Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
File: nBYm1f1UoXollC9v2VyDwOCIF7s.mft (raw, json)
Hash identifier: o/3HLlfIMkMF9mL7Cb0h9+J33qmMrXNzCDM6t8h52jI=
Subject key identifier: 0C:55:5D:F0:66:FE:59:C4:4D:02:16:B2:7B:19:D3:63:DD:B6:71:E3
Authority key identifier: 9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
Certificate issuer: /CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Certificate serial: 019A4D05E5D5F098E810B40CFBAE3CEB1DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
Manifest number: 0D9E
Signing time: Tue 04 Nov 2025 04:00:23 +0000
Manifest this update: Tue 04 Nov 2025 04:00:23 +0000
Manifest next update: Wed 05 Nov 2025 04:00:23 +0000
Files and hashes: 1: idcg-tJ_CtGkzqKZfUKrfRvVQ_E.roa (hash: Nye8o2xtEJeY8siYmI8/lYTnzfEn8Ihz4z9R7JBQAZI=)
2: nBYm1f1UoXollC9v2VyDwOCIF7s.crl (hash: 4RNonZgmGqNNbx4sAI/pP5sRUYcCy6X/kfcD++yPzvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:e5:d5:f0:98:e8:10:b4:0c:fb:ae:3c:eb:1d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Validity
Not Before: Nov 4 04:00:23 2025 GMT
Not After : Nov 5 04:00:23 2025 GMT
Subject: CN=0c555df066fe59c44d0216b27b19d363ddb671e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:e9:68:06:82:36:be:25:a7:50:03:bf:d7:
71:68:0f:aa:76:4b:b2:25:90:27:3a:aa:9e:b5:03:
de:79:a7:25:5e:62:00:f6:9b:49:8d:72:2f:2e:c4:
6a:9d:59:1e:d7:e2:f1:2e:62:bf:7a:6b:c0:9f:ac:
cf:e1:67:7a:d0:3c:ae:82:74:6c:65:09:4c:97:e6:
91:66:90:08:ae:e8:86:44:0f:77:be:4d:ad:2d:71:
c2:f9:0d:67:44:79:c7:87:c8:db:70:4e:22:b4:9a:
a8:c2:86:92:34:69:b6:64:de:0d:ee:61:c0:19:1c:
d8:3e:24:ce:67:d4:60:85:12:6e:83:1f:60:4d:1e:
ff:fd:84:5f:c7:7d:a5:39:f0:19:1a:de:29:ca:98:
0f:56:be:76:6b:d6:4a:60:ae:45:ca:f3:c8:d8:50:
7a:5f:a0:bc:15:6a:31:7e:bb:5f:fc:13:62:08:38:
61:ee:2e:dc:5d:8f:6b:89:15:5e:c9:bf:bd:e9:72:
1e:ec:ed:0f:0b:a9:48:9e:9f:33:e5:55:76:92:1d:
62:f5:59:1a:61:e5:96:43:62:1d:42:d8:90:38:0b:
1b:19:61:eb:10:09:4a:73:0c:36:90:4e:0a:3b:57:
41:81:80:25:d5:67:e6:8f:e0:2a:a0:e7:62:2e:c2:
29:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:55:5D:F0:66:FE:59:C4:4D:02:16:B2:7B:19:D3:63:DD:B6:71:E3
X509v3 Authority Key Identifier:
keyid:9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ee:af:c9:4f:6c:a8:e8:a7:0e:18:b2:57:d6:e7:e6:17:c1:
76:10:e8:0a:a7:b3:56:ca:27:ff:a3:4e:dd:1e:33:3a:32:ed:
bc:ed:90:dd:e6:43:f8:6f:f6:79:34:a1:b2:3b:2c:bc:cd:05:
d1:35:f5:fb:1a:26:47:05:d3:45:33:d5:49:63:96:5f:a0:0c:
5e:4b:b0:59:53:9b:4e:ae:30:d8:61:52:78:a6:36:88:9a:2a:
6d:76:e1:39:da:e9:1a:28:ea:0d:55:51:89:93:8b:8a:eb:3c:
2e:fd:69:ad:64:65:ae:00:87:c8:ee:2a:12:5e:27:c5:d2:8b:
66:cd:e1:17:eb:3b:83:15:37:db:ac:96:b6:7a:db:3f:10:b5:
83:cb:45:a5:31:ef:04:34:dc:dc:4c:7a:e9:c1:55:78:ed:3d:
4e:1e:47:df:b2:41:77:e7:71:d5:3c:ff:aa:6c:a9:54:60:04:
68:b3:ba:fa:ab:61:e1:d3:52:45:77:bd:c5:72:cc:37:e7:b7:
59:30:26:b6:67:c8:b5:18:54:f7:bc:25:59:80:ed:11:f5:ec:
bb:44:58:8a:8d:3d:28:74:76:d1:8d:f9:ff:d9:b6:05:18:42:
a9:d3:a2:89:58:25:e2:79:9d:b2:92:72:56:45:38:55:38:11:
5f:29:da:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:41 2025 by rpki-client