Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
File: nRFf6cnpz97xfpJBZVksAj77KxY.mft (raw, json)
Hash identifier: ZdiApgFa4a6+CbBYsQcy6pQXKDIaKPB8rXnmESnCU7U=
Subject key identifier: CC:60:D9:0F:EC:47:D1:3F:A6:4E:BD:DB:18:2D:91:1A:5F:DC:A5:6B
Authority key identifier: 9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
Certificate issuer: /CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Certificate serial: 019A71B81C0150801F0DA5091F1ABD77624F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
Manifest number: 0B34
Signing time: Tue 11 Nov 2025 07:01:22 +0000
Manifest this update: Tue 11 Nov 2025 07:01:22 +0000
Manifest next update: Wed 12 Nov 2025 07:01:22 +0000
Files and hashes: 1: _bVk5KEYMfzUMgiBziaNKeODYT8.roa (hash: vIMcu46lRDXHK5Ht9fIkqPEvFTQHMwND+OPzypT6tAc=)
2: nRFf6cnpz97xfpJBZVksAj77KxY.crl (hash: FZ/eqapwQjXNyWXmRK5SdCp8h/NA1JZSYPecAVHsOjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1c:01:50:80:1f:0d:a5:09:1f:1a:bd:77:62:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Validity
Not Before: Nov 11 07:01:22 2025 GMT
Not After : Nov 12 07:01:22 2025 GMT
Subject: CN=cc60d90fec47d13fa64ebddb182d911a5fdca56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3e:ff:59:cf:6a:1d:0b:13:a6:f1:29:33:39:
5d:34:29:07:ca:a9:ab:49:83:5c:40:50:8c:82:4c:
3c:a5:65:a6:bc:08:57:01:e1:d8:2a:e4:71:15:9c:
b8:58:af:26:e6:d4:73:ae:e9:84:4d:6a:af:0f:95:
a1:50:8b:75:d9:24:dc:d7:8a:db:ff:77:f4:64:e0:
54:4d:a2:16:04:79:21:46:78:50:41:a8:b5:9b:ca:
97:70:21:6d:b8:4b:06:4f:cf:68:4d:da:62:32:3f:
2d:de:2a:07:47:13:4b:7b:c0:59:1c:f5:cc:21:67:
58:ab:83:1d:39:df:38:77:11:8d:a0:eb:03:bb:d3:
db:22:1d:0b:7e:a6:a9:56:ff:69:d6:ec:a9:75:ff:
58:43:75:7f:c4:b8:19:d6:96:02:c2:ad:18:83:f1:
ef:f9:a1:18:84:a3:41:a2:40:7a:bf:19:5c:a1:76:
74:ae:1e:85:e9:ca:d5:e0:13:92:bd:cb:20:da:22:
90:07:bf:57:6d:e0:06:85:f3:19:ea:14:05:d5:e0:
92:7c:01:83:f2:75:90:25:97:fe:68:e9:50:56:c0:
54:64:aa:b3:39:4f:72:ff:bd:05:69:3d:2e:09:fd:
d4:37:c6:c7:01:85:bc:af:16:86:f9:2f:ab:89:cc:
ce:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:60:D9:0F:EC:47:D1:3F:A6:4E:BD:DB:18:2D:91:1A:5F:DC:A5:6B
X509v3 Authority Key Identifier:
keyid:9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:65:57:d8:d4:5c:16:f5:e4:69:8f:ce:b8:f4:c5:70:c8:fd:
e5:17:f3:95:75:f0:d4:13:28:01:d2:51:c4:bb:41:fb:d6:ce:
55:fd:12:cc:98:46:f2:af:0b:b2:68:71:4d:39:68:44:5c:5c:
fa:1f:b5:e5:09:73:7e:01:9f:3c:45:09:26:2e:60:13:f2:e2:
6a:7a:8e:8e:36:b6:50:7c:e5:9c:ab:88:45:9d:26:17:d1:f9:
f4:b2:8c:5a:cb:76:6d:df:c6:0d:a3:ca:87:c7:5c:9e:f6:40:
a4:80:b7:59:9f:75:bd:00:1e:c2:c7:e6:7e:3e:80:e5:96:09:
46:9a:3f:70:b6:fb:7a:4c:ba:95:c8:cd:9e:6f:bf:1f:48:4b:
9b:90:0a:db:a9:fa:af:51:16:a0:c2:b5:22:32:0c:51:af:37:
d2:a7:12:f5:3c:2a:05:c9:79:3a:e7:73:94:26:88:43:ba:ba:
51:f5:c2:45:16:4d:2d:4b:a9:54:3d:7a:9d:38:f9:62:2b:b4:
f1:a3:34:c8:3b:b3:a6:2f:bd:17:fd:dc:2d:73:62:d5:67:81:
72:03:47:ef:2f:0c:8c:e6:d7:ce:0d:2a:c0:38:22:9f:e9:76:
62:84:13:7e:5c:40:71:02:9f:96:cd:31:77:2e:34:e5:7a:e8:
30:34:eb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:52 2025 by rpki-client