Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
File: n-mO5s-z-6g7lyrhJlO12fxwcC4.mft (raw, json)
Hash identifier: Ag3Pm0hn240aUtOLm+rEBac7Yc0rtiylBQqzy+JEdjo=
Subject key identifier: CB:AC:E4:DB:E9:E6:69:B7:26:30:3C:7C:32:00:A0:F9:99:63:68:FE
Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Certificate serial: 019A4FD08571F28BA6315E581ABEAF987B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
Manifest number: 0DE1
Signing time: Tue 04 Nov 2025 17:00:56 +0000
Manifest this update: Tue 04 Nov 2025 17:00:56 +0000
Manifest next update: Wed 05 Nov 2025 17:00:56 +0000
Files and hashes: 1: 1rNQC9Pmf5K1eRYu1hkhr5zZk2Q.roa (hash: x5fQIv4POV9mBCJLuhdzQlSn9HXra5gwr9JL2VOeY1M=)
2: n-mO5s-z-6g7lyrhJlO12fxwcC4.crl (hash: TOlwZSnFuClAFxChAVJYwd0QYmIEyG+jcmrP0Ek49XU=)
3: wILLHD-thZnbY2_hVwSd8tKmVuU.roa (hash: 2k1puHfj5prqotEB5UejW81dxBofSqdytblBomrOVEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:85:71:f2:8b:a6:31:5e:58:1a:be:af:98:7b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Validity
Not Before: Nov 4 17:00:56 2025 GMT
Not After : Nov 5 17:00:56 2025 GMT
Subject: CN=cbace4dbe9e669b726303c7c3200a0f9996368fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:ab:cb:e2:d1:b6:fc:34:55:00:4e:55:0d:
16:ca:ac:3d:94:ae:20:05:d8:84:0c:a0:ee:1d:0f:
ab:fd:0c:18:2c:f6:db:61:4a:2f:4b:b6:5b:60:51:
ce:09:6c:2b:6b:4d:8c:d5:31:c2:71:84:e6:69:9d:
d2:ee:a5:d8:d9:f7:49:12:5c:6f:d1:af:05:25:e7:
a1:fd:f3:07:d4:f4:2c:54:d2:d6:33:4c:90:a7:f2:
f0:8e:29:22:99:41:0b:bd:9c:80:f9:d9:8e:6c:b3:
44:35:1b:78:2a:15:f6:e5:cc:bf:7f:bf:8f:ce:39:
93:3a:d6:9d:a0:32:2f:f5:b3:06:92:5c:0e:a4:dd:
f6:58:3f:4d:06:f7:30:3d:78:4b:3b:c2:94:22:ef:
0f:da:b6:69:be:04:5f:74:1e:fd:4f:24:13:a2:e9:
c0:bb:7e:29:22:e2:30:9c:ee:f4:5a:b4:72:3a:32:
32:83:2c:bc:b2:eb:8f:6a:32:b9:77:a2:e3:e4:ac:
de:e9:8b:b2:a4:ad:56:3d:c4:f7:2e:6d:a1:3c:f5:
42:44:de:df:88:08:36:f7:b0:af:6c:61:25:19:1f:
e5:26:33:86:36:a4:b0:0b:9c:04:55:1f:54:12:ec:
81:e1:15:eb:0d:98:79:bd:62:d1:79:36:e9:a4:41:
2b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AC:E4:DB:E9:E6:69:B7:26:30:3C:7C:32:00:A0:F9:99:63:68:FE
X509v3 Authority Key Identifier:
keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:27:35:64:45:15:09:68:61:29:54:55:b6:9b:85:64:92:39:
70:f1:cd:22:49:62:94:15:37:8b:61:e8:ba:cb:37:dc:d2:77:
8d:a2:7b:bc:4f:d7:43:05:78:14:2e:29:4f:49:6a:04:a7:2c:
e5:b8:bb:3f:98:66:3e:dd:bc:5e:6b:24:84:d4:0b:b8:ad:f0:
c5:be:d7:9f:eb:ad:6a:ce:2d:12:63:3b:01:48:91:0d:66:bf:
ec:15:3d:d9:09:42:ce:0d:ee:92:6e:61:08:3f:f4:55:ba:81:
a7:f8:43:08:e4:72:a1:c8:a3:d7:4f:c7:b9:23:34:99:9a:79:
6e:26:56:2b:56:9c:12:46:20:d9:28:37:db:43:e0:53:83:ba:
9d:b5:64:bb:5e:5e:29:5c:21:4f:51:a0:68:2f:47:1d:82:1e:
fb:43:7b:53:50:74:00:9b:d2:0c:1a:60:08:29:95:82:54:24:
f4:fb:0f:b8:88:4f:0e:02:19:c2:27:b0:a7:27:b6:04:d7:57:
ae:9f:ed:18:50:10:46:f3:d2:cf:ef:a6:58:dc:e4:74:69:ed:
72:39:1c:99:0c:96:58:62:e7:54:df:28:37:12:b8:2e:2a:98:
c3:f5:15:4a:a9:70:d4:6d:ec:60:81:ea:33:59:a3:52:a1:4e:
34:03:26:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:17:37 2025 by rpki-client