Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
File: Nv7S1etbPFJmq6phfJYHA8VdB4U.mft (raw, json)
Hash identifier: HJvW7Wrisudj9AKAi/V8GXkhefeduYU/ayJcZHGKRS8=
Subject key identifier: 5A:36:A9:74:0F:18:E6:3F:91:42:7E:28:D7:BD:FD:E3:4A:96:E6:BA
Authority key identifier: 36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85
Certificate issuer: /CN=36fed2d5eb5b3c5266abaa617c960703c55d0785
Certificate serial: 019A7293F4C66C64AF8AE0C1EC21A1A34493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:01:30 +0000
Manifest this update: Tue 11 Nov 2025 11:01:30 +0000
Manifest next update: Wed 12 Nov 2025 11:01:30 +0000
Files and hashes: 1: 8_VDYxYfQ3xVlWP15Ma3Tw9vIZY.roa (hash: p9ujQLih3FUP7R7lN/a7zNvyvlVnBJRzQXMR2O0trWo=)
2: Nv7S1etbPFJmq6phfJYHA8VdB4U.crl (hash: OEx89icYWRiZJ0NFSmZisu9jyI0FSYbZlTcj9vTQa4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:f4:c6:6c:64:af:8a:e0:c1:ec:21:a1:a3:44:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fed2d5eb5b3c5266abaa617c960703c55d0785
Validity
Not Before: Nov 11 11:01:30 2025 GMT
Not After : Nov 12 11:01:30 2025 GMT
Subject: CN=5a36a9740f18e63f91427e28d7bdfde34a96e6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8c:43:bb:dc:f7:e3:18:74:24:2b:0a:4d:11:
cb:16:8b:86:39:45:21:2f:be:b2:92:77:d6:d1:06:
a3:5a:37:53:14:72:0d:46:cd:e4:12:a0:bf:ac:d4:
b4:ef:15:ac:ee:db:2a:ac:73:78:20:59:09:5a:de:
15:19:a2:21:3f:30:42:ac:79:f4:ef:86:13:13:74:
f2:80:52:68:f2:a9:ed:ae:7c:2a:9c:0f:87:ab:23:
f5:ba:63:fa:af:df:7f:58:4e:f4:ac:87:fa:7a:d2:
71:b8:8a:b0:95:d3:3d:dd:81:cb:c6:4b:51:5a:3c:
2c:82:61:9f:91:7a:a0:b0:11:ab:c1:08:e5:a3:01:
9a:ac:16:b1:a5:b7:bc:9f:8a:b6:5f:95:31:30:b7:
38:28:1f:e1:92:d1:16:80:29:89:d6:84:7e:58:08:
28:0f:a9:d2:9e:35:7c:e1:37:d1:23:a8:a7:ad:e9:
0a:24:83:a2:9c:5f:61:2b:84:cf:4e:91:0c:3b:6d:
a0:14:58:61:59:5d:be:f9:57:e7:8b:9d:97:63:25:
75:a5:fd:87:64:1b:dc:9d:6d:f6:19:e4:81:98:57:
4c:53:7b:b7:04:e4:c7:d5:02:0e:86:3d:e5:a7:37:
bc:d4:46:4d:b6:95:b4:6b:85:75:84:ce:78:84:f9:
46:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:36:A9:74:0F:18:E6:3F:91:42:7E:28:D7:BD:FD:E3:4A:96:E6:BA
X509v3 Authority Key Identifier:
keyid:36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ad:09:d5:e7:32:76:8f:14:15:8a:04:43:77:5e:1c:87:d1:
fd:5e:2f:19:e7:e1:e5:81:12:e2:5c:8e:e5:02:c7:6d:17:26:
09:c5:45:c5:d0:31:4b:8d:7a:59:36:64:20:26:b0:f5:d6:e4:
10:07:ba:1b:49:14:3d:5f:df:bb:6c:6e:fa:14:a8:e3:19:20:
8c:50:fb:5b:0c:ff:07:69:83:12:0a:82:01:b7:9b:3e:48:90:
82:5c:fe:b3:d2:5c:c9:46:24:ce:8c:f3:81:5a:7f:ef:08:81:
21:22:e3:e7:88:97:dc:58:1e:d4:ef:23:54:2a:7d:32:cd:d4:
32:bc:c6:a1:54:b6:d8:ef:04:6c:79:34:18:07:af:4a:02:b2:
cf:77:0f:7a:d6:f7:46:3f:cf:44:1e:a3:28:3b:21:01:1a:8c:
8f:08:da:fb:02:00:4a:85:e5:6a:50:9c:29:d5:34:48:34:58:
ed:45:0b:ab:f2:c4:ba:a7:17:f1:ee:12:0f:9a:5c:a3:c8:55:
b2:6a:3e:9a:b2:1a:27:a2:aa:cd:79:e7:a4:91:2a:d2:2e:d5:
d4:c7:99:36:06:ab:56:83:08:88:7f:16:21:e4:e8:ad:4a:a5:
a3:a1:05:a3:3f:a2:a9:aa:f2:cf:b5:7a:b6:51:fe:fc:cb:57:
88:62:8a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:02 2025 by rpki-client