Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File: noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier: h44BF4awlMSjGGyr2/52957lWZqa7b4/pYNXyjFWPsk=
Subject key identifier: FE:ED:38:0C:BB:FE:D2:CB:D1:E3:2F:73:E3:46:E3:91:E5:25:14:46
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer: /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial: 0199FB7CF1BF4D1BA33A57821805408C597A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number: 0D8D
Signing time: Sun 19 Oct 2025 08:01:33 +0000
Manifest this update: Sun 19 Oct 2025 08:01:33 +0000
Manifest next update: Mon 20 Oct 2025 08:01:33 +0000
Files and hashes: 1: nOieJBaD-sIvzNFw8ys8kgtNYus.roa (hash: mIQiCbdb3uG6eqbgHss6OvqglKI0yQcTc3QtF2YXAwA=)
2: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: FYkIcaeX/5iohlnFuugOC+xid3urMoWD4MLYnB2Z4Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f1:bf:4d:1b:a3:3a:57:82:18:05:40:8c:59:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Validity
Not Before: Oct 19 08:01:33 2025 GMT
Not After : Oct 20 08:01:33 2025 GMT
Subject: CN=feed380cbbfed2cbd1e32f73e346e391e5251446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:36:f1:cf:5a:7c:85:56:78:dd:c5:b4:39:
62:9a:b7:3a:c1:99:ed:ca:40:5e:86:bd:9e:5b:0a:
e0:8e:dd:24:09:1e:6b:96:03:68:87:51:fb:a6:dc:
fe:ea:5f:4a:4a:b8:d2:eb:dd:7a:a9:38:0d:ac:03:
7b:11:c1:5e:e2:c7:70:93:74:48:0e:a4:9b:65:fb:
3f:70:37:c8:46:e4:cd:f8:cb:b9:aa:07:73:d2:22:
12:6b:bb:b0:f5:94:5a:0f:f8:b9:14:b0:de:df:11:
cf:d2:de:31:6e:35:d5:ff:b2:3f:ff:73:ba:6a:87:
cc:6f:bf:2d:7b:8a:5d:26:6e:7b:01:5e:7f:db:16:
89:4e:03:12:f1:dc:1e:1a:9b:12:62:d2:3b:36:30:
ab:d5:98:3a:c9:54:b8:6f:cb:b5:d7:be:4a:a8:ef:
c8:11:41:84:e9:74:6f:0f:df:a3:0d:07:3d:2a:13:
1f:f6:d0:65:cb:6b:0d:3f:d7:7f:1f:36:1c:e0:01:
86:1e:2d:99:78:d9:df:40:5c:c3:4b:72:f5:52:da:
5c:40:23:ca:ef:84:ae:3d:48:51:81:fe:54:52:18:
24:5a:e5:a4:6d:1c:4b:af:b0:4a:df:61:11:41:63:
e6:46:b9:0e:35:32:89:79:3a:a3:00:e8:95:74:dd:
d7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:ED:38:0C:BB:FE:D2:CB:D1:E3:2F:73:E3:46:E3:91:E5:25:14:46
X509v3 Authority Key Identifier:
keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:53:8f:54:76:75:60:52:eb:2f:36:6c:60:97:13:2f:3b:99:
ef:17:6d:bc:01:a2:7f:c6:a0:d3:7d:bc:e9:9a:07:1b:15:cf:
6b:c4:ea:40:81:a4:e5:ba:cb:8d:d1:a0:c8:8a:ca:fd:06:d1:
dd:3d:08:53:05:30:98:72:af:1d:43:df:1d:8f:a8:86:0f:f5:
31:d6:81:df:65:40:2b:39:92:33:5c:22:e9:d2:ec:22:91:2d:
36:36:5e:25:28:59:57:73:25:c0:e1:2e:df:95:d7:f9:43:bf:
1e:15:45:5c:a3:51:c2:57:38:45:8f:88:3b:cf:03:37:27:b2:
11:3c:d6:6e:f6:71:3e:06:47:13:b6:7d:98:67:4e:cc:85:5e:
87:3c:fd:c9:40:11:e9:4b:47:ee:a7:56:24:b5:c3:9d:9f:4c:
e0:00:dd:51:9b:40:46:3b:fc:d9:5c:74:36:91:96:e6:24:6f:
a3:ff:ed:ab:5c:5d:b1:16:33:8a:34:af:55:5e:29:63:13:1d:
13:1c:c3:e8:89:4d:6f:fb:4f:28:7c:59:7a:88:6a:9e:10:36:
09:7e:db:27:93:ea:4a:7d:93:77:28:2f:21:a3:ff:31:b0:1d:
4e:50:40:1e:09:ba:b6:f0:fd:ac:2d:02:5b:b8:60:78:ff:2a:
04:50:50:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:57 2025 by rpki-client