Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
File: nCCRV794nmu6NODb0-_s2bIN0Gs.mft (raw, json)
Hash identifier: ylm4WDqTKAWRCTgqijyGJvt3U8l/i7zUDsHwsSSkT3o=
Subject key identifier: 05:EC:6A:4E:74:70:66:A8:8B:70:BC:01:A3:A5:3D:55:19:D9:C2:34
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial: 019A71B7F75BAEA192AC53BB61512BDCF31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
Manifest number: 0E96
Signing time: Tue 11 Nov 2025 07:01:13 +0000
Manifest this update: Tue 11 Nov 2025 07:01:13 +0000
Manifest next update: Wed 12 Nov 2025 07:01:13 +0000
Files and hashes: 1: DwD4MRqZCp-c4uFsMsWnYL0-SzA.roa (hash: 2tkEE6WjjJq4tK+YMGxG4bkpbYxQV0qlFZ5Ps3gC3Vo=)
2: nCCRV794nmu6NODb0-_s2bIN0Gs.crl (hash: w6tKTzIWHznTVChAXo0wMzqViZ90g+E0zTTUw5WS6Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f7:5b:ae:a1:92:ac:53:bb:61:51:2b:dc:f3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Validity
Not Before: Nov 11 07:01:13 2025 GMT
Not After : Nov 12 07:01:13 2025 GMT
Subject: CN=05ec6a4e747066a88b70bc01a3a53d5519d9c234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:e2:0a:92:89:4e:6a:b2:9e:ab:4a:7e:29:
45:05:a5:6c:f1:a7:3a:a1:37:07:70:eb:55:52:bb:
96:46:7e:2e:35:bd:ba:48:f7:a8:b0:24:a9:93:dd:
83:27:c1:32:3e:44:c5:73:66:03:c8:5e:3c:94:4f:
76:83:f7:f2:d6:ac:a9:51:ca:d9:81:b3:c7:0a:45:
66:49:43:bf:b3:84:f7:15:e7:77:47:5e:3f:4c:6b:
c4:ea:ca:47:7d:7c:99:b5:62:7d:79:e1:70:72:6d:
e0:cb:02:31:52:40:0f:93:32:7b:a1:5c:ec:6d:78:
8a:4a:58:bf:35:4c:e3:5d:cf:51:e4:2b:e8:ae:54:
d3:e9:36:4b:1d:c0:12:e5:e1:8a:10:2a:14:24:16:
58:d2:f8:a2:a4:c5:53:52:47:8d:5a:cc:30:13:0c:
ed:81:28:4d:05:8d:48:59:8b:60:28:81:c4:6a:58:
09:46:0c:5b:15:68:d1:9b:4f:74:a7:45:21:85:41:
33:dc:2c:5d:0c:50:5f:8d:b3:49:97:5f:5e:55:f1:
d8:48:5f:31:5d:d6:9e:a7:b4:4e:5e:27:14:10:a7:
c6:55:1e:f6:54:6f:cf:aa:3a:5b:f4:0f:2d:75:0a:
1d:03:ac:db:33:ea:a1:1b:84:18:af:02:19:b5:da:
01:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EC:6A:4E:74:70:66:A8:8B:70:BC:01:A3:A5:3D:55:19:D9:C2:34
X509v3 Authority Key Identifier:
keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ca:ae:c0:59:6c:41:f1:85:0c:70:11:63:27:99:83:78:7b:
a0:7b:59:21:f3:10:77:90:0d:5a:25:9f:48:24:b9:e2:1e:a8:
6d:fb:38:35:a5:ec:a5:b4:46:77:f6:e6:23:86:d2:13:08:85:
7e:a8:81:1d:2c:c0:32:d1:fe:06:95:a7:19:7b:c8:21:c6:90:
e4:94:cd:ba:cf:65:f0:ee:76:7a:d1:25:e6:4c:57:71:1a:8f:
11:c4:ee:b2:49:44:90:49:43:e9:17:7b:e6:7a:11:d1:df:2e:
a1:a3:d8:05:aa:2b:27:a5:eb:0e:4e:7b:63:79:89:2d:3f:e7:
ef:7f:b4:4f:2c:0a:a2:77:eb:76:aa:a5:e8:6a:01:98:e5:c3:
40:79:20:f0:e4:05:54:c6:a3:f4:25:6b:18:ce:54:5a:be:6c:
23:ad:0f:02:46:b0:62:8b:7a:fc:1c:5f:0e:fa:55:af:77:40:
0b:5d:bf:33:41:90:d0:68:40:a7:18:7e:77:60:ed:ac:68:c1:
7b:98:e3:f4:c9:df:cb:d3:a0:85:02:81:91:60:b1:dd:68:f1:
3c:1d:25:b9:f1:4c:28:33:71:19:60:9f:c2:44:95:d1:02:ec:
a3:2a:db:49:99:f1:92:ce:a8:b2:70:77:36:f5:32:d6:be:69:
4d:1e:fc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:48 2025 by rpki-client