Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
File: nAN1ranF4BAN22M7Kht0fhnC7Fs.mft (raw, json)
Hash identifier: Uu81sogMbAGDc+s1s50cwhM3urfjsdl6siFdWhHda9A=
Subject key identifier: 06:12:FF:0A:0F:5D:7C:48:E3:8B:58:E5:63:08:90:5E:C1:54:F3:6C
Authority key identifier: 9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
Certificate issuer: /CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Certificate serial: 019A7225A214FBC5A153486A4FA1D7045623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
Manifest number: 05E4
Signing time: Tue 11 Nov 2025 09:01:00 +0000
Manifest this update: Tue 11 Nov 2025 09:01:00 +0000
Manifest next update: Wed 12 Nov 2025 09:01:00 +0000
Files and hashes: 1: MRDtmP98O0WNgH87Ax8nCcdZuLw.roa (hash: HrqGeHE20jy2rWDbz9uI3JnGeaBNl8AfA/5tH0i9z5o=)
2: nAN1ranF4BAN22M7Kht0fhnC7Fs.crl (hash: TnTVFkPjiLJXJh9XdNgOEv3BU6/Pd2LaHUJpWiAlRaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a2:14:fb:c5:a1:53:48:6a:4f:a1:d7:04:56:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Validity
Not Before: Nov 11 09:01:00 2025 GMT
Not After : Nov 12 09:01:00 2025 GMT
Subject: CN=0612ff0a0f5d7c48e38b58e56308905ec154f36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:63:27:91:8f:49:f1:1f:d9:f1:6d:26:c5:
cc:0f:22:3e:39:3f:07:13:06:0a:dd:40:14:47:be:
c4:b1:df:73:76:7e:a5:f8:50:9d:37:af:b9:28:66:
9f:8c:c6:fb:e1:9a:a7:9c:8c:13:7d:9f:2e:3b:9c:
ff:17:55:5d:ba:a7:a3:f1:37:f3:4c:e3:d4:69:c8:
2c:c7:af:a9:f6:fd:50:30:62:71:6f:50:4f:33:4c:
8c:d0:dc:62:ec:f5:38:50:e7:88:f9:c5:c3:b7:47:
a7:4c:31:57:44:80:6c:5d:de:34:a6:33:79:b9:cc:
c1:f2:75:9f:e7:b6:e1:b4:10:db:11:05:6a:a1:dc:
53:97:9c:f5:03:5a:e9:aa:52:c1:c4:ba:f8:c4:62:
b4:10:a1:b9:a8:1b:fb:14:1a:f7:7b:cf:73:1b:1b:
8d:b3:66:12:46:6c:ec:39:20:a3:4c:e3:32:48:3e:
d0:22:5d:37:0a:90:9e:4f:ea:68:71:a2:c3:2c:0c:
2a:1f:54:90:2b:01:7b:96:9b:54:55:56:66:c5:57:
7e:90:1b:e0:a8:06:b7:d0:cc:a2:32:06:dd:96:04:
2a:29:b8:24:04:d5:45:28:6b:96:e6:63:bd:26:af:
76:08:db:87:b0:97:d7:e2:fc:97:9b:7e:69:f7:cb:
87:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:12:FF:0A:0F:5D:7C:48:E3:8B:58:E5:63:08:90:5E:C1:54:F3:6C
X509v3 Authority Key Identifier:
keyid:9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9e:c0:c6:04:83:8b:1e:d8:73:af:21:0d:34:18:bd:21:58:
51:13:89:9e:25:39:5e:ed:01:dc:99:19:ee:cd:aa:81:a0:6a:
96:b7:43:ac:47:24:e6:cd:4f:c5:87:7b:9a:f8:f3:48:e6:80:
6f:50:1e:64:b3:99:51:69:f1:3d:7a:33:bd:19:c2:4c:9e:7d:
64:9d:b5:f6:4d:80:d1:c7:fe:1d:eb:37:c7:e6:92:5f:d7:16:
d5:2f:4c:9a:4d:66:88:e5:29:73:08:b2:01:34:93:2f:2f:dc:
9f:5f:45:28:f3:c3:93:21:2d:5d:9a:3b:ec:f8:f2:fe:5b:0b:
e9:cb:e9:03:02:f4:59:54:ca:4a:6e:49:1e:64:b1:f2:09:8f:
d3:6f:d3:d9:13:af:d2:13:c9:29:ae:f1:3b:ff:25:41:97:41:
21:c1:da:0d:80:02:fe:d6:8c:8d:7c:f7:d8:53:61:69:91:56:
49:f0:98:23:7e:b2:fc:72:cc:e5:93:82:c0:cb:7d:1e:1e:7b:
d3:da:91:61:4b:52:a3:ec:3f:7c:03:fe:68:61:60:31:31:07:
98:a1:a0:95:00:58:1c:cf:96:40:a9:16:7c:5a:3d:92:5b:6b:
be:6e:f8:82:29:d5:a7:1e:d4:f5:80:09:cd:7a:03:56:de:68:
79:ed:30:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:19 2025 by rpki-client