Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
File: rh__nrDPTAungU4yLsjgPU8fBxg.mft (raw, json)
Hash identifier: yPA6nJrFYCvXMYlPKZiFUNU9NLSy0aEcGTkRXE9NvSQ=
Subject key identifier: DC:F5:CF:47:B8:04:04:93:78:42:1E:AC:AA:8A:4B:2F:08:C7:45:B4
Authority key identifier: AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
Certificate issuer: /CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Certificate serial: 0199FEB529386466CE704D670C4B8AB6FE37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
Manifest number: 0D72
Signing time: Sun 19 Oct 2025 23:01:49 +0000
Manifest this update: Sun 19 Oct 2025 23:01:49 +0000
Manifest next update: Mon 20 Oct 2025 23:01:49 +0000
Files and hashes: 1: FE0N8Kmo4OQXkTM86cmuHztqlpc.roa (hash: SAO+tGk+RLFdSMx2iDPle0Zv+2Ko3C4/o12jLuDIkhw=)
2: rh__nrDPTAungU4yLsjgPU8fBxg.crl (hash: 0WXiX09UiS0+NrIWcQJJx9Wg9QoKNaMorPMl23jqPpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:29:38:64:66:ce:70:4d:67:0c:4b:8a:b6:fe:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Validity
Not Before: Oct 19 23:01:49 2025 GMT
Not After : Oct 20 23:01:49 2025 GMT
Subject: CN=dcf5cf47b804049378421eacaa8a4b2f08c745b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:10:37:94:78:95:4f:c8:bd:fb:7e:ff:15:ea:
6a:0a:9a:b0:c2:4b:b7:01:d9:4f:23:62:fd:bb:9e:
83:1b:0a:88:cf:4a:49:1d:72:78:9d:4f:9d:71:6b:
e3:62:c8:ae:f2:ae:a7:de:54:13:cc:eb:09:c7:97:
08:39:e9:f4:a0:98:ea:9e:ec:d8:9f:55:2f:59:20:
8c:d2:60:22:64:21:ec:dc:1e:e9:7c:47:1d:f4:ac:
34:69:d9:d5:e1:01:b5:7d:08:e0:ac:81:2c:d4:5a:
8a:15:25:be:e5:ba:10:58:68:59:6a:c6:c7:75:9f:
3f:aa:00:4e:9a:af:5d:8a:2d:c0:e1:07:f7:36:d7:
a1:1c:45:ff:2d:0c:3a:08:85:b5:17:2e:d0:3b:a5:
23:29:bd:00:cc:f0:a6:c3:72:41:99:57:e8:92:76:
34:33:b5:16:65:a9:1a:33:77:ca:e0:05:34:4e:57:
55:e7:94:b6:06:cd:d3:3f:82:19:6c:f7:b2:1f:c7:
95:9b:2e:88:ab:df:42:5e:9b:d7:dc:ba:52:9d:e2:
3f:58:8f:dd:24:80:c5:64:97:06:00:64:97:d7:78:
21:87:79:5f:17:ef:7b:e8:9e:3f:90:20:4a:46:4a:
24:9d:cd:e7:8a:18:11:f2:cd:a3:5d:fb:94:e2:ea:
2a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F5:CF:47:B8:04:04:93:78:42:1E:AC:AA:8A:4B:2F:08:C7:45:B4
X509v3 Authority Key Identifier:
keyid:AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:49:e1:68:28:e7:ac:e7:13:14:0e:f7:09:aa:df:2e:a8:d4:
14:61:83:d1:37:42:7f:e1:aa:9e:ff:aa:54:77:1b:09:d6:db:
8c:60:72:80:5a:4d:78:71:b5:bf:db:34:da:fb:50:ac:e8:33:
a9:9e:72:04:ac:7d:03:85:17:8e:e5:48:51:fb:e2:5e:e9:aa:
0d:05:2d:05:f6:f8:af:a5:fc:1c:e9:49:2e:c5:d8:9b:2e:8a:
b2:0a:4a:7d:d9:32:ff:5e:b8:1c:8a:e1:99:36:e3:07:15:04:
ca:62:fd:b1:3d:45:e5:ed:b1:42:e4:70:0a:7b:7f:f0:ce:51:
bc:e6:1e:aa:ba:af:13:44:d6:f4:b1:55:97:5b:e6:18:77:24:
b8:8d:8a:74:9c:d4:30:0b:66:52:5e:f1:d4:7a:85:12:d9:bf:
99:c8:17:dc:b3:23:37:1a:81:b1:e8:13:a3:d5:4b:c0:97:31:
74:92:71:1e:52:0c:31:8e:1f:d8:bd:06:ce:85:6a:21:a7:37:
00:00:64:da:a1:15:d0:7e:da:cd:67:43:02:ec:c8:f3:94:66:
25:ac:51:f3:c6:85:ae:82:52:5a:77:3e:03:47:dd:a7:b0:c4:
21:e3:d0:6d:87:d2:d5:1e:7a:b9:54:ed:ba:b1:df:2c:88:17:
d2:43:a8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:36 2025 by rpki-client