Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier: Lff99EfWJT3oTjvqsgLsQz5T5JhvCT7AilpKTRfnJqs=
Subject key identifier: ED:7F:07:6E:F5:4C:CD:AA:54:BC:4C:9E:59:06:0D:06:EF:A0:29:C4
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 0199FCFD24CAD6BC8CCD29D9B8D8AB50F159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 15:01:12 +0000
Manifest this update: Sun 19 Oct 2025 15:01:12 +0000
Manifest next update: Mon 20 Oct 2025 15:01:12 +0000
Files and hashes: 1: LAf6z2y7d_FvHWa2exDFEGsDUYk.roa (hash: yLu10ItcbqMAqor4DiKoo4ryX77evtxiM9mUG5P0yVc=)
2: kgdBEe32jL4o_RNVND7NTLfwJwI.roa (hash: PZIGs+YorN99DtOYFOROjFtihI/jC535mZ5OqGnLcRA=)
3: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: 90eUAZTz8PqIMS76thu2mYjlCVu/fXg23h6Q6Z5Sgh0=)
4: qO2F63snosgQCd-tQ25OAd4civA.roa (hash: KELhV9b4nDo2k2LkjCvA0ufUmi/5QZ+HPUiWXl9d83Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:24:ca:d6:bc:8c:cd:29:d9:b8:d8:ab:50:f1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: Oct 19 15:01:12 2025 GMT
Not After : Oct 20 15:01:12 2025 GMT
Subject: CN=ed7f076ef54ccdaa54bc4c9e59060d06efa029c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c5:f0:6c:52:ca:cc:78:d6:9e:9d:b1:bb:9d:
4b:1b:68:52:b8:65:be:0a:56:b7:72:2e:4b:f2:7b:
00:6e:69:91:7f:e1:08:92:92:3b:37:84:8c:76:2f:
93:20:ec:3e:d8:ad:66:b9:a9:c9:dd:84:7e:8b:fd:
98:f6:55:ac:46:cd:6f:ab:c0:43:e2:c9:48:a6:f5:
a3:a5:e7:8e:16:97:2a:c3:5e:98:7a:50:67:7d:41:
f8:be:9b:ae:f9:7a:c1:a5:15:c7:bf:e8:18:3a:d1:
9d:b3:4b:72:41:d8:45:79:41:bc:6a:1b:95:8a:fb:
de:35:e8:37:3d:69:34:72:fb:77:df:04:f0:2e:95:
9b:86:99:a2:cb:90:d2:9b:be:72:b7:6f:9d:3b:20:
6c:23:17:54:a3:70:cf:50:7b:96:6d:df:bb:84:b9:
f4:0a:b6:4f:8a:ba:22:a6:6d:06:7a:97:3b:3a:33:
10:2e:01:23:aa:75:5b:18:75:42:f0:7a:e8:8b:21:
12:45:9d:8a:7f:22:55:d1:c1:3d:bb:26:3f:90:6d:
f5:4e:c7:ac:59:3c:4a:cd:96:2a:d1:7c:e8:9e:51:
71:e2:ef:c0:6c:af:c9:06:92:be:12:01:51:ab:14:
1a:98:61:7f:74:90:a1:57:6f:f0:cd:3f:7c:45:dc:
7c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7F:07:6E:F5:4C:CD:AA:54:BC:4C:9E:59:06:0D:06:EF:A0:29:C4
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f6:14:14:ca:01:82:39:d5:ae:71:a0:c5:98:e3:8e:f3:8b:
84:c8:4e:3f:6f:a3:2a:51:08:3a:ae:a4:60:99:64:bd:bc:b6:
e9:01:8b:53:32:96:63:67:29:9e:2d:fb:55:96:c0:46:fd:ca:
21:0d:48:18:e1:31:76:e7:68:ef:20:60:46:b7:d0:95:41:d4:
b7:82:5c:8f:ec:94:31:2f:d1:1b:77:c2:12:a9:ab:f1:b3:2c:
20:5d:c7:4e:0d:e4:f6:7c:32:46:31:05:c2:61:2c:1e:f8:3d:
f8:92:66:25:6e:09:84:29:b6:63:7e:81:c8:c6:af:1f:48:ce:
c4:7a:a9:05:19:d6:0d:6b:32:41:1b:01:2c:8d:ac:11:b5:4d:
40:97:8d:5e:06:52:29:af:54:08:84:15:00:a0:0f:e8:b5:ac:
b1:9e:7f:a9:18:98:f0:5a:76:2d:8c:da:7b:6b:c9:99:30:90:
a6:f6:2a:1f:46:b1:16:4f:35:67:19:3d:d2:fb:41:13:92:91:
2e:69:6d:d5:01:6a:29:37:a6:24:52:56:d8:2b:1a:f9:12:5e:
ee:0f:e3:1c:c3:c5:a8:38:e9:89:5e:a4:44:3d:dd:7e:c8:bc:
bf:8f:2f:c8:09:f7:60:23:36:2c:0d:38:ee:09:ff:e8:66:14:
29:75:74:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:05 2025 by rpki-client