Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
File: NfH9aecZau9eKbp5VoDaw-NIaMg.mft (raw, json)
Hash identifier: 0ZHMuPP9Nfhoc6UNHTpkG1yXkaczEZCqpdh8aMZvmnk=
Subject key identifier: 24:BE:B4:78:8A:4E:1A:8E:94:09:5A:0F:E1:C7:FB:B6:37:1B:AF:00
Authority key identifier: 35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
Certificate issuer: /CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Certificate serial: 019A72259F41EE877BBB65A695D7AB748D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
Manifest number: 16A3
Signing time: Tue 11 Nov 2025 09:00:59 +0000
Manifest this update: Tue 11 Nov 2025 09:00:59 +0000
Manifest next update: Wed 12 Nov 2025 09:00:59 +0000
Files and hashes: 1: 0h3Xfcral2IubnxmY9_tstWMwfs.roa (hash: 1nhiOKUXN9GzK8aVndHDOX8caRYt3h/1uQ8akkf2jNw=)
2: NfH9aecZau9eKbp5VoDaw-NIaMg.crl (hash: AwPpkPdXupU28cRvjFe2hvTMWFeeSqyfqkMQuwUcpNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9f:41:ee:87:7b:bb:65:a6:95:d7:ab:74:8d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Validity
Not Before: Nov 11 09:00:59 2025 GMT
Not After : Nov 12 09:00:59 2025 GMT
Subject: CN=24beb4788a4e1a8e94095a0fe1c7fbb6371baf00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:7a:c0:0d:d0:83:21:ea:01:42:4d:bc:80:
90:77:e5:d4:7b:57:1a:a9:28:82:91:e2:91:5f:af:
86:c5:87:44:73:84:2c:cd:c0:a6:38:99:c6:da:4e:
2c:0a:93:0a:1a:f7:a8:c2:ee:58:4a:07:ef:3c:70:
5b:14:8c:b2:9f:ee:91:9f:be:dc:7d:80:3c:d6:1e:
de:d0:f2:b8:44:d6:fb:ef:c0:0a:2b:cb:d0:28:e3:
ad:bb:cd:76:3c:76:b7:9f:37:92:3a:7a:76:25:d1:
71:91:cd:04:5c:62:93:3d:77:45:a8:c8:26:f5:cb:
b4:80:66:2f:17:d6:b4:94:e2:49:88:40:ae:0a:2f:
07:25:57:67:e1:5a:7c:4d:90:5a:2d:5b:34:a8:4b:
b4:22:c7:d9:80:6b:fd:e3:46:9a:3f:0a:b0:60:ad:
52:1e:ff:db:4e:7d:1d:e4:be:53:61:cb:e9:f3:8f:
c6:c3:c6:d2:12:c2:62:b5:2a:ea:4e:24:d8:29:c1:
a8:f4:22:db:b1:9e:60:8d:24:7a:f2:8c:56:00:87:
05:2f:7c:42:9b:82:2c:b4:94:a4:a2:66:de:a2:b6:
c5:a2:f2:3d:46:38:cb:39:43:2b:4a:73:43:ad:9d:
95:17:85:ca:6e:36:4f:65:22:90:68:4b:1d:0e:40:
a0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BE:B4:78:8A:4E:1A:8E:94:09:5A:0F:E1:C7:FB:B6:37:1B:AF:00
X509v3 Authority Key Identifier:
keyid:35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f1:39:43:b2:97:1a:10:76:22:01:7d:20:b1:6c:a9:60:d8:
02:62:b5:50:3d:01:60:2b:9d:95:de:a0:66:a6:20:4d:0e:06:
5b:fe:e5:eb:c7:d9:31:d5:54:36:2c:84:c6:c4:ca:a1:7a:39:
8b:88:ff:5d:4c:41:68:36:3e:db:ec:15:9c:a4:60:42:85:fa:
df:fb:01:ad:fe:ca:d8:0d:d2:6c:b2:36:52:54:e2:db:d4:90:
65:a8:3c:e6:45:5a:e1:83:d2:ff:ce:e6:a6:a2:47:d6:a4:3e:
77:58:76:dc:a9:89:12:8a:44:22:69:ac:19:72:9b:b0:a0:84:
5f:ac:8e:1d:4d:b5:09:4e:ce:8b:d0:25:81:8a:12:1e:36:60:
36:93:fd:bd:53:40:81:3e:66:c6:58:15:b5:74:ec:80:83:d9:
5b:d5:06:79:aa:46:37:43:78:18:79:db:72:60:1f:74:4a:ec:
bd:fb:93:66:32:2e:64:09:cb:38:bf:ba:ad:fc:fb:08:0d:b0:
50:1b:d3:c9:32:ed:f9:13:80:a9:e6:58:6e:90:77:21:12:7b:
fe:d9:fd:d6:5a:eb:db:73:04:93:56:b3:b1:8b:8f:3d:b7:fa:
61:31:b4:00:9c:4e:a2:6f:f8:ed:63:aa:1e:eb:fc:49:d9:d4:
40:b3:14:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:39 2025 by rpki-client