Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
File: NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft (raw, json)
Hash identifier: t4pOPVnmD5glQZj/mlRDr9mx2X4HR5/vSu03287YMwI=
Subject key identifier: 5E:77:0A:0A:E1:39:C4:1E:95:05:FC:09:C2:28:43:64:B3:64:62:0D
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial: 019A72937E1E7FED8D189AD75FB3B855590D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
Manifest number: 0D87
Signing time: Tue 11 Nov 2025 11:00:59 +0000
Manifest this update: Tue 11 Nov 2025 11:00:59 +0000
Manifest next update: Wed 12 Nov 2025 11:00:59 +0000
Files and hashes: 1: 4jPyPZw3fj3g3jxwKw2HWrojQOs.roa (hash: KPFbCHVHeUU2XRC/hJ8YuwMme8By/aerz2iNVWzWJ/Y=)
2: 98C9emKFHKSWoxnRXQ4ADLcbKPE.roa (hash: CvGthRHI4SGJQkS5NvABpgXZA0TVYZ7H8kYAxXAYLqo=)
3: NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl (hash: nVCUOOiNvwzevfJbTCjAUEyqJpAixga2ZeBYNGUsB0c=)
4: sYrkqtslIewoX_6wadaN2UhvCQg.roa (hash: Oj08Cr1VcQgzFndi/8RHmivr+b/zmwMkws7/hKkzL0k=)
5: ufwXrYHICWHfHKo6i-11Xy8XxDE.roa (hash: wzviVt1JzgPyofJmjOmZiOic44Kr4jKlAuGseoOoCMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:7e:1e:7f:ed:8d:18:9a:d7:5f:b3:b8:55:59:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Validity
Not Before: Nov 11 11:00:59 2025 GMT
Not After : Nov 12 11:00:59 2025 GMT
Subject: CN=5e770a0ae139c41e9505fc09c2284364b364620d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:98:c8:d7:f0:7f:34:3a:bf:71:96:6a:3f:
d0:4a:8e:c7:96:2c:19:4b:56:2d:b1:f0:39:e6:07:
e6:d8:d9:0a:41:88:0f:04:12:bd:b4:05:af:13:59:
64:7b:43:59:3b:43:da:5a:18:93:24:fa:da:cd:ad:
72:fe:1b:36:f4:ee:ec:b3:85:52:52:e7:8d:3e:35:
19:d4:86:83:32:e2:af:23:19:57:51:9e:07:da:b3:
97:9b:c1:80:ae:fd:7e:8f:54:73:b7:39:a2:0e:38:
64:0d:f8:1c:43:31:0c:d8:b7:a0:93:84:dc:98:6d:
30:34:74:1a:b0:3a:03:1a:54:81:bd:e3:d9:ac:8b:
1c:da:78:87:11:ea:ff:92:6e:86:65:70:9f:12:b4:
66:00:e4:c1:b8:1a:36:f4:d2:97:b8:d0:14:c4:76:
f1:d5:4b:f0:0a:36:1c:76:61:62:5b:51:76:23:a2:
ae:3e:e3:09:61:29:c6:b8:3d:cc:66:7e:b8:3c:a7:
aa:fe:9a:05:5a:cf:3e:55:8e:27:85:74:1a:ea:73:
b5:c5:5a:4c:ab:b8:96:b1:44:e4:42:2e:f8:96:03:
49:1d:a9:ac:d5:97:6c:29:a5:93:23:bd:7b:c8:1a:
ca:70:b0:cc:f1:8a:9b:51:89:16:2e:03:a3:bb:4c:
3c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:77:0A:0A:E1:39:C4:1E:95:05:FC:09:C2:28:43:64:B3:64:62:0D
X509v3 Authority Key Identifier:
keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:8d:64:63:dc:47:45:d5:24:1f:81:4a:15:1a:1a:d5:c6:ec:
8e:85:1d:e5:ed:a6:f9:ee:52:78:6e:ea:bf:8a:9e:6c:df:4d:
bb:93:46:51:f9:0e:31:bf:2e:4f:17:dd:cf:f0:d7:0b:6e:d6:
43:83:40:35:5f:8e:10:c0:06:2f:b1:c6:17:ae:33:75:4f:d8:
a1:99:4d:8e:a9:85:29:91:6f:3d:ed:fd:b4:06:60:d2:fc:5a:
04:19:6d:39:ec:af:2d:86:de:a5:7c:0c:5d:ab:01:12:4b:54:
7b:6b:9c:69:49:aa:ac:19:be:1c:73:62:65:ab:53:37:2b:4b:
6a:c3:d6:63:17:a8:c5:92:92:e6:e8:2c:f4:6f:bf:07:a4:d6:
b4:aa:88:7d:96:e1:80:8b:d0:d3:5c:d0:b0:45:68:0c:d2:8a:
2c:37:c8:2f:7e:35:4e:ac:ae:1b:a9:34:11:ab:d8:d7:b9:78:
69:73:49:23:f3:a8:18:3a:d2:c3:8f:55:0e:7f:2c:fb:c1:52:
28:c0:23:f7:80:3c:30:c1:1a:ce:cb:bd:a1:29:cb:3f:1b:28:
25:72:61:7e:99:7a:d1:1c:0a:68:7c:1f:73:87:92:4d:f9:d3:
e4:5f:8b:83:ba:8c:c9:d3:fa:61:35:da:70:a0:2f:b8:6f:a1:
5a:e3:59:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:13 2025 by rpki-client