Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
File: NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft (raw, json)
Hash identifier: A3RYa9cuseS3RS/l4ZbzBE5Sc1XKiy5vbpWyXil4xg0=
Subject key identifier: 09:0C:F8:C6:24:E1:FB:D7:B9:91:90:6C:D4:34:9C:6E:9A:26:37:B2
Authority key identifier: 34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D
Certificate issuer: /CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d
Certificate serial: 0199FBEAFB1B8D9EA2BC226E26770A6EA467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
Manifest number: 0230
Signing time: Sun 19 Oct 2025 10:01:44 +0000
Manifest this update: Sun 19 Oct 2025 10:01:44 +0000
Manifest next update: Mon 20 Oct 2025 10:01:44 +0000
Files and hashes: 1: NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl (hash: g2x6jz1yW4MqEuzTQux3vTTRcCbhB5Ews2hbIi0CkC0=)
2: NkwYBQBRVrFsj-xUN7Cv_m6lwSA.roa (hash: gjr66sRTq1kait53s7UP3QklI69yHhHqmsXxB/qlKCc=)
3: V4v-VxZ-7OAHRrY5C50VFKZqDnc.roa (hash: 6nRk9oygeeOeb7rjfRo1H5M200eI6zr7Rlb7ujC3GZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:fb:1b:8d:9e:a2:bc:22:6e:26:77:0a:6e:a4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d
Validity
Not Before: Oct 19 10:01:44 2025 GMT
Not After : Oct 20 10:01:44 2025 GMT
Subject: CN=090cf8c624e1fbd7b991906cd4349c6e9a2637b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d9:8f:79:e1:19:42:8a:db:de:1b:63:f7:38:
06:18:f9:ae:e4:54:df:9a:76:1a:2a:43:b8:c5:c4:
bc:df:a2:41:37:ab:c2:48:29:83:84:09:77:df:ef:
55:39:0a:fa:0f:8c:d5:b9:f5:52:e3:e5:95:a9:0f:
29:19:17:9c:1d:d9:8e:1d:a3:2a:54:3c:23:89:31:
56:cd:74:15:47:0d:3b:e9:8c:59:07:51:61:5f:3b:
db:56:4b:65:3b:95:51:27:56:ba:d6:80:ed:70:40:
d8:ac:57:4f:af:31:6b:ba:44:d5:34:d3:ca:53:8a:
72:be:56:07:d5:4f:ed:91:42:38:bc:e1:f1:c0:20:
56:70:3c:8d:6a:cb:48:42:30:ac:4d:bf:2f:34:66:
85:a6:d5:e7:a1:2d:e9:61:4e:87:6c:ca:a6:72:71:
81:a4:23:4b:24:e5:c2:ad:03:cb:cf:73:57:ac:c9:
6c:8f:20:59:86:59:9f:1d:57:4f:e7:d0:e8:49:17:
53:23:7d:ac:69:48:ad:63:58:ad:2e:6e:d8:cc:4e:
fc:96:f1:eb:03:39:ba:31:b6:1e:dc:db:f6:0c:02:
7b:e4:73:5e:d4:d7:45:f3:fa:ed:76:2e:55:c7:a5:
f4:00:b7:15:4b:70:a7:b8:f8:0a:d6:0b:31:28:cc:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0C:F8:C6:24:E1:FB:D7:B9:91:90:6C:D4:34:9C:6E:9A:26:37:B2
X509v3 Authority Key Identifier:
keyid:34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:00:74:3a:55:9b:00:05:dd:17:1f:e1:fb:4f:a4:10:21:97:
86:f7:b6:a6:3e:00:02:53:72:58:51:28:d5:85:ce:63:99:62:
92:75:cf:ae:b2:8c:58:89:76:77:14:11:34:5a:1f:92:87:2e:
1c:f6:97:fe:2b:91:9d:91:6e:6f:31:99:16:11:ed:32:d6:19:
76:10:e4:10:0d:3b:25:4c:9b:d0:33:f2:d5:73:14:6e:e7:ca:
86:f3:6a:30:e1:79:6c:65:45:5b:e9:47:69:5d:7c:04:45:16:
d9:09:af:a2:13:d9:0f:5a:cd:b4:67:26:54:e1:41:e4:ed:e6:
3b:0e:c5:73:cc:91:15:fb:6f:0f:d0:c8:67:eb:82:75:87:62:
cc:da:a2:e9:88:6b:88:28:4b:d0:c4:34:0f:e3:58:7a:53:88:
51:8a:19:e1:97:24:8d:c0:c5:3f:80:71:54:2d:68:aa:0c:0b:
98:47:0e:88:4f:89:2f:77:bc:02:82:9a:a6:8d:0a:33:97:96:
da:48:ab:7f:bf:2a:e8:89:7c:ea:87:28:6f:d0:0f:67:3b:4b:
a8:af:5e:01:ec:c7:29:8a:24:ba:09:68:19:19:7d:d8:59:67:
4e:5d:d1:59:d6:6b:7c:df:99:8f:45:d7:5d:68:b6:74:6e:41:
a7:22:f4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:04 2025 by rpki-client