Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
File: nDz83hO2YLXIMdr74b-_aN-fvjk.mft (raw, json)
Hash identifier: dDT4+gbtSG8wihN3f9RatXnxUQvtHzYuUq4eJAeSOB8=
Subject key identifier: D8:D8:E4:C2:1D:6D:74:1C:13:0E:9D:CE:AE:11:9A:A4:24:D5:F6:54
Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Certificate serial: 019A4F990FAAD0299CBF7851E9DA125D5728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
Manifest number: 06CA
Signing time: Tue 04 Nov 2025 16:00:22 +0000
Manifest this update: Tue 04 Nov 2025 16:00:22 +0000
Manifest next update: Wed 05 Nov 2025 16:00:22 +0000
Files and hashes: 1: 1-o7g3L28fO-PQjnRpt-UgWkTHQw.roa (hash: eDwV2kux0bA6vYCRB0ZxUOPv76wEVLU7G2rZyoTStqs=)
2: nDz83hO2YLXIMdr74b-_aN-fvjk.crl (hash: HBfBT87LMooBT3/aktnL9FYAyg6wzMucl9sMSMXUqjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:0f:aa:d0:29:9c:bf:78:51:e9:da:12:5d:57:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Validity
Not Before: Nov 4 16:00:22 2025 GMT
Not After : Nov 5 16:00:22 2025 GMT
Subject: CN=d8d8e4c21d6d741c130e9dceae119aa424d5f654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:23:79:c1:5d:fb:5a:29:b4:df:a9:fa:53:
4e:bf:1f:75:cd:41:cc:86:74:a9:ab:aa:a9:d5:1b:
5f:f1:5a:2e:30:9d:18:2c:3d:b3:31:e3:91:0c:94:
e6:e5:c7:33:8d:2f:14:96:3d:5f:a3:e8:25:1a:c3:
a2:7f:4f:01:e4:22:fa:6d:26:86:e3:2b:07:16:f5:
92:09:54:9e:03:16:ef:cb:2f:14:0e:cf:68:5c:1f:
c3:85:38:ce:fd:a6:ea:29:9e:ef:07:6d:0f:b1:d6:
5f:49:61:a0:2e:da:8f:be:a2:e8:03:93:6c:ea:22:
df:82:32:69:5b:98:8d:71:03:fd:5f:c9:13:d9:f6:
6c:29:70:b3:4e:b1:d5:81:3b:fb:3a:10:00:75:1c:
cb:b8:a7:44:d9:5b:d5:d1:55:fc:e5:33:ed:a7:b7:
a1:8c:08:98:41:f5:07:b8:40:4f:fa:8c:15:9f:77:
60:41:1a:f4:29:f2:82:cb:11:68:d2:63:3f:1c:2f:
09:b8:6e:6b:c1:ed:8d:96:40:d6:35:5e:65:53:0c:
53:a0:1b:93:c4:3b:db:48:be:4e:bc:93:03:09:b3:
a2:34:f3:38:cf:7e:91:83:1d:66:45:61:5c:8f:27:
7a:ce:1f:43:70:db:30:85:89:58:26:8c:5a:96:46:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D8:E4:C2:1D:6D:74:1C:13:0E:9D:CE:AE:11:9A:A4:24:D5:F6:54
X509v3 Authority Key Identifier:
keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:0d:d3:61:34:b9:76:76:69:5e:f9:56:73:31:42:84:df:19:
c7:7e:ca:f2:8d:65:cc:d6:e7:f3:1c:2c:dc:9e:17:ca:ea:b3:
7d:c4:8b:df:3a:14:c5:a3:2d:2f:90:85:8e:e8:6b:75:fb:be:
61:b2:c9:82:e5:98:4c:b2:c3:e5:f2:e8:ca:84:47:f5:26:e8:
00:25:45:38:77:1a:fd:63:0e:f1:ff:61:29:97:26:e7:f0:ea:
cb:07:e7:ca:34:e4:f6:ef:37:4c:2e:f4:99:f4:64:25:6d:11:
5b:dd:55:72:c2:f9:bf:7e:32:a9:54:c7:73:f0:bd:97:26:19:
56:ae:53:ad:ca:29:14:bf:3a:f8:fd:4c:73:10:91:e9:b9:93:
94:90:a1:59:13:d6:43:2c:80:5d:52:1f:fc:0c:0c:8e:2e:34:
81:3f:ad:13:af:96:8b:41:fe:29:f8:58:b0:b9:38:d6:f4:d0:
5e:87:6c:d5:8c:44:b0:c1:93:a1:0d:86:1c:16:11:a0:43:30:
b6:71:a1:93:3e:0f:2b:92:11:43:94:bc:10:27:64:f9:e4:0e:
8a:b2:f1:33:ac:cf:af:62:b3:30:5a:10:13:77:ce:05:2a:04:
b1:99:3b:f0:c7:5a:2d:03:58:83:cc:11:1b:36:6b:70:81:03:
b0:5b:bd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:10 2025 by rpki-client