Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: WbSg29fF7HYTekUGKvD8PXnKteKyEv0DBu6M598gMBs=
Subject key identifier: A5:F6:F7:81:0E:3A:6B:34:B3:2F:E0:B6:7D:38:62:DB:8E:4F:E1:72
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 019A1E3EB00BAEB015CC6B2B920E7C2DAF72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 02:00:15 +0000
Manifest this update: Sun 26 Oct 2025 02:00:15 +0000
Manifest next update: Mon 27 Oct 2025 02:00:15 +0000
Files and hashes: 1: 7lZV2ikXSn1leCy9JVthXv0dDRw.roa (hash: KGZRr2d4Ylo5EtwkQy4v0KYV8IVaaAhpVSXxUr8x4yo=)
2: FpUONkQdaqv2Rv9yYXuuU5484b4.roa (hash: s8fjXQWhK2u6VImvQBksJDBrALRZJPf8LAm3HxwOROQ=)
3: HRxI47MJmPRRcZuvobrot8euLTA.roa (hash: A/IWoERrDN0mR2hexd+6zlTgeLvRzHoqb7ZrQlTFoGM=)
4: K0e97lq8to45G4bjAY8oagFU4QI.roa (hash: bTG+6EZ7O3xegYBqouKDHymp2EvAOOtKRJXkBxvyI8c=)
5: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: M/0tP/wWedG8GIDtyEPqnrKbgzp/BHG2a689V/c5Thw=)
6: P33SSWlpyqijB0gHEOLaoCaM5OM.roa (hash: 7b5pymjGWkYqf8q+lDaj/5SKIALqOGUwKbQhUuKpSQo=)
7: Y_jo-YJu2PbRSOLAQ7xTf_r0vtA.roa (hash: QUNrldTiuNEx4ojoaKc5e0ZjUX5UdNXjzYCNRvPqGvw=)
8: p97Avl9nV3Nx0i1w45Yl3T0oKzg.roa (hash: ZPQA4d87YOhKqcuAke+P/kmc4CIdEE6HBQuGK1D7QA0=)
9: zIC946FC0tsOsf4Kuz2japvLyHo.roa (hash: /WiTcC8LPqyGnuHmvDEdj47rRpjftzM8GAt7AZLlAmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3e:b0:0b:ae:b0:15:cc:6b:2b:92:0e:7c:2d:af:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Oct 26 02:00:15 2025 GMT
Not After : Oct 27 02:00:15 2025 GMT
Subject: CN=a5f6f7810e3a6b34b32fe0b67d3862db8e4fe172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e8:d6:66:57:b0:53:d8:d1:33:f9:cf:a4:32:
78:79:1d:00:65:48:17:0c:0f:db:a1:6f:bd:59:20:
15:31:36:ef:d1:1d:d6:2c:8c:72:cb:b1:40:be:fb:
bd:74:25:dc:9c:ed:8b:d9:3c:5e:9f:56:6a:5d:28:
a2:45:c7:ca:a0:28:05:d8:d9:5b:9f:00:59:74:d2:
9c:65:28:a9:b5:dc:f7:f7:cc:36:1a:ce:3a:a4:b1:
07:2b:1f:ff:37:30:87:bb:9f:4d:15:f2:d7:53:a6:
78:b6:e9:be:a3:f2:98:28:66:35:30:fe:04:51:44:
6d:e0:c8:7a:18:f4:26:69:c6:dd:eb:ae:b3:e7:cd:
5b:1d:5c:0a:3c:fe:96:34:56:29:5e:a3:f3:78:6b:
fd:04:e1:29:2f:cc:b4:ae:0c:88:ca:b3:e3:1f:4b:
01:e6:0f:e7:24:02:e1:a7:93:ab:d6:9a:c4:28:d0:
af:cf:73:1f:cc:4d:14:df:60:3c:af:fc:18:f8:b7:
7a:09:58:a9:52:d5:1e:5c:7d:fd:b6:9a:f8:66:7b:
fc:00:b5:40:d5:f9:a7:5d:85:31:fe:a9:2e:7a:91:
43:7e:57:a8:31:dd:65:43:70:4e:e5:99:72:c9:a3:
af:c6:2a:52:fc:ed:bf:b8:57:94:46:85:49:96:4a:
bc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F6:F7:81:0E:3A:6B:34:B3:2F:E0:B6:7D:38:62:DB:8E:4F:E1:72
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:0e:bd:e0:e4:a5:96:6f:c6:f0:d2:f7:3d:b3:6f:99:52:7f:
d7:55:53:e4:70:cf:e1:26:89:32:25:fe:d9:de:c2:0b:6d:d8:
e8:f7:64:88:57:78:1c:ce:13:fe:f1:9e:eb:7f:fd:d3:25:50:
17:bb:09:a3:12:83:ea:7e:20:09:1c:73:4f:49:e7:46:3a:dd:
0d:3c:36:27:d7:20:d5:7e:11:ff:4b:de:51:1b:2a:82:20:5b:
48:ca:2b:c1:21:82:5d:ab:45:0d:5c:b1:3e:ba:00:a6:9d:13:
a1:93:b7:91:53:e8:d8:4d:a7:dc:a8:bb:6c:68:74:0e:b3:98:
e4:f0:e4:f7:f2:d4:2d:8e:25:30:d6:46:be:2c:62:e7:27:d0:
a5:48:b7:c8:24:25:f2:61:18:15:a1:8d:ad:00:0a:35:82:c7:
d0:4c:fb:72:6e:a3:32:cf:16:91:6d:ae:1b:b2:e1:38:01:bb:
c0:a8:60:13:af:c3:a7:75:ed:ba:2a:66:ef:46:de:f9:a1:bc:
ef:9f:38:5d:64:ba:14:72:a1:83:4b:a7:81:c6:02:e6:6e:88:
ce:96:f8:6f:c7:57:f3:89:eb:3e:c0:57:45:cb:f1:08:ad:f5:
9a:16:15:74:5f:a8:13:1f:11:77:ae:de:96:8e:8a:44:d4:c8:
92:a6:70:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:35:56 2025 by rpki-client