Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
File: nCCRV794nmu6NODb0-_s2bIN0Gs.mft (raw, json)
Hash identifier: XoIzHKGt36zb/LluSTC0FFHJ7sXVZvkUi/nNdR6fsLE=
Subject key identifier: 32:47:3A:A0:32:C8:77:42:22:31:F1:9E:53:1E:BB:E5:1A:E8:06:82
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial: 0199161C87BBB431641EBB2FA8F7D570EB6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
Manifest number: 0DE2
Signing time: Thu 04 Sep 2025 19:03:12 +0000
Manifest this update: Thu 04 Sep 2025 19:03:12 +0000
Manifest next update: Fri 05 Sep 2025 19:03:12 +0000
Files and hashes: 1: DwD4MRqZCp-c4uFsMsWnYL0-SzA.roa (hash: 2tkEE6WjjJq4tK+YMGxG4bkpbYxQV0qlFZ5Ps3gC3Vo=)
2: nCCRV794nmu6NODb0-_s2bIN0Gs.crl (hash: jqcD/Jr956CkaAzFVkrdYxmmQZPsozA2rcOj0hFpKdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:1c:87:bb:b4:31:64:1e:bb:2f:a8:f7:d5:70:eb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Validity
Not Before: Sep 4 19:03:12 2025 GMT
Not After : Sep 5 19:03:12 2025 GMT
Subject: CN=32473aa032c877422231f19e531ebbe51ae80682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b4:71:84:62:f6:ba:09:c5:8f:a7:ff:e9:b7:
1d:bf:79:64:a5:6c:21:99:5c:b5:1e:40:26:00:89:
38:60:7f:a8:68:48:16:2e:31:6e:e7:90:01:52:49:
85:b4:ed:87:71:eb:58:84:a9:0a:8a:49:29:bf:79:
d1:ca:ea:00:2b:99:19:de:39:b8:32:85:8d:fc:04:
94:8a:29:fd:c9:fa:bc:4e:a8:a2:5b:be:ca:cc:61:
d2:69:0c:cd:fd:72:0c:81:77:fd:3f:54:70:60:05:
b7:87:e0:bf:fe:a2:09:79:2f:80:4a:27:16:e8:00:
81:c5:62:50:4b:23:b5:ff:7a:83:21:a8:20:76:e4:
77:39:dc:31:47:3d:c4:9f:54:b8:47:e8:6e:dd:f5:
9c:d6:0b:e1:c1:b4:fe:cd:12:3c:1b:b7:63:54:9c:
d4:8e:2e:85:66:7a:60:15:1c:6c:ae:6c:b7:f7:4d:
7f:c4:38:aa:19:1d:0c:b2:13:23:25:9e:1f:82:31:
29:b2:71:f4:58:f2:24:1b:12:18:51:a3:d4:13:a5:
bb:4e:5f:fd:5a:83:95:70:80:81:99:35:8f:28:a9:
94:eb:22:ee:83:92:d5:c1:6b:c4:e5:d4:1e:c5:1d:
45:bd:6b:93:e0:e2:03:51:60:0b:76:ea:70:9a:bb:
6d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:47:3A:A0:32:C8:77:42:22:31:F1:9E:53:1E:BB:E5:1A:E8:06:82
X509v3 Authority Key Identifier:
keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:5f:fb:26:ac:7a:0c:ab:cd:d0:45:d9:e7:85:bf:1d:55:9c:
96:45:7b:05:05:f3:29:9c:0b:eb:a0:8a:2f:33:b4:c3:81:e0:
d1:2a:6c:7d:06:c9:a4:56:16:93:cd:aa:8d:b9:ff:da:6d:17:
09:68:d1:ad:76:c7:69:3b:e4:b2:48:f7:55:9e:3c:89:a2:11:
be:bd:c9:d0:07:c1:74:33:e8:b6:05:22:07:97:f8:a4:4f:0c:
ff:a8:9c:38:13:51:f0:dd:7c:1f:71:ef:e6:9c:18:90:fe:9e:
0d:14:44:23:71:5c:66:77:94:50:23:24:5c:1f:14:57:82:86:
32:87:b2:91:e5:32:a1:bf:37:15:07:99:a3:c2:d1:8b:d0:a0:
70:33:16:d4:5b:e3:53:8d:cb:ee:a4:09:81:60:ee:7c:11:9c:
dd:15:9c:36:c3:2c:f0:bd:69:ca:1c:21:2b:c4:ff:28:bf:4e:
56:51:40:bd:30:f3:fd:5e:fd:0c:ec:ef:9a:89:74:49:11:8c:
cc:8d:0c:a4:47:8e:45:22:49:70:0a:d2:2c:72:f9:aa:31:aa:
26:83:00:fc:19:ef:50:b8:61:c4:ec:ee:07:06:6a:28:c8:20:
77:2c:e5:11:35:ca:84:73:a6:cb:f6:f5:cb:59:10:ba:69:8a:
44:cf:b6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:17 2025 by rpki-client