Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: Qtsst/LLhYzxIB+Xv/xkljjoufUsp+lwVIZ0Y/TgpR0=
Subject key identifier: 62:D6:25:CD:AC:96:FE:09:4D:3A:DC:BA:B8:B9:CF:3D:C4:BF:BD:55
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 019A0592BF0AED9369539F7F0BB9BF6EC2F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 0A00
Signing time: Tue 21 Oct 2025 07:01:34 +0000
Manifest this update: Tue 21 Oct 2025 07:01:34 +0000
Manifest next update: Wed 22 Oct 2025 07:01:34 +0000
Files and hashes: 1: ZcSRf0HxnWHQIw5MIAf_WL9oY6A.roa (hash: cP2ZkY5lLDgrJYkw2lqKqOmENJRMWCl82XCDZbZfylY=)
2: dk4GVxnPxj9mrIWRHBmkYZR_RAY.roa (hash: eaMuW15awNbcED9U+mZfT6o28nxoJ9RTD5vuUNkkC90=)
3: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: doTgZ+sVFftA/R/B2G/MraSSelvLJswvQXNq2g2SsGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:92:bf:0a:ed:93:69:53:9f:7f:0b:b9:bf:6e:c2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Oct 21 07:01:34 2025 GMT
Not After : Oct 22 07:01:34 2025 GMT
Subject: CN=62d625cdac96fe094d3adcbab8b9cf3dc4bfbd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:1d:43:dd:f0:91:bb:ef:72:0c:b2:8e:1e:
81:bd:a4:a9:e5:d2:e5:44:a4:fd:27:46:52:e5:c5:
77:0f:65:e9:05:0c:20:32:65:c2:c2:7d:75:85:01:
88:68:1b:06:9a:83:3f:8c:34:7f:5f:f9:56:b6:db:
6a:48:59:c2:fa:88:96:fa:14:77:18:4e:29:72:15:
aa:f1:54:00:39:e7:4b:af:39:4f:c0:29:48:7e:ba:
7a:55:67:59:cb:01:fc:38:b4:a3:4d:36:3f:80:0c:
b1:55:d5:60:96:1a:05:c3:7d:7b:cd:a1:0f:fe:90:
c1:af:6f:01:0d:bd:3e:b5:12:b3:9d:2a:3b:35:5c:
5b:6e:f8:c7:b7:30:12:c0:9d:01:a5:f4:13:f8:c4:
9d:51:a7:49:bd:b5:75:b1:1c:65:ab:aa:31:96:18:
5a:cb:ed:e6:79:ef:48:28:e0:ef:76:21:32:4b:a8:
9e:81:7e:ab:33:d1:df:a9:92:23:72:7f:bd:bb:45:
e1:9c:0a:0d:34:98:66:50:4c:b3:6f:d2:cc:ed:53:
6f:ed:ba:21:44:b6:72:ff:01:55:c6:a3:92:dc:79:
67:ed:56:9e:d9:2b:bb:92:82:4d:3e:87:10:b9:38:
a8:29:ff:b1:78:01:5b:f6:41:a6:b7:72:8b:8c:e7:
36:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D6:25:CD:AC:96:FE:09:4D:3A:DC:BA:B8:B9:CF:3D:C4:BF:BD:55
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fa:52:08:f6:83:0e:69:5c:34:6d:33:56:c9:fc:7c:e5:b9:
3b:1f:e4:01:92:16:29:81:3f:88:96:c4:dd:b7:b7:2a:f8:97:
2a:41:11:3d:5e:4e:02:ba:be:85:79:26:4f:04:8a:23:94:f6:
1f:90:d1:93:77:e9:8d:ac:28:bf:e1:29:d0:dc:80:ee:e3:94:
43:aa:a2:e5:5b:8e:ff:c0:de:55:96:73:f8:00:4e:6b:e6:76:
a9:03:37:ac:9f:1b:57:a4:77:e1:f4:e5:27:79:8b:14:c2:96:
6e:7c:8a:48:0d:91:9b:d7:c2:71:12:d3:40:9e:55:2a:a0:bb:
4e:02:12:04:09:a5:29:ff:9a:db:3b:59:c9:e5:d6:a8:96:e8:
13:3a:36:40:7a:24:19:09:43:de:ba:45:74:bf:81:26:e4:3b:
e0:c3:c0:00:42:40:67:e7:a3:dd:59:63:b6:d1:98:56:81:25:
35:5f:06:ea:17:5f:1d:94:ab:ba:a2:6a:01:d5:54:32:9c:fd:
0a:9f:6e:8a:f7:a6:81:5e:54:88:19:cc:be:ff:49:3c:75:72:
f9:3b:05:54:3e:20:d7:9b:8f:56:de:82:d8:f0:7f:62:37:9e:
7c:7e:79:7d:2b:d4:d3:0d:63:23:13:73:ea:66:bc:13:39:94:
ff:9e:c1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 13:57:01 2025 by rpki-client