Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
File: nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft (raw, json)
Hash identifier: KAZJKLv4rNcle07seIj/WcLvKOURBsNBaOXwdKhD9EI=
Subject key identifier: 1A:8A:7B:19:14:30:52:A5:7A:54:68:FD:EE:43:E1:4C:E3:11:B6:DA
Authority key identifier: 9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
Certificate issuer: /CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Certificate serial: 019A725CF3AB7A34FD354CD73B401BDB443B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:01:25 +0000
Manifest this update: Tue 11 Nov 2025 10:01:25 +0000
Manifest next update: Wed 12 Nov 2025 10:01:25 +0000
Files and hashes: 1: MPwSmw7TKMOSUXcFrOOlFixZc2g.roa (hash: QP+dxlkmxIyI9F9hcSk4trG33k+WqitL0NMMPJjf69Q=)
2: O_fqEW14QhPRGqjQoVa9vmGmVmM.roa (hash: V1ztdeLVNvewuDYhom6BXL6CS05sk8OmHCsK+DDqUrE=)
3: nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl (hash: EHU36A+twh8K5d3lbB7xE0jvY71lYQcB8JrVHCzUp1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:f3:ab:7a:34:fd:35:4c:d7:3b:40:1b:db:44:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Validity
Not Before: Nov 11 10:01:25 2025 GMT
Not After : Nov 12 10:01:25 2025 GMT
Subject: CN=1a8a7b19143052a57a5468fdee43e14ce311b6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:77:9d:7c:36:49:a9:fb:43:dd:83:53:7a:
39:e1:75:2a:dc:73:2d:57:2b:e5:f0:7d:70:f1:93:
f7:c5:79:68:87:1a:68:0a:45:e1:06:55:d2:fd:d9:
86:8c:d8:2a:7d:79:d1:ce:df:d3:1b:e0:cd:d9:3d:
89:59:0a:73:65:f5:4d:53:7c:37:df:7a:35:8b:c9:
9b:85:dc:40:fd:e5:3f:86:94:8b:94:0f:1c:65:e6:
d4:93:16:63:65:4a:f1:a4:b7:b0:51:2e:da:33:fd:
47:eb:3b:37:03:87:18:00:31:6f:5c:86:b6:56:cd:
23:82:62:18:c8:0c:91:17:f8:99:72:e6:68:49:87:
ff:53:8e:d3:2a:51:9b:01:54:73:75:df:ee:de:7e:
65:c3:8e:d4:12:cc:b8:65:a7:5a:c7:48:17:54:f2:
0f:29:ee:0d:c5:1b:d7:b3:8e:15:71:cb:a9:eb:96:
f2:6a:4a:28:77:2f:88:e9:83:36:75:d3:c9:02:17:
c2:4e:1e:01:2e:4e:da:d9:35:a8:0c:b6:58:04:38:
19:ce:9c:aa:d4:e6:c3:b3:32:3b:cc:45:78:8b:45:
23:06:38:51:9a:e0:9f:05:2e:bb:08:4d:83:ac:18:
5c:3c:a5:e0:62:5f:f1:5a:75:62:85:a8:a4:9b:3e:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8A:7B:19:14:30:52:A5:7A:54:68:FD:EE:43:E1:4C:E3:11:B6:DA
X509v3 Authority Key Identifier:
keyid:9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:44:a2:43:b6:8f:1f:12:6c:b4:65:33:d2:6f:e8:e3:aa:ec:
2c:4a:f7:40:71:c0:86:d8:ff:e0:0f:f2:94:9c:5c:00:53:ef:
a6:68:41:96:20:c2:d4:be:1a:9f:3d:87:64:07:eb:41:cd:fe:
55:60:ab:79:bb:bd:d6:8b:19:9e:e6:eb:6f:92:0d:f7:6f:bf:
15:9b:37:1b:14:07:5d:e1:1a:85:f1:43:f8:b2:27:8d:fc:b5:
51:69:c6:b1:ad:d7:c9:96:3a:47:d2:c9:44:f1:03:c0:0c:d0:
82:e2:8a:27:6c:06:e6:7b:72:aa:63:41:a4:da:8f:32:75:2a:
7d:78:a6:22:ac:55:a8:7f:e7:3e:a1:a3:60:cb:c0:cc:a6:ff:
97:7b:a4:fb:03:72:68:3b:e9:33:22:ad:1f:9a:eb:77:86:5c:
4b:47:e8:95:c1:b1:cd:1b:07:c9:e8:70:bd:d2:78:9d:74:17:
46:04:ce:f1:84:6b:cd:c7:39:7e:68:21:dc:3e:be:8b:87:b9:
3e:05:05:59:59:95:81:94:74:63:12:84:eb:f6:77:33:42:f6:
70:df:ad:85:c1:44:07:c1:33:67:40:f8:28:c7:f2:3b:ed:b2:
12:85:12:e7:f9:26:b8:da:90:33:35:45:7d:c6:3c:46:5d:85:
fc:d9:3b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:05 2025 by rpki-client