Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: 6eHH9K54V1j2O6UNUUZkDg0MNKuW1YH8eU4uKsv9sug=
Subject key identifier: FB:E1:05:A4:5A:CF:FF:2F:5A:D4:E5:20:EF:04:6A:F8:E7:51:3B:72
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 019A0A4A4DBA10882421DAE80C9772FBA010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 1707
Signing time: Wed 22 Oct 2025 05:00:32 +0000
Manifest this update: Wed 22 Oct 2025 05:00:32 +0000
Manifest next update: Thu 23 Oct 2025 05:00:32 +0000
Files and hashes: 1: 1eZC9enfXbKkbChbya2s-NBXR10.roa (hash: K8gL7gYOdUPnWfON7y82NF9djuzcQAO7yPjvMnV4HWA=)
2: 4C1hs3Awu1pUWnx11isTd7urO8g.roa (hash: NHlupIJQHDTwRScv0dlfz2lFTerJ3fgzUZ9KeBTbFHo=)
3: 4aaliOpCta1xxwdPdgm9XgmQVe4.roa (hash: 50PVROIOCSd7qW0XXvFqQMxjDosAhVmRwG7IVPmy7ik=)
4: LNJOsnr56BpDhx0zCSJoGF_8kg4.roa (hash: ipKdM/rgGFJqpM5XZ1watukNv4jI5z2rHAUKNiP8l9M=)
5: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: J9Ts3SQp78nezwShdvRQtZKiBveUA/y5PXQFFkQVTFI=)
6: P4RQICIsv2ynDFNy1pTdbhvIXok.roa (hash: 3BspGo/InWWElD0+8Z5QOqYWItS4j6gIXyuD2KZuZ58=)
7: ibQsYiMOU1D97Z6dBw2Z2nuJoA0.roa (hash: paBGRr0SKtx93/jOWaEGPMAan4qkVxtM/IYXrSHwl6Y=)
8: jBgv17Pl-Vh_L1PF3KmB8kI2bak.roa (hash: yIwLWwTP6qcl+lhvdLDbXrkIo53nDQZcaNGlgxGXrqE=)
9: xlTjepejuGlW3CGUnuf8jiI_Sb8.roa (hash: xnJVidZPq3qTfXPcYiZGHTVkjYmciZFHEO03/ve53hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:4a:4d:ba:10:88:24:21:da:e8:0c:97:72:fb:a0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Oct 22 05:00:32 2025 GMT
Not After : Oct 23 05:00:32 2025 GMT
Subject: CN=fbe105a45acfff2f5ad4e520ef046af8e7513b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:56:4d:bb:f4:7f:4b:94:d1:44:40:f7:af:
16:2d:1d:74:c2:9d:ab:b5:a6:58:ba:6d:c0:67:4d:
7d:f8:7f:89:81:e2:91:ef:fa:c5:8a:09:7c:5f:dd:
21:b2:c5:30:0a:5d:a0:98:4b:b1:ef:bb:5b:7b:af:
21:26:b5:1f:ab:79:e9:b2:4e:5b:18:c3:42:b1:e5:
f1:bb:f8:ab:d0:01:1b:cb:d6:5c:7f:3d:6b:53:b5:
41:6b:3f:a8:5d:d2:fe:e1:fe:fc:a8:a5:76:e0:f4:
ae:76:dd:69:3d:03:1b:dd:89:9a:10:6e:6b:f7:7b:
ce:d7:8b:f4:f0:62:4d:b6:f2:2b:09:f2:c4:24:c9:
34:d7:c6:74:4c:7f:1c:d7:82:cf:f3:fc:55:6a:1c:
40:9d:4c:0a:ef:72:a6:29:73:73:68:6e:54:94:c3:
b5:aa:a7:97:86:8d:de:06:1b:42:32:ea:69:cd:5f:
32:26:a3:92:e8:7f:71:82:0e:6a:8f:56:21:fa:6f:
43:a8:3a:46:35:c2:dd:36:c4:6b:bb:03:e2:f0:49:
09:82:25:5d:5e:7f:01:b7:b3:2a:44:12:8d:29:1e:
7b:18:c6:ad:54:c1:db:42:8d:c8:cb:37:8c:97:05:
74:a6:d2:e1:2a:1d:bd:8d:cf:0d:d2:64:c8:3b:3f:
ef:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E1:05:A4:5A:CF:FF:2F:5A:D4:E5:20:EF:04:6A:F8:E7:51:3B:72
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:63:c0:4b:0f:9b:c0:0e:ee:81:12:dd:4d:ae:7e:09:d2:2f:
6d:4d:18:01:c6:d9:fa:75:b8:8e:89:7d:6c:a9:46:28:dd:61:
8f:0b:73:e3:82:af:f6:e5:35:0d:79:a8:85:13:96:39:ed:bd:
32:66:fe:e8:41:a0:d6:cc:09:9f:9f:c4:b9:91:92:77:b2:b6:
cb:9e:dd:c2:48:ea:c3:18:22:91:68:69:99:66:8b:46:89:9d:
aa:5d:26:be:74:45:e1:ed:6a:99:be:4d:a6:c5:13:d5:dc:72:
5d:16:10:c5:57:15:f6:57:53:98:f5:2a:14:c9:d8:39:f6:d9:
34:6c:c9:da:62:9d:33:e2:fc:38:12:7b:56:de:3d:9a:aa:7c:
70:f0:be:c1:b9:1b:5a:04:57:74:7f:e1:b6:f1:93:28:70:95:
a3:17:35:1e:aa:b8:ae:94:24:10:45:4d:18:7d:63:48:d3:68:
dd:7f:c3:59:d5:2c:a9:a7:c9:a0:30:71:2b:ac:bf:04:3b:af:
45:b5:2f:1c:2a:08:d0:ec:00:4d:3a:68:4e:8f:71:15:97:52:
05:9f:5f:3f:a8:66:74:b4:b9:bc:4a:a1:60:b0:e5:d7:f7:eb:
c3:36:6f:8e:8e:ab:fa:3b:6e:84:5f:06:64:7e:4c:b6:e5:66:
49:91:25:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:40:15 2025 by rpki-client