Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
File: nMYO2IFBiiF-jdPB-lI-JWXK65s.mft (raw, json)
Hash identifier: BHOvSdP6HQxBNnE7adMkyg5zHFZLn4C7PLBeeHjGxrY=
Subject key identifier: 5D:EB:41:BE:C5:26:05:F4:F5:AA:5D:CF:5A:52:45:88:F8:16:69:21
Authority key identifier: 9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B
Certificate issuer: /CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
Certificate serial: 019A4EF44C3AD0A43E9807070530616C3B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:00:24 +0000
Manifest this update: Tue 04 Nov 2025 13:00:24 +0000
Manifest next update: Wed 05 Nov 2025 13:00:24 +0000
Files and hashes: 1: EP3bkF_F-0JN_ikpcovpxVorS-8.roa (hash: hqxhbHTgDziJ5finpaZT0guvZfxkt53C1CG9ZliF94Y=)
2: nMYO2IFBiiF-jdPB-lI-JWXK65s.crl (hash: d+m4oJhzoy4KT2xTtwgdTv/jMpnq3ctVTTaXDyfxodE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:4c:3a:d0:a4:3e:98:07:07:05:30:61:6c:3b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
Validity
Not Before: Nov 4 13:00:24 2025 GMT
Not After : Nov 5 13:00:24 2025 GMT
Subject: CN=5deb41bec52605f4f5aa5dcf5a524588f8166921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:29:91:67:55:79:dc:dd:c7:d3:44:f7:13:
bd:a9:0d:98:22:8f:a9:77:42:34:3b:d3:55:18:ab:
23:86:09:a5:95:7c:20:3a:24:d5:d0:e6:8a:2c:96:
52:dd:79:8d:47:99:5a:ca:98:89:e2:0b:d0:3c:44:
82:f6:2a:a8:e9:bc:8a:c0:ad:81:8d:7e:2e:82:6d:
af:65:da:5b:2a:ec:22:75:2d:1d:1b:0c:1e:cb:31:
f4:b5:4e:4a:d9:29:00:73:36:ff:5f:44:a0:1c:69:
c0:a6:95:9f:38:03:a2:f8:b4:75:9d:81:7b:28:a6:
dc:af:65:3e:5c:6d:70:d2:d4:d1:5c:17:02:12:15:
ca:0d:56:42:84:cb:11:54:23:1f:6c:fb:22:af:5c:
74:35:c9:bc:b7:a4:b6:77:b4:ac:a0:91:fd:27:b5:
8a:0b:bb:8f:a3:ff:f5:f3:db:ff:b0:f7:0c:38:f7:
c2:06:f8:13:82:26:73:ea:74:6c:4b:db:1e:7f:4d:
2b:26:e9:8d:91:9c:80:e1:ba:89:bf:52:96:f3:8f:
d6:ea:64:be:1a:0e:43:d5:3a:fa:4a:79:89:05:c5:
1d:50:71:11:0e:7a:f3:61:a8:8d:a6:68:e0:2a:26:
3b:42:1c:9d:10:7a:f7:5d:24:dd:53:76:46:f4:77:
43:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EB:41:BE:C5:26:05:F4:F5:AA:5D:CF:5A:52:45:88:F8:16:69:21
X509v3 Authority Key Identifier:
keyid:9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:83:0b:97:dc:d8:5c:32:72:65:60:9e:1d:a3:ca:82:4c:ee:
ae:90:58:50:7b:a7:c3:69:f3:f8:12:ce:3a:1d:78:e5:f1:82:
8b:f8:66:9b:3e:7a:16:dd:0a:7e:42:50:b0:4a:c4:c9:63:fc:
d9:fc:db:5d:b3:d6:a0:0e:45:8e:20:b7:19:ae:83:13:09:1a:
73:71:47:03:6e:ec:05:9b:f7:c3:b9:2b:28:e2:1a:25:3c:c9:
da:c7:5c:47:85:22:a3:66:73:ba:2c:b4:81:34:70:36:6f:01:
48:53:8f:19:95:e2:b8:f1:de:08:69:b6:1a:02:e9:01:26:17:
97:bc:89:a9:b9:29:0c:c7:ca:d0:0b:ed:b7:a2:3b:f8:ad:7f:
82:a9:c5:e0:e0:4a:fd:78:8a:6d:d6:1a:38:f4:fb:73:e5:6f:
1a:83:5d:34:b3:61:cb:0f:62:ad:03:69:ce:79:29:82:e8:b8:
46:f9:7a:0b:14:a5:3b:6a:fc:0f:59:f6:a3:d7:56:17:0d:06:
ea:45:be:93:3c:a3:43:1d:0f:c9:7d:39:09:9e:c4:04:97:69:
8e:35:f2:10:77:2d:97:9d:1d:34:c7:7b:2e:7b:48:da:5c:89:
5c:6a:97:f9:2d:a7:83:0a:16:92:fe:c0:85:12:02:94:9c:76:
f2:59:4f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:27 2025 by rpki-client