Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
File: NM-cB0OwPV4EX0bprPToAKnxio4.mft (raw, json)
Hash identifier: cp3RwufP2iKk/E1MTYDTp+v/1PA/mGJydKR7lJwUMY8=
Subject key identifier: EA:1D:43:0C:AC:71:3E:AD:44:55:D6:C3:4A:22:42:D7:FE:EF:D6:FA
Authority key identifier: 34:CF:9C:07:43:B0:3D:5E:04:5F:46:E9:AC:F4:E8:00:A9:F1:8A:8E
Certificate issuer: /CN=34cf9c0743b03d5e045f46e9acf4e800a9f18a8e
Certificate serial: 019A4F6232B905443D2F280400C73EBCE7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
Manifest number: 0C19
Signing time: Tue 04 Nov 2025 15:00:26 +0000
Manifest this update: Tue 04 Nov 2025 15:00:26 +0000
Manifest next update: Wed 05 Nov 2025 15:00:26 +0000
Files and hashes: 1: NM-cB0OwPV4EX0bprPToAKnxio4.crl (hash: jQJgqNgqzjsE+rNpMAdSZzHcs3kC1nYGaISb0t6BAyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:32:b9:05:44:3d:2f:28:04:00:c7:3e:bc:e7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cf9c0743b03d5e045f46e9acf4e800a9f18a8e
Validity
Not Before: Nov 4 15:00:26 2025 GMT
Not After : Nov 5 15:00:26 2025 GMT
Subject: CN=ea1d430cac713ead4455d6c34a2242d7feefd6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4d:ae:7f:f8:5d:5b:56:6e:6f:3d:3a:41:fb:
36:cc:1d:c9:84:80:dd:ed:b8:30:96:6f:3c:49:dd:
65:17:ea:0f:eb:13:b2:67:ef:29:d4:ac:4a:cf:86:
40:b4:a6:6e:7e:5b:d9:f2:b6:4d:42:6d:1a:1c:aa:
10:33:65:b6:00:ae:f5:e8:fb:7d:0e:a9:2a:aa:92:
53:7b:72:04:62:37:7e:1b:30:c0:ae:6b:f0:e6:54:
ad:c2:56:0e:4f:18:6f:6a:48:1c:c6:19:b6:8f:95:
ee:da:2e:80:35:57:fd:5f:1e:fb:a5:8e:31:d5:0e:
c6:9b:a6:fd:16:be:76:b3:cc:ae:38:09:e5:fb:7e:
23:49:a0:2f:58:5a:1d:16:dd:ec:80:42:4b:d4:85:
c1:fd:01:0f:43:19:6e:9a:29:1b:47:a0:e6:5b:4e:
b1:f9:2e:3d:65:09:4f:fe:91:40:82:7b:dd:91:0e:
48:f2:da:73:64:03:26:57:b0:8b:6e:9a:11:31:3e:
d4:33:29:9d:0f:a5:3e:50:f3:ac:3a:11:7c:75:ad:
b1:c0:4b:70:d1:6e:9e:9c:fb:97:16:5f:3b:55:e4:
35:d4:e0:9a:f1:dc:2b:63:cb:4e:fb:a4:83:28:d7:
d5:7c:2c:e3:d8:dc:1f:03:8f:e1:99:61:61:e0:f0:
f1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1D:43:0C:AC:71:3E:AD:44:55:D6:C3:4A:22:42:D7:FE:EF:D6:FA
X509v3 Authority Key Identifier:
keyid:34:CF:9C:07:43:B0:3D:5E:04:5F:46:E9:AC:F4:E8:00:A9:F1:8A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:cf:2b:ba:da:24:5a:63:92:4d:45:8d:02:46:a7:01:fb:61:
dd:e2:03:a9:b7:2f:26:a0:b7:94:21:f5:80:9c:70:b0:b1:2d:
fa:85:ee:90:5a:68:c7:07:8c:a7:4c:7c:d8:31:ce:2f:01:5d:
bb:2c:9b:e0:e0:2d:20:bc:74:8f:64:2f:af:5b:c8:d4:3d:26:
22:33:f6:05:fa:04:27:c5:66:57:3d:02:d9:90:3b:1d:dd:f8:
fb:9d:aa:e3:c2:0b:0f:e4:0f:1a:0f:90:9f:88:34:1a:a0:97:
e3:08:ed:d4:86:28:d1:61:dd:5a:a9:05:db:7f:85:eb:63:30:
a7:56:15:d9:c2:40:aa:0a:83:5c:5a:d0:17:15:9c:ea:31:80:
29:0a:02:92:bc:bb:9c:b3:af:31:4a:d5:a7:b0:cc:62:58:d6:
21:68:df:b5:db:45:d3:2b:d2:7b:f8:5b:8a:3d:f5:c5:40:27:
5e:59:63:22:65:51:e4:d5:1a:7b:1d:18:63:bc:a7:d7:71:ab:
58:06:1f:ce:b9:78:77:1e:26:58:a2:f0:2c:70:fc:bb:ed:df:
90:b8:b0:e0:43:42:c7:7a:1c:19:89:b6:7e:e4:30:e9:b4:38:
fd:3b:f5:75:d3:13:b3:6a:f5:f0:77:89:f1:bd:5e:07:d8:93:
81:57:16:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:31:00 2025 by rpki-client