Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
File: NharGOa87eCFC8quvZWZk-hAhus.mft (raw, json)
Hash identifier: jGSjI6z9hc17FhLDhKQf7/7+sd53b2UH+G2kRHp/N8I=
Subject key identifier: 68:1B:38:56:91:52:41:6A:AF:38:47:28:9A:50:D6:4C:0E:6E:1B:00
Authority key identifier: 36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
Certificate issuer: /CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Certificate serial: 0199FFC79686A92006C3A3284687111B4D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 04:01:34 +0000
Manifest this update: Mon 20 Oct 2025 04:01:34 +0000
Manifest next update: Tue 21 Oct 2025 04:01:34 +0000
Files and hashes: 1: NharGOa87eCFC8quvZWZk-hAhus.crl (hash: cKqsJWyNqbAPRgI3omNapIzYiM1yt9y4gjUHmxuNkk4=)
2: a86URqUjdV6NGR4_Rkuxzk9nvOQ.roa (hash: QkDObpBQb/2gqaSVK2qoFjm69vfVIidcXe/y1fY7jKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:96:86:a9:20:06:c3:a3:28:46:87:11:1b:4d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Validity
Not Before: Oct 20 04:01:34 2025 GMT
Not After : Oct 21 04:01:34 2025 GMT
Subject: CN=681b38569152416aaf3847289a50d64c0e6e1b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ab:ae:57:c4:bf:7f:d9:14:a5:24:c8:b3:8a:
a9:2b:d6:42:0b:34:99:f0:96:6e:5f:f1:e2:fe:a8:
7a:75:8d:5f:a5:f3:32:18:fc:89:5a:7e:07:14:17:
aa:3f:0c:b6:bd:9a:c6:87:2d:a9:d5:65:e1:07:8b:
9f:0c:d0:d5:2d:a3:ea:5f:47:f0:90:a6:df:2c:51:
f8:aa:6c:32:75:15:e6:07:86:28:e0:90:e8:ca:a3:
a1:15:87:ef:ef:af:98:ea:38:95:d5:fb:e1:42:32:
68:e4:1f:90:cc:8a:42:11:1c:1a:1b:6d:f1:3e:c1:
e7:87:c0:6c:c2:f3:23:a6:1c:31:e1:ce:6c:d3:10:
8e:84:d5:66:02:1d:12:80:f8:ff:3b:3e:e7:b8:d9:
2b:9a:26:d5:b4:bd:4a:d7:97:7b:48:bf:aa:fe:13:
fc:48:2b:ef:fc:e9:c0:6c:21:bd:53:9e:5f:8d:73:
df:0e:58:ac:35:24:99:dc:8e:b4:8a:91:7f:d2:c2:
28:99:da:8d:ec:ad:fe:b7:a3:22:c3:50:e9:5e:58:
d5:06:96:06:ef:44:95:03:f9:5d:3f:bd:cd:9a:95:
55:ba:ed:63:4b:50:87:f5:a7:6c:c3:8b:4c:4c:2b:
de:ec:5b:fc:71:71:8a:6b:44:70:4d:1a:9a:7d:71:
2e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1B:38:56:91:52:41:6A:AF:38:47:28:9A:50:D6:4C:0E:6E:1B:00
X509v3 Authority Key Identifier:
keyid:36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1a:ed:f4:6f:6b:32:7a:96:d1:7d:86:91:0f:f4:b0:92:24:
fb:a2:92:33:18:5b:af:c9:cb:1b:c0:f0:d6:a7:5e:e0:b5:af:
fd:92:8a:97:14:43:48:9e:69:87:80:7b:df:d9:ff:46:89:00:
7e:b9:74:06:d4:fc:3d:4b:4c:57:b7:20:6c:ee:84:19:f5:0a:
7b:22:fc:ed:1f:40:26:e6:83:52:25:89:a0:2a:31:34:b8:54:
95:36:17:b1:51:05:a3:8e:e9:72:de:bd:39:6e:fb:4e:78:d8:
a0:7b:9d:d1:09:43:71:44:cd:5b:af:5b:b9:1b:a1:03:30:e2:
61:dc:1d:ed:08:78:d9:d8:2f:81:81:80:12:a5:70:24:75:c2:
0d:8e:24:80:5f:d9:9d:28:93:73:62:b6:17:3e:dc:a0:2b:ac:
f1:be:8a:69:5a:8c:02:d2:71:0a:72:35:bd:26:83:6d:c9:5d:
fb:27:21:0d:02:3e:35:2e:94:2d:4b:26:e4:72:0c:e1:1d:35:
a5:f0:1e:d1:08:cf:95:1d:8b:af:6e:4a:85:26:0a:19:99:9d:
07:cd:bd:2a:03:b5:25:f3:ac:97:e3:ca:22:a9:d8:1d:5b:1f:
ba:89:18:05:d4:d1:32:1c:27:ae:18:ad:2b:de:fd:9d:f2:97:
50:19:72:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:07 2025 by rpki-client