Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
File: Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft (raw, json)
Hash identifier: VyRcPyZ2Kj8yoidEVQiOFOmLnXreXXlKvf6Uf97w9aM=
Subject key identifier: 97:35:C8:42:69:82:65:98:14:CE:A3:58:51:DF:39:AD:CF:38:0E:70
Authority key identifier: 36:CF:B3:97:5B:BD:5E:F8:7B:29:C3:DC:4A:4B:98:EA:5C:25:C4:44
Certificate issuer: /CN=36cfb3975bbd5ef87b29c3dc4a4b98ea5c25c444
Certificate serial: 019A1EE3DC6BFCB10ED3F19570979898B1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
Manifest number: 0DDC
Signing time: Sun 26 Oct 2025 05:00:40 +0000
Manifest this update: Sun 26 Oct 2025 05:00:40 +0000
Manifest next update: Mon 27 Oct 2025 05:00:40 +0000
Files and hashes: 1: 84tG8i7AzsbcSC45wc7jZshEjRw.roa (hash: WTaqS+mbYOTiyd8Z/4uN3P2O0v0Yj8od2qxY4V4ByWg=)
2: Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.crl (hash: FXY5JjA15dVGc8EwsbvguGNBSIojaKEN+byHeXJtdas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:e3:dc:6b:fc:b1:0e:d3:f1:95:70:97:98:98:b1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cfb3975bbd5ef87b29c3dc4a4b98ea5c25c444
Validity
Not Before: Oct 26 05:00:40 2025 GMT
Not After : Oct 27 05:00:40 2025 GMT
Subject: CN=9735c8426982659814cea35851df39adcf380e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:21:1d:1f:b8:a8:66:59:bd:33:c1:da:19:
2b:cd:65:9c:08:07:8b:1f:44:60:f2:05:8e:fe:25:
32:eb:59:26:02:a7:b6:cb:4e:5c:25:c1:31:18:8f:
9c:cf:0a:b0:03:d8:d8:29:06:75:ff:1b:0d:0d:a0:
b2:82:b7:fb:d1:27:d6:45:75:60:a4:99:b6:1e:df:
02:8b:79:a6:1b:ff:da:20:ae:52:04:df:b2:ac:31:
b0:53:4c:51:44:8c:ef:4b:e2:77:96:e8:95:5e:95:
3d:83:70:00:09:82:59:7a:56:a9:f0:af:f7:3c:55:
aa:d5:37:00:ba:b4:89:c4:c2:33:5b:ad:27:cd:d2:
a7:cc:0f:3d:ea:6e:c0:be:90:7e:c2:05:1a:b4:5f:
75:45:67:91:b2:7f:34:64:92:0b:d6:3c:47:3f:1d:
e0:c1:78:ec:95:d3:f6:b3:2c:fd:ed:01:3f:10:7b:
59:29:1a:6f:de:14:80:ae:ab:da:6e:ed:df:a1:f4:
ff:28:5b:dc:b9:21:75:ce:2a:0d:03:39:a6:e6:c7:
5e:0d:e8:a9:22:48:55:69:34:9a:ed:27:55:dd:0e:
d6:1b:8e:ea:5e:ca:dd:14:69:79:4b:60:75:a2:8e:
fa:9c:d2:a4:3d:1e:64:fc:da:59:e0:d2:1d:29:21:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:35:C8:42:69:82:65:98:14:CE:A3:58:51:DF:39:AD:CF:38:0E:70
X509v3 Authority Key Identifier:
keyid:36:CF:B3:97:5B:BD:5E:F8:7B:29:C3:DC:4A:4B:98:EA:5C:25:C4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f7:fa:4e:b4:af:aa:53:e3:d3:33:e0:b9:98:d3:57:21:bd:
55:de:6d:81:a1:87:46:e6:b3:2c:d9:b3:ec:af:52:c4:58:66:
e8:4b:c8:77:9f:d9:a2:6a:5f:e2:05:84:ac:ea:c0:64:45:4a:
1f:b2:91:5f:1a:21:c5:ba:91:fb:bf:57:0f:88:9a:cf:11:28:
ec:e3:bd:8d:b3:8d:c3:a5:a9:b3:88:af:f8:1c:c6:01:00:81:
2b:48:7f:f2:bf:7b:bc:3b:43:f0:bd:b7:5d:d2:55:ef:81:05:
3a:87:b6:08:ca:d3:b2:26:e2:03:c3:d0:3f:29:cb:c0:67:10:
07:7a:2d:64:12:fe:40:ca:48:bd:97:3d:b3:29:09:4d:72:53:
03:c7:3e:fa:1c:0c:54:31:0e:15:1f:86:59:f2:e1:d6:7a:7d:
77:14:9f:f8:29:99:b7:a3:96:46:10:0f:09:be:23:17:4c:65:
b0:78:2c:05:06:d4:c2:d9:a3:08:6a:22:25:72:c7:63:ff:8d:
bd:25:83:b9:be:17:97:ae:28:76:89:61:47:d2:73:2d:c7:78:
cb:74:3d:b8:0d:90:53:5f:04:6e:c0:dc:77:76:b8:a5:d0:db:
d1:55:6c:58:01:de:69:9e:22:b3:50:34:01:d7:1c:73:9e:10:
25:3a:b8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:43:19 2025 by rpki-client