Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
File: Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft (raw, json)
Hash identifier: wP7CRXq7KwCFo+cqyemUBU+9VvkWAIsrJQSKsBk/Eow=
Subject key identifier: 84:CF:8C:37:92:8A:FC:06:A9:B0:96:5A:D9:0A:71:EC:6B:D7:83:AA
Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
Certificate issuer: /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Certificate serial: 019A269D0601D37D1527A9598B4E8A55609B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
Manifest number: 0A43
Signing time: Mon 27 Oct 2025 17:00:15 +0000
Manifest this update: Mon 27 Oct 2025 17:00:15 +0000
Manifest next update: Tue 28 Oct 2025 17:00:15 +0000
Files and hashes: 1: 4wDopbEXjk43Rw4mbcMJ6Q0c3jA.roa (hash: VBD+7i2pGd2GcSGT6qMiuwjn3HP93susB4QpbZwY04c=)
2: C-H7cUZDR8Fn5bAwbFaXEXvgd-E.roa (hash: HsvEFF3yXL6NktNRceT9btK/0vgIKnScyehQHmjIyPs=)
3: Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl (hash: jSHJ48VtS9sJ+Lhw0ObDK+IJoyhV9MsQktrNf2inHx0=)
4: OsSemMFuJIzlguBNFL5i99h59ac.roa (hash: wej6G9fzYwe+kpr/KR/AvxkzN1danDVs2QQt2gCzdwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:9d:06:01:d3:7d:15:27:a9:59:8b:4e:8a:55:60:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Validity
Not Before: Oct 27 17:00:15 2025 GMT
Not After : Oct 28 17:00:15 2025 GMT
Subject: CN=84cf8c37928afc06a9b0965ad90a71ec6bd783aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:a5:fc:21:ea:22:22:77:a9:84:a0:a2:7f:
d9:1e:25:ab:95:0c:44:69:72:7f:44:53:17:23:59:
31:04:1f:0b:6e:4d:b8:99:f1:2c:44:70:2a:bd:d2:
06:e2:68:3b:de:4c:76:c5:bb:b5:8d:8a:5e:3b:31:
5b:91:e9:de:3d:68:98:34:ac:e1:02:18:02:e0:ad:
17:2c:ef:ce:29:95:e1:aa:a6:0c:02:11:14:74:f1:
a4:42:41:62:85:d3:f6:df:3a:05:37:4c:1e:15:85:
a2:d0:a3:27:f1:ba:b1:66:3c:42:4c:7e:2e:3f:f0:
b3:06:f5:e3:12:75:a9:0c:c3:ab:07:5e:09:6f:a6:
21:29:2b:85:79:94:47:fe:ec:5f:cf:56:14:72:47:
a1:9c:14:9e:e2:59:8f:12:1d:c6:32:66:67:24:dc:
fc:ca:58:72:f8:fe:32:a5:ed:d9:14:f9:c6:1e:03:
5b:43:ba:4f:60:94:7e:c9:cd:0d:ed:3b:83:4a:7a:
1d:ca:f0:01:ed:c1:20:45:36:04:5b:2d:75:66:9f:
61:46:1c:cf:9e:b2:b1:b7:97:61:19:e3:6d:13:f1:
7a:68:04:8b:20:1d:c0:96:db:93:ca:75:0c:08:74:
85:56:ea:21:78:9e:b7:33:99:0c:39:32:cd:89:25:
96:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CF:8C:37:92:8A:FC:06:A9:B0:96:5A:D9:0A:71:EC:6B:D7:83:AA
X509v3 Authority Key Identifier:
keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7d:1b:36:5c:da:45:72:9d:9c:5c:67:8b:01:09:1f:89:6f:
c4:84:15:9e:2d:49:7a:da:52:c3:64:ac:b6:23:d9:03:9f:7a:
4f:c3:36:f5:0e:0b:4c:e1:9a:22:30:b1:be:52:33:32:c0:9c:
f0:46:2d:84:fd:d6:cb:2f:66:77:cb:46:57:41:90:15:ec:48:
7a:6d:cb:b9:18:fa:22:36:7c:ac:20:cf:f5:4e:a8:5d:23:c7:
39:21:6f:aa:f8:7d:96:5a:ea:16:bb:95:10:20:70:4c:8c:b0:
c1:98:bf:ac:41:a7:34:7c:ed:d3:8d:1c:52:9a:9d:0f:f8:83:
bd:b6:f1:56:75:80:b3:25:50:d5:3d:cc:27:fc:c3:9c:03:e9:
eb:3d:7b:65:e9:42:1b:fb:7a:82:38:e7:81:e9:5b:7a:1b:c4:
1f:15:51:46:35:f7:26:ba:65:57:e4:5b:f6:92:52:dc:1d:ec:
46:22:93:d4:5d:98:df:f2:98:c4:e7:7a:46:c2:d4:e4:ca:89:
f7:e3:05:8a:6f:c4:c1:23:05:b8:36:a6:75:83:0a:96:a3:98:
a1:bc:40:a5:f1:fb:ba:91:03:f4:30:33:0d:2d:b0:a6:ea:19:
88:5d:13:09:e7:db:9d:16:ab:8b:fb:33:09:2b:9f:0c:5e:54:
e3:d9:fb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:54:09 2025 by rpki-client