Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
File: ncAOnjBGWR-LpVJEgN33xvxMYOA.mft (raw, json)
Hash identifier: 5L6WUFaL3p0rLyEJjUamqz+cRbbR8dtxMv0ytioNsmE=
Subject key identifier: 06:19:78:28:E7:62:F7:CD:63:36:C0:65:AE:F3:97:44:F1:AA:96:66
Authority key identifier: 9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
Certificate issuer: /CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Certificate serial: 019921B0C1D8FCD0A59F54994CEA3EF836BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 01:00:55 +0000
Manifest this update: Sun 07 Sep 2025 01:00:55 +0000
Manifest next update: Mon 08 Sep 2025 01:00:55 +0000
Files and hashes: 1: 49p4f0dafsUXZtr4zEkfdPg2MR0.roa (hash: Ja9qdubtQvHDpWVThEVb+wOD8jEOhZZePM5clLlMPts=)
2: ncAOnjBGWR-LpVJEgN33xvxMYOA.crl (hash: ba9ZERyq/NOG/o/29/mpC+qtpztLRIlknbtdhwctikg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:c1:d8:fc:d0:a5:9f:54:99:4c:ea:3e:f8:36:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Validity
Not Before: Sep 7 01:00:55 2025 GMT
Not After : Sep 8 01:00:55 2025 GMT
Subject: CN=06197828e762f7cd6336c065aef39744f1aa9666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:18:7d:6f:a5:b1:46:58:fd:3a:40:62:e7:
0a:e8:b1:f8:0b:4d:63:c9:fa:08:eb:56:69:60:0c:
7f:29:1d:35:3e:bb:9d:a9:0a:e1:69:3d:ad:90:48:
ba:78:e5:fe:04:aa:1e:0a:d6:0d:32:79:bb:f5:52:
66:b2:5d:3e:9d:3a:72:c0:dc:5f:66:f8:b2:ab:6c:
fe:27:4e:5b:49:61:ef:ae:fb:be:0d:55:3b:50:d9:
d5:b8:9e:77:63:af:95:e0:a8:ee:11:d6:63:3d:f0:
ca:1e:ed:35:7b:bb:71:41:cb:6c:a5:ac:aa:5b:7f:
a2:9d:b6:c8:61:dd:08:6b:e2:e0:65:d2:7b:08:6c:
88:11:81:77:44:65:4e:93:f8:57:b5:8f:3b:d6:ec:
c9:72:19:52:91:0e:d2:3d:2b:19:23:51:53:56:64:
67:de:8d:e4:ac:c3:fd:84:65:c2:40:79:b8:0b:a9:
db:2a:56:18:f0:f9:c6:6e:2f:dc:ea:2c:c8:23:aa:
12:be:8d:63:f0:27:1a:0f:b8:4e:9c:09:4b:bc:dc:
fa:b5:8b:a8:77:9e:f6:f3:d2:c7:eb:35:b6:af:63:
a8:b6:58:65:97:0f:7e:94:6d:18:88:4a:0a:8e:5f:
87:c2:01:0f:10:04:a9:63:93:51:bb:8e:59:1f:d4:
7e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:19:78:28:E7:62:F7:CD:63:36:C0:65:AE:F3:97:44:F1:AA:96:66
X509v3 Authority Key Identifier:
keyid:9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:94:3a:60:5f:aa:cc:02:a7:bc:6e:6b:7f:d8:48:27:3d:b4:
da:1b:45:12:b7:9b:04:5d:e3:16:2b:27:f3:7a:5a:46:82:25:
22:b6:5e:25:ac:8b:3b:3e:40:92:a5:ad:37:d2:18:59:87:b0:
ad:56:d2:b9:c6:b7:80:fa:83:dd:c6:fb:9b:5a:82:cb:1c:fd:
ec:6f:65:97:3e:ab:15:a6:e9:f3:63:7e:03:e0:21:23:3b:32:
8c:b7:6a:9a:64:25:d4:ee:19:4e:fe:83:af:58:1f:ee:60:86:
f6:73:98:1c:34:e6:3a:63:7a:07:84:e1:d7:60:db:a4:dd:9a:
78:b4:e5:17:33:41:a9:78:70:6c:bd:cc:8f:e5:88:7c:4c:5c:
a5:3d:21:d2:08:a3:6a:b2:62:c2:9c:16:ec:bb:88:d3:21:28:
ed:3c:50:70:9f:a8:62:46:11:7f:a1:00:a0:ec:b2:87:b6:fe:
fd:41:58:af:61:a5:ed:15:86:6b:97:df:80:41:cd:7c:ab:c4:
0f:80:48:9c:4b:84:1b:f9:a5:32:ea:e6:af:fc:a2:1b:ac:0a:
5c:0f:46:f8:3d:88:4d:98:07:78:ef:35:75:35:6a:a3:b6:42:
7e:bf:5d:09:1d:0f:79:77:a0:dc:a8:e1:9f:f7:66:cb:a6:c2:
8a:0f:e6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:49 2025 by rpki-client