Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier: X02Myb9Z++Loe0UsAs+JVldEiy/5d8pINP15MYhTOvw=
Subject key identifier: D2:8B:B1:57:70:1F:8A:FD:96:A6:12:75:18:8D:20:A8:82:09:14:E5
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer: /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial: 019A556453622189F02E839D9B0D4C473286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number: 0235
Signing time: Wed 05 Nov 2025 19:00:29 +0000
Manifest this update: Wed 05 Nov 2025 19:00:29 +0000
Manifest next update: Thu 06 Nov 2025 19:00:29 +0000
Files and hashes: 1: W1gtHYOxkSQKrOdwkNpP1ZoMoUY.roa (hash: 5S4JEcGJktduCewz9POQY0aRBOXQzpGOLodHYl3CjqI=)
2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: 9nzO+TJ4s4xtLnP+UMCJU0cyD4+WW0euLTSZeMuGeh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:53:62:21:89:f0:2e:83:9d:9b:0d:4c:47:32:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Validity
Not Before: Nov 5 19:00:29 2025 GMT
Not After : Nov 6 19:00:29 2025 GMT
Subject: CN=d28bb157701f8afd96a61275188d20a8820914e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:45:17:70:60:0b:26:46:b2:ef:de:c0:35:
e1:e3:51:fb:c2:7b:dd:ea:28:0e:b2:a4:c3:a0:ba:
d5:bf:ed:5a:2f:25:bd:c7:e5:34:43:e4:96:89:a6:
8b:96:d8:2f:d8:22:60:b0:88:07:50:89:3c:9e:27:
32:2f:c2:0a:39:03:eb:52:01:d1:69:ba:48:86:0e:
ac:1c:73:c3:b6:81:f8:d9:c9:30:a5:10:2b:8c:2c:
17:cf:9e:a3:85:81:48:06:21:90:9a:39:02:64:ab:
4a:f3:7a:96:45:06:f3:ce:b4:9d:21:20:dc:96:a6:
dc:e9:df:cb:0a:15:3c:c2:3b:b2:03:44:13:a3:26:
14:68:63:31:97:f2:2d:98:c1:a7:65:89:0f:7c:a2:
c6:28:3c:53:f9:02:94:e8:d3:84:90:7d:21:3d:ca:
55:6e:a5:07:28:34:69:de:68:f3:84:91:29:d5:13:
aa:75:2c:3d:2f:4b:5c:3e:83:cd:f6:eb:71:de:20:
e4:17:8f:a4:f8:44:8f:2d:ba:08:0b:94:3a:49:2f:
f5:67:da:60:f7:a4:74:7a:e7:dc:32:a6:25:a6:70:
47:32:9d:71:44:70:a0:dc:12:8d:4d:2b:05:17:86:
61:8e:e6:4e:c8:23:dd:87:c3:fc:70:db:1b:dc:8b:
3c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8B:B1:57:70:1F:8A:FD:96:A6:12:75:18:8D:20:A8:82:09:14:E5
X509v3 Authority Key Identifier:
keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:84:4d:ca:fc:08:f8:f5:ab:9d:6a:f6:aa:61:39:b6:d7:c3:
b2:ca:80:8f:7b:ff:42:65:6b:3c:ba:ff:d2:83:c7:b8:e4:7b:
fe:b0:29:df:eb:a1:9c:33:7f:f5:c4:1f:cf:d9:19:3a:b4:63:
1d:e9:ab:a0:17:e4:3c:c4:c9:ee:74:6a:59:f7:ab:c3:cf:84:
f3:05:1f:18:f0:14:08:a2:e1:c1:59:14:cf:a1:0e:f3:48:14:
cc:59:62:f0:a4:3b:77:70:e1:7e:38:1e:90:71:a6:92:ac:9f:
b6:5e:c9:fb:93:9c:16:e2:5f:dd:5a:b6:05:b5:28:5d:1e:a6:
05:c9:db:ee:6b:cb:e7:e7:67:fc:98:a1:0b:19:a0:36:9f:84:
4e:1d:e9:e1:89:c3:4c:f8:75:23:30:4e:bc:8b:3e:da:8b:fa:
48:6d:89:f2:c0:1f:61:1d:8c:d0:28:01:ac:85:93:34:4a:86:
6d:8c:fc:a7:a3:29:39:0d:cb:3e:8a:a1:82:07:f5:6d:38:a2:
f6:04:33:1f:1a:4d:39:3c:9d:05:1f:f9:23:77:3c:89:12:54:
18:63:48:f4:c3:88:14:ad:b4:e5:57:54:52:91:ee:87:ea:34:
ba:ae:6d:bb:c1:be:72:ac:38:4c:2d:62:f9:76:c7:2c:7a:83:
b8:04:59:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:15:12 2025 by rpki-client