Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
File: nJB6oEaogfuAUFGVIBYwYCYNfzE.mft (raw, json)
Hash identifier: dUCLSgsIYxweuoW+R5kuWQrLIklTBn4ESQmb37hbXQo=
Subject key identifier: CD:B9:F4:0B:FE:04:E4:1C:51:45:C0:70:95:0B:C3:01:01:FF:B2:F9
Authority key identifier: 9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31
Certificate issuer: /CN=9c907aa046a881fb8050519520163060260d7f31
Certificate serial: 019A5187F0443AFAF746E8F8CCE9B61D335F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
Manifest number: 02E9
Signing time: Wed 05 Nov 2025 01:00:54 +0000
Manifest this update: Wed 05 Nov 2025 01:00:54 +0000
Manifest next update: Thu 06 Nov 2025 01:00:54 +0000
Files and hashes: 1: F86xC6xwpLDuhs7A8wZygejUMX8.roa (hash: hqY5dyyDkeBwJW2ZEKNHXzfFF8UT2R+EbGGyWHizujw=)
2: nJB6oEaogfuAUFGVIBYwYCYNfzE.crl (hash: 39b33dIHKWr8LhFll+PDfvVyP7Z3fmBRa75QpOE7NAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:f0:44:3a:fa:f7:46:e8:f8:cc:e9:b6:1d:33:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c907aa046a881fb8050519520163060260d7f31
Validity
Not Before: Nov 5 01:00:54 2025 GMT
Not After : Nov 6 01:00:54 2025 GMT
Subject: CN=cdb9f40bfe04e41c5145c070950bc30101ffb2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bf:6b:84:82:54:31:57:80:54:fd:4e:bf:ab:
69:bb:0e:a2:9c:cf:1d:d7:84:2b:71:48:e7:04:e5:
69:22:62:f4:51:5b:95:45:65:7e:05:55:8f:08:03:
47:cc:b7:77:d8:ed:d9:9b:16:f3:a9:b9:43:21:9b:
9f:f9:bb:2a:1f:61:ee:96:cd:aa:c7:3c:74:b8:70:
72:67:34:91:8f:4b:96:d0:40:92:1e:a1:c5:3d:f9:
1a:32:97:44:23:fc:d8:d9:7b:e0:72:5c:cc:cd:bc:
22:2c:f9:29:5d:17:0a:05:ec:3e:21:25:8a:cb:0e:
fc:6e:dd:8d:2d:c1:90:86:e1:60:4d:68:9a:3b:85:
b6:33:0b:64:a4:7d:84:aa:6d:74:01:95:cc:87:fe:
d2:3b:c7:f4:6a:b5:99:e9:e8:f8:ea:37:58:78:ca:
67:06:30:93:c7:45:61:cb:aa:02:63:fe:2c:c2:8d:
5f:69:0c:47:39:ae:b8:c9:f5:0b:90:2e:92:6c:13:
d2:a7:dc:f4:d0:54:9e:ad:da:59:51:fa:90:70:f9:
ac:24:04:de:dd:57:55:2e:31:7a:bc:2f:48:7d:fc:
84:53:83:3c:42:c4:62:34:ad:2c:0d:15:28:5c:38:
f6:d5:47:07:ae:de:e9:1c:c7:d6:ce:34:e3:4e:cd:
62:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B9:F4:0B:FE:04:E4:1C:51:45:C0:70:95:0B:C3:01:01:FF:B2:F9
X509v3 Authority Key Identifier:
keyid:9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:2c:39:0c:ec:a5:ca:8c:79:da:6e:b7:c1:b5:20:08:15:94:
2e:e7:94:a4:25:98:91:b5:90:7d:27:1d:a2:a2:86:d6:5f:99:
0a:1e:ab:e1:a3:5e:a0:75:93:3b:02:51:03:c0:96:d4:4d:97:
07:93:8a:7f:33:7f:17:f8:c0:07:16:ce:7b:5e:1a:85:f3:0d:
8d:e0:94:89:d2:75:7f:11:4e:0c:6f:74:98:87:ec:4e:72:e9:
51:a3:ff:5f:ff:68:03:ad:af:c9:de:08:66:50:b3:f3:de:31:
ab:35:42:9b:b5:cd:42:0d:b4:68:c7:44:55:6a:f9:5f:2e:3d:
98:0d:f1:00:7e:10:95:43:ef:34:e1:46:ee:21:55:a0:07:f5:
78:99:f0:41:56:29:08:eb:f3:ab:fe:7b:e2:40:45:6b:22:a0:
6a:fe:2c:5a:3b:be:3c:0d:c4:11:84:f8:11:d4:88:d5:e7:04:
61:28:07:3d:b4:6a:d7:14:84:df:e1:5e:0a:5b:ea:29:71:4a:
40:51:97:00:1b:66:8b:2e:17:b7:cf:2b:73:ab:6b:00:13:30:
81:f8:5b:3b:3d:d3:33:b1:73:be:ed:a1:02:5e:1a:be:06:8d:
ea:80:c4:63:15:78:77:22:5b:e4:8c:0a:e6:60:7a:cc:ff:08:
78:5c:74:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh/BEOvr3Ruj4zOm2HTNfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOTA3YWEwNDZhODgxZmI4MDUwNTE5NTIwMTYzMDYwMjYw
ZDdmMzEwHhcNMjUxMTA1MDEwMDU0WhcNMjUxMTA2MDEwMDU0WjAzMTEwLwYDVQQD
EyhjZGI5ZjQwYmZlMDRlNDFjNTE0NWMwNzA5NTBiYzMwMTAxZmZiMmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA279rhIJUMVeAVP1Ov6tpuw6inM8d
14QrcUjnBOVpImL0UVuVRWV+BVWPCANHzLd32O3ZmxbzqblDIZuf+bsqH2Huls2q
xzx0uHByZzSRj0uW0ECSHqHFPfkaMpdEI/zY2XvgclzMzbwiLPkpXRcKBew+ISWK
yw78bt2NLcGQhuFgTWiaO4W2MwtkpH2Eqm10AZXMh/7SO8f0arWZ6ej46jdYeMpn
BjCTx0Vhy6oCY/4swo1faQxHOa64yfULkC6SbBPSp9z00FSerdpZUfqQcPmsJATe
3VdVLjF6vC9IffyEU4M8QsRiNK0sDRUoXDj21UcHrt7pHMfWzjTjTs1i9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM259Av+BOQcUUXAcJULwwEB/7L5MB8GA1UdIwQY
MBaAFJyQeqBGqIH7gFBRlSAWMGAmDX8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkpCNm9FYW9nZnVBVUZHVklCWXdZQ1lOZnpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kY2I2MTMtOTNlYi00ZTg2LTg5NWIt
YjFlNjk4NzA4ZjU5LzEvbkpCNm9FYW9nZnVBVUZHVklCWXdZQ1lOZnpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9kY2I2MTMtOTNlYi00ZTg2LTg5NWItYjFlNjk4NzA4ZjU5
LzEvbkpCNm9FYW9nZnVBVUZHVklCWXdZQ1lOZnpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCw5DOyl
yox52m63wbUgCBWULueUpCWYkbWQfScdoqKG1l+ZCh6r4aNeoHWTOwJRA8CW1E2X
B5OKfzN/F/jABxbOe14ahfMNjeCUidJ1fxFODG90mIfsTnLpUaP/X/9oA62vyd4I
ZlCz894xqzVCm7XNQg20aMdEVWr5Xy49mA3xAH4QlUPvNOFG7iFVoAf1eJnwQVYp
COvzq/574kBFayKgav4sWju+PA3EEYT4EdSI1ecEYSgHPbRq1xSE3+FeClvqKXFK
QFGXABtmiy4Xt88rc6trABMwgfhbOz3TM7Fzvu2hAl4avgaN6oDEYxV4dyJb5IwK
5mB6zP8IeFx03Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:54:51 2025 by rpki-client