Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
File: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft (raw, json)
Hash identifier: qgoDxqqRsmfzkgV7C0jyFe+YyLSh/wPN3/URqIUSRi8=
Subject key identifier: 13:85:1B:94:11:A6:30:CA:C0:DE:92:D2:96:25:42:EC:02:6A:F7:76
Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2
Certificate serial: 019A416FE9C7113D1E5A5E3A56CE13EA0DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
Manifest number: 0850
Signing time: Sat 01 Nov 2025 22:00:44 +0000
Manifest this update: Sat 01 Nov 2025 22:00:44 +0000
Manifest next update: Sun 02 Nov 2025 22:00:44 +0000
Files and hashes: 1: NHHiweZNj5X_oEscIWqjN4fHUE8.roa (hash: MGSiZ7A04kD6SVx5EJJ9SDisYbkFZtAr2OJkCAfFB+Y=)
2: PLSWkynWBozVrtkmXuniU53IS9U.roa (hash: Lsv4VTZqkFzdhWhhIHv70pB07NRxNMMpNt1Lwv3O/w4=)
3: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl (hash: daFv00bGRX2j4PeMhOly+vam7I+EN2VagFssY0lfyCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 21:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:41:6f:e9:c7:11:3d:1e:5a:5e:3a:56:ce:13:ea:0d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2
Validity
Not Before: Nov 1 22:00:44 2025 GMT
Not After : Nov 2 22:00:44 2025 GMT
Subject: CN=13851b9411a630cac0de92d2962542ec026af776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d2:a3:75:1b:24:de:af:6a:e0:7a:13:08:59:
4d:26:1e:c1:c6:23:08:5d:cb:ee:77:bb:a7:ae:83:
9c:3b:7b:fd:b8:f7:ed:ac:95:ee:51:59:02:ef:76:
4f:e6:21:ae:ca:a8:ae:52:0b:53:ef:64:04:bb:ea:
0a:ba:c7:59:2a:3e:e5:fb:7c:79:99:e1:8d:89:19:
4d:bd:a9:78:39:ba:ec:e6:f9:56:f9:1c:57:83:33:
77:2c:e0:86:f5:2d:1e:6f:19:78:c8:a0:1f:1a:4f:
bc:82:85:9e:02:7c:e8:22:5f:78:b8:2f:b2:f0:1f:
55:74:ef:c0:7f:87:99:98:b7:af:80:3a:4c:33:2b:
15:49:7b:ff:c3:03:ab:95:34:4b:a6:bc:09:8f:68:
f9:7f:15:05:b3:55:06:8c:db:3e:33:6e:96:48:ad:
8f:c9:62:4f:0b:e6:3a:b3:7b:15:5e:1b:03:42:31:
d7:bb:02:28:cd:86:98:61:7f:9e:ad:3b:0f:1f:43:
91:3a:92:bb:ba:7a:db:ca:27:af:11:59:f2:6f:50:
5f:aa:61:8e:0b:b0:f2:a0:75:4a:e3:5f:1f:51:93:
6f:64:d6:55:a0:da:a2:95:f3:2d:31:69:ec:08:0b:
f1:dc:51:df:90:81:91:14:07:e0:5e:c0:c7:40:8c:
79:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:85:1B:94:11:A6:30:CA:C0:DE:92:D2:96:25:42:EC:02:6A:F7:76
X509v3 Authority Key Identifier:
keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b2:04:23:12:aa:d3:ff:97:41:c1:86:d8:e2:b0:f8:ea:0e:
ff:54:60:7a:0f:2f:1a:3e:23:e3:77:a8:c7:74:45:bc:fa:09:
7c:0e:aa:ed:59:a9:6f:96:63:a3:de:68:94:55:d6:8b:3b:db:
99:d5:2c:39:46:2d:d3:79:0f:57:84:c5:44:d1:3b:04:e1:93:
6b:ef:8c:42:c2:b3:29:ee:5a:1d:d0:67:6e:b5:f5:21:31:d9:
5c:a3:8d:06:b1:62:53:2d:fc:c9:f4:88:f4:84:1f:35:82:7e:
fb:fb:1e:3e:2c:64:5e:a7:b1:83:ec:db:21:0a:7b:7f:16:7a:
19:06:32:55:08:5a:57:68:30:bc:b1:c3:a2:df:89:6f:60:bc:
83:b8:aa:64:67:d8:db:8e:72:3d:ae:af:7b:52:6f:df:10:22:
99:19:e4:21:9f:5f:f5:4e:d3:db:f0:8e:16:d8:1b:d1:40:27:
33:80:e7:41:76:3a:e9:77:34:22:bd:e8:d2:cf:f9:70:b5:5f:
b6:f3:23:96:ae:24:a7:af:32:3e:ad:01:dd:b6:3e:4e:e4:ec:
3b:22:b8:7b:ce:6c:91:ca:f5:ea:af:47:1b:e8:26:88:5c:74:
97:2e:38:33:c4:41:00:e0:f2:94:88:4d:ad:9f:ff:70:4a:13:
cc:2a:72:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 02:59:00 2025 by rpki-client