Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
File: NZ8eO4BVHpihb8K7y33YfJoO_iU.mft (raw, json)
Hash identifier: 0dyF+/fIUSVKcFz2KEuk8B2blxD2X9yQ0ZK2SfNQQHw=
Subject key identifier: 6E:38:E2:EE:5D:30:8B:CC:F7:26:40:5D:FC:32:20:71:D5:C9:9D:34
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 019A72260EB41C701F35CCD3811DA1A50117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
Manifest number: 0E4B
Signing time: Tue 11 Nov 2025 09:01:28 +0000
Manifest this update: Tue 11 Nov 2025 09:01:28 +0000
Manifest next update: Wed 12 Nov 2025 09:01:28 +0000
Files and hashes: 1: NZ8eO4BVHpihb8K7y33YfJoO_iU.crl (hash: MAiUlel2WQ+ZC1krt4bsdQwAuXVDLwbRUgioI4RF/7E=)
2: WQDK9xlCqpMVg3-ZBWFZfqNRgDU.roa (hash: 5EEZG5yrAU7W8n0dqk+GpepBnaLmDeUxI+tSTrknSrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:0e:b4:1c:70:1f:35:cc:d3:81:1d:a1:a5:01:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Nov 11 09:01:28 2025 GMT
Not After : Nov 12 09:01:28 2025 GMT
Subject: CN=6e38e2ee5d308bccf726405dfc322071d5c99d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:b6:a6:2e:fc:eb:f0:53:3c:b0:e6:8e:a9:
b0:0f:19:e4:b1:b6:f1:41:ea:0e:48:48:1b:61:7b:
37:56:6a:71:ec:84:44:d1:aa:04:00:96:09:df:2c:
0e:40:e0:b1:c2:b7:cc:d1:e3:dc:eb:15:19:6c:4b:
2f:e0:80:62:28:07:66:63:61:2f:61:f2:d7:08:dc:
03:8f:43:5a:e9:b4:c3:0c:03:69:b5:f0:8d:f0:87:
0e:4c:2b:31:d7:e5:be:ef:0f:54:83:97:64:e3:87:
3f:0a:15:7e:29:35:d0:68:86:02:40:d7:cf:b4:22:
9c:09:21:fa:dd:b8:83:4b:7f:f3:29:54:9d:33:b3:
96:78:ad:e0:91:49:d9:bc:9b:ca:16:df:13:75:0b:
ab:c8:d2:f5:a7:3a:b9:3a:af:6c:84:d6:aa:ba:b6:
2c:67:4e:9b:76:14:4f:08:99:d5:6d:04:d4:b7:31:
33:d5:e1:01:f8:53:ca:7a:35:53:c6:8e:bc:9c:2e:
f5:6e:ec:f1:d1:24:78:0d:0e:54:ad:28:c7:30:fb:
57:de:4f:2b:a1:f2:8a:7a:ea:be:1b:7f:36:18:54:
ff:46:7f:d1:3f:b8:43:3d:b5:5a:c2:04:94:be:02:
b5:cf:0b:aa:6a:fe:ea:1a:4c:83:a0:cd:bf:dc:3d:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:38:E2:EE:5D:30:8B:CC:F7:26:40:5D:FC:32:20:71:D5:C9:9D:34
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b2:cf:bd:1c:06:74:85:b5:50:4a:a6:92:67:2f:31:4c:e7:
88:cd:02:88:fa:bd:27:49:6e:b3:a6:c1:f2:dc:6c:69:f0:2e:
1d:59:9a:fe:54:90:6e:39:23:15:73:20:1a:c7:a5:b3:e2:45:
80:6a:1b:38:e5:9b:85:60:39:3f:c1:3f:53:79:4d:0c:68:ba:
cf:c2:36:af:99:4e:0e:9b:39:cf:60:93:28:37:ec:13:73:f1:
bc:08:bb:86:8c:a6:cb:76:06:fb:5a:fb:23:56:f3:ab:bb:6f:
f6:55:71:01:50:74:c9:ce:dd:ca:30:37:be:bc:74:5e:46:31:
e2:ce:ab:b5:6a:ef:f6:35:97:b3:da:56:8b:07:2b:aa:73:87:
f8:d6:e2:07:87:99:f1:1d:f3:af:da:d1:ce:20:9e:53:2d:7d:
63:13:51:5b:ab:66:e0:d6:37:b4:ba:a4:f8:80:89:13:7c:75:
19:ef:79:f6:80:10:fa:8c:1a:69:49:ca:fd:5d:25:9c:6b:3a:
5b:ec:96:70:ab:46:92:b3:60:7f:93:8b:84:a4:50:88:f2:20:
89:59:10:6f:f3:97:7f:ee:ea:8d:de:45:e3:e1:23:93:e8:da:
ff:d0:fe:eb:ff:97:f4:a6:81:70:83:d4:3a:91:86:a7:55:5b:
fc:0d:0a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:36:19 2025 by rpki-client