Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
File: NHjAigY6wtNKGxkeJDY4m77tXpc.mft (raw, json)
Hash identifier: MgbOC3r+6Hc8OrJoYfxOKFgWMoRNjt4yFboGF6OqMhs=
Subject key identifier: 64:F5:FA:72:B4:64:14:3F:23:EF:75:BE:6F:36:39:49:CB:81:EF:9B
Authority key identifier: 34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
Certificate issuer: /CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Certificate serial: 0199FBEBA631761908B8BD885A897FC4D5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
Manifest number: 0D21
Signing time: Sun 19 Oct 2025 10:02:28 +0000
Manifest this update: Sun 19 Oct 2025 10:02:28 +0000
Manifest next update: Mon 20 Oct 2025 10:02:28 +0000
Files and hashes: 1: NHjAigY6wtNKGxkeJDY4m77tXpc.crl (hash: SWSpfpVbvu2pBHTDL6EMicIPM0egeKJl/sNforDAqS4=)
2: pNlFvC-ThONwUDItOe39MOTdmuo.roa (hash: WDsgShsG54TqHBufqeXclF0wXzsc7Ep5HfaFqkIsZUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a6:31:76:19:08:b8:bd:88:5a:89:7f:c4:d5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Validity
Not Before: Oct 19 10:02:28 2025 GMT
Not After : Oct 20 10:02:28 2025 GMT
Subject: CN=64f5fa72b464143f23ef75be6f363949cb81ef9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:16:db:25:ec:55:ba:55:93:bf:fe:81:3c:b8:
73:66:ef:81:93:07:29:9a:ad:d2:0c:98:38:f0:b2:
49:57:cc:2b:61:c6:1a:22:e5:68:73:2e:e2:03:d0:
7d:f8:17:be:e7:91:91:b2:c8:a3:86:dd:e9:7e:06:
59:44:5a:00:e4:64:c5:1e:39:5f:74:3f:09:4e:e3:
80:41:71:eb:d1:d5:db:1e:ea:9d:43:53:15:c6:0b:
31:57:aa:01:df:51:86:1a:93:54:d7:31:0a:d4:64:
0f:b1:c1:d4:5d:5c:d4:ee:9c:ec:0f:dc:5c:b0:ca:
c6:aa:4f:62:36:b2:ac:87:83:c8:b9:09:f7:80:f2:
ca:34:50:89:bd:3c:2b:3e:45:08:8e:8d:bd:c8:32:
b4:6d:6d:9f:d5:15:a6:d0:8c:36:96:ba:69:3f:68:
5a:55:28:57:34:d4:14:07:f8:d1:76:19:ce:a3:4d:
5a:2f:53:b1:4e:1f:73:9c:be:d2:5a:69:e2:0b:65:
15:97:d5:08:46:76:e7:15:ce:fa:b3:fa:25:9f:f8:
40:39:07:24:b4:9a:4a:dc:24:bc:36:c0:c9:a6:42:
51:53:17:58:b5:33:cb:02:22:11:94:18:e0:bd:56:
72:77:02:ec:6f:88:fb:2a:91:e3:8e:13:c1:83:7a:
0a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F5:FA:72:B4:64:14:3F:23:EF:75:BE:6F:36:39:49:CB:81:EF:9B
X509v3 Authority Key Identifier:
keyid:34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:16:6e:e5:11:3b:5d:04:69:7e:cc:87:5d:d3:30:eb:93:fc:
2e:c1:9a:93:3f:03:60:25:01:f1:98:06:43:d5:ce:50:03:99:
93:47:08:51:79:e8:68:bb:d2:c0:e9:1c:b6:18:e3:87:16:09:
7b:bd:07:ec:86:3f:74:43:14:5b:41:a9:7c:9f:ef:e9:23:56:
31:b3:31:d1:66:67:5c:de:b8:b1:de:10:62:f0:04:38:cb:03:
95:8b:64:f0:33:96:70:a8:8a:10:fd:57:7c:d1:0b:be:96:1b:
c5:4e:1a:84:f1:af:38:88:0a:19:9e:27:b3:1d:4c:2f:d1:89:
25:db:cd:72:56:76:ad:03:82:73:52:40:73:27:c4:55:62:4f:
93:c1:b3:43:ee:40:f0:3d:93:7c:84:78:46:7a:50:ca:cd:8d:
3d:92:44:0f:0a:7d:34:aa:72:b0:77:ec:5b:3c:5f:b9:78:fd:
8b:d5:3d:1e:92:ad:0d:48:4f:00:bb:06:02:d1:9e:39:21:5a:
64:58:e5:1b:86:b1:c8:83:0c:1e:9c:7f:16:76:b6:13:d0:88:
fd:eb:40:41:65:e6:ed:a1:ae:ff:30:99:67:bb:ea:e3:f0:65:
4e:0d:e2:5d:44:91:bb:92:a1:1c:43:e7:e8:e8:af:86:58:35:
4b:08:8d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:20 2025 by rpki-client