Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
File: ncAOnjBGWR-LpVJEgN33xvxMYOA.mft (raw, json)
Hash identifier: F4sWJHSZtML0rxfGq+2aL14M/Z6GIsaXeXS7hw7H6DI=
Subject key identifier: E6:55:C8:C1:62:59:39:F3:3D:46:DC:86:C0:B1:52:64:09:BE:45:3B
Authority key identifier: 9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
Certificate issuer: /CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Certificate serial: 019A228B0ABC120A5AFD9F9C1F3666945748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 22:02:08 +0000
Manifest this update: Sun 26 Oct 2025 22:02:08 +0000
Manifest next update: Mon 27 Oct 2025 22:02:08 +0000
Files and hashes: 1: 49p4f0dafsUXZtr4zEkfdPg2MR0.roa (hash: Ja9qdubtQvHDpWVThEVb+wOD8jEOhZZePM5clLlMPts=)
2: ncAOnjBGWR-LpVJEgN33xvxMYOA.crl (hash: YMj/IfzLPCYSumXnVaMUgd09chHxNFoFYSgwQZI3Zd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8b:0a:bc:12:0a:5a:fd:9f:9c:1f:36:66:94:57:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Validity
Not Before: Oct 26 22:02:08 2025 GMT
Not After : Oct 27 22:02:08 2025 GMT
Subject: CN=e655c8c1625939f33d46dc86c0b1526409be453b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:b9:c9:a7:b3:de:f5:df:55:8f:04:0f:28:
7b:dc:26:b4:7f:50:ba:ea:2b:f5:63:40:33:b4:49:
a0:26:c9:12:e9:72:d9:59:b5:0b:85:dd:4f:c2:a7:
cc:96:30:30:06:6d:ec:87:97:c1:ed:b9:a8:4d:52:
ee:2d:31:75:93:c3:0a:af:51:69:21:e0:d9:e0:0c:
6b:7c:7c:de:2b:02:29:05:df:f9:c2:a6:a9:b2:92:
3d:ef:35:74:d6:93:51:bb:ee:99:65:04:18:09:23:
25:54:0d:fa:9f:2f:fe:0c:bc:5e:ca:ba:d0:88:d9:
17:e6:35:f4:18:a9:9a:07:26:6d:54:49:eb:2f:42:
f7:5a:f4:7f:c4:4a:56:09:6c:bd:e5:0c:04:44:79:
66:89:56:24:1c:6e:af:e7:bd:3d:89:94:95:61:35:
db:65:59:41:03:10:59:33:4f:77:35:f7:31:f3:b0:
39:d4:34:b4:5b:d6:a6:ff:0a:ea:43:a0:e2:1d:81:
50:01:d4:c2:2d:3e:4b:ad:5b:34:07:ac:82:cd:51:
93:26:95:f9:82:ce:75:4e:72:d4:94:87:7f:82:6c:
35:1e:6b:fd:bc:17:7b:36:cb:b6:f2:3e:4f:ad:e9:
04:cd:c7:2f:e0:9e:97:5c:e1:bf:59:4d:f3:7b:24:
c9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:55:C8:C1:62:59:39:F3:3D:46:DC:86:C0:B1:52:64:09:BE:45:3B
X509v3 Authority Key Identifier:
keyid:9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0d:ac:b6:69:f8:ff:b3:2f:23:46:c3:47:41:e1:d8:d4:86:
2b:88:78:82:ed:47:42:81:94:40:cd:da:28:d6:22:36:87:9c:
bd:0c:67:f6:b7:68:47:98:6f:57:af:80:be:85:55:23:b2:b5:
c9:dd:4e:4a:ad:4a:80:ba:2b:5b:e0:a9:8f:92:2f:8c:07:71:
6a:70:c6:12:fe:3b:f1:3d:57:7c:0b:99:87:62:e1:89:62:02:
69:63:03:eb:48:7c:ce:4a:c9:e2:52:19:ab:fb:f5:f5:69:7c:
42:13:92:ea:47:e8:02:de:7d:28:07:fa:53:20:57:d7:dc:00:
9f:ec:a4:f4:1e:af:65:f4:21:f3:b3:54:d4:47:f5:29:e8:b8:
ba:10:c2:84:e3:c4:a8:a4:0a:01:52:5d:b2:f9:98:81:5d:49:
1f:94:96:8b:f0:1a:9b:31:ce:e4:96:4a:46:4a:76:06:2d:c1:
76:43:35:20:a6:45:14:05:25:cb:45:84:a5:85:85:1a:a7:7f:
71:2b:84:f0:71:5b:2a:73:5e:12:15:e0:d2:f5:67:a7:0c:c5:
d9:88:4d:b0:2b:4d:33:7a:d2:35:b9:7f:83:f1:99:ed:7b:7e:
14:b0:57:f6:b8:1d:77:2c:d6:83:51:23:ba:4f:22:3d:c5:74:
32:2d:17:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:02 2025 by rpki-client