Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File: Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier: qHe6wr3vuTsiyhk8fxe6U2ZWyRpaV26FmTKE0NKDaUc=
Subject key identifier: 0D:0E:BE:A1:88:2B:C8:4D:F4:E9:39:8A:61:A8:5B:FE:8C:A8:81:F5
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer: /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial: 019A50E42E4251CCB900C1209E6DA2AEDB62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number: 0D41
Signing time: Tue 04 Nov 2025 22:02:02 +0000
Manifest this update: Tue 04 Nov 2025 22:02:02 +0000
Manifest next update: Wed 05 Nov 2025 22:02:02 +0000
Files and hashes: 1: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: 355QUfxWImt70tVfHZdcFqw5UawyKfiuyc5VSTJ8WMY=)
2: R_dc828vlc27bxXSMzahF76dopg.roa (hash: U9Dh8EyuA2m2THZyqCUiwh3xOZkz+ZLmhUNE1mbIxTM=)
3: yzgxHb39JlWgV-6OUyl9AE4hQAQ.roa (hash: pG2NZjpFYDlbN9iuGT1kUvmnDeM4noZC3E54rEDkwXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:2e:42:51:cc:b9:00:c1:20:9e:6d:a2:ae:db:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Validity
Not Before: Nov 4 22:02:02 2025 GMT
Not After : Nov 5 22:02:02 2025 GMT
Subject: CN=0d0ebea1882bc84df4e9398a61a85bfe8ca881f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:a0:71:71:8d:5e:b2:b8:72:c0:f7:8d:d5:
a4:b8:6d:b1:ff:a9:6c:c9:4f:d5:c6:ec:0e:b2:84:
43:6b:81:90:95:62:bf:cd:11:3e:ce:8b:25:7f:ca:
b2:99:a5:80:b8:d7:7d:2b:e1:4d:46:32:b9:ae:56:
75:f9:5c:c6:90:b9:fb:49:37:10:92:d7:75:eb:82:
10:a4:85:9c:94:1c:96:4e:5b:11:4a:1d:9e:7d:04:
96:7c:b2:60:e9:a2:64:92:28:7c:80:be:8e:ca:66:
d1:48:e3:3b:a6:62:bb:10:c1:99:ab:bd:dc:c6:a5:
57:a0:af:bb:35:7f:67:00:c4:2f:8a:dd:47:4e:ef:
a6:9d:b4:71:da:f8:55:6a:49:b2:9d:02:ef:f7:3a:
79:93:ce:06:e1:91:5e:9b:3d:d7:e1:08:33:65:9f:
fe:2f:4b:0d:e5:02:0e:cc:4e:2b:6f:85:2a:25:e5:
77:34:2a:69:f2:f0:10:ba:c4:0d:87:2b:70:96:15:
d6:a0:1f:63:03:18:cf:58:fc:4f:b1:a5:28:73:92:
49:d1:cc:86:d2:4b:11:02:dd:14:30:f0:0e:82:15:
0e:4e:f6:ab:f4:41:e0:ca:71:cc:dc:b9:bb:7b:13:
ad:a9:cc:39:22:15:f8:45:03:49:cb:1a:f4:7a:18:
8e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0E:BE:A1:88:2B:C8:4D:F4:E9:39:8A:61:A8:5B:FE:8C:A8:81:F5
X509v3 Authority Key Identifier:
keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5f:a3:99:c8:0d:50:17:24:c1:ad:79:9f:8a:5b:1e:85:ab:
f3:67:d6:c3:61:86:d4:81:56:f8:f7:2e:99:6f:41:1d:d1:a5:
ab:b9:a3:04:b3:56:07:09:a7:ec:00:37:07:6d:37:ee:ef:09:
36:cc:69:44:64:55:a9:63:da:51:09:7b:4d:53:60:1b:aa:cd:
34:c5:96:31:82:11:eb:af:17:52:f6:41:05:f0:8a:2a:bf:b7:
8b:59:16:1c:7d:be:33:d2:2c:01:b2:b4:1b:7e:25:64:b7:2b:
00:e5:99:d4:5f:43:0c:a1:86:93:4d:a6:f4:59:fb:17:67:9a:
26:fa:68:37:98:04:cf:48:ad:8b:c6:8e:35:94:11:b4:80:f9:
d3:37:e8:aa:20:be:62:39:4f:49:54:6c:7f:23:10:ef:30:b5:
f8:e3:8c:e1:26:76:10:d4:b2:7f:5a:3d:56:ea:ba:9f:da:72:
d7:aa:e2:ce:02:0a:86:cb:44:0b:3d:87:9d:e3:48:58:59:10:
2b:8f:1d:53:cb:80:59:a1:4a:e6:b8:cd:c7:db:cb:57:bf:df:
b3:6e:f0:16:8b:83:cc:13:28:cb:67:c9:ea:3a:c7:cc:5f:8d:
0a:ec:ca:e3:c1:77:89:ec:26:74:33:db:5c:05:c8:5e:56:80:
13:01:33:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:52:13 2025 by rpki-client