Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
File: NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft (raw, json)
Hash identifier: CzZ0FeR5e8m2qQZQ6Vwvep2b0gHZRSfqM/sE3QSy4fg=
Subject key identifier: 8D:21:A0:F8:FC:C7:58:C2:C4:50:1F:A9:80:A1:5F:CB:52:18:3A:9A
Authority key identifier: 34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76
Certificate issuer: /CN=34803a2cf290b0bdc69addc003d564a234aa4f76
Certificate serial: 019A7338447DE91EF0AE5B8897EA3290042E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
Manifest number: 11B5
Signing time: Tue 11 Nov 2025 14:00:58 +0000
Manifest this update: Tue 11 Nov 2025 14:00:58 +0000
Manifest next update: Wed 12 Nov 2025 14:00:58 +0000
Files and hashes: 1: JscmxGl_L2E7JnV0mfv32RHUpNw.roa (hash: 8j6EFW05T3ckFd0k6CAkZlDvS05KieVcVNbYKlWGlos=)
2: NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl (hash: aY5WRDRAikjVAHk1UYpeGMzoxrPtJoW7ZLeWPjCmeMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:44:7d:e9:1e:f0:ae:5b:88:97:ea:32:90:04:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34803a2cf290b0bdc69addc003d564a234aa4f76
Validity
Not Before: Nov 11 14:00:58 2025 GMT
Not After : Nov 12 14:00:58 2025 GMT
Subject: CN=8d21a0f8fcc758c2c4501fa980a15fcb52183a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:59:4c:bd:d0:9b:00:6b:ea:21:4b:4e:30:
6b:b2:92:ff:d7:9c:33:74:0c:31:4f:76:b1:56:b8:
84:59:47:31:ce:6a:52:70:61:e9:34:85:e4:d0:2d:
a0:8e:72:fb:ed:c5:fc:14:2b:54:2e:8e:cc:b3:31:
a6:b1:d5:84:ba:57:d9:b4:0a:3d:5c:d9:85:87:69:
a9:f6:f5:93:9f:4a:d7:80:fe:f6:75:4f:55:77:95:
54:47:8a:05:6f:2c:79:51:6c:23:ed:ce:bc:42:a7:
47:9f:0f:84:dd:af:cb:9a:a7:2f:7e:27:39:9b:43:
28:2c:b0:18:62:6a:f8:bd:75:8c:d5:c4:26:16:93:
04:28:2b:5d:45:23:a1:66:bd:ec:04:2b:4f:52:6c:
46:b4:2e:b0:b8:ed:14:0f:c1:2b:81:a9:9a:2a:b4:
de:e7:03:34:0e:e9:e6:ee:2b:bb:9a:51:35:e3:6f:
11:c9:95:8d:57:ad:9e:09:9c:72:69:b2:8d:99:eb:
3f:b8:22:42:93:e8:a1:4e:8d:f7:c6:89:04:33:59:
fb:82:cb:2e:8d:c9:c5:73:74:b8:d3:4a:56:58:c1:
74:03:2f:55:17:89:69:f0:4f:20:a6:2d:ea:c1:d9:
12:f3:ba:33:b6:83:65:12:0d:dd:c2:ad:23:6a:34:
43:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:21:A0:F8:FC:C7:58:C2:C4:50:1F:A9:80:A1:5F:CB:52:18:3A:9A
X509v3 Authority Key Identifier:
keyid:34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:97:f6:89:a4:0a:d0:46:39:6b:97:6b:bd:0e:91:f1:e8:b9:
d4:90:47:22:97:97:a7:54:1e:fc:0b:ed:9d:f3:6e:d4:23:15:
82:7b:82:fc:e8:00:b9:7d:19:68:c8:f4:97:0b:a7:c0:5a:69:
64:00:28:da:bc:73:eb:10:77:10:ad:e7:06:75:b9:ff:b7:4b:
ca:ac:95:18:f3:24:10:25:d2:4c:59:f2:dd:5d:8b:02:39:65:
45:9e:1a:d1:71:9c:81:f3:19:2e:75:30:38:58:eb:11:eb:a8:
92:57:34:eb:47:fb:2f:8c:21:ae:63:ce:71:77:1b:76:0d:55:
05:17:04:94:4a:b8:e8:7c:aa:78:1f:08:11:07:91:d8:bb:5b:
3e:f5:95:58:72:0d:94:11:b9:57:63:3f:4f:af:53:ea:36:12:
05:8c:fd:bb:80:7e:4d:61:a7:00:a2:dd:4d:7c:8b:a6:47:13:
5c:06:ea:a3:7c:9f:61:dd:69:79:55:3a:b6:8c:0e:c4:57:03:
4e:b3:c0:13:41:8d:9b:9e:4f:db:fd:d7:8f:64:2f:ee:9f:cb:
9c:23:83:66:0c:06:e9:97:92:76:37:6c:ab:02:af:3e:15:d3:
0d:67:8f:6f:5a:b4:54:87:83:7f:6f:2b:de:82:fb:4e:9b:c4:
d4:c1:cc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:46 2025 by rpki-client