Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
File: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft (raw, json)
Hash identifier: By+f/r/K7yHIdvPFkmXroSZtMmsLDlLRbcmu1c0ckCk=
Subject key identifier: 16:F9:A2:99:73:41:BB:1B:9A:04:32:C7:DF:1F:A5:F2:82:8A:6E:9A
Authority key identifier: 9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4
Certificate issuer: /CN=9d8ada352982a319b54d5e483d34426346733ea4
Certificate serial: 019A52636551D0F140C3574058F1916C1F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
Manifest number: 15FF
Signing time: Wed 05 Nov 2025 05:00:36 +0000
Manifest this update: Wed 05 Nov 2025 05:00:36 +0000
Manifest next update: Thu 06 Nov 2025 05:00:36 +0000
Files and hashes: 1: KpbjIIUZw0-XxCl1KqQDZ_EUKkY.roa (hash: KJWoFU4L0w8L8ZUG5csCrTHWK3udD7xALiAnkocVeD0=)
2: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl (hash: oEeYGkWtKs+V0yOfnBfn7E8FE4ALkntdXicREl8uTts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:65:51:d0:f1:40:c3:57:40:58:f1:91:6c:1f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8ada352982a319b54d5e483d34426346733ea4
Validity
Not Before: Nov 5 05:00:36 2025 GMT
Not After : Nov 6 05:00:36 2025 GMT
Subject: CN=16f9a2997341bb1b9a0432c7df1fa5f2828a6e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:d7:c3:75:09:0f:2c:c7:4c:72:c0:80:69:
e1:ff:0e:88:e6:17:3e:6f:0b:53:f5:2c:13:24:5e:
69:6b:3d:65:f5:1a:81:38:3a:66:e3:6b:5b:eb:30:
64:55:98:5a:58:fb:27:d5:41:58:7b:c7:c0:e4:42:
7b:ca:79:88:89:a8:09:94:c0:07:74:a9:7e:70:ed:
90:66:3a:88:00:7b:35:3e:52:44:e6:a4:3b:b4:3d:
e9:92:15:cc:d4:10:55:9e:2e:a2:64:c6:f7:c6:f9:
91:f0:59:c5:8a:58:d1:f5:72:74:ac:a4:b5:36:e7:
a0:0f:64:11:49:be:c5:59:50:e4:2a:44:20:d8:00:
79:f6:6f:0d:db:8f:5c:a4:29:14:85:62:29:d7:39:
34:db:5c:d9:c7:cb:7c:3e:d2:f8:9b:39:99:6b:54:
e6:9f:39:01:e4:2a:da:4e:b3:b9:c8:aa:24:82:91:
6a:c8:69:eb:1d:9f:51:c9:6e:86:67:f4:87:63:8a:
68:08:df:5d:67:40:2f:12:a4:b5:ae:fb:94:bd:8d:
21:fb:2c:0f:fa:cc:f9:d8:1e:f3:01:38:37:69:27:
83:18:59:8f:42:64:a5:75:0c:a3:0b:cd:db:a7:06:
9f:cc:3d:06:cb:c8:10:e7:5b:97:ef:9a:45:52:99:
94:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F9:A2:99:73:41:BB:1B:9A:04:32:C7:DF:1F:A5:F2:82:8A:6E:9A
X509v3 Authority Key Identifier:
keyid:9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:57:9e:81:b8:0b:15:9a:b1:79:9a:b7:f3:0a:aa:f3:90:65:
ac:16:64:49:46:e4:af:37:b3:e6:c7:a5:07:88:51:45:70:4e:
a0:b2:86:03:49:07:a7:ef:c1:b6:e3:6c:7c:48:35:75:a0:f7:
ad:64:eb:6f:91:ad:21:da:47:60:11:4a:8a:13:1d:0b:aa:c7:
10:61:aa:be:15:f8:a0:2d:89:24:70:2f:df:4d:a5:e7:66:08:
d9:da:4d:61:5d:c2:89:d3:a1:bc:de:75:7a:8a:09:26:3e:66:
89:a1:78:a5:69:52:f1:f4:d3:80:49:91:75:f5:c9:9b:97:af:
94:ad:62:4d:64:de:bb:b0:94:99:05:20:6d:ec:bc:6b:a4:dd:
65:18:1d:e2:6d:6f:fc:dd:43:b3:e4:1e:cd:14:1b:e8:3a:cc:
7f:9c:45:be:ce:f3:cb:a4:95:36:08:52:9f:b5:66:d2:cf:8b:
da:b8:0e:64:9a:b9:b0:6b:f7:ce:a0:a1:ad:7d:41:c3:2d:44:
f0:0d:49:8e:26:bc:7b:09:e5:73:98:1f:64:f5:5b:df:6d:ba:
58:25:ac:ca:34:28:86:a9:fa:93:bc:07:27:c0:eb:ab:6c:73:
40:89:73:8d:bd:ce:b8:77:58:42:ae:ed:08:4f:39:13:10:f2:
cd:74:40:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:08:26 2025 by rpki-client