Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
File: NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft (raw, json)
Hash identifier: KPJkw/DjgqYkfGxIoNtRDMoH/jT+7epeNAjF50q57uo=
Subject key identifier: 49:4B:C4:DB:C2:5A:B6:BD:03:A8:BC:E6:49:D0:26:3F:13:4B:14:3F
Authority key identifier: 35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
Certificate issuer: /CN=355608d078d6f31cf79be78736bf884606a17da4
Certificate serial: 019A71B7F3828CF826FD6BAFFAAB7EB2A108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:12 +0000
Manifest this update: Tue 11 Nov 2025 07:01:12 +0000
Manifest next update: Wed 12 Nov 2025 07:01:12 +0000
Files and hashes: 1: Ld3jzrrXXzWXVkMUgI6UD9IWYJw.roa (hash: +iXd1M4+bcqd1pD4b5qHzxAyt89KMtB2DGWb5orKRYY=)
2: NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl (hash: xL999y8wDWpY4s8vQpOkxzX8QxB/lwpMqU4tQWgm6ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f3:82:8c:f8:26:fd:6b:af:fa:ab:7e:b2:a1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=355608d078d6f31cf79be78736bf884606a17da4
Validity
Not Before: Nov 11 07:01:12 2025 GMT
Not After : Nov 12 07:01:12 2025 GMT
Subject: CN=494bc4dbc25ab6bd03a8bce649d0263f134b143f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b2:d3:46:2a:e4:a0:76:e4:bc:8a:11:3a:f9:
5f:ce:00:ae:84:dd:03:fc:fc:5a:20:d6:8e:90:f3:
f8:74:36:e7:4e:85:ad:58:3d:9f:a6:ba:8e:5f:e6:
a3:a5:de:87:87:bc:6f:bf:30:ca:2b:4a:56:b2:c2:
e9:9e:65:2d:d3:fb:d8:63:0a:97:51:16:46:9f:e6:
7c:5d:84:92:d2:3d:41:13:5c:2a:a7:bc:ed:45:4a:
d2:13:80:85:c6:bd:54:0e:9e:8a:d9:4b:61:c2:cb:
32:34:4a:ef:9a:8b:a5:57:ff:73:0b:92:03:b2:07:
d8:86:9e:15:90:0b:31:a4:ff:fb:d8:75:6d:6b:1b:
57:48:2b:76:4b:ee:96:ec:7c:c6:bf:7a:0b:42:92:
ab:c3:98:6e:f5:4e:89:e2:a5:b0:ec:79:68:31:cf:
0c:d0:9c:99:71:4b:98:6f:80:0a:5c:c0:f8:d3:14:
3b:96:a7:5e:46:26:e9:24:78:db:2b:78:1f:71:a5:
20:eb:04:3d:50:bd:53:a2:ca:0d:a2:7f:e3:94:96:
1b:28:47:2b:b3:51:b4:f0:98:f2:b7:32:4e:c0:f9:
a6:b8:bb:fd:83:7f:b5:28:17:98:4e:5f:0c:ea:54:
f9:84:02:57:0f:13:36:4d:04:53:14:d3:db:2b:9c:
17:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4B:C4:DB:C2:5A:B6:BD:03:A8:BC:E6:49:D0:26:3F:13:4B:14:3F
X509v3 Authority Key Identifier:
keyid:35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:23:2f:38:16:de:d8:32:c3:7a:4c:cc:8b:6e:0c:68:4f:0d:
16:43:77:98:ad:74:dc:d6:b9:8e:ec:de:24:31:9f:df:fb:16:
b6:d1:7d:97:73:a5:07:3e:ff:2e:d3:0a:24:bf:d9:c0:50:7d:
2d:f3:4e:04:db:d0:90:99:b6:c6:26:31:01:0b:19:6c:4e:b4:
77:73:c3:61:ab:92:a1:d0:7e:53:47:ac:ec:fd:48:5f:21:65:
ec:0f:0a:f7:75:90:c2:75:9e:f0:28:66:da:01:e0:8d:6c:64:
d0:06:4c:72:ae:5d:95:a5:3d:f1:b2:92:a7:b0:4d:4a:28:a4:
e4:15:10:aa:86:ea:1e:8a:00:f4:81:81:c0:d0:c9:a2:03:46:
79:0b:5c:9f:43:44:12:9b:d5:32:47:23:2b:c8:10:9f:06:36:
63:a8:5a:53:6a:8c:95:3f:f9:f2:4f:39:a8:38:a6:60:1d:4d:
4b:7f:a5:13:76:6b:1f:0a:a6:86:0a:63:0c:ef:13:fd:31:6f:
62:cf:7d:7a:6a:3b:48:32:18:2d:47:c0:fb:14:05:40:c0:a2:
c7:b9:9b:b8:b3:b3:9f:a8:ee:0e:4b:83:67:aa:4d:70:5c:19:
07:af:42:ba:b6:cd:0c:e5:40:52:7f:d0:63:bc:6b:bf:f0:25:
fd:20:92:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:20 2025 by rpki-client