Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: LKalUHnwdLpnOdcfb32DCSJSJAfC1q/hf5ERnapwFkc=
Subject key identifier: A6:E7:51:5B:A3:61:2E:51:D5:1D:52:24:E1:22:A2:B9:CE:E6:47:83
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 019A4EF41D7462892BDE305430AF2AB3462C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 0A26
Signing time: Tue 04 Nov 2025 13:00:12 +0000
Manifest this update: Tue 04 Nov 2025 13:00:12 +0000
Manifest next update: Wed 05 Nov 2025 13:00:12 +0000
Files and hashes: 1: ZcSRf0HxnWHQIw5MIAf_WL9oY6A.roa (hash: cP2ZkY5lLDgrJYkw2lqKqOmENJRMWCl82XCDZbZfylY=)
2: dk4GVxnPxj9mrIWRHBmkYZR_RAY.roa (hash: eaMuW15awNbcED9U+mZfT6o28nxoJ9RTD5vuUNkkC90=)
3: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: khYrSHdLHlIsz9NFYFSACJQjkppzNIwA+XD3npQWfKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:1d:74:62:89:2b:de:30:54:30:af:2a:b3:46:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Nov 4 13:00:12 2025 GMT
Not After : Nov 5 13:00:12 2025 GMT
Subject: CN=a6e7515ba3612e51d51d5224e122a2b9cee64783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1d:57:33:c1:5f:6e:98:55:ca:10:5b:95:ae:
2a:cd:47:31:22:ae:7a:24:fb:79:b1:1f:d9:2f:67:
97:44:a3:52:75:36:fb:59:40:63:cd:83:07:1e:21:
37:83:8e:14:d0:1b:97:bb:d1:6c:af:2a:a7:ba:4e:
4b:8c:3f:a5:1a:69:f3:6b:57:57:31:8d:72:83:ef:
aa:81:da:dc:86:60:00:89:d9:7c:c3:39:e4:c4:60:
5c:6a:df:78:6f:b7:f3:4e:ea:ab:6e:d2:b3:65:65:
72:8f:34:05:47:b8:35:05:8e:03:89:8c:44:23:7a:
bb:a0:34:d2:80:32:a6:af:46:68:2c:45:49:43:dd:
79:59:ca:83:16:d5:dd:a7:93:93:1c:6a:df:20:0c:
54:5f:72:7e:f2:90:7c:7a:d6:9e:9d:14:c5:86:1b:
27:8b:55:bc:d8:bd:9b:60:4a:12:cf:fb:43:5d:94:
c7:63:8a:43:b3:ca:11:b9:ae:38:b5:df:29:21:dc:
8f:d0:47:58:9c:d4:b1:50:7c:20:20:15:40:20:3f:
44:8c:8d:08:b6:7a:f4:80:c9:ba:71:09:b8:10:6b:
7b:df:49:77:3a:2d:4d:76:3e:f5:74:b3:46:49:bf:
69:10:42:e5:30:c7:c8:e2:31:d7:da:73:4f:8c:eb:
f7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E7:51:5B:A3:61:2E:51:D5:1D:52:24:E1:22:A2:B9:CE:E6:47:83
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:2a:54:ce:e5:1e:27:8d:40:be:8e:3a:a3:3e:72:82:47:0d:
6c:34:4e:28:c7:2b:ea:8d:7f:f2:c6:23:d5:10:34:58:df:b6:
fb:68:9d:16:9a:a4:60:d3:5b:c1:0d:17:a8:09:e7:1c:eb:af:
27:7b:96:c7:8c:89:d6:51:ef:92:c3:fd:75:30:8b:b0:c9:b4:
cb:68:72:70:54:83:ea:0d:c4:bc:e2:8a:98:63:79:07:7b:6e:
53:18:b1:c9:af:6a:80:27:ac:af:20:6a:60:be:d9:0e:ae:9c:
95:81:40:ac:6c:b1:b0:20:eb:96:33:7d:de:c1:96:97:4f:0d:
f8:9c:b3:2a:ad:8e:17:a0:b9:41:86:87:8b:5a:6d:7e:95:b8:
2f:89:24:43:02:7f:af:01:51:4a:f7:55:e2:c6:0f:94:0a:21:
26:e4:05:ff:b6:b1:01:c1:c9:01:9f:79:a0:23:ad:b9:70:c0:
02:f2:e9:42:7d:dd:f1:81:f1:12:4a:8d:08:f1:df:59:06:d0:
fa:3b:b3:29:4a:52:13:87:31:c2:06:59:3b:1f:75:11:25:b1:
41:fc:ef:28:3c:e5:b1:b3:ae:92:8d:d5:07:02:8f:b3:02:3e:
98:88:54:59:d5:b8:42:86:b2:00:7a:45:9a:40:60:ee:70:5f:
20:1e:d6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:42 2025 by rpki-client