Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier: QDrNHTTMDyZPywIJboHH7QQc5zGms2xrL+g1xVs+p7g=
Subject key identifier: 41:60:72:A0:4C:E7:85:AD:32:BE:06:31:0A:19:B7:B2:32:E1:BC:F2
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer: /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial: 019A5375CE08DF1C03BF5B0AEAE4FE9164C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number: 0234
Signing time: Wed 05 Nov 2025 10:00:20 +0000
Manifest this update: Wed 05 Nov 2025 10:00:20 +0000
Manifest next update: Thu 06 Nov 2025 10:00:20 +0000
Files and hashes: 1: W1gtHYOxkSQKrOdwkNpP1ZoMoUY.roa (hash: 5S4JEcGJktduCewz9POQY0aRBOXQzpGOLodHYl3CjqI=)
2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: A0+0OaisxnHZ0EkWNWDMAFLIs8+t/aEckr3MxqZPIhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:ce:08:df:1c:03:bf:5b:0a:ea:e4:fe:91:64:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Validity
Not Before: Nov 5 10:00:20 2025 GMT
Not After : Nov 6 10:00:20 2025 GMT
Subject: CN=416072a04ce785ad32be06310a19b7b232e1bcf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:c8:d9:3f:9f:22:ac:00:ef:7f:c4:48:2f:
f2:71:2d:35:5c:bc:32:03:2e:7a:8f:bd:35:fe:75:
5d:e6:08:64:52:80:21:e0:0e:60:98:ff:1c:cc:92:
9d:d6:a7:d4:b7:09:66:14:45:a1:e3:0c:8a:46:d3:
43:ba:92:92:e2:59:6c:e0:a1:01:bc:6b:5c:a8:4c:
18:b5:d5:d8:51:79:4b:b6:11:35:a4:86:68:e6:90:
80:0e:4b:ae:de:8c:18:42:f0:b4:c3:ea:ac:fd:58:
40:0a:c2:48:97:91:a9:c5:bf:ee:ef:6b:c0:fc:d2:
c1:e2:38:ac:1e:86:2a:47:bc:86:6a:17:75:a4:2d:
fe:cd:65:e4:32:12:9b:dd:c4:53:8d:4a:4d:b9:79:
55:77:73:4c:7a:30:5d:d6:dd:85:f7:bb:07:aa:a7:
81:9c:94:ff:a4:59:6d:b6:b1:2d:03:35:1a:8e:c4:
74:35:3f:e6:93:bc:f5:26:70:42:77:7f:08:ee:90:
87:69:f9:2b:4d:85:5b:02:20:86:c4:55:56:6b:87:
2e:3c:e7:95:42:63:33:4e:4d:49:29:bd:ab:90:5f:
09:9f:cb:4e:27:e5:a5:e1:4a:4b:34:27:e6:fc:e3:
f9:05:70:00:6e:d0:ae:f8:fd:d5:c6:bb:23:02:4c:
92:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:60:72:A0:4C:E7:85:AD:32:BE:06:31:0A:19:B7:B2:32:E1:BC:F2
X509v3 Authority Key Identifier:
keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:28:61:4b:fa:7a:8c:fd:17:41:6d:77:21:8d:51:f0:7e:d6:
d7:c4:1c:12:56:47:da:c0:71:cf:50:e3:53:c1:10:ea:ff:c9:
ad:8b:4b:da:eb:a5:fa:0f:50:aa:45:3a:49:b9:a3:7f:82:f4:
14:ec:06:48:3b:f4:cb:e9:d4:23:81:c1:12:df:bc:1c:0a:98:
c6:24:5b:f4:32:a3:05:6d:49:d1:5a:3c:bb:49:87:2c:65:64:
59:af:f4:bd:c9:5d:4b:ea:0c:05:00:14:1d:13:d1:eb:a6:9f:
9a:e3:43:0b:e6:7e:54:c1:9f:92:43:6b:b1:7c:56:d8:d1:69:
09:e6:f7:f2:c8:e4:0f:13:e3:dc:21:78:01:c5:21:33:fb:db:
1f:bc:23:ba:0a:ef:6d:60:c2:58:43:27:7e:83:be:53:14:2c:
0d:4b:40:d1:2a:a1:09:81:d1:78:ce:52:9d:5c:db:68:a4:2a:
d3:74:cd:43:b2:ae:74:01:a5:70:1b:43:ad:2b:70:92:40:cf:
44:98:e6:88:2d:33:ee:81:87:97:99:4e:f0:62:10:b7:b1:1d:
b3:3b:3c:e9:84:4a:80:46:ce:cf:03:05:d0:90:52:fb:37:69:
a3:81:63:55:0b:bb:b3:5a:f4:17:4a:cd:4b:0f:a1:40:ca:f8:
7e:b6:36:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:29:59 2025 by rpki-client