Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
File: NFMcVLHnlWwsw3GyPgp1VnqidRg.mft (raw, json)
Hash identifier: 5NwWOHu4faXGDw4Grl8JKQ5tDteGKg5aSW782BIbgC0=
Subject key identifier: 7F:87:54:DA:32:48:CB:77:7F:76:9D:4E:C2:FF:F2:8A:AC:83:4B:39
Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
Certificate issuer: /CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Certificate serial: 0199FF59BC683FFD2D18B234384ADF460309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
Manifest number: 0E94
Signing time: Mon 20 Oct 2025 02:01:34 +0000
Manifest this update: Mon 20 Oct 2025 02:01:34 +0000
Manifest next update: Tue 21 Oct 2025 02:01:34 +0000
Files and hashes: 1: 3YiK7LZ7AMKa5EcFW6jtHBACtD8.roa (hash: JkF6y7HhM9pOrm+1lX0wSDkEqrCfWM0YVrPhtMo1N3g=)
2: IMuaaqkXSGjmCph5e3uk681ceAc.roa (hash: IjS3EjK/LCrXgvu7toh9AQWnzqQYr/P4/Fdrho/vCP8=)
3: NFMcVLHnlWwsw3GyPgp1VnqidRg.crl (hash: 7BLtZqN/0KLeFWG2drGeeGHxVzj9bpJOagnZXxIrSuk=)
4: o5Ci2OOaaozGkEZOG_f7fDu7-XY.roa (hash: 8C555rwsYeFI3kPoKdTROpSMNzbablYPsT0+Vk3NrV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:bc:68:3f:fd:2d:18:b2:34:38:4a:df:46:03:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Validity
Not Before: Oct 20 02:01:34 2025 GMT
Not After : Oct 21 02:01:34 2025 GMT
Subject: CN=7f8754da3248cb777f769d4ec2fff28aac834b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:38:a0:11:ec:90:be:48:24:71:6b:3b:79:
31:02:c7:69:63:0c:36:f6:18:80:91:e2:43:1c:e1:
2b:fa:b9:74:56:e8:2d:c9:a5:32:fd:b4:4b:bf:22:
b7:8b:ac:cf:bb:89:f3:9e:e0:1f:ef:24:7e:02:3e:
5e:03:b0:c0:2e:4a:ff:4c:5c:9b:d4:70:e2:cc:54:
d4:42:32:e4:a4:fd:26:9a:26:43:ee:5f:98:8b:f8:
f0:83:ee:09:9f:92:7a:5b:3d:ba:9a:06:8a:9c:4c:
5e:d0:9e:01:93:54:1a:22:59:02:2d:a8:48:b3:64:
8e:7e:58:4d:50:ee:af:58:b8:ca:e0:cd:56:1e:f6:
be:07:76:49:5f:0e:df:2f:38:5e:3d:a4:c1:8f:9a:
ba:76:0a:23:2f:fe:df:d1:8f:5b:3a:2c:91:22:8d:
3a:7e:05:9b:2a:b0:92:80:16:cd:bc:ad:5e:1c:4b:
2e:4f:e7:e6:7c:27:56:27:38:62:b0:6c:e5:1b:ce:
de:65:4c:3d:df:a5:f8:97:2e:7a:d4:c0:0a:af:ea:
68:32:39:d5:c2:00:76:bf:6d:08:34:1d:97:4e:25:
e6:e4:27:fa:5c:45:aa:92:da:da:4e:a6:11:f7:95:
ac:34:ad:c3:1b:12:ae:1c:9e:43:c7:53:1d:80:f9:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:87:54:DA:32:48:CB:77:7F:76:9D:4E:C2:FF:F2:8A:AC:83:4B:39
X509v3 Authority Key Identifier:
keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d3:35:51:6f:e8:86:d3:4a:bb:a8:ab:a8:d9:47:39:1a:4d:
4a:74:e1:d4:14:ca:40:56:80:a1:a2:24:2c:29:ac:9c:cf:62:
91:18:4e:1b:d9:1d:b5:63:69:19:47:b7:65:b7:53:f0:e5:1f:
79:66:8c:a4:c7:f0:a9:ec:1f:98:5b:c7:7e:48:0c:82:de:2a:
bb:80:75:50:4b:a4:0e:4c:a1:e8:2e:0b:39:17:43:3a:0e:c0:
03:f8:57:41:96:b8:b8:a9:43:ea:b1:5b:de:30:28:07:a8:bd:
78:9e:99:85:8c:6d:01:09:59:51:dd:f6:a8:ae:74:f1:f2:3d:
d4:92:e6:1e:4b:4d:18:e5:3a:16:47:68:cc:97:6b:68:fa:a7:
36:bf:f1:19:0c:13:82:ae:9a:3e:5a:8f:d2:bc:7e:ba:88:56:
47:7c:e5:aa:11:06:52:de:0c:d2:2f:49:1c:6d:87:b4:76:35:
32:b2:2d:93:5b:cb:45:e0:ad:66:c2:3c:6d:1a:ce:6a:e4:78:
96:a1:9c:a5:c1:c6:43:5c:e7:bc:fe:de:88:c5:aa:94:95:e0:
45:ef:50:da:42:28:e0:27:02:cb:34:cb:e0:59:25:a9:4f:c3:
10:77:f0:1f:3c:0e:e2:cc:e7:ac:9e:22:bc:c1:22:c9:cd:f2:
da:e2:d1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:06 2025 by rpki-client