Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json)
Hash identifier: v5QZIygTdPFVK2xHHKw2MlKQz/UJO/Hon5Yo01fPXs0=
Subject key identifier: E2:19:6D:C6:44:CE:11:23:CD:5C:DE:55:12:5D:5D:BE:6D:E5:A0:6B
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019A4F61ED8ECE745FDE5324F8F99CCC8B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
Manifest number: 1037
Signing time: Tue 04 Nov 2025 15:00:08 +0000
Manifest this update: Tue 04 Nov 2025 15:00:08 +0000
Manifest next update: Wed 05 Nov 2025 15:00:08 +0000
Files and hashes: 1: 1-0vipuRl0AJvwZtEBk-maQes6Cg.roa (hash: DSWGxdza7oD2/3uUVZoXyDrmHTWT++tTuwdDtQTvs4k=)
2: Dp9S7DtPUM200gi6O6yBPEaasas.roa (hash: nHFRQ6xLBtePKwuFF9sGQ8KR62EZEyHkOj5R88bM4qI=)
3: F6eX9oz_j-ZT8QfPBURiHjJkBos.roa (hash: 9C2+49g0ve8uLFJHYFMwlwYj/+2J3SnLoalOE2MN4Mk=)
4: Hiu-YkREzGKKTtSRBgf6M5S0mUM.roa (hash: fxvguMnjN9xF6RFcgtEIfOjUPdwUBHDkuyyelgRCorQ=)
5: U4lJvipYbr4AZQbw3vQ4rpXfXN4.roa (hash: J4umHHc1mv/sPeURzjqZJEkjClmBGK0Hvn8O5Rexq5Y=)
6: YhZQFWzwDUGT-HjSfFHnpvcFMTY.roa (hash: /ssHfW4YZnp/Q+YD/IpItVTTmqCd5HemhWXsBRiqt1A=)
7: ZeYihmicLm5VKfWSSFIon1HTDC4.roa (hash: skxZCw+YKxKcl1188es30U08xjm3mZlLt8pygJEcJ10=)
8: jdKmvZ_WGiUDxDAHKJg_Wed6rVo.roa (hash: CRiOfMtNCT5H0OJU8c1YHET8V3YfGy03z8wKH951O6Y=)
9: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: LABDLv+pr+sGfRqnEDcZOjc3KzyqyieIRv/0n3x0IbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:ed:8e:ce:74:5f:de:53:24:f8:f9:9c:cc:8b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Nov 4 15:00:08 2025 GMT
Not After : Nov 5 15:00:08 2025 GMT
Subject: CN=e2196dc644ce1123cd5cde55125d5dbe6de5a06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:d5:19:5b:00:58:22:fb:f0:f2:e7:ef:df:
97:a0:62:f6:2d:e5:29:4d:a4:b3:ad:b8:08:7d:c4:
2d:f2:5d:bb:db:52:d7:98:3e:68:2a:71:4e:e4:d6:
68:55:6a:94:43:8f:d5:4d:f8:f8:1d:4f:73:0e:d3:
ed:b9:82:41:84:fd:49:94:b4:8f:31:4f:75:e8:e6:
61:98:61:7c:d6:f3:af:49:42:94:69:1a:5f:f6:27:
81:ac:48:c2:91:b8:d8:5c:f6:cc:2e:d3:9f:db:ac:
6c:da:22:89:ab:df:23:36:9a:a7:aa:af:e3:99:2f:
c0:21:b8:eb:c2:a9:5d:60:c4:82:c9:c6:b0:70:19:
5d:d4:9f:b6:2c:15:2b:a0:3c:7e:fe:80:4b:48:2e:
6e:39:7c:7c:26:29:23:33:9b:68:fc:0f:78:01:43:
b6:46:98:eb:47:39:84:aa:41:e6:70:41:81:df:aa:
46:a2:67:a1:8c:a9:11:57:01:98:b7:da:cc:86:51:
33:2b:0e:23:01:79:e9:93:7e:83:cf:99:e4:41:09:
64:6b:a6:2a:cc:1b:8f:19:c5:6f:a7:ef:a7:ca:d3:
bb:00:4b:cf:c0:03:8d:3d:a5:29:fe:80:40:5c:76:
c5:13:83:f3:41:ba:fc:ed:ab:b8:54:be:d5:14:2f:
6b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:19:6D:C6:44:CE:11:23:CD:5C:DE:55:12:5D:5D:BE:6D:E5:A0:6B
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f2:bb:d7:f2:ad:6b:41:37:f5:bf:b7:8c:64:51:4b:82:51:
fc:7f:28:6f:43:63:30:1c:87:c9:83:19:80:03:55:f0:24:e3:
3f:8d:ab:c4:13:c1:6b:a1:1a:7b:cb:b5:6d:05:4f:4d:18:af:
9f:87:b1:ee:68:24:da:90:3d:8e:77:36:31:fd:f2:ab:56:ed:
67:57:10:0c:d3:e2:74:25:3d:ad:81:aa:6e:ca:2c:be:d2:a7:
cc:c8:bc:2f:5d:2f:cc:d7:29:d9:87:e2:7d:b0:ec:49:36:9c:
f0:77:ff:7b:f4:38:9f:dd:c5:f3:57:41:7b:eb:e5:cd:30:dd:
51:43:57:06:e9:60:53:01:87:4c:d9:de:89:91:53:4b:91:56:
4c:88:5a:9b:40:e2:d8:0d:97:35:f9:90:87:a7:4e:b3:66:2a:
e3:7f:24:58:ce:7a:a4:3f:79:17:74:df:67:76:79:50:67:9a:
c5:00:98:e2:5f:9b:ad:48:4d:37:6f:31:f5:98:1f:1d:31:ff:
03:24:2e:77:8d:7e:e9:c9:3a:53:85:2d:82:d2:56:28:f6:90:
48:d4:9a:a2:f8:68:4c:da:03:5b:93:a1:49:3e:ba:f5:56:47:
49:40:c1:d2:d2:15:46:2c:7c:92:64:1d:92:40:20:0b:e7:d4:
a5:da:59:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:37:57 2025 by rpki-client