Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File: Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier: 2+3X5BZOnGTkpJxtBIa5zT/8X6G6bECjuJw3wbwZYXA=
Subject key identifier: AE:BC:D7:66:3C:2F:AC:A0:07:34:58:7C:9E:60:9F:48:79:DF:6D:CC
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer: /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial: 019A24795BA2E92EBA8B8D1B15E85EF810EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number: 0D2A
Signing time: Mon 27 Oct 2025 07:02:04 +0000
Manifest this update: Mon 27 Oct 2025 07:02:04 +0000
Manifest next update: Tue 28 Oct 2025 07:02:04 +0000
Files and hashes: 1: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: 6w74vymqLo4UNP3EnrhR32Au15u/fzTe6B4QgpRWJlE=)
2: R_dc828vlc27bxXSMzahF76dopg.roa (hash: U9Dh8EyuA2m2THZyqCUiwh3xOZkz+ZLmhUNE1mbIxTM=)
3: yzgxHb39JlWgV-6OUyl9AE4hQAQ.roa (hash: pG2NZjpFYDlbN9iuGT1kUvmnDeM4noZC3E54rEDkwXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:79:5b:a2:e9:2e:ba:8b:8d:1b:15:e8:5e:f8:10:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Validity
Not Before: Oct 27 07:02:04 2025 GMT
Not After : Oct 28 07:02:04 2025 GMT
Subject: CN=aebcd7663c2faca00734587c9e609f4879df6dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4b:77:26:a4:27:e2:2b:a6:43:89:43:c6:cf:
c7:52:aa:ec:02:61:9a:a6:18:e0:d6:02:24:1e:a6:
95:f9:b4:82:fd:be:08:3a:bf:99:94:05:17:f4:be:
17:fe:50:9f:6f:38:12:17:c4:f8:21:b7:e6:34:e5:
19:2d:f2:fb:6a:dc:e0:6d:a2:97:05:69:70:b2:2a:
16:4c:01:de:9a:76:a3:ae:0a:61:e6:77:2c:8e:e5:
31:1f:50:96:30:6c:47:66:6c:a1:39:32:cb:9d:57:
ce:34:f8:bf:33:50:e5:eb:f1:57:3f:05:01:d5:08:
d0:fd:4e:4a:f0:6e:da:36:dc:3b:d0:b4:fd:4f:37:
10:7f:b3:9b:6f:d7:42:68:75:66:23:d2:b4:bc:65:
35:3f:fc:87:21:e8:09:f2:d0:61:67:dc:38:c5:fd:
11:e6:af:a6:59:d2:b0:97:cb:ba:73:76:3e:55:d5:
8f:27:cb:20:f9:b8:32:10:a7:a4:3a:dc:86:8f:24:
04:fd:ce:e8:07:38:12:8d:b5:e8:c3:2f:fb:0e:5b:
98:3a:b6:09:3c:00:09:5b:85:67:86:c8:7e:29:c9:
3a:99:b9:85:9a:ee:9b:d2:27:37:e2:6d:f2:4e:bb:
92:78:f3:83:f9:9d:8d:3c:37:74:63:22:06:33:e0:
ee:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BC:D7:66:3C:2F:AC:A0:07:34:58:7C:9E:60:9F:48:79:DF:6D:CC
X509v3 Authority Key Identifier:
keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2f:b4:98:35:50:71:2b:1f:35:d8:85:a1:80:40:00:ac:61:
f4:e7:eb:a6:51:40:62:38:ac:8a:34:16:a2:fe:ea:e2:b5:6b:
14:ab:4e:f1:12:13:95:69:a0:c9:6d:20:9f:5e:a7:d3:5a:67:
ba:bf:06:5f:9c:64:54:1a:16:1f:4a:79:94:0a:0c:0e:41:41:
f4:3a:f8:4f:bd:e8:3f:51:75:3e:9d:a9:6d:af:ab:d9:d3:31:
a6:94:1b:f9:de:df:3c:75:8d:51:01:39:b5:7f:4a:09:e3:c3:
d2:ea:78:c2:b3:3b:7d:08:2b:4a:d6:13:b9:ce:96:89:07:17:
d2:36:ee:65:6d:ee:aa:f1:9f:2f:b9:a7:0a:66:6f:ae:94:21:
eb:76:40:0d:09:d2:1d:82:ea:34:f5:8a:81:53:6f:1c:8a:7b:
e3:54:8c:1e:c1:b0:cb:87:2a:44:52:7a:d7:83:3f:2d:6c:22:
7a:52:b6:bf:8c:b1:16:e3:a7:00:04:b5:f8:d2:c9:3d:84:86:
81:60:83:59:d5:52:e8:3a:c4:67:29:e6:7a:6c:55:7b:a5:09:
ae:4e:9a:70:f4:8d:52:46:1f:ae:fc:b4:54:b6:37:99:f1:e7:
1b:9d:ad:d8:30:f2:d9:a7:bd:db:c0:6f:a8:38:90:ba:f4:7a:
60:26:fc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:02:51 2025 by rpki-client