Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
File: NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json)
Hash identifier: 4x29p9FZ8684846Q6GhEcfYR7UfuoMp7deK3IxPEAW0=
Subject key identifier: 86:23:3F:BC:5E:34:36:F7:EA:FD:50:97:8F:E5:93:CB:1C:F1:FF:BB
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 0199FC582E3FB2DEF627D59CA32A52D9C49D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 12:01:01 +0000
Manifest this update: Sun 19 Oct 2025 12:01:01 +0000
Manifest next update: Mon 20 Oct 2025 12:01:01 +0000
Files and hashes: 1: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: 3/AUGLSG0NwwnLu4aYWeY0nGTVzX9kr9ghrg3nx7j9o=)
2: O3Kl40jGDsPRJGH1EFnf65-hUj4.roa (hash: aMzq4HH1WAeogtvzS32mERsBxOMZNMYLSy3wIuq38+8=)
3: fCTecUt77UHhtXHXll1piF7Zd6c.roa (hash: q3pUeUA6qW+DpXb5gimft6PsFNA4pETS9zhmS0g+5v0=)
4: hZ2yySpjQiTMjZvchaaZ9n1kGlE.roa (hash: pY371ydI1VeBW+n9ngZnpHGBKKkDLyF2vNs37egLERQ=)
5: pFZVBmgqiU0csf9W43g6FIWRCTM.roa (hash: eUwZvrYwb50UrEhmGEwgTxwUKEPb4F3y0cFhI/MdzLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:2e:3f:b2:de:f6:27:d5:9c:a3:2a:52:d9:c4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: Oct 19 12:01:01 2025 GMT
Not After : Oct 20 12:01:01 2025 GMT
Subject: CN=86233fbc5e3436f7eafd50978fe593cb1cf1ffbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e7:20:2a:bd:de:41:53:63:ba:a5:c8:41:ef:
e5:02:78:23:d2:99:d3:bf:ca:2c:80:f6:21:13:e1:
5d:38:14:33:3a:12:bb:14:3f:b5:03:06:6c:ab:d9:
a7:7a:e7:51:2f:07:7a:9d:62:f3:0a:63:82:80:10:
d3:79:8d:2e:28:51:ce:34:5c:27:0a:be:2c:77:1a:
df:96:29:a4:13:32:ec:a1:05:65:24:0f:93:97:5f:
8b:84:e0:11:f4:76:a0:47:15:b6:47:c5:5c:d0:e2:
36:20:15:53:ca:90:a2:59:f6:ba:e1:0c:b0:00:c5:
f6:86:a6:88:b4:63:54:8b:44:53:11:be:cb:7a:5c:
8e:87:b4:eb:27:d2:69:aa:41:19:e7:89:ab:8f:fb:
50:8c:20:6a:b5:5a:77:97:0e:bc:ac:b7:ab:21:03:
f5:ca:a2:38:0f:25:e1:56:32:d3:52:b0:a9:39:21:
b1:c4:77:85:5f:d3:12:b8:3c:34:a2:e9:89:66:24:
61:6b:a0:a5:36:c8:e0:b3:5b:37:79:63:7b:92:e8:
2a:fc:ae:ba:9d:0e:6c:86:b8:76:0f:48:6e:7b:ec:
6b:fd:8f:af:fb:bf:72:06:ea:a0:4d:92:11:09:16:
ef:bb:da:36:b0:45:5d:70:b4:f7:53:86:06:fa:d5:
15:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:23:3F:BC:5E:34:36:F7:EA:FD:50:97:8F:E5:93:CB:1C:F1:FF:BB
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e2:8b:dd:10:b8:58:58:b0:0a:d1:26:2e:a3:20:0a:e0:aa:
d6:11:8e:9f:c4:31:90:5e:d0:ea:0a:5c:8e:7d:4f:a9:c5:94:
8f:0a:13:65:a3:77:01:c3:d9:42:c2:8a:94:c0:42:39:8c:b7:
4c:de:a0:00:8a:33:7f:b7:04:e5:fd:f8:5e:57:29:6b:88:20:
bd:8e:f1:c2:08:0b:15:0a:8c:ea:4a:ac:46:78:e2:cd:81:e7:
d9:58:3b:68:1e:71:7f:37:e7:5f:c8:0a:5c:9a:e9:3e:d0:16:
92:b5:a9:d5:76:29:91:3a:b5:6c:cc:f8:6d:f0:38:ed:c8:2e:
30:ae:f1:0d:f4:33:45:cc:6f:0e:da:60:dd:10:21:e6:a1:3f:
97:04:f8:37:8a:0e:a0:26:e1:99:d1:33:02:57:1a:3a:f6:9d:
a1:81:b8:b3:1f:6d:65:84:ed:8a:5b:6a:02:e8:e5:87:3e:ea:
0d:f6:da:a6:23:bf:b3:0b:66:36:4f:39:b7:ef:e5:46:b9:00:
de:14:c7:bc:14:20:0f:b8:7b:9d:e8:86:7f:37:bb:97:cb:3b:
6b:29:ba:f6:7d:58:a0:ce:ab:b2:e6:ae:c0:ed:54:eb:7c:e5:
d9:01:3e:11:48:74:50:e3:d6:28:c9:cd:31:14:ec:db:86:e0:
4f:d1:8f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:12 2025 by rpki-client