Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
File: NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft (raw, json)
Hash identifier: RIqprNBa+YXZFOBOVMzFVMdyz9Nn/F6RRYGD/vXvBxk=
Subject key identifier: F9:3D:AD:63:12:DC:F8:40:0F:6B:A1:95:C6:85:B6:3B:1F:C5:EB:C9
Authority key identifier: 34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
Certificate issuer: /CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Certificate serial: 019A7112A406E81D8226396B3A5A588BF653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
Manifest number: 0C94
Signing time: Tue 11 Nov 2025 04:00:38 +0000
Manifest this update: Tue 11 Nov 2025 04:00:38 +0000
Manifest next update: Wed 12 Nov 2025 04:00:38 +0000
Files and hashes: 1: NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl (hash: 0Xa7JA7APCfF8n+KK7hLGQW+8D9GkhB0T4M3scSk5TI=)
2: aW-VGVGdm0-L-FbjniUArFBGQOM.roa (hash: AOid/jkmGTmxdydP8OpZ8P1YZL2W+vkkEZ5iL+JUH2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a4:06:e8:1d:82:26:39:6b:3a:5a:58:8b:f6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Validity
Not Before: Nov 11 04:00:38 2025 GMT
Not After : Nov 12 04:00:38 2025 GMT
Subject: CN=f93dad6312dcf8400f6ba195c685b63b1fc5ebc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:dd:24:cc:ab:93:d8:41:7b:26:c4:f6:45:
0b:51:78:a9:14:cb:a8:28:33:e8:32:45:27:56:dc:
70:9a:de:92:76:de:10:b6:2c:72:a2:af:5f:b2:39:
e1:6a:e5:a9:98:9e:97:fd:f9:d3:8b:74:bc:ba:52:
2a:cc:00:f5:35:64:8c:42:a0:c0:14:93:89:de:6b:
48:30:f8:28:4e:6c:62:35:d3:1e:a3:1a:83:3a:23:
f4:41:b2:2b:38:09:11:b4:8f:cd:d3:3f:9e:fe:77:
b3:84:6f:3e:60:41:63:7a:e3:97:0b:62:a5:8f:43:
92:c5:63:10:b3:ff:1c:7e:a8:3d:b6:2f:e6:86:c2:
6e:d0:0d:d5:cc:0a:14:3f:20:b5:ea:84:0f:84:02:
ae:8e:ac:ca:6f:d5:a0:16:9a:14:b1:5e:f5:a9:89:
9f:7a:02:f7:77:af:5f:d2:c1:86:5c:a9:7d:e5:1e:
b4:5f:41:7b:9e:b8:27:b1:35:05:f8:6a:0d:a3:bf:
91:ed:7e:d0:da:8d:3e:e8:54:7d:a2:3c:23:6a:6f:
51:1b:82:ba:12:cf:98:d3:b0:0a:47:11:8f:8c:91:
82:dc:63:ee:41:95:9a:7d:20:9f:ed:07:a7:01:a4:
03:a7:3a:d1:1c:14:2c:35:4b:8d:22:73:f0:b3:11:
09:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3D:AD:63:12:DC:F8:40:0F:6B:A1:95:C6:85:B6:3B:1F:C5:EB:C9
X509v3 Authority Key Identifier:
keyid:34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:39:ab:ef:bc:6f:3b:e9:3d:05:cd:ac:51:d2:87:ab:da:1d:
6d:08:c0:09:e8:d7:44:83:f6:a4:40:65:5d:4b:ef:c7:0f:cd:
2f:6d:57:f0:7e:67:d3:8d:97:1c:f5:e3:a5:f8:ed:9a:7c:85:
b5:f2:f3:14:f8:9b:1a:39:99:0d:41:20:96:13:13:1c:45:f5:
9c:ff:f5:08:ef:2c:96:ec:eb:88:c7:41:ef:2e:a9:5f:30:b6:
d7:10:be:8e:97:01:30:c5:ca:35:a0:20:49:76:1a:aa:77:f2:
26:33:47:e4:d8:f4:a9:61:09:c1:be:45:30:34:70:6e:c6:48:
d5:46:1a:37:ea:97:4b:f5:87:55:fc:79:e1:ae:74:d1:0a:ab:
c0:8d:83:63:78:23:17:ce:90:e7:97:fe:41:15:6d:67:67:d8:
37:2d:61:91:b2:34:39:02:07:84:71:39:e5:46:b0:ce:38:1f:
0c:74:e8:23:c9:10:86:d8:c4:8c:67:8e:40:ad:da:ff:a0:73:
3d:bd:96:1f:47:68:53:29:aa:b2:b7:f4:ba:06:cd:e3:f6:91:
37:5a:cd:e8:3c:3e:cb:80:71:65:3a:98:a8:82:8d:df:06:df:
9a:9b:6e:f9:14:90:1d:ee:b8:13:24:34:cb:ef:2a:d6:04:6a:
ec:cd:4a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:59 2025 by rpki-client