4C:4E:44:59:A6
Authority key identifier: 35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
Certificate issuer: /CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Certificate serial: 019A7225FEFB3A8B196F4A8667D3172442EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:23 +0000
Manifest this update: Tue 11 Nov 2025 09:01:23 +0000
Manifest next update: Wed 12 Nov 2025 09:01:23 +0000
Files and hashes: 1: 1J9DcCYd3Q_jdEJtp8cZUA8fk9c.roa (hash: iH5nOf9Pb3Kl/sC7b3allhtNGpIaxcmUvhP78iH8szA=)
2: Cefp2MinUNICkZh50zBZ0en6wPE.roa (hash: iKM2SPROiv8Ajxn8AK2LTCg5zV1U+o0PTw/lw68hm5M=)
3: IUaglXMoCfWHYoEHDvfMOLW0gCo.roa (hash: SIDwg/N1xEcZG6CVXI1MxQJ23X7MPqohUnh5tpikeYs=)
4: NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl (hash: Ij0bfTx/isDUxd8wZ7I5b5KEhjNvtSJ9lVrh8ZiIw4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:fe:fb:3a:8b:19:6f:4a:86:67:d3:17:24:42:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Validity
Not Before: Nov 11 09:01:23 2025 GMT
Not After : Nov 12 09:01:23 2025 GMT
Subject: CN=b1bcb58707fa4a9179c8008cc5e3124c4e4459a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:87:4d:f7:6f:6c:59:d8:2e:9c:30:41:5f:e4:
30:f3:c3:dd:f4:c8:be:62:7b:7b:bd:0c:a2:f6:89:
80:ea:3e:d9:ea:3f:12:75:57:71:88:0c:a1:63:72:
cf:8a:aa:32:32:1b:a0:e5:65:25:40:c5:dd:1d:49:
ae:e4:eb:9c:e0:99:e4:4a:9a:af:d1:8d:61:af:b6:
e0:c0:45:71:a7:03:73:2f:d0:38:13:ef:d6:cf:7a:
67:a4:1d:fa:0d:e2:b0:f2:af:d1:c6:ec:53:0e:a8:
7f:64:df:50:66:eb:96:60:9c:95:81:9c:03:e9:c8:
d9:99:13:b4:ea:13:f5:e1:70:64:8c:28:11:51:c6:
da:50:bd:75:69:62:48:a7:50:7f:b1:39:c7:25:83:
a4:31:b0:ca:ef:ab:f2:18:f2:5e:4a:3f:09:88:47:
a4:88:2f:5f:04:37:28:64:32:48:35:1b:4f:2d:35:
0a:e0:69:4c:73:33:64:60:25:60:6c:8d:1b:96:55:
ab:64:49:ca:0b:cc:fe:38:1a:b5:9c:d8:f1:86:7b:
42:3f:43:04:59:3a:12:d9:4a:69:54:3e:f2:d8:cd:
4c:70:3f:bc:88:d5:5f:8f:ea:32:5e:5d:84:03:4c:
f2:5f:be:d5:c6:1a:a8:5a:fa:75:c8:fe:cb:70:1b:
0b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BC:B5:87:07:FA:4A:91:79:C8:00:8C:C5:E3:12:4C:4E:44:59:A6
X509v3 Authority Key Identifier:
keyid:35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e7:35:8d:59:30:ed:1c:14:5d:b0:e4:cf:2c:87:00:27:29:
ac:27:72:16:fb:cc:cb:5b:6f:be:35:c6:15:98:1c:3b:23:62:
b4:cf:7e:52:01:f9:52:c5:c7:17:f4:f9:95:8f:22:a6:90:3e:
e7:4e:cb:98:ea:e3:5b:2c:30:86:6d:69:b1:a3:08:2f:4e:78:
f5:4e:5f:6e:5f:95:3d:80:cc:74:72:8a:b0:48:25:47:79:e8:
a5:99:55:85:16:74:fa:e4:6d:2d:d5:3a:5e:4c:0a:9c:1f:86:
b7:ce:73:65:40:5d:0c:b1:19:a6:06:d1:d7:80:2a:0f:da:4c:
a2:30:f6:5b:f8:6d:59:b6:c6:ec:03:8a:62:97:91:b3:d0:ec:
c0:0c:03:4d:f3:28:dc:ce:43:38:78:f0:55:57:c7:86:79:38:
9e:d7:97:6e:b8:bd:16:e5:66:6c:cb:13:ee:b4:63:dd:78:24:
df:45:4b:c0:98:de:d9:6e:96:09:52:0d:c3:80:0b:8a:0f:58:
b9:ce:13:ae:76:e3:ea:e6:b7:c5:23:4d:a5:22:22:70:c7:14:
16:1f:eb:3e:3b:a1:56:fc:d5:14:f2:9b:21:79:ee:81:bf:7c:
32:78:3a:82:2c:26:1d:71:b9:60:3d:a3:d3:fd:96:f0:ff:be:
3c:35:67:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:05 2025 by rpki-client