Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
File: 0NhScDKV7Pi5cgH5FjEPiPTAirc.mft (raw, json)
Hash identifier: 5SelDVqKQa+oYSdttETDewVueAqRa5B2t6Dnl1+l4iA=
Subject key identifier: 36:6C:FD:8E:AA:1D:67:B3:06:38:38:E3:16:C4:87:80:3F:D1:C1:A9
Authority key identifier: D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
Certificate issuer: /CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Certificate serial: 019A131625131FD307B68C5D00A8A0C618DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
Manifest number: 16EF
Signing time: Thu 23 Oct 2025 22:00:09 +0000
Manifest this update: Thu 23 Oct 2025 22:00:09 +0000
Manifest next update: Fri 24 Oct 2025 22:00:09 +0000
Files and hashes: 1: 0NhScDKV7Pi5cgH5FjEPiPTAirc.crl (hash: 8atwPCn3v1rnNVbO4mRohp341PiTlA9FRPXPtZyxW00=)
2: YlrLpRr6jHVjZjhSp57OuuJNoDA.roa (hash: 3sLpE4GcZV46VhUEypK4IVzC6Mp0SDmiK7VScSwFOfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 22:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:16:25:13:1f:d3:07:b6:8c:5d:00:a8:a0:c6:18:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Validity
Not Before: Oct 23 22:00:09 2025 GMT
Not After : Oct 24 22:00:09 2025 GMT
Subject: CN=366cfd8eaa1d67b3063838e316c487803fd1c1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:28:ed:29:98:85:b4:c0:b8:e4:00:c6:66:
23:75:55:f6:ee:ec:c4:bd:a9:23:72:3c:00:94:2e:
0d:4d:74:d5:ea:1f:3e:be:f8:14:d2:e6:7b:72:4a:
75:c2:ce:32:bb:c8:7d:c1:29:5b:e9:a9:b8:ef:04:
11:cc:ca:18:7b:f7:93:60:d7:67:a4:75:84:fb:12:
19:4e:c1:a3:75:04:36:da:9c:51:29:9f:5f:16:f6:
b5:5a:3f:09:6e:08:b5:f6:e5:26:54:fd:3b:46:b0:
73:56:eb:78:92:39:52:f7:4f:db:08:47:97:a0:e3:
a3:0b:69:4c:95:68:01:eb:00:fd:cd:5d:b3:6f:76:
b1:28:7f:38:df:4f:89:86:22:e6:cd:6b:43:9d:7c:
d0:25:2f:c8:61:80:85:1d:41:b8:45:e0:1d:63:b7:
4c:3b:20:23:c5:76:00:93:97:ff:41:fb:c4:4b:11:
55:fb:c1:9a:90:f7:3d:56:85:1c:ef:c6:89:8e:d4:
28:02:b8:48:db:90:51:4d:ca:eb:c6:23:ff:0f:e2:
a8:7a:e4:12:1a:89:09:ce:9b:da:d3:cb:b0:29:05:
96:73:b3:bb:a4:92:53:b4:40:df:45:9f:1e:df:39:
33:a3:7c:80:65:a1:29:9c:b8:7c:4a:8d:8d:6e:3d:
db:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6C:FD:8E:AA:1D:67:B3:06:38:38:E3:16:C4:87:80:3F:D1:C1:A9
X509v3 Authority Key Identifier:
keyid:D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c9:51:d3:57:12:ab:e8:bc:13:d2:2f:88:fc:e4:88:05:9e:
67:5d:a3:cc:ea:f1:8e:a2:18:7d:74:29:aa:c5:a7:4c:27:1e:
39:37:65:57:fb:ea:83:1f:74:11:3f:9f:8d:e9:0c:5d:ff:8a:
3f:69:23:94:e1:14:9c:46:0e:9e:56:7a:54:96:a0:b4:60:c4:
35:ba:ae:85:2f:df:79:ca:4b:22:1a:ed:47:82:84:b0:b1:ee:
47:e9:22:4f:6d:06:a2:dd:c3:0b:c9:a4:d0:68:57:fe:09:9f:
be:81:70:b3:7f:5f:44:e1:85:c5:21:95:dd:f9:c6:73:54:6a:
6c:ee:89:bf:b4:18:fc:30:03:18:56:97:94:84:86:16:d2:66:
e3:c1:43:49:c4:74:c5:38:aa:d1:53:33:2d:3a:ab:ae:54:12:
f0:a2:dd:ec:ee:6f:d1:c3:b8:e1:28:8e:20:e9:71:4e:d3:42:
cf:44:28:f1:32:f8:a8:b7:e4:c9:f6:8f:15:21:d6:e5:77:03:
cc:37:c1:0a:7f:b3:4c:0d:11:41:24:d8:1b:bf:c9:c7:1c:ab:
ae:05:b1:43:9c:b1:31:b6:f1:00:30:ce:c4:41:2d:c3:79:fb:
59:65:3b:1d:fb:b7:5d:6e:dd:c4:59:16:4e:1b:42:c2:f3:c4:
12:b2:78:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:47:49 2025 by rpki-client