Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File: nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier: nbCMet1baS0vYzHS1UKsqKUIacZVTGvD8YqqL1VDF+c=
Subject key identifier: 1E:4B:BE:2D:DB:DB:D9:E8:6F:35:4F:66:AE:3D:A1:29:8B:5E:59:60
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 019A5308544B7978C98C9B4547583AB3ABA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number: 09DD
Signing time: Wed 05 Nov 2025 08:00:46 +0000
Manifest this update: Wed 05 Nov 2025 08:00:46 +0000
Manifest next update: Thu 06 Nov 2025 08:00:46 +0000
Files and hashes: 1: 19v0BW9D62wRoBFE5ozFJdwOMQA.roa (hash: YMLiN+GeZBDn6zKwSH23wr8pzSjB9vWlcqgXSCgH65E=)
2: 9JwtlsVNx4_up1QMmZlfBeyOaK4.roa (hash: u78W1NzQkBkN4wGgOZ6ykgdqITqsuyTPVjwEYRW9o4E=)
3: HvZFP08B7xYA2IQmujw7UzbkG0Q.roa (hash: 7DGwHO9AiazjzBsJl92PU2yw56tPjljLpvn/rYKQLdM=)
4: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: OCBKR4EA0TT2H517sL53r3mqNgDucb/h278yp+HhK+Y=)
5: oR-FUhbEvQx9rEQNZ_WugrEWdnk.roa (hash: BD8t2aBzJsutTWI6CA4SIZqGlJUGz2L2fZecOB/8228=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:54:4b:79:78:c9:8c:9b:45:47:58:3a:b3:ab:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Nov 5 08:00:46 2025 GMT
Not After : Nov 6 08:00:46 2025 GMT
Subject: CN=1e4bbe2ddbdbd9e86f354f66ae3da1298b5e5960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:01:e8:1f:81:2f:8f:d8:34:4c:c0:75:b7:
54:fb:27:0b:d4:36:59:a1:3c:ea:90:9a:4a:3b:9c:
0c:21:03:ec:07:19:62:e0:d9:44:57:4c:38:96:bc:
1c:fc:d9:b0:2a:67:3b:9b:ad:cb:3a:e1:65:1f:0e:
2f:07:84:61:15:5a:cc:9e:32:b4:41:f4:eb:29:c9:
00:2d:7a:fc:22:0b:75:e4:c5:2a:4e:bd:50:2b:0c:
21:d1:c1:85:c5:7e:52:e0:08:9e:71:0a:23:d2:d5:
05:21:5f:c1:ae:7a:2f:3d:02:9d:6a:9c:35:49:a6:
25:ac:29:3f:f2:a3:54:10:a0:39:6a:9b:17:f2:0f:
db:8e:68:56:17:35:a9:68:7f:5c:a8:a6:98:8c:c1:
cd:86:47:fc:39:d7:18:dc:90:0e:5b:6d:98:6e:cf:
8b:d5:ef:c3:f8:22:e4:91:a2:b5:f0:47:55:ed:99:
f1:c0:8c:5d:71:40:39:a5:81:72:f3:cb:43:7e:d5:
9a:bd:14:f4:cd:80:77:f7:46:30:d5:8b:ad:4a:82:
91:d5:7b:b4:dc:a7:62:66:ce:05:65:69:d9:6f:5e:
1c:2f:9f:7a:7a:60:ce:da:d8:8d:04:ab:be:be:a5:
6e:53:c8:8e:7f:b7:67:1b:1f:2e:83:93:b1:76:94:
28:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4B:BE:2D:DB:DB:D9:E8:6F:35:4F:66:AE:3D:A1:29:8B:5E:59:60
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:00:7f:b9:e9:40:22:0a:96:90:95:43:8d:65:95:58:78:6e:
50:0d:47:b1:a8:3b:4e:d3:8f:71:da:d6:61:f0:ec:f1:d2:80:
4e:8b:fe:60:de:66:4c:3b:ad:1c:7e:c0:4d:12:40:6e:6d:d0:
6e:19:12:27:48:7b:c5:0f:26:d0:b1:72:06:47:d8:2a:c7:62:
24:bb:65:77:ad:36:e1:52:0e:ea:31:0d:9a:b0:34:0a:b5:ee:
ec:36:26:49:00:40:65:de:9f:a9:23:bc:16:e4:a3:d0:3b:9c:
16:cc:5a:49:01:d2:b1:50:23:ac:a0:18:0f:73:1c:38:0c:cb:
df:f9:ed:b6:25:57:3e:f8:4e:a5:78:3f:06:ab:f5:42:d0:e5:
75:86:74:57:c5:89:37:b2:28:8b:4b:5f:8e:bd:bb:2c:d2:d3:
05:85:a1:68:bb:f0:64:37:f9:5a:58:8f:64:20:5f:d6:d3:6b:
37:5a:06:9e:01:33:d2:b5:37:9f:c5:2e:46:61:bb:da:f5:be:
a5:cd:0b:26:f0:86:68:ed:8a:ff:bc:b0:9e:07:a8:0b:23:a7:
7d:cb:13:f7:8a:ca:4a:27:cc:00:6d:2a:93:cc:c3:72:b6:e0:
72:ac:81:6a:3d:c0:df:90:63:8f:0a:8d:a1:f7:d8:0f:48:11:
45:6a:49:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:15:53 2025 by rpki-client