Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: riRttive4mlw8PkeLJP4ZQQGV9wvf9fgiJnXTmL6b5g=
Subject key identifier: 25:B7:17:E9:01:9D:8A:64:98:3A:E6:2F:0E:8B:79:8E:75:C2:F8:17
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 019A1D2C3D0ED7CC11B38E5206DF6B3BC080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 16F3
Signing time: Sat 25 Oct 2025 21:00:29 +0000
Manifest this update: Sat 25 Oct 2025 21:00:29 +0000
Manifest next update: Sun 26 Oct 2025 21:00:29 +0000
Files and hashes: 1: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: ZN/WIa6by7EDukt6RNupFkZlG10m/R6vJg5FHGE2HF8=)
2: t18fV6YPwA2MAEndpMc8X0ToRWw.roa (hash: H0VTW6jFucioUCNK4Zk3Ys3jO7tUvJYmK3uUV0BFJlM=)
3: udb2liD_hmmSjMQHfxOs3ILFeak.roa (hash: I8Ss2wHMn10fRDENu7eQisoAjY4IBsPU1iECaxEl9xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:3d:0e:d7:cc:11:b3:8e:52:06:df:6b:3b:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Oct 25 21:00:29 2025 GMT
Not After : Oct 26 21:00:29 2025 GMT
Subject: CN=25b717e9019d8a64983ae62f0e8b798e75c2f817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:f7:73:56:ae:26:4b:84:bf:ab:88:d7:c8:
50:cd:0d:f8:42:cf:86:40:b9:d9:b6:6c:45:0d:12:
50:66:a6:e4:f8:31:f5:e6:8b:22:2a:cb:35:76:6a:
be:d7:16:79:bb:4e:23:cd:a1:ad:a0:7d:42:fc:5a:
ef:84:6c:57:67:00:91:64:82:6c:c2:56:d3:ad:ba:
38:b7:5f:71:a7:6c:a2:84:4f:40:28:07:17:ff:d4:
33:84:93:d5:d5:19:60:f4:74:8b:37:d9:14:47:3f:
7c:7c:0b:e0:dc:82:90:17:b8:8f:da:c3:7f:29:ef:
6c:37:af:57:b0:0e:02:a8:ea:e1:7e:62:30:34:e9:
37:20:e7:f7:6a:ca:4c:c3:e7:bf:e9:b1:3c:e5:14:
74:77:26:a3:f1:e0:09:ae:79:64:1b:52:3f:db:33:
5d:f4:e2:9e:d0:d8:f7:71:dd:78:25:57:6e:46:bc:
22:74:73:b9:8f:15:ea:36:41:a2:a9:ab:34:e7:99:
ec:fa:21:9d:b4:6e:c7:7b:95:4c:96:fb:6c:f2:cc:
70:61:bf:ba:68:25:9d:00:33:33:1e:22:07:54:54:
b4:a0:46:62:7b:ba:f2:09:23:5e:f0:ea:10:7f:b0:
59:5c:86:e6:54:aa:ff:16:18:9f:6a:34:8c:25:a3:
22:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B7:17:E9:01:9D:8A:64:98:3A:E6:2F:0E:8B:79:8E:75:C2:F8:17
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:cd:10:f0:ca:b1:a7:05:e4:4c:1d:9c:94:aa:85:59:40:b2:
e3:d4:18:cb:2a:90:f6:86:eb:ba:28:a7:8f:6b:fc:37:43:a3:
d4:33:4c:97:4a:cf:56:d0:d3:fe:e0:9a:eb:f6:74:fc:9c:2d:
f5:5c:32:12:f2:8e:df:d9:58:b9:33:17:16:7f:66:9a:2a:96:
62:81:a6:a2:28:74:13:ff:1f:dc:92:c2:f4:01:64:95:b2:2f:
01:1a:76:aa:44:f7:95:02:6d:33:8f:98:30:4c:7a:6e:52:b4:
09:9c:ed:24:f4:c2:30:f2:34:37:ff:a1:fa:1f:48:33:1d:f8:
3c:22:df:17:ec:ac:c0:f4:3c:46:65:a0:7b:99:1c:ea:ed:e9:
99:e4:89:df:ed:0f:aa:79:6f:53:de:18:5d:b9:34:05:9e:41:
76:4a:6c:67:e6:06:49:fb:e6:ee:8c:9d:08:31:99:48:7d:a1:
dc:69:7b:a3:12:7b:46:9b:b6:2b:46:e3:7f:12:0b:a3:39:59:
49:5b:80:cf:97:ce:67:df:40:b0:7b:e7:21:d1:0e:c0:76:af:
72:b6:9d:20:80:35:69:b9:05:bf:54:74:20:01:8b:57:fc:19:
4d:99:25:3f:28:f3:30:9f:1e:5a:e4:50:f2:03:16:2b:0e:9c:
d2:c3:8a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:19:58 2025 by rpki-client