Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: 9n5mHJ5abVJMg/lw5KFPU44cfzWUat38dOGqPx0M7Fw=
Subject key identifier: 97:A2:38:ED:40:32:B1:0E:D8:6C:8C:C2:06:A4:08:BE:72:14:B4:8F
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 019A0290FAB2301D3A01E777724E70023FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 1703
Signing time: Mon 20 Oct 2025 17:00:47 +0000
Manifest this update: Mon 20 Oct 2025 17:00:47 +0000
Manifest next update: Tue 21 Oct 2025 17:00:47 +0000
Files and hashes: 1: 1eZC9enfXbKkbChbya2s-NBXR10.roa (hash: K8gL7gYOdUPnWfON7y82NF9djuzcQAO7yPjvMnV4HWA=)
2: 4C1hs3Awu1pUWnx11isTd7urO8g.roa (hash: NHlupIJQHDTwRScv0dlfz2lFTerJ3fgzUZ9KeBTbFHo=)
3: 4aaliOpCta1xxwdPdgm9XgmQVe4.roa (hash: 50PVROIOCSd7qW0XXvFqQMxjDosAhVmRwG7IVPmy7ik=)
4: LNJOsnr56BpDhx0zCSJoGF_8kg4.roa (hash: ipKdM/rgGFJqpM5XZ1watukNv4jI5z2rHAUKNiP8l9M=)
5: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: FkwOQliIg5qSdqAsTeTt5MVKAwYh4OxqYjMuhxodxPg=)
6: P4RQICIsv2ynDFNy1pTdbhvIXok.roa (hash: 3BspGo/InWWElD0+8Z5QOqYWItS4j6gIXyuD2KZuZ58=)
7: ibQsYiMOU1D97Z6dBw2Z2nuJoA0.roa (hash: paBGRr0SKtx93/jOWaEGPMAan4qkVxtM/IYXrSHwl6Y=)
8: jBgv17Pl-Vh_L1PF3KmB8kI2bak.roa (hash: yIwLWwTP6qcl+lhvdLDbXrkIo53nDQZcaNGlgxGXrqE=)
9: xlTjepejuGlW3CGUnuf8jiI_Sb8.roa (hash: xnJVidZPq3qTfXPcYiZGHTVkjYmciZFHEO03/ve53hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:fa:b2:30:1d:3a:01:e7:77:72:4e:70:02:3f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Oct 20 17:00:47 2025 GMT
Not After : Oct 21 17:00:47 2025 GMT
Subject: CN=97a238ed4032b10ed86c8cc206a408be7214b48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:67:94:5c:25:d5:73:05:34:e0:20:0b:f5:
30:45:d9:5b:ee:b8:6b:3c:72:c3:f2:f7:af:6b:c5:
63:58:3a:3f:e8:84:19:b1:5e:1c:21:e4:c0:97:4e:
5b:e8:26:64:3e:b6:92:07:ec:f2:14:9d:9c:2d:37:
70:83:46:45:5e:8a:22:96:61:f2:d8:1f:28:97:05:
bc:66:3f:f8:6d:05:76:30:bb:3e:ff:59:bb:37:ba:
15:18:ff:c8:4e:7d:31:a5:ee:bc:3e:3f:3b:49:71:
8c:86:95:7a:46:fa:fe:3c:df:7c:73:7b:06:32:2d:
1d:b4:03:d9:1f:00:1b:a8:85:74:c7:f9:74:71:92:
30:0f:57:a9:e6:50:cc:19:63:9c:e1:a2:27:67:3a:
46:66:75:62:8d:2b:88:17:9b:a7:5f:ff:51:71:73:
3c:a6:9f:07:43:10:ee:aa:48:8a:29:21:af:71:f9:
b1:31:ee:83:0c:bc:07:77:59:4b:e5:8d:21:df:fd:
e2:23:42:a5:83:32:cc:0b:13:bd:d3:82:22:fe:8d:
c8:51:42:43:b9:64:e1:7f:52:4c:5a:b1:6e:ba:6e:
e0:56:49:b5:00:fd:01:0d:ff:67:a4:19:52:7f:22:
2a:be:c2:a7:93:fd:8b:38:1c:c2:d7:2b:cb:6a:c8:
a4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A2:38:ED:40:32:B1:0E:D8:6C:8C:C2:06:A4:08:BE:72:14:B4:8F
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:06:30:ca:12:cb:7e:bf:cd:6f:cc:8a:b6:fb:8c:d1:e5:9a:
18:02:b4:87:f6:c9:10:a1:25:3f:3d:fc:eb:b5:17:aa:a3:fb:
ad:bf:5b:5e:ea:16:85:df:f8:aa:d9:02:7e:69:a7:20:55:43:
13:14:21:13:e6:ae:19:ee:1e:30:b9:f9:34:85:f7:7b:7b:10:
31:ad:e8:59:ad:60:8e:d2:96:59:d6:18:16:64:ab:f3:07:bf:
4d:59:71:4f:b5:7b:1c:2a:d5:56:2e:ce:e3:d3:d3:22:fd:02:
9a:d8:58:af:df:9f:6c:82:73:3a:78:7b:d1:aa:d4:cb:4d:c8:
33:92:6b:6a:e7:1a:28:e7:ab:89:4f:34:f6:21:34:57:11:fa:
92:14:f8:84:fc:8b:38:f7:ba:97:c9:d1:8a:64:e4:fd:00:57:
be:68:88:b9:d6:f0:53:69:1d:85:b6:f9:54:53:90:10:14:f3:
69:b4:4e:2b:4c:33:a2:de:10:07:2b:68:d3:6d:92:17:2d:6b:
c9:c9:ea:f9:db:01:9e:c1:ef:df:2d:e5:36:26:d0:c8:8d:df:
38:05:e8:c2:62:b9:fc:1e:e0:7e:07:fe:9c:19:9c:64:97:e2:
c9:d0:0b:bb:ad:d4:e2:88:5c:3d:db:9b:af:f0:ba:d2:12:f8:
d4:2b:6c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:19:53 2025 by rpki-client