Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
File: ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json)
Hash identifier: u7wTL6c98XbRo9Bny/K/9y+3eYzcBq/Du8mlrlSZ60s=
Subject key identifier: C9:37:29:54:9A:9D:25:94:3E:A0:01:27:86:AA:F7:48:16:E9:5C:6A
Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
Certificate issuer: /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Certificate serial: 019A202D32528FE3DD96D253AFE6B231E0AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
Manifest number: 16B2
Signing time: Sun 26 Oct 2025 11:00:24 +0000
Manifest this update: Sun 26 Oct 2025 11:00:24 +0000
Manifest next update: Mon 27 Oct 2025 11:00:24 +0000
Files and hashes: 1: Hq4qtu3Hmw7ihPLhHJm0o3HW0ME.roa (hash: cBO4YeU2VYitDB5gOiHBAGdFdmypsOGShw+oH/O7hOQ=)
2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: vvgDKg/CBnXjh5gGhs3f4kDOanwsYksHQJJ0cMEFx5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:2d:32:52:8f:e3:dd:96:d2:53:af:e6:b2:31:e0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Validity
Not Before: Oct 26 11:00:24 2025 GMT
Not After : Oct 27 11:00:24 2025 GMT
Subject: CN=c93729549a9d25943ea0012786aaf74816e95c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:e3:41:ef:e5:c5:80:9d:b0:d8:bf:31:99:
46:8a:20:86:d3:71:f4:3c:f3:99:e7:f4:0c:29:40:
1d:c0:f4:aa:3d:8a:46:b3:de:60:e7:b4:65:bc:9c:
4b:79:d3:b0:e2:00:d8:29:6b:07:df:6d:07:a4:87:
e7:52:cc:ac:13:c1:d1:bb:97:07:51:7f:d4:64:c5:
30:95:ed:df:f2:ec:20:3b:d9:85:4e:41:6f:9f:bb:
f3:76:d3:a0:a3:88:63:d6:99:b0:99:55:61:b5:54:
11:bf:d9:93:e5:78:b2:7f:b6:fd:62:57:36:11:a8:
ee:b7:7e:f9:d2:c4:ad:41:87:6c:89:12:fc:d2:ac:
23:1c:48:b8:e3:7e:11:eb:f7:dd:fd:64:97:08:08:
81:55:93:51:a4:f2:c3:ff:77:30:f4:73:ac:a4:c3:
65:d4:75:c5:0b:ca:81:eb:ac:df:c0:de:a6:af:51:
0f:e0:87:d3:bd:3e:2d:31:f3:d8:45:12:fc:e1:45:
75:57:5b:c9:f2:46:4c:b8:8c:52:18:af:6c:cc:63:
d5:f1:fe:73:a5:78:7f:a3:c0:84:08:40:b6:2b:56:
fc:f9:6e:6c:21:35:1a:82:cc:6c:fb:db:1a:7f:dd:
cc:33:8e:59:65:7a:d0:eb:0b:da:dc:8b:26:bf:3e:
02:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:37:29:54:9A:9D:25:94:3E:A0:01:27:86:AA:F7:48:16:E9:5C:6A
X509v3 Authority Key Identifier:
keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1d:43:da:ea:42:ee:b9:8c:73:1a:28:fd:95:7a:98:be:e5:
d7:7f:18:3c:3e:9a:1f:83:54:46:a3:89:44:c3:f0:f1:22:46:
f9:f3:8b:73:92:13:59:84:b6:0a:bc:44:41:ca:4f:3b:6c:99:
42:ef:fe:a9:5d:ad:fe:54:64:1e:36:00:e7:8e:0f:31:b3:ca:
47:d8:ef:81:9c:16:0c:3b:e6:99:b1:34:8e:dc:8b:f1:e7:85:
79:5a:3e:55:ae:ac:17:9a:b5:2d:ee:10:e6:d2:b3:de:f5:10:
a4:7a:8b:40:17:d6:77:d9:7c:7f:27:1a:b7:1c:14:b1:34:e9:
0e:cd:5a:b7:7a:1c:0d:08:9b:71:32:21:b6:13:d3:a4:1e:78:
5f:40:62:24:48:fe:12:43:d7:8c:b6:09:a4:9b:0c:42:3e:68:
04:5d:71:3d:4d:33:0a:67:7f:e2:01:e4:1b:b4:87:e5:cd:49:
fb:a5:e8:03:5a:d4:34:b4:76:49:f3:11:83:29:28:60:cd:f5:
a1:10:a0:b9:a8:33:a9:aa:02:49:5b:d9:42:6f:91:b9:ad:ff:
68:3a:30:5a:00:ed:28:53:26:77:37:92:63:a6:73:86:3a:f6:
61:11:e2:45:1e:00:9f:ec:02:45:69:a1:72:72:60:49:49:ea:
29:09:5b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:03:33 2025 by rpki-client