Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
File: ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json)
Hash identifier: mmrqq9JcWdHLRk/w3OZ7tjNZFAjaquCvpr7XQecgeds=
Subject key identifier: 04:3B:1D:B5:4C:66:87:63:3E:F0:80:D8:30:B1:C1:6C:3F:A0:5D:20
Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
Certificate issuer: /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Certificate serial: 019A5074D5416DA836AB084F48DD1D28B17C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
Manifest number: 16CB
Signing time: Tue 04 Nov 2025 20:00:25 +0000
Manifest this update: Tue 04 Nov 2025 20:00:25 +0000
Manifest next update: Wed 05 Nov 2025 20:00:25 +0000
Files and hashes: 1: Hq4qtu3Hmw7ihPLhHJm0o3HW0ME.roa (hash: cBO4YeU2VYitDB5gOiHBAGdFdmypsOGShw+oH/O7hOQ=)
2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: HBPwLzGrGb/OCPEiir9NA1VxRT3udjZqmFKZHF3l0L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:d5:41:6d:a8:36:ab:08:4f:48:dd:1d:28:b1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Validity
Not Before: Nov 4 20:00:25 2025 GMT
Not After : Nov 5 20:00:25 2025 GMT
Subject: CN=043b1db54c6687633ef080d830b1c16c3fa05d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:db:2f:e9:2f:f8:9d:4f:9b:8c:eb:76:16:
29:b8:85:c9:29:99:02:2a:78:8e:d4:95:b9:b4:5f:
5d:1f:35:fe:9e:99:e1:7e:e3:15:1a:67:83:66:90:
5a:f6:13:4c:48:dc:9f:dc:c7:c7:fc:91:cd:47:2c:
8a:96:c5:ea:de:99:f7:e6:1d:20:0f:ac:60:45:67:
ca:d2:a6:59:89:39:1e:3b:fd:9b:2d:fa:94:06:9a:
a8:6b:81:8b:17:fe:de:b2:ce:f8:a0:59:4f:0e:99:
5b:b5:74:9e:6e:05:9a:b3:93:50:a7:e7:e9:da:60:
d9:da:83:bd:7c:d5:2d:9e:ae:e6:d7:6c:38:93:3b:
52:63:26:32:94:17:13:f4:d3:f7:fe:1d:ef:a8:9b:
0d:03:25:5f:1b:1a:94:a7:bc:88:6a:61:37:46:e8:
7a:02:d9:d4:d4:3b:fc:13:7d:38:e8:a3:cd:4b:9b:
e1:b4:30:a2:a9:62:f2:38:c5:f8:b1:22:e1:cb:9d:
59:55:db:8a:cc:39:eb:4e:da:80:69:69:a2:e6:14:
d1:1e:91:f5:bc:79:44:55:36:c1:6b:21:50:e5:37:
22:32:79:54:a4:a2:3b:19:03:da:bf:7e:db:bc:ab:
22:cb:65:3b:5d:cb:db:30:66:fc:38:9e:35:52:d2:
80:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3B:1D:B5:4C:66:87:63:3E:F0:80:D8:30:B1:C1:6C:3F:A0:5D:20
X509v3 Authority Key Identifier:
keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a7:20:c3:24:12:7f:f4:df:91:04:a1:b6:92:b3:11:4d:c6:
b0:22:3d:23:bc:1d:d7:b2:e0:5e:cd:e8:06:5e:0c:74:c3:cd:
88:01:05:3a:f7:68:ee:a1:1a:91:6c:7f:91:89:b2:76:6a:93:
c0:1f:d6:61:c8:e5:f2:c1:83:1f:bc:53:b6:a9:19:1b:9b:fc:
9b:01:d2:04:0b:bb:d5:1f:d4:46:ac:6d:20:8c:37:ae:ba:43:
0b:82:ff:47:65:31:fd:48:d4:95:43:83:d3:a2:b5:ae:3a:7c:
db:ba:57:8c:8a:96:90:b0:f8:5a:5b:04:ea:fb:c1:8b:d1:c8:
a9:6d:a8:8e:c5:8d:41:d9:ed:f5:ea:bb:1b:16:bf:b3:8c:d5:
49:63:2f:88:38:4e:8f:d4:25:d3:15:46:e9:12:82:04:9b:63:
b0:c5:03:5c:24:42:1d:9d:15:e3:e3:b8:b6:02:6b:27:a5:e9:
17:cb:28:84:17:4e:53:7b:76:7d:91:a0:b3:8b:7d:28:9d:d9:
c0:22:3b:a3:42:09:fd:1b:d9:38:33:20:48:7e:14:00:e0:ef:
24:8b:1f:94:de:09:32:ec:d1:11:db:d9:44:27:af:56:59:cf:
f6:f3:86:34:0f:9b:3d:8a:b0:30:a9:75:1b:d2:8c:7c:a7:69:
50:e4:e2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:01 2025 by rpki-client