
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier: G1P+fHX4+XnKB3P+1NrW0IMuzSRwUw7cA2ZGJqGPwMc=
Subject key identifier: 85:4E:FD:F6:6F:21:F3:79:34:47:B5:44:AB:AE:BC:7C:3B:08:3E:4B
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer: /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial: 01992255661BEF779204A23EABCD5DCE64C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number: 0196
Signing time: Sun 07 Sep 2025 04:00:45 +0000
Manifest this update: Sun 07 Sep 2025 04:00:45 +0000
Manifest next update: Mon 08 Sep 2025 04:00:45 +0000
Files and hashes: 1: W1gtHYOxkSQKrOdwkNpP1ZoMoUY.roa (hash: 5S4JEcGJktduCewz9POQY0aRBOXQzpGOLodHYl3CjqI=)
2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: YtTa0C6RolsJJKWgbCqNDMEHfrjbvQeWq9r75fl89AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:66:1b:ef:77:92:04:a2:3e:ab:cd:5d:ce:64:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Validity
Not Before: Sep 7 04:00:45 2025 GMT
Not After : Sep 8 04:00:45 2025 GMT
Subject: CN=854efdf66f21f3793447b544abaebc7c3b083e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:8f:01:be:ee:4b:c4:c2:ce:eb:1e:1e:c7:
51:fc:4a:43:5e:46:e0:c6:e4:a0:03:61:3d:c2:56:
4c:27:d4:59:2e:13:00:80:8d:c2:3a:ca:5b:6c:22:
fa:dd:9c:27:93:18:14:2d:eb:6d:47:35:95:c4:20:
03:f5:ec:de:4f:02:c6:77:30:ae:1a:b7:f4:5a:6c:
46:88:77:2b:69:d1:a4:cd:c3:51:e1:1c:fe:03:a9:
68:86:6f:ed:8f:c4:35:fe:61:c2:a0:e4:f7:eb:c9:
3e:5a:8d:74:3a:30:2f:44:24:33:ca:68:e3:26:e5:
4d:d2:d2:c0:08:fc:51:12:f4:c7:9a:60:f7:40:d9:
1b:24:f8:3b:6d:b4:21:8b:0f:30:12:a8:19:1d:83:
8d:3c:da:f2:77:ce:c0:67:08:48:ce:fa:82:ce:11:
36:4b:0f:36:89:3c:be:61:05:31:46:a5:66:ee:99:
c4:cd:0c:15:16:78:b6:6c:53:18:95:b2:83:8f:35:
84:d4:19:a3:08:aa:61:63:f2:3a:44:1c:cf:b6:4b:
7a:9d:1b:9d:e0:1d:6e:bf:cc:17:c3:1f:89:7c:94:
db:21:05:26:8e:a1:b2:41:a4:67:b7:5f:89:e5:73:
49:ce:92:7e:dd:ed:0d:23:49:33:63:f8:12:01:45:
51:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4E:FD:F6:6F:21:F3:79:34:47:B5:44:AB:AE:BC:7C:3B:08:3E:4B
X509v3 Authority Key Identifier:
keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:48:f2:74:9f:3e:04:3e:4f:d4:e2:9b:31:40:00:df:2d:2e:
2c:4b:e0:82:90:36:a7:50:fd:17:fa:8b:43:f8:e2:ab:38:cf:
3e:6f:c4:e0:76:5f:51:b1:55:3d:1a:b3:6a:a2:22:9e:10:a5:
bb:36:39:b2:4c:cb:0d:c0:23:38:56:b4:41:c6:d9:e0:41:9b:
15:74:f6:86:94:0b:22:d7:7a:4a:62:97:a5:0a:64:02:dd:86:
2a:df:10:c8:bd:b5:37:2c:a5:ba:36:1a:d4:93:bf:c1:90:e2:
b6:bb:e7:67:3a:37:fd:75:54:ed:a4:71:e7:46:2a:80:b8:86:
91:40:d3:d7:26:65:79:a2:e0:9a:f1:c8:2a:5e:bd:b5:12:39:
e1:ba:41:ba:ca:fd:3d:90:9d:ff:60:42:b9:8a:d7:fd:23:22:
ed:e0:4e:f5:af:a2:ec:62:c3:2e:c7:46:66:0c:12:b0:9f:8e:
ac:b4:cf:72:f0:45:0c:2a:43:2d:0f:b8:cf:45:56:0a:2b:f8:
dd:c5:71:0f:27:2d:7c:44:f2:7b:4c:cc:ff:c3:de:d5:54:ba:
6f:3e:8c:b1:e3:17:1a:31:76:a5:81:5c:05:b8:eb:5c:aa:67:
c7:e9:f3:81:24:ba:15:80:c6:30:6c:89:74:f9:19:dd:ab:ce:
41:cc:a9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:29:29 2025 by rpki-client