Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
File: NFMcVLHnlWwsw3GyPgp1VnqidRg.mft (raw, json)
Hash identifier: DCVK7OC7gpka63w2wH8dSo1TyRUPzOJmzbzFQMD22ps=
Subject key identifier: 7F:89:CF:CC:9A:1A:FC:D3:96:16:52:EA:5B:53:02:AD:E5:6C:2F:2A
Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
Certificate issuer: /CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Certificate serial: 019A221B6E7F46E7F6AAC6AEA76231CDF97E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
Manifest number: 0EA6
Signing time: Sun 26 Oct 2025 20:00:14 +0000
Manifest this update: Sun 26 Oct 2025 20:00:14 +0000
Manifest next update: Mon 27 Oct 2025 20:00:14 +0000
Files and hashes: 1: 3YiK7LZ7AMKa5EcFW6jtHBACtD8.roa (hash: JkF6y7HhM9pOrm+1lX0wSDkEqrCfWM0YVrPhtMo1N3g=)
2: IMuaaqkXSGjmCph5e3uk681ceAc.roa (hash: IjS3EjK/LCrXgvu7toh9AQWnzqQYr/P4/Fdrho/vCP8=)
3: NFMcVLHnlWwsw3GyPgp1VnqidRg.crl (hash: 84X5Nn5ItwQKjhvlE+Wr7gvKaBy9EiL5WazIsNM4t0I=)
4: o5Ci2OOaaozGkEZOG_f7fDu7-XY.roa (hash: 8C555rwsYeFI3kPoKdTROpSMNzbablYPsT0+Vk3NrV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:6e:7f:46:e7:f6:aa:c6:ae:a7:62:31:cd:f9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Validity
Not Before: Oct 26 20:00:14 2025 GMT
Not After : Oct 27 20:00:14 2025 GMT
Subject: CN=7f89cfcc9a1afcd3961652ea5b5302ade56c2f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:00:38:39:df:ec:a5:57:4b:0c:6a:6f:ac:
42:ca:dc:c1:3f:99:d3:d9:78:07:84:03:79:61:39:
82:bc:24:b4:1e:b8:07:10:50:5c:fe:ec:1b:e2:cc:
fe:31:0d:a5:b0:f7:38:07:76:16:7d:97:52:6c:cf:
ec:4d:f8:28:d8:35:d5:e3:e0:19:ff:b2:ff:ba:20:
45:ce:3f:db:c4:3b:fc:f1:d7:ee:e2:ed:0f:85:24:
3c:48:79:c3:7d:9d:db:d6:b8:ee:39:95:5b:56:0d:
49:98:d8:39:ea:2a:0c:8a:a5:6f:aa:c8:ef:77:a8:
4b:00:62:11:b6:94:6c:2a:a0:55:55:29:57:44:ed:
23:e6:13:08:d1:d8:c4:05:90:c1:f3:ca:a9:cc:0e:
70:09:88:86:3c:df:7b:48:26:1c:70:33:41:ec:e0:
36:1f:99:d8:8b:3a:89:ee:a4:3b:0f:b2:60:c9:3d:
e5:1f:88:3b:01:e7:69:cc:55:e7:ca:90:4a:10:70:
5f:a7:28:29:aa:9a:bb:5e:9c:2e:a5:4c:88:98:82:
c6:56:ab:cf:6b:15:44:5b:c6:47:72:28:e2:22:9a:
bf:38:09:0f:5b:b2:f0:81:26:9e:9c:e2:b9:b3:ae:
e8:39:69:84:d8:c2:69:9a:d1:82:80:f7:48:60:5e:
2e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:89:CF:CC:9A:1A:FC:D3:96:16:52:EA:5B:53:02:AD:E5:6C:2F:2A
X509v3 Authority Key Identifier:
keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0d:40:60:d7:d3:42:1c:eb:1a:0a:64:ab:67:93:fe:7a:59:
3b:cb:2b:34:36:e8:6e:59:7e:93:21:c7:fc:9d:e6:9e:05:c5:
37:7d:78:14:7e:ae:b0:8c:89:29:81:1e:b9:41:2e:af:8f:01:
0b:a5:d7:ab:dc:6a:7c:b9:03:e4:dd:3a:75:2e:44:1d:8d:7e:
7c:44:00:ec:e2:c3:08:2b:d5:be:ac:45:ff:69:ff:64:f9:85:
ee:3a:2f:46:a5:b4:68:ae:12:b5:44:ae:d3:4c:f5:65:e0:d3:
46:93:da:28:24:4c:92:40:fa:88:4d:d3:6a:66:1a:97:76:60:
0f:b4:7b:09:9d:a7:46:91:b7:fd:7a:a3:4c:08:01:04:b3:4d:
b2:ed:89:b5:78:88:a9:7b:2d:d8:68:8b:4b:a9:c3:44:f3:33:
cf:55:95:95:1b:cf:a2:51:77:01:4b:52:a1:b4:f1:bc:f3:f8:
93:b5:a4:f0:a0:36:39:52:3b:56:22:99:b4:c0:bd:2b:21:36:
02:f7:ce:a3:08:cf:b6:68:52:5a:ad:f5:1f:26:b6:b5:de:96:
a3:07:3d:e6:68:21:cb:dd:2f:9a:46:27:1a:ea:4b:b5:bc:4f:
a5:65:ed:56:bf:62:91:98:7b:b1:55:fe:4d:27:6e:c8:3d:66:
46:7f:d2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:32:00 2025 by rpki-client