Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
File: NbA-yF0IYHprHd8f553GUcz-Pzc.mft (raw, json)
Hash identifier: rzzaDyqsytLhCbyVQJNcte+2af1/0e8kFrn8gkjLJA8=
Subject key identifier: B3:15:36:4C:AF:0C:A4:71:2C:92:4F:C5:B6:E5:6B:28:42:F5:68:C7
Authority key identifier: 35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
Certificate issuer: /CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Certificate serial: 019A03357E478DEBE0A75BFD863369F0D27F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 20:00:28 +0000
Manifest this update: Mon 20 Oct 2025 20:00:28 +0000
Manifest next update: Tue 21 Oct 2025 20:00:28 +0000
Files and hashes: 1: EeFPhEstvW1EwmoMEs09YH1cZlE.roa (hash: zuogsczPuVIDLnfiQ5YgxbbQeRIuIE6FvsJkQLHPGfI=)
2: NbA-yF0IYHprHd8f553GUcz-Pzc.crl (hash: E4tvSXQAWdAfORASr9rMu8jDTbD9bKZ+zfCCmRP9HZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:35:7e:47:8d:eb:e0:a7:5b:fd:86:33:69:f0:d2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Validity
Not Before: Oct 20 20:00:28 2025 GMT
Not After : Oct 21 20:00:28 2025 GMT
Subject: CN=b315364caf0ca4712c924fc5b6e56b2842f568c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:c7:18:53:37:85:6f:29:fe:04:6c:ad:4f:
a0:a5:46:08:3d:65:37:99:1f:af:61:37:cc:23:35:
2d:38:88:a3:39:d8:91:c3:2d:9d:32:3d:7e:da:3c:
20:b2:ef:94:d8:08:6c:cd:8a:fa:c4:59:fa:d8:b6:
5c:42:4a:46:d9:00:51:9c:0a:4b:6d:96:80:64:21:
fe:09:90:a8:cf:1a:dd:ca:69:cb:fc:2c:0f:49:38:
dc:ca:c9:1e:73:7b:00:d6:95:4d:2a:b7:fe:b7:21:
8e:b3:7b:62:04:bd:27:6c:2b:a4:fe:5f:76:71:64:
a2:82:6f:d3:6f:9b:b7:f4:e3:86:f6:71:88:9c:ee:
0f:92:4c:03:a3:75:6e:86:7f:e4:89:4b:a0:b1:8b:
f8:8b:50:19:a8:59:bc:c3:34:b7:e5:5d:08:b2:97:
e1:34:2b:d7:b3:17:de:43:eb:22:8c:bf:18:74:94:
18:bf:51:eb:52:d7:46:35:77:15:78:d2:33:6f:8b:
43:d2:06:72:8d:9e:47:98:5d:46:b4:8b:dc:67:49:
8b:ab:59:55:84:1d:cc:bf:a9:bd:c5:6c:e2:40:76:
69:0d:c6:50:6a:ab:d5:3b:94:65:5c:ee:c6:82:d7:
35:98:b3:bf:9a:15:ed:20:fb:b0:ec:ff:e7:ea:9b:
4e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:15:36:4C:AF:0C:A4:71:2C:92:4F:C5:B6:E5:6B:28:42:F5:68:C7
X509v3 Authority Key Identifier:
keyid:35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c9:a8:14:be:18:61:e0:7a:8f:26:c9:b2:b9:9a:cc:1f:74:
ba:0d:50:86:b1:ec:43:0a:1d:15:c7:7d:d1:5e:ad:77:c1:4a:
5f:f4:f8:88:f0:ca:3a:61:f2:c3:61:14:4a:b8:a0:2f:1a:49:
5b:cf:24:92:f4:41:13:5b:06:74:04:20:bf:11:15:2c:2b:79:
fb:84:67:34:eb:be:ef:dc:87:5d:66:00:5e:9e:c5:8f:a7:29:
64:21:80:3e:7d:bb:ed:2f:17:6f:da:e4:47:40:ef:2f:7c:fa:
5d:04:59:03:a8:76:56:2f:9c:ed:84:f9:7a:8e:82:d0:8f:3a:
08:c1:57:13:b7:63:4b:e5:e5:fe:6e:b2:47:d7:4c:ac:2f:e0:
97:4e:b1:3f:3c:07:a2:8e:3f:1d:3a:60:0f:71:0e:bf:ab:d5:
44:b1:95:ed:58:00:14:a3:3a:2c:de:2e:05:34:86:8a:64:3e:
05:58:2a:6b:18:69:47:41:97:59:33:90:34:18:ec:1a:8c:89:
1f:dc:35:d8:bd:32:fb:44:86:8d:c0:aa:4e:ce:ab:d0:a4:f2:
4e:ab:52:f1:36:60:6e:40:48:bd:f1:60:45:e6:22:b6:74:b6:
07:18:bb:3d:ba:5e:d1:ae:93:86:6a:20:69:2f:1e:02:05:aa:
eb:54:34:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:11:34 2025 by rpki-client