Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
File: ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft (raw, json)
Hash identifier: JW83ykeWPyLbQhKPth6BolGNMmiUw87Qim9v2t7q0oU=
Subject key identifier: 41:A8:BA:86:5D:3D:9B:FD:A9:54:6B:72:79:1C:05:5F:98:4E:65:F2
Authority key identifier: 9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D
Certificate issuer: /CN=9edc3ff166155e6988be8095fcb420001d8be21d
Certificate serial: 019A72CAAB8B1BCB969BB58E5D245D4BC7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 12:01:15 +0000
Manifest this update: Tue 11 Nov 2025 12:01:15 +0000
Manifest next update: Wed 12 Nov 2025 12:01:15 +0000
Files and hashes: 1: 9f1wfLMKGBE8v9MkOS4m3itL3mw.roa (hash: bPIUPhKEdbriAsko7Y4dw04AFw67jLRfl2Ngnf52fJ8=)
2: ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl (hash: fgjYyWipqlSz2+va1aEDE9NLTkbvS7dSZYzZTWu7Nw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:ab:8b:1b:cb:96:9b:b5:8e:5d:24:5d:4b:c7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9edc3ff166155e6988be8095fcb420001d8be21d
Validity
Not Before: Nov 11 12:01:15 2025 GMT
Not After : Nov 12 12:01:15 2025 GMT
Subject: CN=41a8ba865d3d9bfda9546b72791c055f984e65f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:88:84:dd:bf:69:97:40:cd:a4:33:59:f7:aa:
cd:92:53:a2:10:6d:53:84:9d:e4:f8:32:1a:09:e3:
c6:b0:2a:8e:be:13:c2:9f:a1:83:18:df:10:d9:1e:
fa:5c:0b:87:6f:99:8f:41:31:da:ac:fe:ad:e4:01:
0e:f1:64:62:75:1e:27:57:ee:5e:b6:bd:43:27:8f:
e0:90:2e:4b:74:59:74:c4:b5:73:b4:c5:c5:d2:56:
06:99:39:79:84:e5:60:0a:66:3c:f1:01:25:d7:31:
a6:98:c5:88:67:01:51:1d:74:3c:df:fd:e7:f3:8b:
df:97:e4:51:cf:43:da:72:dd:e6:3f:48:22:f0:e1:
a7:61:58:81:27:d8:c2:53:08:32:ab:5c:e9:89:47:
30:1c:c9:8f:51:36:c6:91:2c:3d:bd:1a:bb:e2:fb:
8c:95:db:1d:83:40:67:1f:90:02:d1:3c:97:54:59:
d0:b5:a8:92:fe:64:b3:a0:95:0c:25:eb:9a:95:bb:
05:b0:86:38:27:a4:58:6f:e3:cd:30:e4:ce:66:45:
be:5f:18:72:07:fc:66:c7:8b:3e:f7:e0:90:ab:b7:
52:f3:08:08:e3:df:b1:70:d3:72:7d:60:8b:35:b7:
b6:f1:cf:b2:6d:95:7a:76:eb:39:2b:3e:26:91:ea:
fc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A8:BA:86:5D:3D:9B:FD:A9:54:6B:72:79:1C:05:5F:98:4E:65:F2
X509v3 Authority Key Identifier:
keyid:9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3d:ac:97:87:5a:0f:da:41:c7:75:84:41:a6:93:1c:54:55:
26:0a:08:b9:88:ac:46:ef:cb:b0:5b:ac:a1:77:8d:aa:74:16:
ce:19:06:b3:1b:50:32:3e:17:bf:32:9c:5b:c3:00:43:cb:28:
38:ca:c0:6a:4e:b3:0a:6f:d9:22:c6:f3:d8:9d:c8:46:08:c7:
c0:91:34:7c:6e:ef:38:4e:bd:de:98:52:92:d5:69:a2:54:97:
d6:43:2c:62:a3:3e:dc:8d:3e:01:66:ac:24:e6:ab:6d:35:5a:
2e:fe:87:27:07:63:ee:d2:fc:93:61:1a:b0:29:74:c0:19:7e:
19:81:84:01:5e:a4:75:0c:73:cd:0a:26:6a:58:01:ab:18:34:
55:38:96:b6:b9:44:0d:21:ed:fe:d5:39:0a:c1:b8:80:1a:6e:
76:82:85:a1:08:51:dd:7e:bb:ac:3d:c7:92:b9:88:f6:45:1c:
1b:3e:72:17:04:e1:35:56:d1:e7:5d:fe:b6:43:03:f7:a0:c1:
74:81:08:d0:2c:c6:39:97:cb:f7:28:a0:19:69:a5:e9:a8:7f:
a5:ea:8f:97:cd:c6:a2:b8:bd:0d:ea:ea:94:52:7d:87:6f:5c:
da:73:41:98:75:ce:87:ca:c7:02:83:58:b0:5e:44:97:a7:fa:
24:b6:8e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:57 2025 by rpki-client