Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
File: 1NhufQc6nk1p7HFcNiMXaAWJTVo.mft (raw, json)
Hash identifier: LNVBGZ2dCI/JplAXrtZSma3vsjhXLYy9dhu/qTUB9C4=
Subject key identifier: A4:0F:DB:E5:AD:CD:16:A8:2E:AF:9F:56:2C:20:39:42:BB:6F:ED:9F
Authority key identifier: D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
Certificate issuer: /CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Certificate serial: 019A7301764A61E92BE5CD36E7AC00766C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
Manifest number: 0E12
Signing time: Tue 11 Nov 2025 13:01:06 +0000
Manifest this update: Tue 11 Nov 2025 13:01:06 +0000
Manifest next update: Wed 12 Nov 2025 13:01:06 +0000
Files and hashes: 1: 1NhufQc6nk1p7HFcNiMXaAWJTVo.crl (hash: nhTApjmsXLP4ZIjl4l0ZpXA7xBdI9ZOhqYuI9scUD+8=)
2: yVOuH9GnWiOJ4T0Bjcul16G_CUI.roa (hash: cYY3QuLeMs+0RKKYLhzyVIgFcgFYuNr0hEZcjUsKwaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:76:4a:61:e9:2b:e5:cd:36:e7:ac:00:76:6c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Validity
Not Before: Nov 11 13:01:06 2025 GMT
Not After : Nov 12 13:01:06 2025 GMT
Subject: CN=a40fdbe5adcd16a82eaf9f562c203942bb6fed9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:28:51:89:28:4c:f4:a6:c2:de:75:54:e1:
0a:01:88:6c:dd:a7:e0:b6:2a:e6:e5:09:b5:01:83:
f7:a2:10:a4:11:93:6d:8b:e1:1d:1f:d5:4b:94:31:
e4:c2:70:fe:65:b6:d4:ba:26:c4:ba:b5:c0:fc:4d:
b4:e6:98:ee:b6:17:42:c5:5f:a0:ad:f3:1e:93:f7:
3b:ee:9d:26:28:04:39:86:18:e3:e2:92:45:5e:11:
c2:17:d3:73:db:78:a2:db:6d:22:0d:35:a8:55:37:
1f:9c:60:ae:8a:9d:73:16:eb:62:3d:a4:2a:a4:ff:
36:68:5d:7b:0a:01:1b:5a:b9:63:50:66:64:57:a8:
7f:83:1d:2f:56:9a:9d:ef:7b:54:9b:6f:e3:24:aa:
f1:3e:8a:c7:90:e5:c2:c6:f2:3a:55:e2:44:c6:9b:
f5:ce:43:25:65:f4:25:d7:d6:95:fb:eb:b8:0c:15:
5e:90:80:78:19:d4:6e:9f:ed:3e:42:50:4d:fb:0d:
7c:38:1f:c3:fa:f0:d5:4b:a4:1f:4f:f2:4e:51:67:
4b:23:c4:7f:14:89:16:62:ad:40:b6:ff:c6:83:c2:
ca:2d:01:49:57:06:15:06:52:5e:4d:c9:57:f1:b0:
7a:ee:ed:f7:75:c8:ad:76:e6:f2:c5:ba:99:b7:d5:
03:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0F:DB:E5:AD:CD:16:A8:2E:AF:9F:56:2C:20:39:42:BB:6F:ED:9F
X509v3 Authority Key Identifier:
keyid:D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:eb:78:ea:36:13:48:01:6c:64:df:df:95:86:f8:7a:10:af:
71:f2:95:cd:20:12:43:88:9b:22:f7:20:ac:d9:7e:14:49:01:
52:62:4d:b5:45:bf:57:fe:d7:f1:8a:2d:a0:d0:23:00:93:98:
09:46:fe:07:eb:d2:6c:0a:d4:08:5d:44:a3:96:29:27:3a:92:
07:15:2d:a7:47:74:b1:fa:00:dd:a3:fe:18:37:2e:aa:ac:d9:
f2:3e:ea:07:14:fe:df:c5:e1:73:7d:45:0c:3c:0c:cd:a6:23:
3e:2e:7f:4c:70:5d:8a:f1:87:ae:a2:64:ad:78:a7:ed:eb:47:
2d:4f:e0:7e:5a:9e:4b:7c:dd:68:de:46:f4:f8:59:06:b4:93:
58:df:e4:29:dd:6d:df:6e:8d:98:62:d9:43:b6:d9:d2:6d:65:
e3:80:7a:fe:f8:b5:40:3b:84:e4:1b:07:dc:ba:99:e1:c4:cb:
37:23:0d:03:ef:f4:9f:df:f6:13:82:da:10:32:e0:2f:56:f2:
e7:dd:0d:29:e7:94:f6:39:46:0f:61:db:f9:ee:b3:68:e7:b3:
a1:83:ff:48:e9:14:7b:62:4d:29:71:bf:2b:db:5f:cd:25:24:
9e:99:73:3c:ab:20:6b:0b:22:aa:e6:e2:2d:70:85:42:43:a2:
59:3b:3b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:40 2025 by rpki-client