Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
File: NIWdiibI6Ih3f06AGyC3hd7mVM8.mft (raw, json)
Hash identifier: OxMZFsGyuXiOFICpaG39AArcgJa/zsuLrqzplJU2PN8=
Subject key identifier: 90:8B:E9:BE:39:F7:52:A1:39:D6:70:7D:FD:E3:A7:E0:BB:B9:49:6A
Authority key identifier: 34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF
Certificate issuer: /CN=34859d8a26c8e888777f4e801b20b785dee654cf
Certificate serial: 0199FB7CA4453875CF3405B72FEC868BEC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
Manifest number: 13F0
Signing time: Sun 19 Oct 2025 08:01:13 +0000
Manifest this update: Sun 19 Oct 2025 08:01:13 +0000
Manifest next update: Mon 20 Oct 2025 08:01:13 +0000
Files and hashes: 1: KBPaX26T74rF_b98D5vbCS4Nuz0.roa (hash: nU2QowOmWztQQgJHXXYPFT8tIem+quPQmedvSFuZH+I=)
2: NIWdiibI6Ih3f06AGyC3hd7mVM8.crl (hash: 65r+2aAW2lRd8X9iN7W7+G3IJsY4m4wgCpnvBkyCzAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a4:45:38:75:cf:34:05:b7:2f:ec:86:8b:ec:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34859d8a26c8e888777f4e801b20b785dee654cf
Validity
Not Before: Oct 19 08:01:13 2025 GMT
Not After : Oct 20 08:01:13 2025 GMT
Subject: CN=908be9be39f752a139d6707dfde3a7e0bbb9496a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:92:c2:9a:4c:40:6f:7e:5f:72:a9:18:7b:9f:
30:a3:8a:cd:db:12:4a:44:50:8c:96:8e:51:09:52:
dc:42:5d:c4:4b:04:44:59:93:fa:1f:ef:65:65:55:
61:7c:51:b8:38:a3:3d:b7:6e:45:a2:0f:aa:52:ff:
ae:80:01:bc:c0:6e:61:83:90:23:62:cb:2a:41:b3:
73:7e:1d:f8:5d:6b:ce:f4:35:a9:7e:63:6a:d1:5b:
6d:2e:59:cd:4f:e8:4e:46:1c:81:37:d4:c9:bf:1e:
61:fe:e6:ec:e9:7c:0e:8d:da:06:a8:a7:52:3e:0e:
86:4d:15:14:c2:26:2d:95:6b:7e:ff:c2:4a:87:72:
9c:14:9d:96:7c:7b:97:53:a1:32:36:6e:b4:a2:80:
e5:b2:8d:42:fa:2f:cd:ef:28:76:6f:2b:2f:08:12:
c6:86:12:4a:6f:35:f0:70:82:b7:0f:4c:be:30:7e:
85:e0:db:0d:f4:53:06:01:10:19:8f:bc:5e:c7:f5:
54:e9:aa:b2:49:6f:0b:1c:26:97:bc:01:ac:13:6a:
39:8a:c6:d3:6c:dc:5d:05:ae:a2:80:db:26:fe:d2:
1d:e2:cc:07:6d:b9:ee:d8:97:cb:1c:e7:b5:39:fc:
fe:e8:3c:fe:ae:88:48:9b:15:7c:74:c1:7c:9a:6e:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8B:E9:BE:39:F7:52:A1:39:D6:70:7D:FD:E3:A7:E0:BB:B9:49:6A
X509v3 Authority Key Identifier:
keyid:34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:18:98:af:69:13:a7:8c:90:3f:ad:97:2f:68:e9:31:98:e5:
c1:ae:ad:cb:5b:68:bb:78:dd:e4:c2:01:50:8e:61:19:d1:b4:
f0:de:b2:5f:3e:16:5f:3e:f4:17:16:7d:8f:b5:fb:11:19:48:
a2:76:36:e0:c8:5f:d0:fa:3e:24:0b:b4:2c:9b:2f:d8:ef:c9:
25:41:87:2d:7a:88:ad:17:40:00:99:fa:af:b7:66:af:a9:63:
1a:a7:03:9e:ec:e3:21:8f:c9:da:b1:be:f5:40:db:d8:dc:28:
e2:78:ef:ac:17:62:a6:92:87:2b:06:29:33:f1:84:78:eb:4a:
5f:b7:d2:12:b8:c6:d4:b2:db:ec:38:b2:34:5c:a1:e8:92:02:
51:f7:b7:d6:14:b3:76:44:24:18:0f:1e:1d:e7:2c:64:f6:db:
46:75:93:f8:5d:06:8b:b8:af:33:d7:c6:fd:a7:11:8d:7d:68:
e4:a3:79:11:b5:f2:51:35:3e:51:7d:35:7b:17:78:68:6c:9d:
ff:d0:a4:a4:de:1c:40:dc:4a:d1:c2:d1:87:4a:48:d5:8e:d1:
15:10:1b:93:e6:57:5e:b3:95:a7:6c:70:5b:c2:df:11:f7:d5:
c7:fd:52:82:d2:6a:6f:bf:46:ed:8c:a4:7b:ab:92:33:67:f9:
2d:2f:98:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:47 2025 by rpki-client