Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier: rP1JPPl6kqPI07ryvfMthbOO7sp5H9rxojNYN3PnhMc=
Subject key identifier: 67:E0:DF:32:95:9B:23:4C:0E:48:02:5F:A8:B5:0A:C6:2F:39:76:46
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer: /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial: 019A28F949DAB0ED0147CBBE4CB65BC2129B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number: 021E
Signing time: Tue 28 Oct 2025 04:00:17 +0000
Manifest this update: Tue 28 Oct 2025 04:00:17 +0000
Manifest next update: Wed 29 Oct 2025 04:00:17 +0000
Files and hashes: 1: W1gtHYOxkSQKrOdwkNpP1ZoMoUY.roa (hash: 5S4JEcGJktduCewz9POQY0aRBOXQzpGOLodHYl3CjqI=)
2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: zrk6ZbmMCT69AmdL1da5bTa2Rael+h2EeXkJWD+qNPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:49:da:b0:ed:01:47:cb:be:4c:b6:5b:c2:12:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Validity
Not Before: Oct 28 04:00:17 2025 GMT
Not After : Oct 29 04:00:17 2025 GMT
Subject: CN=67e0df32959b234c0e48025fa8b50ac62f397646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:98:b9:4b:f6:dc:ce:35:8b:a3:71:2e:22:a1:
3a:dd:b0:d6:2e:2b:d5:f2:8e:02:6e:88:34:1d:9a:
dc:44:04:c7:f9:ce:f3:49:63:94:7f:d2:42:a3:63:
4c:0d:8a:34:9b:97:b4:c2:3a:c1:bb:22:25:93:74:
f0:a0:8f:06:5c:ef:c1:13:e5:22:87:ef:fa:57:14:
dd:0d:5d:9c:04:e9:42:5f:43:f0:c1:b3:fc:d4:fe:
ae:9b:c9:89:15:a9:86:a9:1f:d2:c1:7a:ba:f2:33:
27:b6:6c:89:5b:b5:cb:4d:cf:b3:44:3e:99:42:48:
58:a5:4f:81:ea:bd:f4:03:63:d4:f6:ba:46:98:d2:
de:f5:42:49:d0:02:f5:cd:2a:0f:5f:79:4b:1d:d5:
fc:39:99:35:b5:41:9e:c5:5e:5b:0f:8c:b3:97:6a:
44:f5:95:b3:7d:3e:43:c8:71:7b:0f:e7:ba:9e:65:
e8:c0:a8:a6:a6:a7:9d:44:fb:e7:c9:24:01:a4:eb:
02:bc:3e:f9:4a:be:b9:ef:2d:3a:22:4a:4d:aa:93:
22:8d:cc:e0:31:e7:c1:1d:61:29:b8:97:dd:90:cf:
6b:ac:f6:67:23:46:46:95:3f:ae:bf:46:e8:47:52:
b6:7c:82:45:68:58:a4:92:23:9f:4c:0a:00:b7:02:
b0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E0:DF:32:95:9B:23:4C:0E:48:02:5F:A8:B5:0A:C6:2F:39:76:46
X509v3 Authority Key Identifier:
keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:af:03:7a:ea:86:1f:08:4a:e3:42:48:6d:5c:65:96:89:b3:
bc:b6:7b:43:b2:34:03:21:c8:b1:7c:93:d6:8c:e8:73:26:1c:
45:8e:d0:14:a7:58:ef:93:d1:23:30:5a:65:30:da:6f:ad:ea:
11:ad:8f:43:90:4f:7a:7f:2a:c7:3c:ff:3e:50:c0:87:e3:6e:
c3:2d:95:e0:52:3d:2e:02:36:84:2c:93:f3:4e:1a:a8:7c:d3:
67:a5:1e:be:d2:4d:f3:6b:85:e5:df:18:a5:5a:cd:65:e5:dc:
29:a0:d4:c4:8a:21:30:63:4f:b4:1d:f6:e7:e7:46:90:a1:16:
c5:48:77:8f:df:a3:91:22:b2:80:b2:a2:bd:b9:e3:05:9a:4b:
c7:1f:c3:99:1d:e0:9f:df:80:7a:24:17:2d:da:43:d2:a6:b5:
e3:c8:6b:e6:88:12:30:79:88:3f:ef:7d:98:e4:7c:c6:30:37:
d6:55:2e:65:eb:7f:72:4f:8f:85:22:7f:88:b0:77:84:ed:7c:
49:dd:4b:41:96:40:6f:f1:e0:80:52:e2:07:e7:f7:4d:4c:47:
94:e8:aa:3f:f2:13:75:9e:02:44:85:43:08:9d:90:07:34:a1:
b3:9b:8b:2e:a0:fd:e5:18:a7:b6:2c:62:16:c2:d2:e2:7c:f0:
34:01:c2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:21:13 2025 by rpki-client