Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
File: nMYO2IFBiiF-jdPB-lI-JWXK65s.mft (raw, json)
Hash identifier: 2vx3CDWYezufOEOPCsKPLW9u1AbfiejWGY6OAW0mKKg=
Subject key identifier: 1D:05:C0:27:8F:CF:83:C0:46:A7:F2:3D:F1:60:60:07:8E:3B:D2:C8
Authority key identifier: 9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B
Certificate issuer: /CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
Certificate serial: 019A13162CA8C359AA70C9E69F2725576A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
Manifest number: 16ED
Signing time: Thu 23 Oct 2025 22:00:11 +0000
Manifest this update: Thu 23 Oct 2025 22:00:11 +0000
Manifest next update: Fri 24 Oct 2025 22:00:11 +0000
Files and hashes: 1: EP3bkF_F-0JN_ikpcovpxVorS-8.roa (hash: hqxhbHTgDziJ5finpaZT0guvZfxkt53C1CG9ZliF94Y=)
2: nMYO2IFBiiF-jdPB-lI-JWXK65s.crl (hash: QGifo7+qVuIZ2b/bvYwia7/b+z6IOktwLb1JCuy6ODw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:16:2c:a8:c3:59:aa:70:c9:e6:9f:27:25:57:6a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
Validity
Not Before: Oct 23 22:00:11 2025 GMT
Not After : Oct 24 22:00:11 2025 GMT
Subject: CN=1d05c0278fcf83c046a7f23df16060078e3bd2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:31:fa:8b:07:3a:4d:e4:65:c8:43:8d:ca:
b3:bd:ce:2c:f5:46:da:b7:98:91:97:a6:e4:71:50:
d7:0f:f7:c3:3f:51:ef:b1:62:7d:52:57:1d:dd:6f:
db:24:46:bd:3d:10:c0:45:d3:cc:8b:d9:45:65:29:
2a:07:7c:7f:42:1c:3e:9a:0d:c7:19:69:54:79:54:
7d:fe:df:8b:cb:3b:76:14:b0:72:4b:79:71:44:99:
70:91:12:e5:25:b4:26:a4:39:60:17:4f:18:7f:b1:
c0:5a:0f:93:12:f7:7e:66:fd:57:30:15:56:bb:ae:
09:39:85:02:b7:26:a6:cb:b5:5a:34:42:d6:f0:b1:
8d:28:15:da:44:8f:e1:2d:e1:70:6a:60:e0:14:1a:
ba:41:76:26:21:27:ff:5f:e3:ae:d2:17:e6:b7:1a:
c3:3a:78:67:06:77:8b:6b:1e:51:99:d8:9c:8a:f9:
21:1a:ef:1d:a0:17:13:a2:4b:93:47:14:c2:2c:bf:
f6:6a:60:a7:e9:58:8e:53:6b:7f:b5:44:90:59:df:
38:80:1b:7c:33:95:90:7d:97:3c:c8:c1:4a:6d:ed:
08:69:5a:9c:64:8f:a2:0c:0b:58:61:b3:19:10:d3:
db:05:3f:56:97:be:89:c9:68:97:8a:b8:df:4a:c7:
1a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:05:C0:27:8F:CF:83:C0:46:A7:F2:3D:F1:60:60:07:8E:3B:D2:C8
X509v3 Authority Key Identifier:
keyid:9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ca:95:27:83:af:fe:d3:73:34:47:c2:49:97:56:44:5f:db:
72:a6:be:e3:e9:21:1c:05:7f:e1:bf:cc:ea:2d:0a:29:fe:76:
82:1f:6d:ea:e3:f5:fc:50:05:9e:3d:8b:c3:35:b3:20:b1:bb:
06:22:b8:c4:19:22:69:ad:be:29:3d:97:9f:38:a9:06:9f:db:
9f:20:72:6c:c2:32:09:a4:a1:21:68:21:60:f1:e4:26:b1:cf:
2b:02:7a:2a:e9:3f:fe:d0:bc:47:bf:42:47:7d:17:12:26:ef:
d5:4d:64:52:62:c3:07:b3:66:85:94:b0:92:28:08:cc:5a:4d:
d6:3c:f4:3f:fa:ee:d6:c8:76:10:9c:65:b9:97:79:8c:34:fe:
89:e8:69:9d:2c:0d:a9:01:fd:14:f3:21:ac:94:94:b8:9f:ea:
8e:fa:9f:4d:1e:6f:66:a8:fa:83:ab:ce:2f:00:c0:b8:3a:ba:
e6:13:d9:23:98:e9:54:f9:ef:ad:07:1f:64:21:e9:85:ac:89:
8f:56:e9:22:9b:72:b3:26:f0:2a:e6:21:ea:b6:14:78:bc:a5:
f9:da:fd:5d:5a:df:d4:bc:14:af:10:37:33:69:2a:46:fe:4a:
c5:3b:1f:f3:fa:96:8b:86:f2:5a:43:0e:c5:6c:dc:0e:db:99:
85:a4:fc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:31:46 2025 by rpki-client