Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
File: nAMai2oolAx5NrpueCuUoJYr-yc.mft (raw, json)
Hash identifier: rMqMT8YEwpPDACdcot2PWj8TDxlYsJP77KpWCdTdlq4=
Subject key identifier: 3E:14:CF:40:8B:76:AE:61:B2:9C:BB:FD:E8:57:D4:1F:49:07:C8:0A
Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
Certificate issuer: /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Certificate serial: 019A4EF465C6BC34E8679CD196446048832D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
Manifest number: 049C
Signing time: Tue 04 Nov 2025 13:00:30 +0000
Manifest this update: Tue 04 Nov 2025 13:00:30 +0000
Manifest next update: Wed 05 Nov 2025 13:00:30 +0000
Files and hashes: 1: nAMai2oolAx5NrpueCuUoJYr-yc.crl (hash: /FFAggW0KboRd/Umky4H//rQQKbzLFXsoHOnqYk/P38=)
2: sazfzVz6q9bIns0N5tJ_KIxOhyU.roa (hash: 7Dx7RnLHW4HsXUHgAbio+tOs+19yMbUTjmWX8tX1e1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:65:c6:bc:34:e8:67:9c:d1:96:44:60:48:83:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Validity
Not Before: Nov 4 13:00:30 2025 GMT
Not After : Nov 5 13:00:30 2025 GMT
Subject: CN=3e14cf408b76ae61b29cbbfde857d41f4907c80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:d6:b9:3b:4a:97:89:9b:25:d2:7a:bc:9b:
87:ac:6f:38:a2:58:bf:61:76:61:e0:d4:ea:ee:d2:
c8:9a:d8:7d:4c:9c:43:52:bc:a0:1d:1f:a4:07:c0:
bf:3e:af:fd:57:a7:92:cb:36:c2:1a:58:be:1b:60:
3d:28:7e:ac:95:82:36:2e:ea:b0:c3:6b:77:00:1a:
ae:73:e6:2a:57:64:57:4a:25:66:2a:4f:dc:3a:86:
c4:3d:4a:30:b3:98:be:e7:50:fb:63:67:29:bd:fd:
fa:32:b1:bc:40:83:6c:c1:40:71:b0:d7:12:ba:86:
af:a1:df:3f:07:d3:48:aa:ae:51:8d:e6:68:5a:a3:
62:8f:c0:cf:83:b2:b3:a8:34:0c:c7:dc:13:fc:0c:
b1:f0:de:a6:7a:de:86:fa:cc:e7:b5:4e:06:03:2e:
30:5a:f4:f3:fa:ec:d4:ed:3d:53:8d:c8:d2:56:3d:
11:28:93:90:5d:0f:99:69:86:e6:ef:5c:32:f9:fb:
99:b6:59:74:33:e1:cc:43:ef:d4:c5:30:f3:de:93:
76:da:ea:f9:09:4c:30:23:b7:0f:f8:27:bb:c2:01:
de:90:e2:97:eb:21:70:ab:a7:28:be:5b:47:f1:cc:
d0:75:e6:07:0e:97:63:01:3e:9f:b4:71:dd:50:1a:
73:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:14:CF:40:8B:76:AE:61:B2:9C:BB:FD:E8:57:D4:1F:49:07:C8:0A
X509v3 Authority Key Identifier:
keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9b:d9:20:d9:38:94:f5:bc:3f:04:6e:f7:01:6d:e5:2f:42:
61:ce:16:b5:ec:b6:2e:2f:c2:0c:6f:1f:72:dc:d7:29:72:c3:
e2:14:33:cc:42:d9:91:ef:bf:02:e3:fe:3c:b3:76:9c:44:59:
26:4f:f2:ee:51:19:32:1e:79:01:6d:1d:ea:e4:52:a5:2d:dc:
fe:76:21:6f:5e:8c:12:6e:59:f7:7d:07:01:a1:24:1e:82:4e:
a6:a0:67:72:f4:3e:f9:26:90:45:aa:3f:61:5f:0e:6d:04:c8:
f2:b9:ec:dd:fb:bf:03:c4:86:70:2c:45:a7:5f:69:ad:25:87:
86:82:bb:25:f5:a6:bf:17:a6:36:25:48:11:d4:3e:07:12:2c:
a5:30:09:c7:ce:f1:83:8c:a1:2d:a2:7d:d9:88:0d:af:50:49:
c8:c8:4e:1e:67:d9:81:31:39:d1:fe:34:cf:14:5c:68:7c:fb:
ef:72:12:52:28:d7:4f:d9:40:43:56:02:fd:a2:44:0d:7a:e9:
21:e0:36:b7:20:24:23:69:63:cf:67:36:f7:0f:49:a2:23:34:
40:01:e9:15:f8:62:ee:10:a9:d6:60:ac:10:ff:b4:af:e9:92:
34:76:c3:a3:37:a7:12:63:91:50:f8:2c:66:e4:31:9a:55:2f:
47:be:01:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:06 2025 by rpki-client