Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
File: nFK2oFFHG-xR23TXJW56MKVezxo.mft (raw, json)
Hash identifier: uUrlAJd4rdjD9jLfaPJnUmdiBOaiaDbVjbPgIxkxw/E=
Subject key identifier: 13:CF:2D:D1:F0:2F:EC:77:AB:7F:E7:73:0A:D4:45:44:CF:17:CF:6A
Authority key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
Certificate issuer: /CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Certificate serial: 019A70A578BD67EB155AEFE9EBF0EDA943A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 02:01:23 +0000
Manifest this update: Tue 11 Nov 2025 02:01:23 +0000
Manifest next update: Wed 12 Nov 2025 02:01:23 +0000
Files and hashes: 1: CpF6aVcFa4aSib91gY7r_oRg7yk.roa (hash: g98Tlf03Q7mP804tnDVA4hODWWDgDXRhH7RoV+ttI2w=)
2: nFK2oFFHG-xR23TXJW56MKVezxo.crl (hash: U4A9RjU0UgCV1K0yKr6NHAOxpBi/seDrPHiFOM4H5NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:78:bd:67:eb:15:5a:ef:e9:eb:f0:ed:a9:43:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Validity
Not Before: Nov 11 02:01:23 2025 GMT
Not After : Nov 12 02:01:23 2025 GMT
Subject: CN=13cf2dd1f02fec77ab7fe7730ad44544cf17cf6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:91:be:2d:9d:28:9d:4f:21:c5:2c:42:74:62:
f2:82:78:6c:77:81:f8:df:6e:dc:83:a5:8c:31:03:
25:de:42:f0:53:3e:71:eb:f6:c0:f6:84:d5:e0:36:
c3:5e:32:b3:ca:b2:be:4b:c8:47:4d:00:d0:6d:1d:
c5:32:cc:a8:af:78:9f:52:84:95:d2:0d:9e:bf:4c:
37:92:f3:69:82:bd:e7:b0:2b:3f:52:03:d9:aa:75:
a0:f5:49:d6:82:1e:59:fb:10:0d:7a:36:f4:d1:06:
8a:83:56:68:da:3a:8d:aa:65:88:0a:6f:65:55:3e:
b1:28:f4:ab:5a:63:1f:4d:5e:de:8b:bf:f6:ab:e7:
b4:b9:38:05:37:93:6e:13:3b:ce:2a:04:32:b1:e1:
fd:6d:56:0b:28:6a:af:31:78:7b:70:57:ce:d0:e9:
56:0a:0e:76:fe:e3:50:09:f3:cf:da:e5:ed:90:3f:
d9:28:bf:87:fb:68:92:1a:33:83:c8:da:27:4a:6a:
d5:6b:a6:a6:94:87:e7:96:05:c0:92:36:45:01:3b:
40:11:f3:36:54:e2:6b:43:a9:ad:63:e6:07:3c:c8:
67:d8:1f:cf:35:0b:68:7b:ae:6d:66:1d:ab:ab:0d:
b4:fa:1e:67:6e:5e:e1:98:4e:42:f1:b8:99:78:3b:
0e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CF:2D:D1:F0:2F:EC:77:AB:7F:E7:73:0A:D4:45:44:CF:17:CF:6A
X509v3 Authority Key Identifier:
keyid:9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0e:1d:62:b4:52:df:35:62:a8:a8:40:ec:dc:b9:93:73:ea:
f2:d4:cc:ce:fe:68:a0:91:2d:82:d6:d8:15:5c:9d:36:9e:8b:
9a:f0:44:f3:1a:a9:59:c3:8a:6b:41:8e:27:f4:6d:5e:ed:fc:
f9:f4:b3:19:c6:80:3b:a6:e3:c3:46:ad:02:f9:99:a3:e8:f3:
58:12:bd:bc:27:8c:75:d0:88:0c:cf:98:b0:9e:eb:7d:fe:81:
58:fb:ad:a7:ca:37:5c:d1:c3:1a:85:cb:41:ec:41:f1:70:7c:
6b:66:ba:54:85:39:ae:93:5b:b8:85:ee:cc:62:4a:62:e6:78:
f1:8f:7f:dd:fd:4a:42:e2:54:fa:85:23:d9:7f:99:bf:4b:94:
e7:44:8f:b0:92:7d:d9:01:68:11:9c:95:3d:81:d7:2e:41:ff:
3a:bd:71:2f:37:63:b5:58:bf:c6:c1:06:4f:41:63:a6:37:0e:
9e:f9:26:18:ec:bb:f4:69:01:ff:a0:b5:5c:3d:21:c1:cf:a5:
86:a6:7b:9d:25:62:85:df:e4:f6:83:62:4a:81:ab:cb:e0:ca:
b0:b8:0d:0e:7e:c1:a1:85:1d:64:07:db:7e:b6:eb:eb:a1:1a:
bb:3b:d9:5c:85:ff:61:05:0a:83:fb:bf:1a:a7:64:b0:87:09:
e6:bb:8c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:29 2025 by rpki-client