Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
File: _NenIe2kWevfmOAp-HyQqYDoHZQ.mft (raw, json)
Hash identifier: 2+KrkFOErHve71KOqCrIovDPdj9FdoqPBZvZmPMN/34=
Subject key identifier: C2:7F:A8:7E:50:69:3C:6C:A3:60:1B:FA:F8:07:82:F2:98:E8:F5:20
Authority key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
Certificate issuer: /CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Certificate serial: 019A4C98310852ED6DC3ADACC27E743496C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 02:00:33 +0000
Manifest this update: Tue 04 Nov 2025 02:00:33 +0000
Manifest next update: Wed 05 Nov 2025 02:00:33 +0000
Files and hashes: 1: AkKW7m-MHHB19PTWABc4m9rKocs.roa (hash: qHV2PtoHadaa9NwNl5xTEsUFUv4QzTCLjq+mny689nw=)
2: _GG8qubp_g9Px6E1DCD6hAdsvxo.roa (hash: 7gqHqwq0qb4WMuA79mugfXtlkRY7UZiMzeqs0bw/bLo=)
3: _NenIe2kWevfmOAp-HyQqYDoHZQ.crl (hash: rT0/ZWycoMPoTDsStbSIguC9DuPzRN9mCDCgYRyUXxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:31:08:52:ed:6d:c3:ad:ac:c2:7e:74:34:96:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Validity
Not Before: Nov 4 02:00:33 2025 GMT
Not After : Nov 5 02:00:33 2025 GMT
Subject: CN=c27fa87e50693c6ca3601bfaf80782f298e8f520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:af:b5:7b:35:4f:ee:93:3d:35:e8:1b:70:80:
a9:27:e6:5f:dc:26:48:72:0b:56:3e:0c:98:2c:9e:
37:ed:e7:f7:c7:2c:30:c8:59:4b:48:a0:83:61:e0:
c5:cd:0c:2b:e3:c7:4e:d8:80:fb:69:05:bf:51:b0:
c3:4d:a1:ab:9b:4a:38:a6:49:8e:ee:c8:74:07:55:
fa:48:fe:28:c4:ab:2c:08:c6:4b:e0:1d:ba:7a:6c:
8e:81:11:3b:62:a0:d2:1e:aa:27:ba:18:b2:c6:23:
cb:71:57:b5:5a:38:20:a7:a1:0d:97:df:2e:25:6d:
31:42:a7:9d:ce:4d:30:f6:84:41:84:5f:67:5b:6c:
60:3a:78:1c:dc:ac:06:d6:b2:eb:08:1d:e4:7a:9b:
8c:5e:fd:4b:96:3b:1e:36:00:d7:12:2a:3d:67:fa:
db:2a:3a:fc:59:06:ad:ac:cb:4e:d6:4b:c0:9d:58:
81:54:0a:c7:17:33:be:29:90:9b:90:95:f0:38:20:
b8:a3:c6:dc:d6:eb:fe:fd:cf:2b:7c:fe:d1:ff:ee:
fc:c9:f4:ed:a4:1f:73:2f:2d:6a:36:70:f9:26:a1:
e2:a0:39:2f:68:af:16:29:73:8f:98:60:e3:a9:0f:
3a:68:0c:97:e4:3b:dc:59:b6:fe:02:5b:83:4b:8a:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7F:A8:7E:50:69:3C:6C:A3:60:1B:FA:F8:07:82:F2:98:E8:F5:20
X509v3 Authority Key Identifier:
keyid:FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4f:21:fb:d1:aa:b2:06:d1:d8:b3:f1:55:c2:3f:5e:25:1e:
9c:08:29:72:08:8f:3d:76:2b:b1:b8:0f:3b:a2:08:16:19:52:
25:26:27:57:7f:d4:02:2b:c4:cb:e2:0d:e8:7b:07:72:2a:84:
9f:71:d8:23:a9:06:4c:e3:45:44:d6:4a:bd:a6:52:21:23:57:
9a:92:de:b9:99:e0:d2:e6:bf:96:8d:92:2e:16:bb:ec:67:76:
20:39:b9:66:2b:bb:e8:00:f5:f8:03:d0:f7:4a:75:64:50:92:
ff:d2:1f:ef:ce:fc:ee:71:82:3e:02:2e:c1:de:c7:28:eb:12:
f8:af:7c:54:1f:02:2f:52:a0:7a:16:3f:76:f8:38:04:05:40:
cb:c3:56:69:57:5a:e0:68:ce:f0:42:f8:aa:72:03:7c:da:37:
13:59:b0:c3:5e:1b:d5:05:f6:63:11:b4:93:eb:b3:13:02:5c:
d1:ef:77:47:d3:c1:38:7f:89:c6:e5:bd:0b:7c:d2:95:e2:ea:
40:8a:8b:f3:49:59:57:e1:75:b7:6c:13:51:69:09:34:7b:4a:
23:bd:ed:f0:1b:70:6f:68:cd:0e:f1:a4:81:41:ee:83:c8:dc:
6b:9d:7a:99:e9:c5:e2:47:56:a2:9a:93:c7:39:64:af:2d:07:
75:2a:d0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 03:59:57 2025 by rpki-client