Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
File: nBYm1f1UoXollC9v2VyDwOCIF7s.mft (raw, json)
Hash identifier: tNYcEEdGAx1jb++Z+2JEqUA3zvh3pbxBRGE5WLzes+Q=
Subject key identifier: 5F:A2:30:EE:A5:87:3E:E4:BC:14:94:13:0F:6F:B7:7E:AE:D6:17:C8
Authority key identifier: 9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
Certificate issuer: /CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Certificate serial: 019A71B7FB9FB92F4AF883B70BA0B2825CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
Manifest number: 0DB1
Signing time: Tue 11 Nov 2025 07:01:14 +0000
Manifest this update: Tue 11 Nov 2025 07:01:14 +0000
Manifest next update: Wed 12 Nov 2025 07:01:14 +0000
Files and hashes: 1: idcg-tJ_CtGkzqKZfUKrfRvVQ_E.roa (hash: Nye8o2xtEJeY8siYmI8/lYTnzfEn8Ihz4z9R7JBQAZI=)
2: nBYm1f1UoXollC9v2VyDwOCIF7s.crl (hash: ETjE5k2pT/hRjYDrxVCiTve2LmYcqMPycwaviYiJGB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:fb:9f:b9:2f:4a:f8:83:b7:0b:a0:b2:82:5c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Validity
Not Before: Nov 11 07:01:14 2025 GMT
Not After : Nov 12 07:01:14 2025 GMT
Subject: CN=5fa230eea5873ee4bc1494130f6fb77eaed617c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:14:92:66:69:6b:2f:1c:d0:e5:23:05:70:05:
6b:6d:63:0e:53:ce:38:1a:a1:83:4f:b3:2d:cb:8b:
e1:da:26:a9:03:93:8c:43:cf:10:8b:a2:c1:af:7e:
31:b4:99:d9:f2:8e:95:7f:99:d2:10:0d:a3:48:be:
d8:1f:aa:ba:b6:78:f9:b4:91:14:76:1e:f2:b4:2a:
7b:7f:91:5f:32:eb:21:b0:46:02:c1:91:7a:e8:49:
a9:19:a7:46:d4:d0:f5:ac:72:bb:6f:25:4e:9e:a3:
ed:e8:1c:6f:d2:31:61:15:b7:75:ff:4e:d8:61:d1:
e2:7b:d2:c5:5d:72:66:f2:ae:23:c8:63:d3:d8:e8:
3f:8f:05:27:06:e1:e7:64:af:d2:18:1b:8f:3b:83:
b5:7d:02:86:49:d6:eb:05:00:db:2b:9d:49:fe:c4:
34:1c:e8:9d:8f:15:ba:9a:d4:37:75:60:f5:7a:df:
4f:84:ee:d3:c5:42:6e:69:a0:70:18:57:03:18:93:
ce:7a:10:12:45:0e:45:60:c2:1b:17:bb:0b:bf:4f:
21:78:50:4c:dd:ed:a9:18:14:6b:08:8d:3a:db:48:
6e:24:ed:90:53:30:cc:03:f7:3b:59:f2:7f:61:67:
e3:9d:8c:d0:00:af:7a:88:25:27:9b:dd:e2:9b:60:
e9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A2:30:EE:A5:87:3E:E4:BC:14:94:13:0F:6F:B7:7E:AE:D6:17:C8
X509v3 Authority Key Identifier:
keyid:9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:53:55:4e:ee:b0:05:cf:7f:f7:91:a4:df:f5:5c:29:d9:49:
40:74:81:c4:84:80:c6:42:88:5b:2c:61:82:0b:15:92:d6:7a:
61:17:78:c7:5b:2f:a8:74:8b:d1:8f:f5:ea:be:04:27:44:54:
c1:ce:d2:26:10:08:4b:b9:7a:94:b7:41:b1:d4:ba:f2:80:89:
02:76:c8:36:b7:d2:ae:96:69:7a:17:a0:a6:5c:31:c7:15:28:
53:b6:88:1c:cf:26:5e:74:05:ff:20:9c:a6:b6:94:f5:bd:7b:
5a:8c:0c:f2:3d:39:de:de:36:9b:fd:9f:15:9b:93:cd:e0:4e:
6d:ca:83:d9:2b:f1:c5:5b:7a:55:5c:e4:ee:8f:59:0c:19:b5:
33:d6:5e:6b:84:27:07:7a:d1:d8:db:79:26:b7:86:ba:45:31:
cd:5f:3d:c3:de:d5:e1:6d:74:c7:c4:ae:99:09:27:71:7a:d1:
3e:ff:c0:20:8c:d5:1c:af:16:b2:2c:36:05:8a:d3:d3:13:3a:
85:cd:5c:2d:a8:0f:31:b2:56:33:dc:0e:84:ac:bc:dd:60:12:
0d:da:df:e7:73:9b:06:59:ba:f6:10:a6:3b:ca:97:52:f9:11:
ae:07:13:1f:57:29:14:1b:81:66:ad:a0:25:12:7c:ff:37:f4:
68:0c:a7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:05 2025 by rpki-client