Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
File: nOItyiotsKWf5WaByNHEBnenRbU.mft (raw, json)
Hash identifier: cfQL2WWNgrtpNfd5kVmJBAWng7pCLXw3BmM8bFARWQs=
Subject key identifier: E6:1E:CC:3E:D0:FC:E7:FD:7C:17:73:71:DD:57:20:29:39:80:98:08
Authority key identifier: 9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
Certificate issuer: /CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Certificate serial: 019A4EF5AE946F4EDCE1D1DA1F255E715327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
Manifest number: 12CB
Signing time: Tue 04 Nov 2025 13:01:55 +0000
Manifest this update: Tue 04 Nov 2025 13:01:55 +0000
Manifest next update: Wed 05 Nov 2025 13:01:55 +0000
Files and hashes: 1: SgrL7DiM5GSLyUl02rPic8LO2xM.roa (hash: mfGk2oXMS3Dskm6xFi6bjI6ao91mV5GgJuEh/2dC5PU=)
2: nOItyiotsKWf5WaByNHEBnenRbU.crl (hash: 1ZRikScJNTQeG+Jk+A99PWaI/tZJl7KYjqLkc7RESsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ae:94:6f:4e:dc:e1:d1:da:1f:25:5e:71:53:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Validity
Not Before: Nov 4 13:01:55 2025 GMT
Not After : Nov 5 13:01:55 2025 GMT
Subject: CN=e61ecc3ed0fce7fd7c177371dd57202939809808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6d:53:b6:40:f2:90:f1:87:cf:6a:36:bd:94:
c4:7f:40:e7:06:ae:f5:6d:93:dc:5e:0a:4b:84:16:
ba:10:27:20:7b:8c:46:e9:b2:9f:7a:ea:32:b8:52:
37:a7:bb:44:65:ae:98:b0:75:37:df:79:e6:d2:6f:
2a:f2:29:c7:4d:50:be:fa:58:d4:14:7a:3a:a2:48:
f3:07:a6:ef:57:a0:53:01:8e:53:4b:49:1c:95:8f:
b9:b5:29:d4:43:a0:61:08:75:b8:13:53:6d:81:29:
51:b5:bc:bd:12:9c:19:7c:a4:e5:34:c6:16:14:64:
83:44:98:28:78:d6:e8:5c:2c:ea:48:23:a6:fd:c1:
65:46:b4:61:79:9a:34:d7:cf:68:5f:9a:ca:2e:57:
2e:aa:31:27:01:28:99:e2:5e:4e:eb:cb:e7:b8:7a:
d8:5b:2c:b2:5f:65:f9:22:72:05:2c:7a:37:97:a9:
77:bd:ca:9b:1b:8b:7f:c2:18:5d:9f:1c:74:e2:27:
12:2c:4d:c2:e5:79:cb:bf:7b:3d:71:de:87:6a:4b:
b4:83:17:22:0e:fc:9c:97:45:ec:07:31:74:fb:58:
30:c3:b6:e9:3b:d9:fa:1e:ed:98:01:a1:24:1f:e3:
78:1e:95:30:13:42:19:7e:75:57:19:c2:6d:87:60:
10:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1E:CC:3E:D0:FC:E7:FD:7C:17:73:71:DD:57:20:29:39:80:98:08
X509v3 Authority Key Identifier:
keyid:9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:44:c8:9c:58:ad:d5:d6:f0:79:09:4e:5d:05:c1:0c:98:fc:
15:a3:61:1e:3b:2f:cb:41:09:2c:45:44:e0:0a:75:48:4d:8a:
23:29:cc:16:7f:c8:8c:e7:d5:c3:36:f3:fc:79:4d:1d:2e:d3:
72:81:52:89:5c:d9:44:a0:c1:ac:cd:ec:18:ff:48:ee:57:c7:
31:98:33:21:6f:f5:4e:ba:54:8a:bf:a7:13:ad:ff:8a:52:5a:
66:66:ce:bb:5e:42:89:97:6d:de:9e:18:58:99:93:05:c1:39:
99:cf:45:3e:b9:e2:55:9a:97:34:65:df:fb:72:7b:0d:dc:cb:
db:5d:53:26:5d:93:3a:b8:e8:34:cd:9a:46:81:3a:55:6f:bf:
24:b8:7f:fd:d4:08:f7:5e:d0:ae:48:03:dd:c1:84:25:3f:0f:
a0:93:5b:0e:5a:58:d1:b2:75:5d:6c:a0:e3:9e:6c:f0:4a:05:
09:85:31:2d:b2:3f:df:36:9e:c0:b6:39:5b:dc:e5:4f:2e:b1:
87:85:8c:db:84:2c:74:6b:e2:97:8e:73:69:2e:b2:84:a3:b5:
23:d2:e6:51:8d:25:7d:4a:69:e9:ab:4a:d3:05:e8:84:c1:52:
0d:18:74:9c:ea:3c:33:cb:2b:95:83:0b:4a:31:df:cc:3d:8e:
a8:e5:cf:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:39 2025 by rpki-client