Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
File: nL6cQ-51mJYAORlQhzRyM0a_cBY.mft (raw, json)
Hash identifier: BYvVdY5gvm8/COfX5Y87qPlnjmEw5MCbdMJULCx7NRI=
Subject key identifier: BB:44:8A:70:23:25:40:9A:AE:6E:5A:FB:73:48:C1:E8:0A:7D:4E:1A
Authority key identifier: 9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
Certificate issuer: /CN=9cbe9c43ee759896003919508734723346bf7016
Certificate serial: 019A4EF5360AB5107A8F074813ECD2C43DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
Manifest number: 12D0
Signing time: Tue 04 Nov 2025 13:01:24 +0000
Manifest this update: Tue 04 Nov 2025 13:01:24 +0000
Manifest next update: Wed 05 Nov 2025 13:01:24 +0000
Files and hashes: 1: UZ53Oxv_ea1DJibe26VPgv4-Vpo.roa (hash: hiy12f2VyI89A+R22FhEyFKlin2hs0EKoXos1apn778=)
2: nL6cQ-51mJYAORlQhzRyM0a_cBY.crl (hash: +5YhEIIN5bA2ZW+fyJSKfaDPr6rm4ooy0dZRm9sSqvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:36:0a:b5:10:7a:8f:07:48:13:ec:d2:c4:3d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbe9c43ee759896003919508734723346bf7016
Validity
Not Before: Nov 4 13:01:24 2025 GMT
Not After : Nov 5 13:01:24 2025 GMT
Subject: CN=bb448a702325409aae6e5afb7348c1e80a7d4e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:58:8a:04:33:70:ac:6d:de:41:9a:4f:e2:43:
75:e7:f3:8c:00:dc:e5:fe:59:50:2e:13:49:01:6c:
25:c8:3d:2a:ad:ae:4b:55:da:f2:e8:6f:f2:f8:5a:
5b:07:77:d7:65:a3:3d:92:80:cd:75:16:05:a3:e2:
bf:5f:a7:3d:d9:b9:ef:19:d5:5e:12:ca:cb:5e:1f:
e6:37:c1:b9:89:63:46:60:07:3d:6f:23:6c:ac:01:
97:38:67:1a:d6:bb:7f:8c:ca:e4:b3:88:ea:b5:49:
73:e4:73:6e:a7:b3:12:f3:1d:b2:7e:a6:f0:05:fb:
19:38:2c:9c:05:a7:72:5a:64:8a:16:b5:4e:08:30:
e5:7a:15:23:ec:69:64:84:e0:e9:e9:73:53:d6:a8:
9a:da:5e:5b:1e:a7:cb:8b:3f:ae:c8:91:1f:3b:40:
76:67:2f:66:1b:7e:ce:e8:3d:a0:8f:dd:8b:de:a3:
4f:e9:b4:17:69:0f:ef:3d:f0:2c:08:78:72:a9:af:
35:24:1e:47:96:a0:85:11:7c:e3:2c:d2:34:fd:55:
2a:6d:db:ae:98:27:e7:31:30:1e:0c:8c:53:fb:6d:
b3:9a:30:d6:e2:c7:a0:49:5a:6c:62:0f:8c:e3:3c:
89:8e:b7:a2:50:91:7c:e3:2d:27:c2:c4:0f:93:19:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:44:8A:70:23:25:40:9A:AE:6E:5A:FB:73:48:C1:E8:0A:7D:4E:1A
X509v3 Authority Key Identifier:
keyid:9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:87:02:d8:db:5c:74:60:d9:49:b7:4c:52:84:e5:d1:80:5e:
29:bc:ec:e4:42:14:c2:bd:73:e7:18:78:55:ac:21:24:68:1e:
60:3f:4f:ef:b4:6d:fc:00:2f:8b:95:17:ed:e8:00:56:26:b9:
0f:7d:36:ed:ff:67:4c:90:01:6d:e8:7b:ff:35:fe:3a:bb:62:
f9:d9:f3:ea:8e:51:ab:49:c2:de:79:75:69:8b:f6:23:27:6c:
68:99:6b:5b:6f:cc:c3:52:4d:5a:66:34:9b:7a:04:4f:86:4c:
cf:43:f8:d4:2e:73:b2:30:54:c7:94:ba:cd:f1:57:10:05:c9:
34:0c:52:65:51:90:7d:f9:60:1c:68:f1:c9:2f:25:ac:20:8d:
c8:c0:56:2f:f4:d6:d6:83:c1:82:7d:a6:a8:48:c7:6e:c3:7d:
2b:e4:63:85:bd:58:6f:dd:83:cf:ad:60:2a:8b:13:78:fa:ac:
55:f9:41:58:31:b8:76:72:f8:be:03:bb:4d:16:5b:39:a9:74:
c5:4a:f6:2c:66:b4:f6:26:41:85:96:9e:78:bd:4b:dc:fd:01:
1b:a2:f0:a4:d9:73:6d:e4:75:45:f7:0c:74:c5:1f:a9:2a:86:
c9:ec:f9:3d:e9:0a:14:81:af:14:e8:03:b6:cb:9e:ad:2e:01:
db:b0:28:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:32 2025 by rpki-client