Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: hNla2l4xbNYqXVyYmix8oEq5+Cl3fgSjlWLLV/mZQcw=
Subject key identifier: 84:8F:E8:55:89:02:D6:AA:99:91:C7:4C:46:F3:A9:0F:D4:CA:CA:84
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 0199FB7C8CD50335CFC6F8028DCDFEFBA0E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 08:01:07 +0000
Manifest this update: Sun 19 Oct 2025 08:01:07 +0000
Manifest next update: Mon 20 Oct 2025 08:01:07 +0000
Files and hashes: 1: 7lZV2ikXSn1leCy9JVthXv0dDRw.roa (hash: KGZRr2d4Ylo5EtwkQy4v0KYV8IVaaAhpVSXxUr8x4yo=)
2: FpUONkQdaqv2Rv9yYXuuU5484b4.roa (hash: s8fjXQWhK2u6VImvQBksJDBrALRZJPf8LAm3HxwOROQ=)
3: HRxI47MJmPRRcZuvobrot8euLTA.roa (hash: A/IWoERrDN0mR2hexd+6zlTgeLvRzHoqb7ZrQlTFoGM=)
4: K0e97lq8to45G4bjAY8oagFU4QI.roa (hash: bTG+6EZ7O3xegYBqouKDHymp2EvAOOtKRJXkBxvyI8c=)
5: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: z8CY6G2XaCbj/JCErGthUn3z4l9g7oN8tBQOcaAyYg0=)
6: P33SSWlpyqijB0gHEOLaoCaM5OM.roa (hash: 7b5pymjGWkYqf8q+lDaj/5SKIALqOGUwKbQhUuKpSQo=)
7: Y_jo-YJu2PbRSOLAQ7xTf_r0vtA.roa (hash: QUNrldTiuNEx4ojoaKc5e0ZjUX5UdNXjzYCNRvPqGvw=)
8: p97Avl9nV3Nx0i1w45Yl3T0oKzg.roa (hash: ZPQA4d87YOhKqcuAke+P/kmc4CIdEE6HBQuGK1D7QA0=)
9: zIC946FC0tsOsf4Kuz2japvLyHo.roa (hash: /WiTcC8LPqyGnuHmvDEdj47rRpjftzM8GAt7AZLlAmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:8c:d5:03:35:cf:c6:f8:02:8d:cd:fe:fb:a0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Oct 19 08:01:07 2025 GMT
Not After : Oct 20 08:01:07 2025 GMT
Subject: CN=848fe8558902d6aa9991c74c46f3a90fd4caca84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:51:4d:75:3a:a4:c8:9f:03:40:79:35:e6:
09:36:37:ab:99:35:5b:f2:e5:65:06:94:ef:dc:7f:
3b:7e:70:8f:17:01:1a:78:e7:76:6f:be:cf:14:6d:
61:91:18:2e:49:43:bd:f9:34:7c:52:e7:e4:a9:85:
7a:a8:04:9b:df:e8:75:29:db:9c:ca:e1:4b:3b:5e:
d7:b4:ad:91:e7:ff:aa:c3:71:af:eb:dc:12:2e:a3:
3e:d6:9a:3f:d9:3a:06:c6:b5:3a:f6:b7:78:96:9b:
2b:b3:8a:90:7f:2b:74:41:af:16:d6:66:bf:33:f5:
28:0f:32:b6:94:dc:96:fa:7c:7b:82:aa:d1:98:23:
40:f7:d1:83:5f:d5:cb:a0:cf:04:00:cf:cd:ac:d5:
0a:48:9b:83:28:bd:01:51:4e:6c:42:27:16:65:a6:
f4:ce:29:89:7d:f1:c4:dd:ab:17:01:67:c3:b6:16:
aa:19:8c:22:03:7d:16:1f:d8:7f:ba:bd:ac:6e:14:
d2:6f:ce:b1:22:4f:46:5e:74:e8:c0:1f:74:90:6a:
ff:7c:ec:7d:8d:98:9d:ee:e3:48:ce:37:1d:31:d9:
ff:b1:2b:67:12:ae:bb:9f:28:61:4d:c1:f0:48:56:
74:fe:24:70:10:05:0f:76:11:c7:af:86:24:84:69:
c7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8F:E8:55:89:02:D6:AA:99:91:C7:4C:46:F3:A9:0F:D4:CA:CA:84
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ec:37:b0:13:61:f3:cb:03:de:11:6a:7a:eb:ac:71:f0:c5:
8f:c6:1e:97:84:67:92:17:91:45:75:5b:5f:48:29:91:50:c9:
02:db:c2:5e:30:3c:a6:30:c1:ac:d4:17:83:a2:4e:c7:72:98:
5e:a6:07:63:fb:f3:7f:3f:97:25:41:a2:97:bc:8a:bc:48:42:
7d:1c:63:93:71:cf:9b:5b:27:ef:2f:88:3f:d8:90:aa:71:e3:
45:2e:0b:82:41:b9:4d:1c:81:83:11:c7:73:7b:15:af:be:76:
d7:6e:76:92:fc:fe:93:b4:91:00:f7:e4:b7:08:01:94:34:a1:
cd:9a:a7:88:d3:39:5b:00:fc:5b:29:e3:8d:ff:a8:11:62:51:
fb:27:a3:fd:8f:8b:f0:c7:fa:20:26:61:63:16:e5:72:b2:84:
88:5b:79:31:a3:cf:bc:42:aa:de:a2:d3:43:45:a8:df:f9:41:
35:bb:01:b0:72:ba:d1:ed:aa:ad:ea:f4:19:66:49:8a:54:fb:
d1:60:fc:01:5f:c3:a0:72:fc:30:89:23:c4:d1:92:b7:a1:89:
d9:55:dc:35:3d:fb:ec:e2:9c:77:22:71:b5:21:2b:73:ac:8e:
e2:8e:61:2a:23:de:f6:ce:34:1c:d0:f7:48:55:de:1a:19:53:
f1:02:b8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:33 2025 by rpki-client