Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
File: NAd7QemIc-fwb7HfP105xyGxND8.mft (raw, json)
Hash identifier: 5RPfc7/8HWLc0Mvj7nEp/Ja6NtnlSBO2dT9MRS9DyVo=
Subject key identifier: 2D:2E:0B:45:DC:19:2B:2C:E9:44:DA:CA:07:D5:1E:4A:FF:1B:DC:46
Authority key identifier: 34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
Certificate issuer: /CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Certificate serial: 0199FE46D2EB06401845D5C5309E2DA93012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 21:01:18 +0000
Manifest this update: Sun 19 Oct 2025 21:01:18 +0000
Manifest next update: Mon 20 Oct 2025 21:01:18 +0000
Files and hashes: 1: L3eXX40R-J2MZIIUJdb8enfoeE8.roa (hash: lwjbJYBJSc/rhMWtZdkfBAupkIFWhtQl6cOuFgh+q0M=)
2: NAd7QemIc-fwb7HfP105xyGxND8.crl (hash: 15KS1WGffxkoyx27AfgYVQBYtJiEGxP4sUzVR7l9vFM=)
3: rzrW1TWZL4bnPJ-nB128HmDlFaY.roa (hash: jgoKQgRuGI4ln2b618FpeT2y9vZl1AD1XL8CqPtrGN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:d2:eb:06:40:18:45:d5:c5:30:9e:2d:a9:30:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Validity
Not Before: Oct 19 21:01:18 2025 GMT
Not After : Oct 20 21:01:18 2025 GMT
Subject: CN=2d2e0b45dc192b2ce944daca07d51e4aff1bdc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:1a:21:80:f1:5c:5e:29:d2:76:82:d9:89:
54:61:ae:07:3a:fb:d3:65:42:8e:e6:45:32:d9:41:
0a:62:37:7a:b1:b3:1c:a3:8a:70:b3:b6:1e:8b:68:
a1:a7:dd:d7:cf:e3:73:e5:ea:e9:bd:a3:e0:99:72:
5c:96:2b:0d:50:a9:b4:d0:5a:5e:ec:3d:0c:50:80:
18:49:1c:a9:66:e8:39:d4:5c:d1:d0:0e:84:b1:a5:
3a:02:55:c8:42:af:dd:77:e9:7a:76:06:2d:e3:ba:
e6:fb:33:75:32:e6:e7:43:65:86:4c:7a:3c:53:85:
74:be:42:2a:30:23:65:78:9a:fa:02:76:e3:45:a1:
6e:d9:34:cd:62:c6:ab:a7:91:c2:98:54:f9:a7:6a:
bf:75:e5:6b:a1:e2:da:32:8e:69:92:f2:22:b2:7b:
11:ee:b1:37:0a:ff:77:28:0d:62:1c:3a:35:c7:5a:
5e:47:a2:44:bf:03:cc:85:06:7c:a9:38:48:2a:80:
09:11:89:d3:16:bd:29:df:14:2f:6e:1b:1c:f6:d6:
e7:21:6a:56:e6:9a:d8:2c:2a:0e:3a:4b:e5:88:18:
39:72:24:3d:41:54:5b:e9:50:b8:b3:77:df:f8:3f:
4c:8a:ec:a8:64:f3:3b:dd:40:20:87:2e:a8:63:76:
1f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2E:0B:45:DC:19:2B:2C:E9:44:DA:CA:07:D5:1E:4A:FF:1B:DC:46
X509v3 Authority Key Identifier:
keyid:34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:60:28:c3:e2:42:96:96:e3:40:65:f6:21:9c:bb:f4:72:b8:
96:9e:fe:b8:cc:7b:7b:62:e2:8e:78:d9:ad:53:65:db:90:7c:
5d:2e:da:39:45:0d:d9:b3:cf:00:30:6e:b3:69:c7:8f:8d:91:
53:a0:dd:1e:c9:d9:a1:ea:9a:fe:a3:fa:79:c9:82:29:86:34:
6c:2e:1e:b7:8b:c7:da:92:11:f6:d3:16:8e:5e:8f:4e:bc:10:
98:ee:88:d9:a8:96:83:9b:84:88:e4:84:1e:ac:01:00:b8:44:
1f:a7:65:c5:a7:b8:4f:f3:7d:33:30:df:09:74:6b:ed:e1:fa:
ee:30:2e:18:61:a9:70:f8:c3:0e:76:88:f4:40:db:ee:5c:4f:
55:26:85:dc:c2:9c:c1:02:12:d7:37:0b:0b:3f:3c:99:8f:c5:
60:5f:36:d5:30:97:ff:f6:08:a7:7c:79:36:9d:00:e1:64:fa:
c8:ad:15:1c:2e:86:11:0f:af:14:3e:64:53:46:ac:f0:ae:03:
7a:6e:22:26:33:52:ee:89:ea:36:16:be:8a:0b:6f:74:8f:1e:
50:b2:bd:49:63:a3:c2:6a:24:ff:e9:66:b1:e5:45:df:c3:f0:
f4:8f:2c:fc:db:b8:76:83:a2:d6:b9:ec:e7:3b:69:d1:10:43:
a4:65:bc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:47:29 2025 by rpki-client