Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
File: NFtPe0oW256STwkIzuPaJvIq1IE.mft (raw, json)
Hash identifier: GxXlJ7AEgn1WOvWAAeAiuFn2PYBZt48sGrOrn2leSdY=
Subject key identifier: 2B:78:70:0C:3A:85:E2:B4:52:BC:32:6A:A4:79:C5:07:D4:0E:5B:C1
Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Certificate serial: 0199FE468D41A570C92E1586FDABF87053E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
Manifest number: 1187
Signing time: Sun 19 Oct 2025 21:01:00 +0000
Manifest this update: Sun 19 Oct 2025 21:01:00 +0000
Manifest next update: Mon 20 Oct 2025 21:01:00 +0000
Files and hashes: 1: AOLXuvzQH0F3MDzBXr5hgJth6jA.roa (hash: ANOWCNK1N2HN8iwkM8P3PMXp5btgZ6sFl3wjdGu9Tfo=)
2: IUqUo2gZccO5DJEGZ2QrdwAd_rY.roa (hash: N//BCS9/s8yglI9IXPIoNJivxPmiF8d0yubes6L4x2s=)
3: NFtPe0oW256STwkIzuPaJvIq1IE.crl (hash: bYN6tzLloPxAe9fc0QXenNnfZZYuxnFyUwnOu2yrv2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:8d:41:a5:70:c9:2e:15:86:fd:ab:f8:70:53:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Validity
Not Before: Oct 19 21:01:00 2025 GMT
Not After : Oct 20 21:01:00 2025 GMT
Subject: CN=2b78700c3a85e2b452bc326aa479c507d40e5bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cc:81:b0:94:dc:78:06:ff:f9:62:1a:96:cf:
ae:50:59:94:0c:93:4b:70:50:68:c6:d9:0f:5f:ca:
f6:43:b2:55:b2:32:dc:8b:a4:38:f0:74:24:6a:e8:
88:15:a7:7c:9b:cc:49:cd:d8:49:7e:7d:ca:66:1e:
d3:3b:3a:09:50:f2:8b:fb:0f:4d:7c:91:08:f6:05:
f6:0b:70:b3:80:42:b9:fb:af:62:8f:54:ec:4f:2d:
1a:2b:72:86:42:92:25:14:e5:0f:27:22:e4:be:38:
13:89:66:ba:62:4e:a8:2e:a9:43:2c:6b:f3:cc:90:
fb:24:6e:35:dc:87:4f:e7:7f:50:d0:7a:ce:ec:d4:
df:85:04:4f:5e:08:c2:77:fb:67:0c:a6:40:f8:4b:
01:4f:81:36:b9:5f:53:2d:dd:23:b5:b3:d6:9f:62:
38:ff:0e:01:e6:79:0c:4d:2e:2e:7a:cf:e3:cd:8e:
74:7e:69:f2:38:07:9d:3f:d9:e5:1e:94:66:b8:3e:
06:1b:96:c4:04:f4:60:3d:e8:4c:ea:90:80:f7:36:
a6:4a:f8:ff:c6:98:bc:ad:63:9c:8c:8f:fe:18:4e:
49:d3:30:ff:6d:43:9b:5c:27:48:88:02:d2:ee:8c:
79:e3:ac:ff:ce:f7:58:b4:b6:30:50:63:6f:32:2f:
d7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:78:70:0C:3A:85:E2:B4:52:BC:32:6A:A4:79:C5:07:D4:0E:5B:C1
X509v3 Authority Key Identifier:
keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d1:d6:dc:89:d3:26:90:ea:c1:5b:24:35:69:ea:77:00:0b:
f4:7e:5a:23:f8:81:36:7b:f7:c0:a4:de:83:08:5c:66:d3:bf:
51:a9:22:9d:5c:08:1f:e1:29:53:c6:82:92:06:60:a4:d7:45:
ec:15:bf:ec:46:e4:e3:3f:1b:b9:b7:3c:c0:fb:7f:4d:d1:fe:
15:6d:fb:b1:cd:53:85:e1:c2:ac:7e:32:cf:83:e7:d8:73:8e:
66:ff:fd:3c:f0:bf:54:2f:69:22:01:5c:38:22:05:d6:7e:e1:
d6:e7:ff:4c:ed:72:76:3b:fb:03:52:e3:a1:7f:4b:d9:a1:5a:
41:96:52:18:a1:7d:e2:f2:cf:a9:42:81:fd:fa:ec:f2:2f:ab:
a0:81:41:43:f9:7c:cc:be:f9:c7:6d:7f:71:38:fb:d4:a8:46:
41:97:e4:b3:a0:2a:55:db:d8:40:a5:65:8d:c0:fd:3c:6b:d5:
1e:e2:81:71:f5:32:f2:0a:02:d6:ef:27:db:25:2f:39:45:6e:
98:bb:ad:3b:8a:f4:9c:61:98:36:5c:7e:d4:ff:4d:88:b8:03:
50:7a:e3:a7:50:d4:ca:24:28:ec:ae:4f:e2:2a:d8:e2:ed:f8:
bd:c1:08:c3:4e:6d:21:b3:28:ed:ef:c9:f7:92:5a:e1:ef:ec:
d0:cb:b7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:23:48 2025 by rpki-client