Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
File: NfH9aecZau9eKbp5VoDaw-NIaMg.mft (raw, json)
Hash identifier: Vw1ISMCWOC6uJeKLXAnt9kc76yJlOWFWM3CHWsecM88=
Subject key identifier: 8F:CD:C7:28:3E:95:C4:D4:EA:5B:15:9D:D1:7D:CA:CC:88:18:9A:65
Authority key identifier: 35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
Certificate issuer: /CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Certificate serial: 019A0411FE02E1A833F6C343C63E8A548D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
Manifest number: 166A
Signing time: Tue 21 Oct 2025 00:01:19 +0000
Manifest this update: Tue 21 Oct 2025 00:01:19 +0000
Manifest next update: Wed 22 Oct 2025 00:01:19 +0000
Files and hashes: 1: 0h3Xfcral2IubnxmY9_tstWMwfs.roa (hash: 1nhiOKUXN9GzK8aVndHDOX8caRYt3h/1uQ8akkf2jNw=)
2: NfH9aecZau9eKbp5VoDaw-NIaMg.crl (hash: mUctpgAIP7giurvgimVQszMtM2a6lGPfIDXrEhUGZuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 00:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:11:fe:02:e1:a8:33:f6:c3:43:c6:3e:8a:54:8d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Validity
Not Before: Oct 21 00:01:19 2025 GMT
Not After : Oct 22 00:01:19 2025 GMT
Subject: CN=8fcdc7283e95c4d4ea5b159dd17dcacc88189a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:1a:f8:78:60:e6:ce:bd:15:d9:cd:54:95:
b9:69:15:e2:67:c4:70:fb:5b:a1:df:bc:3c:93:3c:
d7:3b:42:bf:eb:69:80:cf:7c:ac:fb:55:f7:c6:95:
ee:cd:04:48:47:15:ad:3a:3e:9a:d7:6e:2d:d6:09:
1a:b1:65:ac:50:c5:05:f7:09:c1:40:49:2f:d7:f2:
ed:eb:4d:12:20:4a:69:5a:e3:59:aa:f3:37:66:5e:
64:f6:a7:8d:07:c3:1d:29:8b:e7:2b:c5:38:c7:29:
14:fc:93:5d:6f:8f:e3:8f:cc:5a:66:26:2d:26:63:
f3:17:dc:49:73:c1:8d:a0:5a:36:ac:3f:4d:fe:28:
2c:eb:af:eb:20:1e:a1:ba:7d:62:41:c5:07:c9:11:
76:29:ae:dc:3c:e2:ee:80:7c:ff:07:90:b6:64:f8:
e2:17:a6:f8:06:5a:40:bb:4f:2d:52:94:c9:d5:cc:
11:e7:cd:a5:7a:cd:a8:e3:0f:ad:ed:04:f7:fb:78:
9a:1f:cc:da:a0:e7:5f:73:66:1a:91:d4:4a:53:49:
af:cf:33:50:c5:f9:6c:31:1a:00:19:ee:1a:56:d5:
17:45:fc:fa:a0:43:e3:69:dd:60:ee:15:00:1b:f3:
fc:f6:06:13:6d:b9:45:ae:d3:75:a0:ab:f9:07:c6:
e5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CD:C7:28:3E:95:C4:D4:EA:5B:15:9D:D1:7D:CA:CC:88:18:9A:65
X509v3 Authority Key Identifier:
keyid:35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ff:73:96:69:54:3e:69:b8:5a:90:cf:81:bc:57:9e:43:ba:
37:e8:10:95:ba:ed:6c:39:d3:46:8f:16:5a:ff:5e:c9:d3:fc:
da:4e:77:f5:94:87:e2:dd:dc:32:96:90:34:09:32:0c:06:c9:
32:82:c7:23:47:38:4a:f5:53:c8:7a:44:60:fb:2d:99:0c:4f:
4c:2c:e5:13:2c:80:93:e7:01:02:30:87:f5:11:ef:df:0c:6a:
73:5e:8d:e5:a6:4f:6c:e0:1e:6a:0b:ce:23:20:6b:c9:e9:5c:
1d:ef:d0:1a:c3:19:ab:dc:63:21:c3:3e:07:b1:44:5f:92:17:
32:e3:48:92:d8:35:bf:30:dd:5a:b0:f5:32:74:1d:04:e4:b9:
db:2d:be:6d:66:36:8d:e1:fa:7b:a0:86:2d:62:a3:70:66:d0:
11:3e:8c:88:92:21:45:86:f2:af:64:a3:1c:95:6b:71:66:cb:
04:5c:f1:40:00:36:b1:7a:43:9d:54:99:36:61:68:e1:fc:f0:
b7:d9:9b:ae:55:93:10:40:72:fe:69:60:d1:1f:47:a4:59:7a:
8f:ea:f0:31:6d:ae:fe:f9:22:5c:a5:01:99:a4:8c:9e:f7:00:
b9:43:94:44:76:1c:99:47:71:69:33:13:56:1e:17:12:95:59:
01:39:8e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:47:08 2025 by rpki-client