Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: lIZGckPg3OrKCw9rfNwuhjwNU6Em1Up7HX7NgpCmKIw=
Subject key identifier: D3:E3:51:13:9D:11:5A:FB:04:03:B4:EE:87:10:D3:95:8D:16:2A:E4
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 019A53AC9665C5DA72A2E4BE036FA2C55B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 0A42
Signing time: Wed 05 Nov 2025 11:00:10 +0000
Manifest this update: Wed 05 Nov 2025 11:00:10 +0000
Manifest next update: Thu 06 Nov 2025 11:00:10 +0000
Files and hashes: 1: TyWL3xFpNven7KrNlaJ8v9k5JK8.roa (hash: E2+AhRY0pqwsVnmj4TP+MVDZiHT3sKt+kF6lunLkhqE=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: 329c4s1mbtnP4SgMDnWbQJDCws46rjwr/Tax5Ft9GmM=)
3: rQIqx2DMPN6bSwaHOzgkZ_qEsQE.roa (hash: Swuw4n85YJ/hs+bpmj8GLz668D6BJf6uL+FQMZ1q+FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:96:65:c5:da:72:a2:e4:be:03:6f:a2:c5:5b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Nov 5 11:00:10 2025 GMT
Not After : Nov 6 11:00:10 2025 GMT
Subject: CN=d3e351139d115afb0403b4ee8710d3958d162ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cb:ef:c0:19:12:6d:88:57:41:b7:78:f2:5b:
b7:7a:67:7d:50:30:62:1e:47:1a:ca:7f:93:78:31:
13:0b:fa:3a:ec:1e:3e:83:e4:e2:19:d3:a1:0f:2c:
ee:61:0d:6c:c7:63:ce:f4:79:49:44:1b:21:be:74:
ca:c7:14:4f:57:75:c6:3c:27:a3:a4:b9:e6:87:c0:
c1:db:e0:48:e4:eb:c6:39:f2:6f:9c:15:3c:ba:c0:
9d:a3:57:b2:65:8e:42:ef:c0:ae:3b:fe:e8:78:94:
55:d9:09:c4:54:51:68:5c:c8:c3:9f:ac:03:2a:a2:
3c:2d:62:34:f6:ef:06:45:75:5e:1d:9d:fc:20:7d:
33:e2:e1:ed:b6:01:ee:8c:02:1a:42:c6:d8:1a:fe:
2e:ff:0e:ec:6a:74:e2:82:e1:af:17:48:20:5d:db:
96:1f:af:87:43:fd:2a:1c:ab:a6:c6:33:0d:18:8b:
53:c0:7a:c9:19:4e:5b:23:24:3a:e6:a0:72:e2:97:
ec:d4:48:b2:fb:b9:b2:3a:7e:cd:be:dc:47:0b:a1:
26:eb:1d:0d:03:2c:a6:ea:83:cb:3c:91:0d:d1:8d:
db:42:fd:84:28:43:9e:17:18:9d:14:01:49:07:0b:
c1:2c:4b:fe:75:b0:2e:71:42:84:12:72:d5:bc:17:
48:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E3:51:13:9D:11:5A:FB:04:03:B4:EE:87:10:D3:95:8D:16:2A:E4
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a7:d7:31:38:1d:67:b4:db:62:2e:bd:90:8f:e3:b6:4d:ad:
1c:68:36:1f:1d:e7:21:3a:f3:e1:03:d7:48:df:20:c8:70:f9:
93:87:d1:36:4f:8f:06:2f:ea:19:4a:8f:11:90:d4:a2:c9:7d:
29:f4:7b:b7:95:09:4b:dc:c0:b0:3d:63:2e:f8:1c:95:ed:9e:
65:ae:31:86:57:0c:81:ac:6f:5d:46:97:27:cd:c8:65:68:4d:
f4:c2:c7:42:44:0c:33:84:fe:9f:03:f2:45:95:dc:ab:57:26:
30:3e:0c:19:1d:5d:c5:b3:68:cf:1c:dc:fe:c7:75:80:05:fd:
96:e8:2d:39:03:95:7a:8a:4b:72:40:36:8b:d4:82:d6:3f:f5:
f2:ce:e2:68:0b:c8:9d:ab:00:fa:19:fe:4a:aa:57:43:ba:cd:
03:65:61:51:66:ba:9d:6e:1b:bd:5b:e9:1d:d8:c3:34:e6:8a:
d1:93:45:d7:f5:42:56:68:11:dc:a4:a3:e0:6c:7f:3b:e0:2b:
e9:cb:ef:d3:1c:88:49:44:d6:0e:46:e6:0e:53:5e:ab:8f:5d:
a7:be:5d:cc:23:fd:50:43:2c:46:91:cb:cc:26:f4:13:d4:a7:
7e:92:42:07:be:db:79:bd:99:6c:19:1d:35:0d:ca:80:7d:0d:
39:6d:75:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:37:27 2025 by rpki-client