Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
File: nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json)
Hash identifier: h5azXkfOnxDMiv3iez5mjqX2wARYxDCza3cwebJcOdk=
Subject key identifier: B1:2C:53:68:1C:D3:D9:35:11:98:6A:9F:A6:E0:D8:D9:06:6B:D1:CC
Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Certificate serial: 019A522BF6DC533813EB1A837ADC79F01690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
Manifest number: 0304
Signing time: Wed 05 Nov 2025 04:00:04 +0000
Manifest this update: Wed 05 Nov 2025 04:00:04 +0000
Manifest next update: Thu 06 Nov 2025 04:00:04 +0000
Files and hashes: 1: cuJe5r6PJPS-jv29DbSoyr1BYdg.roa (hash: 2tGiauvihDEwDBBUXD4gVcgWbpgeD9AUpt2tKQwt6ew=)
2: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: BzKzj58FbXn6HHHqX4zV7iM4rKn+bKhlxXXuJvuI5/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2b:f6:dc:53:38:13:eb:1a:83:7a:dc:79:f0:16:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Validity
Not Before: Nov 5 04:00:04 2025 GMT
Not After : Nov 6 04:00:04 2025 GMT
Subject: CN=b12c53681cd3d93511986a9fa6e0d8d9066bd1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:69:87:31:59:13:4a:f7:80:c0:ba:a5:19:80:
f0:0b:e3:d8:2a:69:40:12:6b:37:40:34:64:4e:2d:
6c:db:bd:e1:c3:9d:c7:92:6e:33:88:96:04:fb:dc:
16:f5:9a:dd:7b:c9:e4:f3:09:5f:42:b2:d8:7b:c2:
fd:47:e5:ae:59:17:d5:d2:a2:6b:4a:db:77:71:a1:
60:79:14:70:14:21:13:01:a2:bf:5e:91:16:ae:89:
2e:28:19:36:39:ee:5a:b4:39:18:10:80:a1:c2:84:
e6:d4:d5:b1:b3:1d:47:a3:dd:b1:be:f5:4f:29:5d:
af:35:c2:c5:d7:21:5b:b5:14:de:9f:56:79:80:1e:
fe:2d:86:41:91:d3:32:f2:45:a3:78:93:b8:7e:8e:
a2:03:ba:63:0d:8c:ab:8d:b2:8b:48:9a:b7:0d:26:
ec:c0:6e:38:cc:f6:bb:af:be:ba:17:33:96:54:13:
de:a9:5a:42:42:b0:f4:42:6f:2d:e5:b3:d7:4d:a0:
28:92:ec:9c:64:84:65:91:e4:45:a5:e9:45:6e:2a:
94:ec:2e:12:3e:aa:5b:cb:1d:83:93:ef:3d:78:30:
9f:4b:79:38:b9:c2:70:20:45:45:af:53:5f:23:4b:
b1:56:5c:8a:3f:42:88:3e:28:2b:fa:d4:44:eb:0a:
21:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2C:53:68:1C:D3:D9:35:11:98:6A:9F:A6:E0:D8:D9:06:6B:D1:CC
X509v3 Authority Key Identifier:
keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:22:65:6c:0d:7e:bc:38:67:a8:a1:c1:fd:b6:c5:5e:a5:99:
d8:4c:c6:93:93:d8:64:a3:12:b0:5f:9a:2f:ec:f4:b5:43:2b:
0a:3b:3c:e2:a7:59:d3:a6:9c:2f:c9:4b:31:3e:11:86:43:f5:
67:44:b1:0b:36:fd:3d:0e:7f:7c:f6:f7:e1:a9:c3:23:d7:2c:
99:9c:db:b7:73:f2:e1:5a:34:9b:9b:cd:34:f7:24:a4:cb:b8:
61:f0:6d:04:76:36:cf:ea:4f:f0:2d:8f:8b:6e:96:84:58:0d:
cd:dc:74:2c:f3:51:14:d8:f5:01:f5:c5:96:64:fc:c3:8e:fc:
f8:cc:57:a8:f6:04:af:db:89:f7:2d:15:08:c6:71:ab:b4:6a:
7f:4d:9b:a3:6a:09:a7:39:cd:51:7e:d6:6e:7a:3f:dd:5f:b6:
b0:fe:9d:04:0f:f6:09:f7:64:bf:7f:06:9d:d3:ce:9a:fe:5d:
31:59:ce:75:be:53:5a:1a:ac:4d:cf:dc:05:af:eb:b8:a8:10:
df:a4:25:37:ba:24:48:40:e2:12:de:ee:62:b1:15:6a:d9:b2:
4f:4a:3b:58:d5:f4:86:86:55:f3:d6:1d:0c:17:2d:e3:df:50:
46:ba:73:5a:e3:9c:f7:90:a0:83:51:ff:41:ca:64:f9:29:ee:
1f:99:b8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:59:19 2025 by rpki-client