Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
File: NbHM5NW62NnC7cpADiv8VKJBhb8.mft (raw, json)
Hash identifier: OpkRcBG+bv+o2hjHC939WLDqFSI+TD2Kuh9ZL83QFzs=
Subject key identifier: B4:08:10:3B:14:59:A7:DD:C1:91:83:90:0C:C1:90:0A:93:EE:54:3B
Authority key identifier: 35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
Certificate issuer: /CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Certificate serial: 0199FB7CD55821AFE360A592F7A1F71C267C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 08:01:26 +0000
Manifest this update: Sun 19 Oct 2025 08:01:26 +0000
Manifest next update: Mon 20 Oct 2025 08:01:26 +0000
Files and hashes: 1: NbHM5NW62NnC7cpADiv8VKJBhb8.crl (hash: xD53ycmhpdcxDMlNQMvOb8hvftf89VMFeujL1e6J59U=)
2: WTiY2Qk1x-geaQsrR6enC5adAMQ.roa (hash: jOYBpT27U7g6ol8yiuxnI6V37MSFQ9qLOBM0L34PdCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d5:58:21:af:e3:60:a5:92:f7:a1:f7:1c:26:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Validity
Not Before: Oct 19 08:01:26 2025 GMT
Not After : Oct 20 08:01:26 2025 GMT
Subject: CN=b408103b1459a7ddc19183900cc1900a93ee543b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:85:5a:16:7f:45:3a:52:5d:d5:1a:79:00:
10:12:10:a1:5c:cb:d2:ad:22:fc:d5:6e:81:77:b2:
20:00:c0:4a:9b:2e:4d:37:e1:ef:a1:32:b9:a5:96:
a6:bf:d3:e0:88:3c:8f:47:bf:e4:6f:80:15:6d:32:
e0:c7:29:6e:c6:33:a2:d3:23:c9:40:a0:8c:6b:84:
2d:d1:c9:17:35:33:bc:5f:aa:36:5f:8e:29:98:ed:
66:38:e6:28:82:c9:81:4c:7d:1d:f7:8a:2a:af:80:
5e:fc:8c:aa:53:63:20:c6:95:17:96:1e:c4:57:ea:
d9:5e:16:75:33:51:8c:03:2f:03:d9:e5:08:84:d5:
83:c0:f6:aa:2c:1a:4e:10:44:51:ad:b1:31:47:c8:
1f:dc:1f:42:5b:0b:3c:95:01:28:08:b8:8f:c5:59:
75:64:31:f1:c2:f1:37:d6:70:2e:8e:fc:45:46:91:
b9:c1:97:70:97:1f:de:33:51:97:2b:74:95:95:22:
8d:7b:7a:77:9d:55:35:64:67:da:dc:f2:50:10:78:
a7:82:91:7b:d6:43:67:38:c3:01:b3:ca:b9:44:60:
90:7f:b5:2f:92:50:f7:31:af:a1:b5:aa:11:94:fa:
d4:ef:24:66:03:2a:de:ac:1f:67:a8:36:db:6e:04:
0e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:08:10:3B:14:59:A7:DD:C1:91:83:90:0C:C1:90:0A:93:EE:54:3B
X509v3 Authority Key Identifier:
keyid:35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c7:45:5d:02:29:f7:a6:dd:5f:0d:c5:dc:aa:80:a2:22:1b:
23:78:bc:2a:d1:94:3f:bc:c2:dc:c6:bf:fb:26:ae:6e:d4:a1:
4f:c0:ea:f3:d4:eb:a3:1d:4e:9f:c0:d8:f2:a4:21:73:24:49:
cf:5c:ee:6e:7c:b1:f3:c4:bc:f3:46:87:53:a5:3a:0a:fd:6c:
49:f7:e4:96:76:46:97:84:56:1f:a4:df:06:9c:6c:73:0f:34:
64:c0:b4:e8:ea:34:b8:bf:24:78:d0:29:dd:28:9a:2d:a0:6c:
ea:00:a9:d2:dc:fc:f8:0d:c5:0a:88:4d:a3:59:e7:71:34:40:
d1:6c:b4:a9:f6:c9:18:70:05:5a:52:d5:62:4d:c1:10:f1:6f:
85:4c:e1:2c:fb:07:1a:26:d1:7f:1a:ac:51:36:74:b7:32:43:
9f:51:66:3c:9d:09:c7:d4:e6:02:91:46:c0:75:f0:ee:63:36:
48:b8:15:66:fc:94:8a:73:fc:79:4d:3d:28:9e:27:dd:9e:b4:
f3:17:7f:27:7a:3f:8b:07:30:35:35:ce:73:93:7d:43:b4:72:
62:5e:de:41:bf:fb:aa:97:40:37:48:39:7b:dc:b5:d7:98:c8:
71:e4:61:2f:0d:67:95:54:2a:4d:36:c6:f1:71:31:cd:f5:d3:
a7:56:de:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:22 2025 by rpki-client