Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
File: nbtiWqVb2O81QQr93Sorw1iiXtE.mft (raw, json)
Hash identifier: GpBfe9XYfx0ezRqspIcXwfEDVJ3mbLAplpL/PXXKK+c=
Subject key identifier: 6E:FF:86:EA:00:C8:13:1B:B2:37:9C:94:14:13:3B:3C:84:58:89:FE
Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
Certificate issuer: /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Certificate serial: 019A4F992FCBC98FA5C702E98BF5E17C06D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
Manifest number: 0416
Signing time: Tue 04 Nov 2025 16:00:30 +0000
Manifest this update: Tue 04 Nov 2025 16:00:30 +0000
Manifest next update: Wed 05 Nov 2025 16:00:30 +0000
Files and hashes: 1: F_kIbrNoezU2xST1IGJ7znM97So.roa (hash: SL4bD3bCY+6YeKuV14y0PigmsFs9RgYCxYhDjlPIAW4=)
2: nbtiWqVb2O81QQr93Sorw1iiXtE.crl (hash: AoPOI7cH3SG4z/xg0e25ZnKSbMUwrvz19/ECmoV4NUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:2f:cb:c9:8f:a5:c7:02:e9:8b:f5:e1:7c:06:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Validity
Not Before: Nov 4 16:00:30 2025 GMT
Not After : Nov 5 16:00:30 2025 GMT
Subject: CN=6eff86ea00c8131bb2379c9414133b3c845889fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7e:98:8a:df:2e:29:aa:05:bc:71:dc:80:e1:
63:d7:b9:ee:64:c3:c1:dd:36:53:8f:87:45:4d:ed:
fa:0a:d1:cb:56:d0:9e:98:82:6b:e5:5e:2e:0c:2a:
d5:28:70:c1:b7:78:db:5f:03:67:eb:9c:9a:b6:d0:
bb:0e:36:0c:2d:eb:f0:97:a0:15:c5:4e:b6:6b:0f:
18:11:bd:39:61:c9:09:b0:e2:18:f7:09:c0:ed:1f:
71:d0:f2:4d:c9:06:d7:2f:4f:83:36:a7:d9:fd:75:
dc:c5:d7:95:09:cf:6a:fb:fe:65:24:fb:bc:5a:c9:
5e:ab:59:81:a7:03:e5:90:07:23:12:c9:e9:37:44:
ed:19:b4:74:5b:2f:cb:67:68:b1:e6:ba:b4:7f:b6:
1e:d1:d2:c4:2f:49:38:7b:66:f1:ee:e3:71:63:93:
5c:db:b9:44:d4:c9:2b:09:41:31:ba:75:35:56:52:
bc:7f:4f:db:8c:e4:cf:00:bd:e7:d1:07:98:df:72:
7a:32:f4:fd:50:50:96:83:46:b8:e6:4f:26:60:67:
a8:4f:e2:5c:b1:3d:a3:c3:49:f1:23:84:80:f6:2f:
3c:6e:72:a7:fd:e6:e2:ff:12:43:57:b1:e8:a1:52:
95:c3:b0:d9:53:f5:e8:d3:8b:b3:c8:da:b4:66:be:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FF:86:EA:00:C8:13:1B:B2:37:9C:94:14:13:3B:3C:84:58:89:FE
X509v3 Authority Key Identifier:
keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8e:bc:46:29:28:99:7e:6c:00:82:69:ef:ed:f7:26:65:35:
91:ed:d1:5b:87:15:4d:78:c3:a4:46:80:cf:bc:2f:3a:56:ae:
06:34:a8:f0:f1:db:d5:7b:07:62:77:9e:b8:6b:43:a0:f2:52:
c5:54:5e:7d:a9:b9:24:76:9c:8e:80:c6:23:23:e9:b3:db:29:
aa:13:e3:4c:8c:4c:27:a5:2a:60:4f:67:fe:b4:1e:b6:80:1b:
4f:05:f6:be:fd:c6:1d:b9:74:41:1f:41:4f:7b:b4:29:75:b0:
8c:05:1b:90:d4:af:bc:f8:5e:5d:1a:93:0a:bb:cb:8d:99:35:
d5:4b:50:aa:36:47:44:02:60:65:aa:ce:87:e6:c8:92:b8:55:
cb:47:95:60:2a:ef:f1:c2:e8:dc:68:47:78:47:a4:75:26:ba:
47:e8:e0:e9:0b:7d:4c:ac:d5:70:02:04:36:6a:f6:87:1a:c3:
dc:29:3e:95:9b:c4:f6:8a:52:ac:82:a5:fb:66:b1:3b:46:96:
da:dd:a6:67:90:41:09:b2:ce:58:68:f7:47:31:14:0d:4d:b1:
73:88:af:50:7c:a8:a8:09:43:4e:f3:ab:c9:e4:62:1e:c0:f9:
0f:df:9e:23:1a:1b:7d:a6:c9:f4:51:d2:31:0f:9a:c8:dd:24:
0d:41:58:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:27 2025 by rpki-client