Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
File: Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft (raw, json)
Hash identifier: RnH2iIOBS7DRV3yM7IEtFsDaNfApHHsD9+1T8UjdzHo=
Subject key identifier: 0C:67:77:F3:48:79:AF:FA:30:95:63:0B:2D:54:27:48:0E:5E:1B:DD
Authority key identifier: 36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB
Certificate issuer: /CN=36fedfeccfd00f577cb791f8e43aa659262e93db
Certificate serial: 019A71809C8CF38CA6DF0FE4FCCB3D12AEA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
Manifest number: 014C
Signing time: Tue 11 Nov 2025 06:00:45 +0000
Manifest this update: Tue 11 Nov 2025 06:00:45 +0000
Manifest next update: Wed 12 Nov 2025 06:00:45 +0000
Files and hashes: 1: Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl (hash: SLj5gNVmiGDkZuPqfEfDDzhr51rXxLxAbJRFCNp7OBA=)
2: _Yf7Te2uvhwWX_l1JN9UjpNgrZY.roa (hash: f5+J7yt13fqQYgFUTN4kcse4XeHLgbH6pOCZG6b6MbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:9c:8c:f3:8c:a6:df:0f:e4:fc:cb:3d:12:ae:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fedfeccfd00f577cb791f8e43aa659262e93db
Validity
Not Before: Nov 11 06:00:45 2025 GMT
Not After : Nov 12 06:00:45 2025 GMT
Subject: CN=0c6777f34879affa3095630b2d5427480e5e1bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:1e:9e:85:ac:53:8c:d9:89:ba:84:a2:42:
9e:36:98:a4:6b:d6:3c:fb:76:12:e8:86:0f:e8:bd:
4d:2b:ae:01:66:47:8b:4d:f0:b8:ae:c5:c4:0c:e8:
d6:b1:a8:00:cb:a0:eb:17:99:a0:a1:63:78:43:8e:
3c:c9:ba:1b:78:e6:d1:ae:5a:18:6c:97:83:89:7a:
41:90:e2:55:17:be:05:71:f7:3c:3d:a2:b5:f7:27:
5a:ec:8a:33:bb:30:37:bd:c9:21:f8:c1:18:74:81:
e4:28:54:c2:31:89:58:18:ab:93:52:53:64:5b:eb:
8c:aa:2f:56:bd:26:6c:10:59:98:f2:32:e3:8d:59:
0b:18:ab:cc:b2:b0:2d:4c:ce:86:63:9d:18:b3:80:
ee:ad:b7:05:bc:5a:58:ef:58:25:82:bf:61:9d:b9:
ee:ac:e6:18:44:3a:68:bf:cc:88:35:02:ac:23:43:
54:fa:da:fe:3c:09:89:32:ec:20:47:9b:1d:f3:81:
a7:ad:a4:e0:52:98:5c:ac:4a:42:0b:ca:f1:bb:9e:
2f:81:08:00:6d:3e:77:b2:0b:12:85:95:43:71:69:
16:14:a5:a7:95:59:e2:ee:b5:6d:07:92:a1:59:e2:
64:74:f3:7f:d7:2b:e6:1b:6d:3a:19:da:2f:7e:50:
46:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:67:77:F3:48:79:AF:FA:30:95:63:0B:2D:54:27:48:0E:5E:1B:DD
X509v3 Authority Key Identifier:
keyid:36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2c:ac:22:80:93:c0:2d:9f:a6:55:1f:fb:68:fe:ac:6c:ed:
8e:d0:d1:29:07:2b:b3:19:0c:d1:11:2a:55:a8:57:27:97:a0:
0f:a5:4c:15:e8:9d:9e:d2:a1:56:64:15:74:1a:de:7f:5a:fd:
e3:d2:87:fa:d8:4b:22:cc:80:4e:98:ab:34:25:60:c3:8d:4f:
2a:e0:87:54:08:83:ec:67:4b:bc:7c:52:05:fd:c6:37:42:98:
92:6d:80:ed:2a:f9:15:df:8b:96:69:d0:37:26:6d:b8:2e:42:
af:1d:75:e8:f6:65:c7:2b:9b:6a:3a:02:29:2a:43:dd:1a:2d:
ab:0c:ee:c7:c6:c4:3b:ab:0e:4a:90:a0:d6:cd:b7:0a:3e:25:
9a:1d:e6:83:8f:dd:d3:9b:65:be:ce:1d:a5:37:93:f6:50:d5:
80:91:85:84:8b:b5:56:e5:5f:80:28:52:01:07:cc:e1:fb:f5:
f6:33:80:b8:a8:8f:0e:85:77:0c:1f:9e:7e:ce:ec:de:af:6c:
d1:e4:ec:8f:78:42:36:8f:a3:88:8d:15:d5:c9:12:78:c8:52:
1c:c9:71:a2:f1:27:43:50:62:f9:d7:75:71:54:4f:8e:05:d7:
fa:b0:f7:00:6f:7f:09:0c:8b:d6:b8:3f:50:2a:c4:2c:16:a5:
1d:a4:24:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:27 2025 by rpki-client